{"report_id":"1d38d762-13cc-4ae4-bff6-2907f6e8c58b","version":6,"status":"done","tags":[],"date":"2025-10-07T02:42:00Z","url":{"schema":"https","addr":"paperhands.live/","fqdn":"paperhands.live","domain":"paperhands.live","tld":"live"},"ip":{"addr":"192.64.118.37","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"paperhands.live/","fqdn":"paperhands.live","domain":"paperhands.live","tld":"live"},"title":"Solana Paperhands Checker"},"submit":{"url":{"schema":"https","addr":"paperhands.live/","fqdn":"paperhands.live","domain":"paperhands.live","tld":"live"},"ip":{"addr":"192.64.118.37","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-11T02:42:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-05T22:12:06.373682Z","alert_count":0,"request_count":1,"received_data":9481,"sent_data":554,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"paperhands.live","ip":{"addr":"192.64.118.37","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":7,"received_data":743153,"sent_data":4392,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"i.ibb.co","ip":{"addr":"45.43.142.6","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"domain_registered":"2010-07-20","domain_rank":21643,"first_seen":"2018-11-25T10:13:48Z","last_seen":"2025-10-06T03:33:36.947933Z","alert_count":0,"request_count":1,"received_data":82028,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"mcdn.wallpapersafari.com","ip":{"addr":"104.26.11.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-03-04","domain_rank":3097358,"first_seen":"2018-05-15T07:52:49Z","last_seen":"2025-09-26T19:35:39.948031Z","alert_count":0,"request_count":1,"received_data":30083,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"plausible.io","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2018-12-30","domain_rank":8565,"first_seen":"2019-02-01T08:53:03Z","last_seen":"2025-10-06T01:41:21.547125Z","alert_count":0,"request_count":2,"received_data":4475,"sent_data":899,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"paperhands.live/sockjs.legacy.esm.js","fqdn":"paperhands.live","domain":"paperhands.live","tld":"live"},"ip":{"addr":"192.64.118.37","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae2d7fa367d125f63a31c6257e01d5d8","sha1":"cf034089031eb80f94d3ea6e7e76e0c29619c173","sha256":"e247cd2d3b07a3754d283c3292b72b0fbb4219ee616fecf4527ee9a7cdee33d5","sha512":"e2febdf78e225c0c420527816df4d25afc0fc0c3feb20b81dc702b12665d8c4b047cf0d38057c284968e58339738a0ef00b97afdae7afe57a813422a6451baf6","ssdeep":"3072:azMzLJyqEl5fASlnZPA89kPV+6ZAobSWuNol34U/WQDPF5ALN4me4:aalyf5fA3ZAoblPZ5ALZe4","tlshash":"d6841d4503c61008de45c15adf1fac4ea689af5e39c31412a1cda2feef754a1b2ed37a","size":393005,"data":"","first_seen":"2025-10-07T02:42:06.743783Z","last_seen":"2025-10-07T02:42:06.743783Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plausible.io/js/script.js","fqdn":"plausible.io","domain":"plausible.io","tld":"io"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"30e1b09096a5c33aea7592059e2faae5","sha1":"fecb527f89655b23229e8ec7addfd7a5cbe11c0c","sha256":"1f0c626e8b40a26c4c3e27f489ebe23e75b201635bb0a2e0a97c51b91c3b5c83","sha512":"c8c698569f9d8e0a8ee89f5a610acb317bc4b0260436bd3c778e5f1c541f96682f622cd213c8d32847c4361401a1ca81113f40a4036c4ecf791e5973583f1e54","ssdeep":"","tlshash":"8c511db96a02757909b9d167ba2fb3063a3366153116a401542cd9c13e28eebc323ecd","size":3005,"data":"","first_seen":"2025-09-16T12:10:11.2018Z","last_seen":"2026-05-06T12:30:42.729725Z","times_seen":1208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paperhands.live/","fqdn":"paperhands.live","domain":"paperhands.live","tld":"live"},"ip":{"addr":"192.64.118.37","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"eadd33de52aa26a3f297c81d2aa7016c","sha1":"d1279cb8fd4744accb4dac1f712b0d05df5b0383","sha256":"ff247f5efe941cba0b9e9b640abf9fa1f10bdc54804e361fed5bd4bd48ed96cc","sha512":"192afd9859668b56a930643767104ce32f89293a685207778e07da1d693fc476c43e0c6d65296391fad4a133a0f74d4ae5b217248d8158f4ec69308a8d7ad9e1","ssdeep":"3072:QBZGkiMvzSvJCt6e1xRm29kPV4IZAKF8yu1cX34ahWM5DPz5ApDIOIJ:QMMLSEt6LZAKFT7FB5ApbIJ","tlshash":"72841e4503c61008df45c15adf1fac4aa649bf5e3ac31412a4cda2bdef754a1b2ee37a","size":386819,"data":"","first_seen":"2025-10-07T02:42:06.767668Z","last_seen":"2025-10-07T02:42:06.767668Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paperhands.live/config.php?s=%2F%40v1%2Fcdn%2Fjs%2Fcsslint.fluid.cjs.js\u0026t=29330081","fqdn":"paperhands.live","domain":"paperhands.live","tld":"live"},"ip":{"addr":"192.64.118.37","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"24404746a19282e59647a86b7e141a22","sha1":"615f3aba285976877691a28a6fa05ab94572dcc5","sha256":"9414e2c983ebb430480803c5e608a2b747f8725aefbf8e7f137b2ac7f916803e","sha512":"d870420943e56e1a8e5756b0bdc7c2cb26c58639c7dc1911df1a109eed1b8ad88dc1ec23e68ebb65bb934abf710746dd63af61f558b09b799d20f43d06df9afa","ssdeep":"6144:UsWR+jpPUbczk6p1ZsJzO3fXefpvVBtcaovA8C3Iq:RWklPQUWCvXefT38o9","tlshash":"90748c917280617916634fea41bf094ab238f120a409892cf75cc8d71bb99dad5bff7c","size":342552,"data":"","first_seen":"2025-10-04T13:20:57.139939Z","last_seen":"2025-10-08T22:43:50.294317Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"paperhands.live/sockjs.legacy.esm.js","fqdn":"paperhands.live","domain":"paperhands.live","tld":"live"},"ip":{"addr":"192.64.118.37","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paperhands.live/","date":"2025-10-07T02:41:39.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paperhands.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 17 Sep 2025 00:00:00 GMT","end":"Thu, 17 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:20:D5:DE:EA:CA:C4:02:AA:45:3D:08:09:88:E6:7E:DA:75:1E:6C","sha256":"91:DA:19:A8:0F:B2:CF:89:80:25:FA:59:CD:93:5E:38:63:64:99:8A:64:83:5C:64:99:27:0A:E8:24:35:1A:2F"}}},"request":{"raw":"GET /sockjs.legacy.esm.js HTTP/1.1\r\nHost: paperhands.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paperhands.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Sep 2025 16:58:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 81791\r\ndate: Tue, 07 Oct 2025 02:41:39 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":393005,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65286)","md5":"ae2d7fa367d125f63a31c6257e01d5d8","sha1":"cf034089031eb80f94d3ea6e7e76e0c29619c173","sha256":"e247cd2d3b07a3754d283c3292b72b0fbb4219ee616fecf4527ee9a7cdee33d5","sha512":"e2febdf78e225c0c420527816df4d25afc0fc0c3feb20b81dc702b12665d8c4b047cf0d38057c284968e58339738a0ef00b97afdae7afe57a813422a6451baf6","ssdeep":"3072:azMzLJyqEl5fASlnZPA89kPV+6ZAobSWuNol34U/WQDPF5ALN4me4:aalyf5fA3ZAoblPZ5ALZe4","tlshash":"d6841d4503c61008de45c15adf1fac4ea689af5e39c31412a1cda2feef754a1b2ed37a","first_seen":"2025-10-07T02:42:06.743783Z","last_seen":"2025-10-07T02:42:06.743783Z","times_seen":1,"resource_available":true,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/1f56bLnk/ex.jpg","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.6","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paperhands.live/","date":"2025-10-07T02:41:39.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:17:47 GMT","end":"Sun, 16 Nov 2025 07:17:46 GMT"},"fingerprint":{"sha1":"30:62:E2:16:F0:8D:8F:C4:30:EF:67:44:60:2F:45:29:D1:5B:AF:94","sha256":"EE:AB:93:C9:6B:44:94:94:F6:EE:CA:98:DE:CE:BF:A6:25:9F:C8:76:A5:43:59:77:38:DD:D2:23:F7:9C:B1:70"}}},"request":{"raw":"GET /1f56bLnk/ex.jpg HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paperhands.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 07 Oct 2025 02:41:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 81664\r\nlast-modified: Wed, 17 Sep 2025 16:05:38 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":81664,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left], baseline, precision 8, 826x702, components 3","md5":"365a80ea6d8e3ba12b66c203b374f229","sha1":"90c32e0bf2ba1fe5d48b6340dec3eb1492757b60","sha256":"548e5efbbfd74b0bfce6a4e234c99e08eb026c17564cf9496889bfb1c24329ea","sha512":"8417bb7a1c379da90da8075f7e226a078f102452077a9e8c513dba55c8970391f6038ca8355be10cb56424b390fca2cb8716b0cb4de260c0e419b5d8a182d682","ssdeep":"1536:z3flGqbUCPTFCCCgCCCHleWqdY/NSMIGgd5DPylg45JFj5QGYb7rOSsOqavt:kkt7aFqClSMIGgd5WS2QVrOSsg","tlshash":"2c837c038d14db93c52943fabd574e6d2a472b1da8d06ade753e4d9f7f602202cca24e","first_seen":"2025-10-07T02:42:06.748721Z","last_seen":"2025-10-07T02:42:06.748721Z","times_seen":1,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":69,"dns":3,"connect":32,"send":0,"wait":33,"receive":82,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mcdn.wallpapersafari.com/medium/78/58/C27luA.jpg","fqdn":"mcdn.wallpapersafari.com","domain":"wallpapersafari.com","tld":"com"},"ip":{"addr":"104.26.11.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paperhands.live/","date":"2025-10-07T02:41:40.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wallpapersafari.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 11:44:24 GMT","end":"Sat, 22 Nov 2025 12:43:08 GMT"},"fingerprint":{"sha1":"D5:35:62:8D:B7:00:35:49:1F:96:9E:69:AF:1A:9D:43:89:19:1C:00","sha256":"8E:99:82:76:0B:70:64:BD:41:D2:FE:C4:1D:E5:FE:6E:28:F2:12:7F:18:39:64:F2:DA:7A:6E:2F:C4:C2:FB:84"}}},"request":{"raw":"GET /medium/78/58/C27luA.jpg HTTP/1.1\r\nHost: mcdn.wallpapersafari.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paperhands.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Oct 2025 02:41:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 29367\r\nserver: cloudflare\r\nlast-modified: Wed, 26 Oct 2022 03:08:22 GMT\r\netag: \"6358a4a6-72b7\"\r\nexpires: Wed, 07 Oct 2026 02:41:45 GMT\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X6F8z9ZAx2jxxmpeyVOlhlQlmvsFugYR8g5CmHP0gfW0m%2FazbYSvGhBCtyS2lh1yJkwDpucDSeEk1VnE3PGsV2BSuQZkK2Vc2Wv2te6p50skCLOF3Ls%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98aa0a92cbc05688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29367,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75\", baseline, precision 8, 760x427, components 3","md5":"ec83bc519bf3c0bfd16779eee520f075","sha1":"5ac998fd20d3ccf75583e0951034dc53433e1691","sha256":"13f17a470c832cdcfec326d57b280f2a0ab1725edc58725a3866dd1f5e73b84a","sha512":"a7aa89533366e8c80af2a323b83c362915858ed1f65471c86d0dab0ebeca559f98cfab5b3099d47c6cdff452bea4c3931e2ecb54bb31cbece51c8780fdde4e71","ssdeep":"768:lgFzdgrLVyJG0jNzDsiNPsn3AjLykph6VjwaX:lgldgrxiNO3AjLykpkjTX","tlshash":"8cd2d073b15895d8c311b9753dca7c9301624cc51a913b71e9cba9e60836cb8afa5b48","first_seen":"2025-10-07T02:42:06.75192Z","last_seen":"2025-10-07T02:42:06.75192Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10930,"timings":{"blocked":5241,"dns":5085,"connect":1,"send":0,"wait":448,"receive":0,"ssl":154},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plausible.io/api/event","fqdn":"plausible.io","domain":"plausible.io","tld":"io"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://paperhands.live/","date":"2025-10-07T02:41:40.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plausible.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 19:09:55 GMT","end":"Thu, 01 Jan 2026 19:09:54 GMT"},"fingerprint":{"sha1":"1A:09:D4:66:A2:E0:0D:00:08:1F:16:50:1C:5C:EB:AE:F8:61:54:B6","sha256":"77:CB:7D:4D:13:21:7F:B8:A9:C7:05:A7:8D:28:01:31:5A:5C:42:3D:7F:DB:DD:9A:F3:31:D6:BE:BB:A3:B3:59"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: plausible.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://paperhands.live/\r\nContent-Type: text/plain\r\nContent-Length: 85\r\nOrigin: https://paperhands.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 202 Accepted\r\ndate: Tue, 07 Oct 2025 02:41:40 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 682664\r\ncdn-uid: 153cb5b1-399a-48ef-b5bf-098c03770254\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\ncache-control: must-revalidate, max-age=0, private\r\nvia: 1.1 Caddy\r\napplication: 127.0.0.1\r\npermissions-policy: interest-cohort=()\r\nx-request-id: GGwVO54SHR_WhcdOUQ2M\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 202\r\ncdn-cachedat: 10/07/2025 02:41:40\r\ncdn-edgestorageid: 830\r\ncdn-requestid: d3d4e0c6fa3b3d5128be6ec711d09f15\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-04T09:22:08.460571Z","times_seen":445076,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":7,"dns":1,"connect":2,"send":0,"wait":33,"receive":0,"ssl":3},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paperhands.live/config.php?s=%2F%40v1%2Fcdn%2Fjs%2Fcsslint.fluid.cjs.js\u0026t=29330081","fqdn":"paperhands.live","domain":"paperhands.live","tld":"live"},"ip":{"addr":"192.64.118.37","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paperhands.live/","date":"2025-10-07T02:41:40.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paperhands.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 17 Sep 2025 00:00:00 GMT","end":"Thu, 17 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:20:D5:DE:EA:CA:C4:02:AA:45:3D:08:09:88:E6:7E:DA:75:1E:6C","sha256":"91:DA:19:A8:0F:B2:CF:89:80:25:FA:59:CD:93:5E:38:63:64:99:8A:64:83:5C:64:99:27:0A:E8:24:35:1A:2F"}}},"request":{"raw":"GET /config.php?s=%2F%40v1%2Fcdn%2Fjs%2Fcsslint.fluid.cjs.js\u0026t=29330081 HTTP/1.1\r\nHost: paperhands.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paperhands.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/8.1.33\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 07 Oct 2025 02:41:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":342552,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65428)","md5":"24404746a19282e59647a86b7e141a22","sha1":"615f3aba285976877691a28a6fa05ab94572dcc5","sha256":"9414e2c983ebb430480803c5e608a2b747f8725aefbf8e7f137b2ac7f916803e","sha512":"d870420943e56e1a8e5756b0bdc7c2cb26c58639c7dc1911df1a109eed1b8ad88dc1ec23e68ebb65bb934abf710746dd63af61f558b09b799d20f43d06df9afa","ssdeep":"6144:UsWR+jpPUbczk6p1ZsJzO3fXefpvVBtcaovA8C3Iq:RWklPQUWCvXefT38o9","tlshash":"90748c917280617916634fea41bf094ab238f120a409892cf75cc8d71bb99dad5bff7c","first_seen":"2025-10-04T13:20:57.139939Z","last_seen":"2025-10-08T22:43:50.294317Z","times_seen":59,"resource_available":true,"data":null}},"time_used":1903,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1903,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paperhands.live/favicon.ico","fqdn":"paperhands.live","domain":"paperhands.live","tld":"live"},"ip":{"addr":"192.64.118.37","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paperhands.live/","date":"2025-10-07T02:41:40.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paperhands.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 17 Sep 2025 00:00:00 GMT","end":"Thu, 17 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:20:D5:DE:EA:CA:C4:02:AA:45:3D:08:09:88:E6:7E:DA:75:1E:6C","sha256":"91:DA:19:A8:0F:B2:CF:89:80:25:FA:59:CD:93:5E:38:63:64:99:8A:64:83:5C:64:99:27:0A:E8:24:35:1A:2F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: paperhands.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paperhands.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 07 Oct 2025 02:41:40 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-04T09:34:31.529773Z","times_seen":145707,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paperhands.live/config.php?s=%2F%40v1%2Flog%2Fjoin","fqdn":"paperhands.live","domain":"paperhands.live","tld":"live"},"ip":{"addr":"192.64.118.37","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://paperhands.live/","date":"2025-10-07T02:41:42.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paperhands.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 17 Sep 2025 00:00:00 GMT","end":"Thu, 17 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:20:D5:DE:EA:CA:C4:02:AA:45:3D:08:09:88:E6:7E:DA:75:1E:6C","sha256":"91:DA:19:A8:0F:B2:CF:89:80:25:FA:59:CD:93:5E:38:63:64:99:8A:64:83:5C:64:99:27:0A:E8:24:35:1A:2F"}}},"request":{"raw":"POST /config.php?s=%2F%40v1%2Flog%2Fjoin HTTP/1.1\r\nHost: paperhands.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nx-scale-referrer: paperhands.live/\r\nauthorization: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjdXN0b21lcklkIjoidUZrMjJKOHJtRSIsImdyb3VwX2lkIjo2MzgsImlhdCI6MTc1OTA3ODYyOX0.T6-n5LjxNli1KIULwjeo6VF9XJAypTndThqXGJs4rK0\r\nx-device: 0:Windows:Firefox\r\nContent-Length: 2\r\nOrigin: https://paperhands.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paperhands.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/8.1.33\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 32\r\ndate: Tue, 07 Oct 2025 02:41:43 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":32,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3b5b4d21f8c87c5e6534b5a1d9d4574a","sha1":"965b62d67c48f12662fb156988561449f1a9be0f","sha256":"24dcf0603597089c21d0ab963001064690004c39e72221981b7faf7a5edd5f25","sha512":"1218be959182a70f35f2eeaeadc640c721f546b6b46b48f21f9acb3dead02d478da0ac6855f6c55777fbf33486b967fad262e93a5da6327ac7517933f9663ba8","ssdeep":"","tlshash":"d18000000e00aca83bc20802b2832028aaf22a80808b20a2800c803a0b028e0c22ba0c","first_seen":"2025-07-26T22:59:19.534167Z","last_seen":"2025-10-13T01:44:36.478944Z","times_seen":529,"resource_available":false,"data":null}},"time_used":1120,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1119,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paperhands.live/","date":"2025-10-07T02:41:42.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"54:09:EF:2E:96:03:5C:86:DF:F0:DA:AC:A6:7A:0D:35:49:4E:68:90","sha256":"0E:84:83:07:1D:C1:46:17:EB:EA:2F:15:CE:88:56:D2:FF:9E:AE:31:D2:C3:FC:DA:00:24:46:48:43:CD:11:1F"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paperhands.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 07 Oct 2025 02:41:42 GMT\r\ndate: Tue, 07 Oct 2025 02:41:42 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8795,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"51955a067b2f96efe49c2412a4c8c713","sha1":"44103446803299fdae2aa9fdf4c21af4e90fe450","sha256":"2598c04bc6015e0fdad9381928b8238d997efd88a0e450042a60e9d59435f915","sha512":"ca70f49f25ca02d0491518a04e3fdd3c9cb9d35a573ecae94d1bf8fe184ee1ceb53b623b4ba9bf2faf7ee4e321d30fb57954326ac064cdd7605b031355ef680b","ssdeep":"192:vywfydyGy63gy/yFVyR73xpmj3U8fHiyYwyNFyuy3uySRk73vO6u8:vtfcHjg8ciIShwCFnbL8B","tlshash":"2002ff91056be504ea431cc627cf7e369e8e62667081d1797ffe2cd9aceac22132475c","first_seen":"2025-09-11T02:59:26.857486Z","last_seen":"2026-07-31T03:43:33.743603Z","times_seen":915,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":57,"dns":1,"connect":9,"send":0,"wait":18,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paperhands.live//config.php?s=%2F%40v1%2Fservices%2Ftemp-link%2Fcreate\u0026referrer=paperhands.live","fqdn":"paperhands.live","domain":"paperhands.live","tld":"live"},"ip":{"addr":"192.64.118.37","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://paperhands.live/","date":"2025-10-07T02:41:42.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paperhands.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 17 Sep 2025 00:00:00 GMT","end":"Thu, 17 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:20:D5:DE:EA:CA:C4:02:AA:45:3D:08:09:88:E6:7E:DA:75:1E:6C","sha256":"91:DA:19:A8:0F:B2:CF:89:80:25:FA:59:CD:93:5E:38:63:64:99:8A:64:83:5C:64:99:27:0A:E8:24:35:1A:2F"}}},"request":{"raw":"POST //config.php?s=%2F%40v1%2Fservices%2Ftemp-link%2Fcreate\u0026referrer=paperhands.live HTTP/1.1\r\nHost: paperhands.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjdXN0b21lcklkIjoidUZrMjJKOHJtRSIsImdyb3VwX2lkIjo2MzgsImlhdCI6MTc1OTA3ODYyOX0.T6-n5LjxNli1KIULwjeo6VF9XJAypTndThqXGJs4rK0\r\nX-Direction-Safe: 1759804902544\r\nX-Scale-Referrer: paperhands.live/\r\nX-Auth-Key: 96sgEqrseK8M2WQ3uPqhMSroAtQ8GUwWqyT7X7ezSk4%3D\r\nX-Auth-Key-V2: xCaEQ8X64HZA%2FsCAt5x7k%2BfQ0%2Fvanxnsk2mXMxgUmH4%3D\r\nContent-Length: 1714\r\nOrigin: https://paperhands.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paperhands.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/8.1.33\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 592\r\ndate: Tue, 07 Oct 2025 02:41:43 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":592,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b4a3ee11bfabaad343c8396e6f5d5e9a","sha1":"af5dc62ea1dc3484d0b50f1f673a6117be15f06e","sha256":"7453efe09e9ff0ed8d255a3c64cbc6eb88c1b554dcee8fcca275a7c91e93ddb3","sha512":"88b47b17eb8e061843b23e5d81961697370b463861fec1ca334473214b4a5565999fb3794a56752817d3d227a4597fc3616c2b60e7f4928ccff36d12f9b1830b","ssdeep":"","tlshash":"12f04754696858159f34f74711e5d28d5dc1ffd03df255405b064e38aa94e82338ecaa","first_seen":"2025-10-07T02:42:06.758591Z","last_seen":"2025-10-07T02:42:06.758591Z","times_seen":1,"resource_available":false,"data":null}},"time_used":941,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":941,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paperhands.live/config.php?s=%2F%40v1%2Fservices%2Fconnector\u0026referrer=paperhands.live","fqdn":"paperhands.live","domain":"paperhands.live","tld":"live"},"ip":{"addr":"192.64.118.37","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://paperhands.live/","date":"2025-10-07T02:41:42.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paperhands.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 17 Sep 2025 00:00:00 GMT","end":"Thu, 17 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:20:D5:DE:EA:CA:C4:02:AA:45:3D:08:09:88:E6:7E:DA:75:1E:6C","sha256":"91:DA:19:A8:0F:B2:CF:89:80:25:FA:59:CD:93:5E:38:63:64:99:8A:64:83:5C:64:99:27:0A:E8:24:35:1A:2F"}}},"request":{"raw":"GET /config.php?s=%2F%40v1%2Fservices%2Fconnector\u0026referrer=paperhands.live HTTP/1.1\r\nHost: paperhands.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjdXN0b21lcklkIjoidUZrMjJKOHJtRSIsImdyb3VwX2lkIjo2MzgsImlhdCI6MTc1OTA3ODYyOX0.T6-n5LjxNli1KIULwjeo6VF9XJAypTndThqXGJs4rK0\r\nX-Direction-Safe: 1759804902557\r\nX-Scale-Referrer: paperhands.live/\r\nX-Auth-Key: o2sqnqV3br%2BkW0hovmedb%2BQClceB8IFlyI6qVUns90s%3D\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paperhands.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/8.1.33\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 377\r\ndate: Tue, 07 Oct 2025 02:41:43 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":377,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"de4569179797be910a03e72594e78390","sha1":"b3a87d654e1432e6d124cee2a21f2d4034886477","sha256":"89fce0e6c3cadcfbd6a7f4e9cfd9fa9a6fb7141720bffa3af1dedcee9f5f54e3","sha512":"e88c78eeeddc8ee2bd6d76d84f2be3adc3658ca7019b93ed421ac502e969b655f3bfd26afc5cc005d2dc08cf419381bfcce24e9d12c2d6c1a64eba4825e260d8","ssdeep":"","tlshash":"86e0c076d302de9008918e5422df9f25c70525133c4bd6e006e86177dc8e4fd15e0b69","first_seen":"2025-10-07T02:42:06.762128Z","last_seen":"2025-10-07T02:42:06.762128Z","times_seen":1,"resource_available":false,"data":null}},"time_used":945,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":945,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paperhands.live/","fqdn":"paperhands.live","domain":"paperhands.live","tld":"live"},"ip":{"addr":"192.64.118.37","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-07T02:41:38.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paperhands.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 17 Sep 2025 00:00:00 GMT","end":"Thu, 17 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:20:D5:DE:EA:CA:C4:02:AA:45:3D:08:09:88:E6:7E:DA:75:1E:6C","sha256":"91:DA:19:A8:0F:B2:CF:89:80:25:FA:59:CD:93:5E:38:63:64:99:8A:64:83:5C:64:99:27:0A:E8:24:35:1A:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: paperhands.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Sun, 28 Sep 2025 19:43:41 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 990\r\ndate: Tue, 07 Oct 2025 02:41:39 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3005,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"bae6c1f7ef28343d30cb39e2cce7143d","sha1":"fca9132d0f5485aaf6f88015f5e169e155648dc3","sha256":"cbd823de5f5937b64279e6ba8b09360cb92e4eddfb8959b8a6898dd2a3dd1203","sha512":"002b070d92d911fc4d9bce27b408064ad0fc4b1f3f23a8d3ea76c1c6636c62ec5ed76dd9dbe10b883eff0c66227c50305c9ded6ad71b5aee0c1cff6b298d0a0a","ssdeep":"","tlshash":"94510219994115052033a2686fb3d75af7c6c017c34641b53eed329b9ff96548ab3bcc","first_seen":"2025-10-07T02:42:06.764474Z","last_seen":"2025-10-07T02:42:06.764474Z","times_seen":1,"resource_available":false,"data":null}},"time_used":992,"timings":{"blocked":414,"dns":3,"connect":161,"send":0,"wait":163,"receive":0,"ssl":250},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plausible.io/js/script.js","fqdn":"plausible.io","domain":"plausible.io","tld":"io"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paperhands.live/","date":"2025-10-07T02:41:39.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plausible.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Oct 2025 19:09:55 GMT","end":"Thu, 01 Jan 2026 19:09:54 GMT"},"fingerprint":{"sha1":"1A:09:D4:66:A2:E0:0D:00:08:1F:16:50:1C:5C:EB:AE:F8:61:54:B6","sha256":"77:CB:7D:4D:13:21:7F:B8:A9:C7:05:A7:8D:28:01:31:5A:5C:42:3D:7F:DB:DD:9A:F3:31:D6:BE:BB:A3:B3:59"}}},"request":{"raw":"GET /js/script.js HTTP/1.1\r\nHost: plausible.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paperhands.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Oct 2025 02:41:39 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 682664\r\ncdn-uid: 153cb5b1-399a-48ef-b5bf-098c03770254\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, must-revalidate, max-age=86400\r\ncontent-encoding: br\r\nvia: 1.1 Caddy\r\napplication: 127.0.0.1\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: interest-cohort=()\r\nx-content-type-options: nosniff\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/06/2025 13:08:04\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 2355e96e42c38043f613bc073910fd58\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":3005,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3005), with no line terminators","md5":"30e1b09096a5c33aea7592059e2faae5","sha1":"fecb527f89655b23229e8ec7addfd7a5cbe11c0c","sha256":"1f0c626e8b40a26c4c3e27f489ebe23e75b201635bb0a2e0a97c51b91c3b5c83","sha512":"c8c698569f9d8e0a8ee89f5a610acb317bc4b0260436bd3c778e5f1c541f96682f622cd213c8d32847c4361401a1ca81113f40a4036c4ecf791e5973583f1e54","ssdeep":"","tlshash":"8c511db96a02757909b9d167ba2fb3063a3366153116a401542cd9c13e28eebc323ecd","first_seen":"2025-09-16T12:10:11.2018Z","last_seen":"2026-05-06T12:30:42.729725Z","times_seen":1208,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":6,"dns":3,"connect":2,"send":0,"wait":2,"receive":0,"ssl":3},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}