{"report_id":"2115319c-bf2e-4a89-9957-e824dca41a08","version":6,"status":"done","tags":[],"date":"2025-09-30T02:38:15Z","url":{"schema":"http","addr":"isocketsoftware.com/join/913","fqdn":"isocketsoftware.com","domain":"isocketsoftware.com","tld":"com"},"ip":{"addr":"104.21.92.243","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rrh2mrb.crazys-ladyonlines.com/y6tp83x","fqdn":"rrh2mrb.crazys-ladyonlines.com","domain":"crazys-ladyonlines.com","tld":"com"},"title":"Looking for sex tonight in Oslo?"},"submit":{"url":{"schema":"http","addr":"isocketsoftware.com/join/913","fqdn":"isocketsoftware.com","domain":"isocketsoftware.com","tld":"com"},"ip":{"addr":"104.21.92.243","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-04T02:38:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-30","alert":"Sinkholed","trigger":"rrh2mrb.crazys-ladyonlines.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rrh2mrb.crazys-ladyonlines.com","ip":{"addr":"172.67.170.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-27","domain_rank":0,"first_seen":"2025-08-31T23:49:07.650959Z","last_seen":"2025-09-23T09:25:18.570275Z","alert_count":13,"request_count":13,"received_data":1160720,"sent_data":6875,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"isocketsoftware.com","ip":{"addr":"172.67.200.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-21","domain_rank":0,"first_seen":"2025-08-26T20:08:02.555787Z","last_seen":"2025-08-26T20:08:02.555787Z","alert_count":0,"request_count":3,"received_data":12158,"sent_data":1742,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"matomo.isocketsoftware.com","ip":{"addr":"172.67.200.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-21","domain_rank":0,"first_seen":"2025-08-26T20:08:02.573397Z","last_seen":"2025-08-26T20:08:02.573397Z","alert_count":0,"request_count":2,"received_data":68824,"sent_data":1269,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-28T22:11:39.889585Z","alert_count":0,"request_count":1,"received_data":3122,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-09-28T22:11:46.369912Z","alert_count":0,"request_count":1,"received_data":73799,"sent_data":553,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rrh2mrb.crazys-ladyonlines.com/media/dating/videoquestion23/js/trls.js","fqdn":"rrh2mrb.crazys-ladyonlines.com","domain":"crazys-ladyonlines.com","tld":"com"},"ip":{"addr":"172.67.170.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a928ab0a903ab314a56e6a74be5cbbc3","sha1":"7c825d50edad4ef247f955ef3283673504808cb6","sha256":"bf5951d490b60dac1e03e177ee1013b75ca277469a01479fd55e7f768a784785","sha512":"930c71ca315297ddeff1052003abf36f1eef4a69dd7a9662f7a07d1f72fa4d9be9058ac915ded827bcfd2c2b433250c606b6079f1bc88b0257ed05a32bdd85e2","ssdeep":"768:TDQkmrBvhqel/dteERWyjrrPjtiztlJx1i3:GvrPxizFx1i3","tlshash":"8bf28033fbcf59faf0c12255a672f985252ce96fe351e8f9305e54aa20d1900824fad7","size":36926,"data":"","first_seen":"2024-11-29T14:20:12.707187Z","last_seen":"2025-10-07T02:56:22.06389Z","times_seen":1239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rrh2mrb.crazys-ladyonlines.com/media/dating/videoquestion23/js/jquery.min.js","fqdn":"rrh2mrb.crazys-ladyonlines.com","domain":"crazys-ladyonlines.com","tld":"com"},"ip":{"addr":"172.67.170.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"710458dd559c957714ac4a8e95357eb5","sha1":"f694238d616f579a0690001f37984af430c19963","sha256":"b409c14a10b4caad6b54844aa63a5faf748b83eecc2dd0d4fb1d913f8de55365","sha512":"282d65828a43bfe50fe0f9aea8bca3838ac1b5250e7c7c359c066e0428aa723f001d31c2463681b2ad6816a49a8571bf9f3ae29b2dc53adf1bbd7d5c4471322b","ssdeep":"1536:fYE1JVoiB9JqZdXXe2pD3PgoIiulrUn6Z6a4tfOR7WpfWBZPBJda4w9W3qG9a98N:u4J+rlfOhWpgCW6G9a98Hrp","tlshash":"3583c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85582,"data":"","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-04-06T09:59:45.758277Z","times_seen":11418,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"isocketsoftware.com/verify.html","fqdn":"isocketsoftware.com","domain":"isocketsoftware.com","tld":"com"},"ip":{"addr":"172.67.200.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2013116dc564757342592542a16a726a","sha1":"30e2ba140fae27ada26bce60bb33b5c73a127a16","sha256":"08006358fb10be8a3972a3455f9691427e48107f1244bdf002007ae0dc3b09c7","sha512":"fe227f172cfb4645d294ea2f001015c403c5a2f1d36d3598c656d7fc0f4e388b9095190935525ac4350c5e7591bde9ef469701ba4c44d47f7edbe416d9397269","ssdeep":"","tlshash":"cdf0ab273b631c2026277a6b717083443c23865b3896b00b3a2c85e00f4495bf2bbeec","size":474,"data":"","first_seen":"2025-09-30T02:38:17.481852Z","last_seen":"2026-03-29T22:37:15.005798Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"matomo.isocketsoftware.com/matomo.js","fqdn":"matomo.isocketsoftware.com","domain":"isocketsoftware.com","tld":"com"},"ip":{"addr":"172.67.200.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e15c63c0a10e6eb98666cf8dbb0c1d9","sha1":"4b7eae296c97a3ccb482166f0a71eea670e2d7f2","sha256":"dbefc0fa9b6b7680a9a1c1e5a0f0cc7c8ae3c41a7b15c206a144963cb36a073d","sha512":"4ba6fda2503491d67e565db8e94ee6366f33c6d47c8171ffa91ddcde0ea143ebd4ef7ed448924214144f92961ad2065190b69edb1b32de9f1696d4e8c95f4007","ssdeep":"1536:ATgnSINAJrRJqerEKlFXhuXL0+Yv+6S9en60kLddaSiVdmQwJ4ITDXVwXFD6:AT+Z2fu7av+6S9jLddaSiVdmQePXVP","tlshash":"1163d5ca72c279398bca2075503f1187b17aada7144cc4a4f56ac4fa3c3891e957bf78","size":67514,"data":"","first_seen":"2025-04-11T12:58:45.765735Z","last_seen":"2026-04-06T09:25:12.690278Z","times_seen":7566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rrh2mrb.crazys-ladyonlines.com/y6tp83x","fqdn":"rrh2mrb.crazys-ladyonlines.com","domain":"crazys-ladyonlines.com","tld":"com"},"ip":{"addr":"172.67.170.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4f237b646236cf87fc4a89a98f23f253","sha1":"4a4eb795bba9503bb83cde229822509519aeb62a","sha256":"ea1ca38c26d51ebf0ec2116427d421c506414dbdf5f5e5ed217e32e60c4d0969","sha512":"4766df3802e038b94fc17cd1bdced34fe766cc2ecb904162001f65ea35cbf27b2a6fe7415efb6a934358c9f647e3820df3ecd074899add3335bf8cfd1768cf04","ssdeep":"","tlshash":"72f04c987c0a7d1e9b6ec1ee911fe04361a174dc919ef5c6414bcc04d160a6d70c58b2","size":592,"data":"","first_seen":"2025-09-30T02:38:17.482993Z","last_seen":"2025-09-30T02:38:17.482993Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rrh2mrb.crazys-ladyonlines.com/cookie/js.cookie.js","fqdn":"rrh2mrb.crazys-ladyonlines.com","domain":"crazys-ladyonlines.com","tld":"com"},"ip":{"addr":"172.67.170.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7e9883924072f15259de6888d5ef515","sha1":"7f4f6e5938e68f55aef81e0cd0145f008cd28382","sha256":"985659942ab60a92b3c0a7f876d9ef60e8f048ff655a622a172fa4b44f901b6c","sha512":"f6f2859b644b249cebe21b0af49c0efa046eedc95814ad4cac400b25d6fddbb7a155db420359ccfc8570eb18899cdc369dcbf5c137f4cb21f24b27f8f297be48","ssdeep":"48:MnCmrorDzy9AVYnVReoHEmFZqLghLVQiAdHy9QShp8dLocCTRTvg84Re6YzMtpyX:iCyojFOJEiXA1hyvt4T7tpyD2bm","tlshash":"4b91a5a4344535b9053b237513bf678bf575e8a22c8aa644ba4dc9a07f30c5f031afe6","size":4264,"data":"","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-04-06T06:14:00.598121Z","times_seen":6124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rrh2mrb.crazys-ladyonlines.com/media/dating/videoquestion23/js/main.js","fqdn":"rrh2mrb.crazys-ladyonlines.com","domain":"crazys-ladyonlines.com","tld":"com"},"ip":{"addr":"172.67.170.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"74f58c31659e17bb7a0bc4931230c883","sha1":"21b20186e0ff8dd2fbecda4aa0baccb785b02238","sha256":"acada31019f394419a409e0eb3b7c6f12abf56301ea6dac1a73b0aa6156a1ed5","sha512":"b6e785bbde35baf7bc0fe46e2bd76804c10557cb053f001fde4b2fa4480240c1d5b1d0a0a867368e811bc1edcf732ccc6b3b57470da3f1f05f5840d489e103f0","ssdeep":"","tlshash":"0c2123c5775d215e82df33650c768a047a3df871b183c5f8b9a0a5c82da541cf75a4bc","size":1213,"data":"","first_seen":"2024-11-29T14:20:12.716111Z","last_seen":"2025-10-07T02:56:22.058516Z","times_seen":1117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"isocketsoftware.com/verify.html","fqdn":"isocketsoftware.com","domain":"isocketsoftware.com","tld":"com"},"ip":{"addr":"172.67.200.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a947414adf2f43e1a0e23f2b95a152b","sha1":"75648f30e31c83af02aaafcec9f974263f4b1ec4","sha256":"8f191710ffd50e2e00e19c665116ce3c99b3b3a93259e8afc63dace5942d5cea","sha512":"624a16e60fb86e060463a2b4a2825e9740c0140934bd4cf21d3c5a20a679b1e45cbbc11fc337bcbc6af872bc8082b909fada4433d52de27b3a1d4bd71e6843f3","ssdeep":"","tlshash":"28e0ab2998e706384cf63a441038ca7930f838a0aab3d057525cc82ccd39fc50c00aec","size":424,"data":"","first_seen":"2025-04-20T20:40:15.714572Z","last_seen":"2026-03-29T22:37:15.008821Z","times_seen":774,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"isocketsoftware.com/verify.html","fqdn":"isocketsoftware.com","domain":"isocketsoftware.com","tld":"com"},"ip":{"addr":"172.67.200.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"80ea723e9a305f12635ec16eeed9f35b","sha1":"c9738c85219d7e141f6289cd2954fbf20e7cb117","sha256":"a0fa936c37f6990ede3f62a5e1b3622a5d958d022871863ee02d9e688ac359f4","sha512":"9945eedc78b3d1ab3ecce8ed12addf6455bfe40bcb836db8de5237c36450fd9f9a086722c16b3700c8dc9b4b55792f5b3c61addec614f16b5b681b8d31860ebf","ssdeep":"","tlshash":"c4f050216d5b1afd6677612e5fbe4c2933e72c1b9050c0443d4ce4159f735868250288","size":586,"data":"","first_seen":"2025-08-29T02:56:08.385484Z","last_seen":"2025-09-30T02:38:17.484791Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rrh2mrb.crazys-ladyonlines.com/util/utils.js","fqdn":"rrh2mrb.crazys-ladyonlines.com","domain":"crazys-ladyonlines.com","tld":"com"},"ip":{"addr":"172.67.170.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"67f83bb8309524daa942af9cec436419","sha1":"df63410e039476a6dde6eb4200b5c1666c52af21","sha256":"57d2fd3a46ef70b606d7dcd83f70b6a2107725cd910ca1399c70ef52b2c72b9d","sha512":"d48b08d4209f4313706376f312ccc8d08f9a34c22f4428a5bce059242442097a15a4581673259de0a2eb27bacb508104248703feed52a9d38a74d6e9470599ce","ssdeep":"192:nv6UDdoxY4iYiXKF3nwx16qI9S7q6uRIpauZy4hpjgRxtSY8xd:nv6wixY4iYi+3nwx16q97H3Zy47jgRxE","tlshash":"3df1b89e334f311e87c633b1087e9408ac7ef8352796e095b9ed949464b0e1d3762ee8","size":7514,"data":"","first_seen":"2025-01-16T10:08:27.907414Z","last_seen":"2026-04-03T20:17:39.599343Z","times_seen":1461,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rrh2mrb.crazys-ladyonlines.com/media/bb.js","fqdn":"rrh2mrb.crazys-ladyonlines.com","domain":"crazys-ladyonlines.com","tld":"com"},"ip":{"addr":"172.67.170.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d553e4bac91c74bfee2dbabba61e99e","sha1":"5af71e2377c9c012a7826a695f2724901941b19b","sha256":"1be1304c675449b1bad38ea8c3da6c1da0763ed2fad339ee1aa461c7bf4e2a68","sha512":"105e5b23733e7bb443ba2080d606c2814b0acd2aaf228467d2ce532ff2f2ec0b292f8eb5189a24cd9f79b69a7e983b176dbd29e2d539dae7ca443821084f2894","ssdeep":"","tlshash":"c5f02d81bd1878f685cf3355871f2230903f08dd720ae982a8a46e622e2038dde1b7e0","size":639,"data":"","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-04-03T20:17:39.592645Z","times_seen":13211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rrh2mrb.crazys-ladyonlines.com/media/exit-new/exit1.js","fqdn":"rrh2mrb.crazys-ladyonlines.com","domain":"crazys-ladyonlines.com","tld":"com"},"ip":{"addr":"172.67.170.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"625e5e2950612f771e246beb33c9ea61","sha1":"e4fc251c6c000496c285f8dc3fa097040b031681","sha256":"618f345a156a0eda55177a1bf0e8a414104f9b6c6ff5cdbe71966f081ccb8a46","sha512":"655f0b373c605d0a464bedca4df204fb3aa12442c5b0aa3b8bf13e0604fd1e89480356e9c6cc9a432f81305bf1151caf4ac4ad9d8eb24eb78cbd11318e5b9657","ssdeep":"","tlshash":"e36156e4720e31ad93db3764c27fb11a7876e4b2d416a0b5a44c5c907434a1d6376cfd","size":3473,"data":"","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-02-01T11:35:43.37734Z","times_seen":13050,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"rrh2mrb.crazys-ladyonlines.com/cookie/js.cookie.js","fqdn":"rrh2mrb.crazys-ladyonlines.com","domain":"crazys-ladyonlines.com","tld":"com"},"ip":{"addr":"172.67.170.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rrh2mrb.crazys-ladyonlines.com/y6tp83x","date":"2025-09-30T02:37:55.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"crazys-ladyonlines.com","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Mon, 25 Aug 2025 20:55:48 GMT","end":"Sun, 23 Nov 2025 21:02:38 GMT"},"fingerprint":{"sha1":"34:F2:FF:1A:CB:2C:BE:5C:B1:90:D1:E1:5A:3F:76:96:14:2A:8D:0C","sha256":"F9:03:DB:A0:4C:04:3C:70:E6:0F:9B:56:3B:65:9E:7C:61:68:46:DD:07:8D:E0:89:46:02:22:03:D6:89:63:3D"}}},"request":{"raw":"GET /cookie/js.cookie.js HTTP/1.1\r\nHost: rrh2mrb.crazys-ladyonlines.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rrh2mrb.crazys-ladyonlines.com/y6tp83x\r\nCookie: sid=t3~kzqc3hvlgj2x1cvacz33tz2i\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Sep 2025 02:37:55 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4264\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"a7e9883924072f15259de6888d5ef515\"\r\nlast-modified: Wed, 31 Aug 2022 09:31:17 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-id-2: 31f7dd36b65146a775b93356924fa83cf99019d4a4dfda4a9a6512d5179fdf9c\r\nx-amz-request-id: 1866F88B8F06ADBB\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 364\r\nx-ratelimit-remaining: 364\r\nx-xss-protection: 1; mode=block\r\nexpires: Thu, 24 Sep 2026 15:16:40 GMT\r\ncache-control: max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nage: 472875\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IrHR5PNrbQabgEHRhOXCIL1V%2FWTCSC096Zas42DV4b2cZvrz6F1Pq3ADGBLnyPl7XBjvZ2Pl7bdbSjEEIepo1j8ZGWMQWYPl3l1AFnAzzBPichwraIqtAOi0pkrMhg%3D%3D\"}]}\r\ncf-ray: 987057568f1a0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4264,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1709), with CRLF line terminators","md5":"a7e9883924072f15259de6888d5ef515","sha1":"7f4f6e5938e68f55aef81e0cd0145f008cd28382","sha256":"985659942ab60a92b3c0a7f876d9ef60e8f048ff655a622a172fa4b44f901b6c","sha512":"f6f2859b644b249cebe21b0af49c0efa046eedc95814ad4cac400b25d6fddbb7a155db420359ccfc8570eb18899cdc369dcbf5c137f4cb21f24b27f8f297be48","ssdeep":"48:MnCmrorDzy9AVYnVReoHEmFZqLghLVQiAdHy9QShp8dLocCTRTvg84Re6YzMtpyX:iCyojFOJEiXA1hyvt4T7tpyD2bm","tlshash":"4b91a5a4344535b9053b237513bf678bf575e8a22c8aa644ba4dc9a07f30c5f031afe6","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-04-06T06:14:00.598121Z","times_seen":6124,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-30","alert":"Sinkholed","trigger":"rrh2mrb.crazys-ladyonlines.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rrh2mrb.crazys-ladyonlines.com/util/utils.js","fqdn":"rrh2mrb.crazys-ladyonlines.com","domain":"crazys-ladyonlines.com","tld":"com"},"ip":{"addr":"172.67.170.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rrh2mrb.crazys-ladyonlines.com/y6tp83x","date":"2025-09-30T02:37:55.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"crazys-ladyonlines.com","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Mon, 25 Aug 2025 20:55:48 GMT","end":"Sun, 23 Nov 2025 21:02:38 GMT"},"fingerprint":{"sha1":"34:F2:FF:1A:CB:2C:BE:5C:B1:90:D1:E1:5A:3F:76:96:14:2A:8D:0C","sha256":"F9:03:DB:A0:4C:04:3C:70:E6:0F:9B:56:3B:65:9E:7C:61:68:46:DD:07:8D:E0:89:46:02:22:03:D6:89:63:3D"}}},"request":{"raw":"GET /util/utils.js HTTP/1.1\r\nHost: rrh2mrb.crazys-ladyonlines.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rrh2mrb.crazys-ladyonlines.com/y6tp83x\r\nCookie: sid=t3~kzqc3hvlgj2x1cvacz33tz2i\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Sep 2025 02:37:55 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 7514\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67f83bb8309524daa942af9cec436419\"\r\nlast-modified: Thu, 16 Jan 2025 07:55:10 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1866F88B8D290D13\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 2060\r\nx-ratelimit-remaining: 2060\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mc-attrs: atime:1737013493#205481014/gid:0/gname:root/mode:33188/mtime:1737014112#757470179/uid:0/uname:root\r\nx-amz-meta-mm-source-mtime: 2025-01-16T07:55:12.806Z\r\nexpires: Fri, 25 Sep 2026 02:35:22 GMT\r\ncache-control: max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nage: 432153\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y70f0SnibOsqlamq%2BMJAZ1t3c03qnqUzDk9f8su5ZPTWSjNXH4lJTzeT5OV5bxU4dkdDzRPVm2x9piJlv%2FsebZ0VNNQ78mKCe%2BfuPV6qJtrUpt%2FBmRvYeVlWgGPz0A%3D%3D\"}]}\r\ncf-ray: 987057568f1c0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7514,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (641), with CRLF line terminators","md5":"67f83bb8309524daa942af9cec436419","sha1":"df63410e039476a6dde6eb4200b5c1666c52af21","sha256":"57d2fd3a46ef70b606d7dcd83f70b6a2107725cd910ca1399c70ef52b2c72b9d","sha512":"d48b08d4209f4313706376f312ccc8d08f9a34c22f4428a5bce059242442097a15a4581673259de0a2eb27bacb508104248703feed52a9d38a74d6e9470599ce","ssdeep":"192:nv6UDdoxY4iYiXKF3nwx16qI9S7q6uRIpauZy4hpjgRxtSY8xd:nv6wixY4iYi+3nwx16q97H3Zy47jgRxE","tlshash":"3df1b89e334f311e87c633b1087e9408ac7ef8352796e095b9ed949464b0e1d3762ee8","first_seen":"2025-01-16T10:08:27.907414Z","last_seen":"2026-04-03T20:17:39.599343Z","times_seen":1461,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-30","alert":"Sinkholed","trigger":"rrh2mrb.crazys-ladyonlines.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"isocketsoftware.com/join/913","fqdn":"isocketsoftware.com","domain":"isocketsoftware.com","tld":"com"},"ip":{"addr":"172.67.200.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-30T02:37:53.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"isocketsoftware.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 16:03:54 GMT","end":"Sun, 23 Nov 2025 17:01:15 GMT"},"fingerprint":{"sha1":"5A:7C:E6:1F:98:76:D8:0F:22:E7:C6:69:17:47:06:4A:2D:9E:4C:EF","sha256":"86:F3:ED:A3:F2:DC:9B:A0:F7:35:94:C8:06:47:7B:C7:99:E1:32:CC:B5:C3:60:7F:57:A1:EA:EF:4E:35:AE:9A"}}},"request":{"raw":"GET /join/913 HTTP/1.1\r\nHost: isocketsoftware.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 30 Sep 2025 02:37:53 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlocation: /verify.html\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HZXgOcIY8dk%2Bf5ZXQeMX65V4p%2FW4%2FxZ5TCdULLMfjs8hrJAa9hN2vkaHpHoLY25H2dp9WqPgvQQaZnJn8t33aLApdTmTw67ToVn77btS%2Bwi9\"}]}\r\nserver: cloudflare\r\ncf-ray: 987057484f265685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2783,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":604,"timings":{"blocked":261,"dns":0,"connect":2,"send":0,"wait":83,"receive":0,"ssl":258},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"isocketsoftware.com/verify.html","fqdn":"isocketsoftware.com","domain":"isocketsoftware.com","tld":"com"},"ip":{"addr":"172.67.200.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-30T02:37:53.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"isocketsoftware.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 16:03:54 GMT","end":"Sun, 23 Nov 2025 17:01:15 GMT"},"fingerprint":{"sha1":"5A:7C:E6:1F:98:76:D8:0F:22:E7:C6:69:17:47:06:4A:2D:9E:4C:EF","sha256":"86:F3:ED:A3:F2:DC:9B:A0:F7:35:94:C8:06:47:7B:C7:99:E1:32:CC:B5:C3:60:7F:57:A1:EA:EF:4E:35:AE:9A"}}},"request":{"raw":"GET /verify.html HTTP/1.1\r\nHost: isocketsoftware.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Sep 2025 02:37:53 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CU4lOxnPNChZ2sjcyyPZZJfybRht0gx%2FX0WaIlJNWcr5GpvNMezvaKpx5gGp4sPkIQiPx4ZGJLy%2BvUmBF3v%2BTIQhRNpb82myO6kNvk%2FyWHap\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98705748cf3b5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2783,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"177b88f307315898a3a40517f25f34bb","sha1":"f133d28a5a0292e458d28ec82d3d8f2f3fb67477","sha256":"8798b675990de3183c53530ec1e0d81966293494ceea79d71e927ac876e1e38f","sha512":"a180be40ad1f48139bd1294297ef690722aa0d868ea547126846f6295dba6310b2d23a67872f515af3391b1d3b548e23eeb2fdd9158ac497a7bbff12ddfbb468","ssdeep":"","tlshash":"3b5184055de70c342c73a6295bb5db283af3581b8597d04639ccd018cf82eca8957bcc","first_seen":"2025-09-30T02:38:17.471183Z","last_seen":"2025-09-30T02:38:17.471183Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rrh2mrb.crazys-ladyonlines.com/media/dating/videoquestion23/css/reset.min.css","fqdn":"rrh2mrb.crazys-ladyonlines.com","domain":"crazys-ladyonlines.com","tld":"com"},"ip":{"addr":"172.67.170.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rrh2mrb.crazys-ladyonlines.com/y6tp83x","date":"2025-09-30T02:37:55.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"crazys-ladyonlines.com","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Mon, 25 Aug 2025 20:55:48 GMT","end":"Sun, 23 Nov 2025 21:02:38 GMT"},"fingerprint":{"sha1":"34:F2:FF:1A:CB:2C:BE:5C:B1:90:D1:E1:5A:3F:76:96:14:2A:8D:0C","sha256":"F9:03:DB:A0:4C:04:3C:70:E6:0F:9B:56:3B:65:9E:7C:61:68:46:DD:07:8D:E0:89:46:02:22:03:D6:89:63:3D"}}},"request":{"raw":"GET /media/dating/videoquestion23/css/reset.min.css HTTP/1.1\r\nHost: rrh2mrb.crazys-ladyonlines.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rrh2mrb.crazys-ladyonlines.com/y6tp83x\r\nCookie: sid=t3~kzqc3hvlgj2x1cvacz33tz2i\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Sep 2025 02:37:55 GMT\r\ncontent-type: text/css\r\ncontent-length: 1197\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"8d6ca13d5cf50f61e0e85743802b667d\"\r\nlast-modified: Wed, 20 Nov 2024 16:19:47 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1866F8927B317F4A\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 2060\r\nx-ratelimit-remaining: 2059\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mc-attrs: atime:1732119587#276259281/gid:0/gname:root/mode:33188/mtime:1732119587#376259303/uid:0/uname:root\r\nx-amz-meta-mm-source-mtime: 2024-11-20T16:19:47.459Z\r\nexpires: Sun, 27 Sep 2026 05:46:11 GMT\r\ncache-control: max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nage: 247904\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u9ZpL6oABCRIhYxtblzx39gL%2FGU3XkhXm0mc1DUdufDRWWWAXLU%2FoRFgGl5YWupAjfIiyuBK83aNFudj0pVJCeXZL7u6RuNRL9Lt47dX%2Bki6Ka8jiDitStnfu5Nb3w%3D%3D\"}]}\r\ncf-ray: 987057568f170731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1197,"size_decoded":0,"mime_type":"text/css","magic":"CSV ASCII text","md5":"8d6ca13d5cf50f61e0e85743802b667d","sha1":"e2f1cbb2fc1df7804f8eee9d98abc15d072bc126","sha256":"4f8073061ab2b9f3b29d563c2b3976d8dc33ee5c0c9b5cdca0a728133e2bb053","sha512":"e3d60da556b2d43f5d0fbb5a86e7c24a81cb3b891e8cab959397aa9752df5420d95c3bba75303ba8f50b83cd54d04af1b3ebe90f0139782e9071f5bc93cdffee","ssdeep":"","tlshash":"b521112ca510d4d084758b21b3828f34f52411b31f155174fae9cf9c1b3a622cad2fbd","first_seen":"2024-11-29T14:20:12.70407Z","last_seen":"2025-10-07T02:56:22.054602Z","times_seen":1216,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-30","alert":"Sinkholed","trigger":"rrh2mrb.crazys-ladyonlines.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rrh2mrb.crazys-ladyonlines.com/media/dating/videoquestion23/css/style.css","fqdn":"rrh2mrb.crazys-ladyonlines.com","domain":"crazys-ladyonlines.com","tld":"com"},"ip":{"addr":"172.67.170.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rrh2mrb.crazys-ladyonlines.com/y6tp83x","date":"2025-09-30T02:37:55.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"crazys-ladyonlines.com","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Mon, 25 Aug 2025 20:55:48 GMT","end":"Sun, 23 Nov 2025 21:02:38 GMT"},"fingerprint":{"sha1":"34:F2:FF:1A:CB:2C:BE:5C:B1:90:D1:E1:5A:3F:76:96:14:2A:8D:0C","sha256":"F9:03:DB:A0:4C:04:3C:70:E6:0F:9B:56:3B:65:9E:7C:61:68:46:DD:07:8D:E0:89:46:02:22:03:D6:89:63:3D"}}},"request":{"raw":"GET /media/dating/videoquestion23/css/style.css HTTP/1.1\r\nHost: rrh2mrb.crazys-ladyonlines.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rrh2mrb.crazys-ladyonlines.com/y6tp83x\r\nCookie: sid=t3~kzqc3hvlgj2x1cvacz33tz2i\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Sep 2025 02:37:55 GMT\r\ncontent-type: text/css\r\ncontent-length: 4442\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"f5ca8d01cccbf9a9ce244e2f589d9a7f\"\r\nlast-modified: Wed, 20 Nov 2024 16:19:47 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-id-2: 31f7dd36b65146a775b93356924fa83cf99019d4a4dfda4a9a6512d5179fdf9c\r\nx-amz-request-id: 1866F8927CC6AA2B\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 364\r\nx-ratelimit-remaining: 364\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mc-attrs: atime:1732119588#60259457/gid:0/gname:root/mode:33188/mtime:1732119587#984259440/uid:0/uname:root\r\nx-amz-meta-mm-source-mtime: 2024-11-20T16:19:48.064Z\r\nexpires: Sun, 20 Sep 2026 11:01:14 GMT\r\ncache-control: max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nage: 833800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z8DYW6N9lXBWPKRUAZb4rDXUurwdozM4wmExcL3m1kM5bePZgFBs44zBNIaJraR0yP016lefOOc4J5Yi2qhTRErPUP9uyyXNhAAefKksEp9P4QfngsxP6GtqxJczuA%3D%3D\"}]}\r\ncf-ray: 987057568f180731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4442,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"f5ca8d01cccbf9a9ce244e2f589d9a7f","sha1":"149de9d899efa44651310d8afb0da6fd503f027c","sha256":"fa47c7044da3b9b731dd8bb68c797f2632b80bbeed38e2a0ed139f7ef274d7a9","sha512":"7855c1da7471dffbbfeac1798259a9eb06baaaa46fb5252dea60829d9111a188819cd9c84309549852657968042269429d4585935a661504b529554a9e8e697d","ssdeep":"96:c3LZq+PhHjQZ7L30rfyM0MEU3z6hvQUQ1Xn4i:c3Lw+ZQZ7orfPtEOsvQUQ1XH","tlshash":"1691525989012288b233abf46ff14715ee580413ea4391ecbbd976ca4fb55b89260fcd","first_seen":"2024-11-29T14:20:12.719081Z","last_seen":"2025-10-07T02:56:22.062442Z","times_seen":1112,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-30","alert":"Sinkholed","trigger":"rrh2mrb.crazys-ladyonlines.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rrh2mrb.crazys-ladyonlines.com/media/dating/videoquestion23/js/trls.js","fqdn":"rrh2mrb.crazys-ladyonlines.com","domain":"crazys-ladyonlines.com","tld":"com"},"ip":{"addr":"172.67.170.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rrh2mrb.crazys-ladyonlines.com/y6tp83x","date":"2025-09-30T02:37:55.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"crazys-ladyonlines.com","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Mon, 25 Aug 2025 20:55:48 GMT","end":"Sun, 23 Nov 2025 21:02:38 GMT"},"fingerprint":{"sha1":"34:F2:FF:1A:CB:2C:BE:5C:B1:90:D1:E1:5A:3F:76:96:14:2A:8D:0C","sha256":"F9:03:DB:A0:4C:04:3C:70:E6:0F:9B:56:3B:65:9E:7C:61:68:46:DD:07:8D:E0:89:46:02:22:03:D6:89:63:3D"}}},"request":{"raw":"GET /media/dating/videoquestion23/js/trls.js HTTP/1.1\r\nHost: rrh2mrb.crazys-ladyonlines.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rrh2mrb.crazys-ladyonlines.com/y6tp83x\r\nCookie: sid=t3~kzqc3hvlgj2x1cvacz33tz2i\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Sep 2025 02:37:55 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 36926\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"a928ab0a903ab314a56e6a74be5cbbc3\"\r\nlast-modified: Wed, 20 Nov 2024 16:19:57 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1866F892E7536ECD\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 2060\r\nx-ratelimit-remaining: 2059\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mc-attrs: atime:1732119597#128261496/gid:0/gname:root/mode:33188/mtime:1732119597#500261578/uid:0/uname:root\r\nx-amz-meta-mm-source-mtime: 2024-11-20T16:19:57.61Z\r\nexpires: Sun, 20 Sep 2026 11:01:14 GMT\r\ncache-control: max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nage: 833800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QUdWH0xNaOIS7yIPZPi7W4r2WqtpscrAo67YgCU3epaCQTFaS30KacB8Wtaaan%2BRC24R0PJHqz53gj%2F%2BlKD0wCf6SqBypq%2FcWANYl%2FVTZILNOrmFzb2FxhI%2FYOue7w%3D%3D\"}]}\r\ncf-ray: 987057568f230731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":36926,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"a928ab0a903ab314a56e6a74be5cbbc3","sha1":"7c825d50edad4ef247f955ef3283673504808cb6","sha256":"bf5951d490b60dac1e03e177ee1013b75ca277469a01479fd55e7f768a784785","sha512":"930c71ca315297ddeff1052003abf36f1eef4a69dd7a9662f7a07d1f72fa4d9be9058ac915ded827bcfd2c2b433250c606b6079f1bc88b0257ed05a32bdd85e2","ssdeep":"768:TDQkmrBvhqel/dteERWyjrrPjtiztlJx1i3:GvrPxizFx1i3","tlshash":"8bf28033fbcf59faf0c12255a672f985252ce96fe351e8f9305e54aa20d1900824fad7","first_seen":"2024-11-29T14:20:12.707187Z","last_seen":"2025-10-07T02:56:22.06389Z","times_seen":1239,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-30","alert":"Sinkholed","trigger":"rrh2mrb.crazys-ladyonlines.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rrh2mrb.crazys-ladyonlines.com/media/dating/videoquestion23/js/main.js","fqdn":"rrh2mrb.crazys-ladyonlines.com","domain":"crazys-ladyonlines.com","tld":"com"},"ip":{"addr":"172.67.170.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rrh2mrb.crazys-ladyonlines.com/y6tp83x","date":"2025-09-30T02:37:55.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"crazys-ladyonlines.com","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Mon, 25 Aug 2025 20:55:48 GMT","end":"Sun, 23 Nov 2025 21:02:38 GMT"},"fingerprint":{"sha1":"34:F2:FF:1A:CB:2C:BE:5C:B1:90:D1:E1:5A:3F:76:96:14:2A:8D:0C","sha256":"F9:03:DB:A0:4C:04:3C:70:E6:0F:9B:56:3B:65:9E:7C:61:68:46:DD:07:8D:E0:89:46:02:22:03:D6:89:63:3D"}}},"request":{"raw":"GET /media/dating/videoquestion23/js/main.js HTTP/1.1\r\nHost: rrh2mrb.crazys-ladyonlines.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rrh2mrb.crazys-ladyonlines.com/y6tp83x\r\nCookie: sid=t3~kzqc3hvlgj2x1cvacz33tz2i\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Sep 2025 02:37:55 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1213\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"74f58c31659e17bb7a0bc4931230c883\"\r\nlast-modified: Wed, 20 Nov 2024 16:19:55 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 1866F892A270A041\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 2060\r\nx-ratelimit-remaining: 2060\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mc-attrs: atime:1732119596#184261284/gid:0/gname:root/mode:33188/mtime:1732119596#256261300/uid:0/uname:root\r\nx-amz-meta-mm-source-mtime: 2024-11-20T16:19:56.334Z\r\nexpires: Sun, 20 Sep 2026 11:01:15 GMT\r\ncache-control: max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nage: 833800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mVqpp7DFxOEsIcWSydraHSsDTzWSIdBuNw3ANqeKpt6272oJlMWN44l0U6KdM2zJbptyU0m7%2FfFtTSQv8Iq6CDbqZHRsz638VPuSJR4CzLrz%2FMOpSDUw0VH8MKSHww%3D%3D\"}]}\r\ncf-ray: 987057568f220731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1213,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"74f58c31659e17bb7a0bc4931230c883","sha1":"21b20186e0ff8dd2fbecda4aa0baccb785b02238","sha256":"acada31019f394419a409e0eb3b7c6f12abf56301ea6dac1a73b0aa6156a1ed5","sha512":"b6e785bbde35baf7bc0fe46e2bd76804c10557cb053f001fde4b2fa4480240c1d5b1d0a0a867368e811bc1edcf732ccc6b3b57470da3f1f05f5840d489e103f0","ssdeep":"","tlshash":"0c2123c5775d215e82df33650c768a047a3df871b183c5f8b9a0a5c82da541cf75a4bc","first_seen":"2024-11-29T14:20:12.716111Z","last_seen":"2025-10-07T02:56:22.058516Z","times_seen":1117,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-30","alert":"Sinkholed","trigger":"rrh2mrb.crazys-ladyonlines.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rrh2mrb.crazys-ladyonlines.com/favicon.ico","fqdn":"rrh2mrb.crazys-ladyonlines.com","domain":"crazys-ladyonlines.com","tld":"com"},"ip":{"addr":"172.67.170.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rrh2mrb.crazys-ladyonlines.com/y6tp83x","date":"2025-09-30T02:37:55.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crazys-ladyonlines.com","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Mon, 25 Aug 2025 20:55:48 GMT","end":"Sun, 23 Nov 2025 21:02:38 GMT"},"fingerprint":{"sha1":"34:F2:FF:1A:CB:2C:BE:5C:B1:90:D1:E1:5A:3F:76:96:14:2A:8D:0C","sha256":"F9:03:DB:A0:4C:04:3C:70:E6:0F:9B:56:3B:65:9E:7C:61:68:46:DD:07:8D:E0:89:46:02:22:03:D6:89:63:3D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rrh2mrb.crazys-ladyonlines.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rrh2mrb.crazys-ladyonlines.com/y6tp83x\r\nCookie: sid=t3~kzqc3hvlgj2x1cvacz33tz2i\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Tue, 30 Sep 2025 02:37:55 GMT\r\nvary: accept-encoding\r\ncache-control: max-age=14400, no-transform\r\nage: 5858\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GxMLuP%2FccLkvYaDX9faP%2FgUOYfczNUbmcVbVFzMcQ9ewa%2FRGwuwfCzCFLZCchNtWeHKxMVXcYMxbJCHDBf6bjHvoje9%2Bz3gevmpRm13Oj3%2BNl%2BJOhZ2XajlUAaE%3D\"}]}\r\ncf-ray: 98705758df6956ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-30","alert":"Sinkholed","trigger":"rrh2mrb.crazys-ladyonlines.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matomo.isocketsoftware.com/matomo.js","fqdn":"matomo.isocketsoftware.com","domain":"isocketsoftware.com","tld":"com"},"ip":{"addr":"172.67.200.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://isocketsoftware.com/verify.html","date":"2025-09-30T02:37:53.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"isocketsoftware.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 16:03:54 GMT","end":"Sun, 23 Nov 2025 17:01:15 GMT"},"fingerprint":{"sha1":"5A:7C:E6:1F:98:76:D8:0F:22:E7:C6:69:17:47:06:4A:2D:9E:4C:EF","sha256":"86:F3:ED:A3:F2:DC:9B:A0:F7:35:94:C8:06:47:7B:C7:99:E1:32:CC:B5:C3:60:7F:57:A1:EA:EF:4E:35:AE:9A"}}},"request":{"raw":"GET /matomo.js HTTP/1.1\r\nHost: matomo.isocketsoftware.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://isocketsoftware.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 30 Sep 2025 02:37:53 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Fri, 02 May 2025 12:19:19 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=elr8pTIieu52Tx1PPNTWtgtvomNfQBkJ01%2B7H3NLmHckUKJ7TppfKsjS1cgiCeiZXJlWqCiIIplpBLpGT%2BCfgtAuiZa2fcNwMXT548cmFdgxROiNCmVIU7C7\"}]}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\netag: W/\"6814b847-107ba\"\r\ncf-ray: 98705749bbb335a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67514,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2878)","md5":"8e15c63c0a10e6eb98666cf8dbb0c1d9","sha1":"4b7eae296c97a3ccb482166f0a71eea670e2d7f2","sha256":"dbefc0fa9b6b7680a9a1c1e5a0f0cc7c8ae3c41a7b15c206a144963cb36a073d","sha512":"4ba6fda2503491d67e565db8e94ee6366f33c6d47c8171ffa91ddcde0ea143ebd4ef7ed448924214144f92961ad2065190b69edb1b32de9f1696d4e8c95f4007","ssdeep":"1536:ATgnSINAJrRJqerEKlFXhuXL0+Yv+6S9en60kLddaSiVdmQwJ4ITDXVwXFD6:AT+Z2fu7av+6S9jLddaSiVdmQePXVP","tlshash":"1163d5ca72c279398bca2075503f1187b17aada7144cc4a4f56ac4fa3c3891e957bf78","first_seen":"2025-04-11T12:58:45.765735Z","last_seen":"2026-04-06T09:25:12.690278Z","times_seen":7566,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":90,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rrh2mrb.crazys-ladyonlines.com/y6tp83x","fqdn":"rrh2mrb.crazys-ladyonlines.com","domain":"crazys-ladyonlines.com","tld":"com"},"ip":{"addr":"172.67.170.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-30T02:37:55.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"crazys-ladyonlines.com","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Mon, 25 Aug 2025 20:55:48 GMT","end":"Sun, 23 Nov 2025 21:02:38 GMT"},"fingerprint":{"sha1":"34:F2:FF:1A:CB:2C:BE:5C:B1:90:D1:E1:5A:3F:76:96:14:2A:8D:0C","sha256":"F9:03:DB:A0:4C:04:3C:70:E6:0F:9B:56:3B:65:9E:7C:61:68:46:DD:07:8D:E0:89:46:02:22:03:D6:89:63:3D"}}},"request":{"raw":"GET /y6tp83x HTTP/1.1\r\nHost: rrh2mrb.crazys-ladyonlines.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://isocketsoftware.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Sep 2025 02:37:55 GMT\r\ncontent-type: text/html\r\ncontent-length: 4961\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: private, no-transform\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T76urNSR2c6hfAsOmk2kpABwa%2F9m1QG5UXln6JZyFuqOtlx1PW%2FveuRlkzvWc8mAJckLPI8Fitq8rLyUnOnP0SQpTmC2DhL3ZNpbSMzfC0P7mY%2BxE%2Bqum6cb7p1Zog%3D%3D\"}]}\r\nset-cookie: sid=t3~kzqc3hvlgj2x1cvacz33tz2i; Path=/\r\ncf-ray: 98705754fdf40731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":4961,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (572), with CRLF line terminators","md5":"4bed3b4135376e2e56ef8dce373f42b0","sha1":"666e02c5215d747002153edf8bdf253a92e5511d","sha256":"0087384343430e44bceb9bdd7309ec043e1981f2a17a2d9c02c3bbd87b537b7f","sha512":"ea5ab1f759fff8657de256584e6888e66635c3c43803aaf0589ef17ea225c0b50fdd4d51b5dabea65b23e8af0106b847de58c49b7a36e73c231637f9c7e38d39","ssdeep":"96:eY1faIj7FOFK41F2niGhD4YEeLqVdhD4ryLqRGp2hD4IS6LqrhD4MezQRpYqhdVg:eyfDj7Fz4WnJJLqhxLqo2E6LqtkMvnfo","tlshash":"78a12115384dea3f8aa301cf8079d3d6a1d6dd37f761f81ab1f516ab83d2e488906487","first_seen":"2025-09-30T02:38:17.47631Z","last_seen":"2025-09-30T02:38:17.47631Z","times_seen":1,"resource_available":false,"data":null}},"time_used":724,"timings":{"blocked":261,"dns":13,"connect":2,"send":0,"wait":202,"receive":0,"ssl":245},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-30","alert":"Sinkholed","trigger":"rrh2mrb.crazys-ladyonlines.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rrh2mrb.crazys-ladyonlines.com/media/dating/videoquestion23/js/jquery.min.js","fqdn":"rrh2mrb.crazys-ladyonlines.com","domain":"crazys-ladyonlines.com","tld":"com"},"ip":{"addr":"172.67.170.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rrh2mrb.crazys-ladyonlines.com/y6tp83x","date":"2025-09-30T02:37:55.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"crazys-ladyonlines.com","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Mon, 25 Aug 2025 20:55:48 GMT","end":"Sun, 23 Nov 2025 21:02:38 GMT"},"fingerprint":{"sha1":"34:F2:FF:1A:CB:2C:BE:5C:B1:90:D1:E1:5A:3F:76:96:14:2A:8D:0C","sha256":"F9:03:DB:A0:4C:04:3C:70:E6:0F:9B:56:3B:65:9E:7C:61:68:46:DD:07:8D:E0:89:46:02:22:03:D6:89:63:3D"}}},"request":{"raw":"GET /media/dating/videoquestion23/js/jquery.min.js HTTP/1.1\r\nHost: rrh2mrb.crazys-ladyonlines.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rrh2mrb.crazys-ladyonlines.com/y6tp83x\r\nCookie: sid=t3~kzqc3hvlgj2x1cvacz33tz2i\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Sep 2025 02:37:55 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 85582\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"710458dd559c957714ac4a8e95357eb5\"\r\nlast-modified: Wed, 20 Nov 2024 16:19:55 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-id-2: 42aa5a63a589b4374a9c1295fb1c20dcda18b77f2cb8e112e03c5ecdf9b92360\r\nx-amz-request-id: 1866F892A22ABC9B\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 336\r\nx-ratelimit-remaining: 335\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mc-attrs: atime:1732119595#88261037/gid:0/gname:root/mode:33188/mtime:1732119595#680261170/uid:0/uname:root\r\nx-amz-meta-mm-source-mtime: 2024-11-20T16:19:55.774Z\r\nexpires: Sun, 20 Sep 2026 11:01:14 GMT\r\ncache-control: max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nage: 833800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0PFeD5C2Xnxr8tVb4P%2FlAovJthehfCuyj4rr9j4Ihm6KPQRiwoOAocre3mjDkMKfA6d4pPMHwHe%2BA69y0aNNpSd%2FL4qLBUz2xAUahQKcyfYLiEokg0cRUI9E3WRQPg%3D%3D\"}]}\r\ncf-ray: 987057568f200731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85582,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32065), with CRLF line terminators","md5":"710458dd559c957714ac4a8e95357eb5","sha1":"f694238d616f579a0690001f37984af430c19963","sha256":"b409c14a10b4caad6b54844aa63a5faf748b83eecc2dd0d4fb1d913f8de55365","sha512":"282d65828a43bfe50fe0f9aea8bca3838ac1b5250e7c7c359c066e0428aa723f001d31c2463681b2ad6816a49a8571bf9f3ae29b2dc53adf1bbd7d5c4471322b","ssdeep":"1536:fYE1JVoiB9JqZdXXe2pD3PgoIiulrUn6Z6a4tfOR7WpfWBZPBJda4w9W3qG9a98N:u4J+rlfOhWpgCW6G9a98Hrp","tlshash":"3583c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-04-06T09:59:45.758277Z","times_seen":11418,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-30","alert":"Sinkholed","trigger":"rrh2mrb.crazys-ladyonlines.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rrh2mrb.crazys-ladyonlines.com/media/bb.js","fqdn":"rrh2mrb.crazys-ladyonlines.com","domain":"crazys-ladyonlines.com","tld":"com"},"ip":{"addr":"172.67.170.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rrh2mrb.crazys-ladyonlines.com/y6tp83x","date":"2025-09-30T02:37:55.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"crazys-ladyonlines.com","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Mon, 25 Aug 2025 20:55:48 GMT","end":"Sun, 23 Nov 2025 21:02:38 GMT"},"fingerprint":{"sha1":"34:F2:FF:1A:CB:2C:BE:5C:B1:90:D1:E1:5A:3F:76:96:14:2A:8D:0C","sha256":"F9:03:DB:A0:4C:04:3C:70:E6:0F:9B:56:3B:65:9E:7C:61:68:46:DD:07:8D:E0:89:46:02:22:03:D6:89:63:3D"}}},"request":{"raw":"GET /media/bb.js HTTP/1.1\r\nHost: rrh2mrb.crazys-ladyonlines.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rrh2mrb.crazys-ladyonlines.com/y6tp83x\r\nCookie: sid=t3~kzqc3hvlgj2x1cvacz33tz2i\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Sep 2025 02:37:55 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 639\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"0d553e4bac91c74bfee2dbabba61e99e\"\r\nlast-modified: Wed, 20 Sep 2023 15:21:05 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 18694D8DED159549\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 2060\r\nx-ratelimit-remaining: 2060\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mc-attrs: atime:1693134512#756035434/gid:0/gname:root/mode:33188/mtime:1659030913#852764000/uid:0/uname:root\r\nx-amz-meta-mm-source-mtime: 2022-07-28T17:55:13.852764Z\r\nexpires: Mon, 28 Sep 2026 01:20:01 GMT\r\ncache-control: max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nage: 177474\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qb0WCveRcythubsl03sf2M98GUDGCv0m2jxqj6ptjxd82Lu%2B4JThkLrK7tI%2FEKNgacwr1GKkLl%2F939M6E0gPMT2Tf80mprhxTUKttEEU5RR4IMxw3BMXrB%2BgnZ1K2Q%3D%3D\"}]}\r\ncf-ray: 987057568f240731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":639,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (639), with no line terminators","md5":"0d553e4bac91c74bfee2dbabba61e99e","sha1":"5af71e2377c9c012a7826a695f2724901941b19b","sha256":"1be1304c675449b1bad38ea8c3da6c1da0763ed2fad339ee1aa461c7bf4e2a68","sha512":"105e5b23733e7bb443ba2080d606c2814b0acd2aaf228467d2ce532ff2f2ec0b292f8eb5189a24cd9f79b69a7e983b176dbd29e2d539dae7ca443821084f2894","ssdeep":"","tlshash":"c5f02d81bd1878f685cf3355871f2230903f08dd720ae982a8a46e622e2038dde1b7e0","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-04-03T20:17:39.592645Z","times_seen":13211,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-30","alert":"Sinkholed","trigger":"rrh2mrb.crazys-ladyonlines.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:opsz,wght@14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rrh2mrb.crazys-ladyonlines.com/y6tp83x","date":"2025-09-30T02:37:55.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /css2?family=Inter:opsz,wght@14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rrh2mrb.crazys-ladyonlines.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 30 Sep 2025 02:37:55 GMT\r\ndate: Tue, 30 Sep 2025 02:37:55 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2436,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c9029b9be7fdbe03f05037ced4f6e0a9","sha1":"7db0cbaefa01daa5d610eb32b72d6465ca756b26","sha256":"cd4aee9022eea9f99866bb02f849a83354973786f0a4db6457ab1f4c3d38f8e6","sha512":"80cc884b7c66a1f585854f617a10cf591a0c0bd8b0eb5e9696b655b7b74d12df2ec06ff9bcd6c73a02febadff3432e347d43b17ccaabd141a5d1ebbe93ba7bff","ssdeep":"","tlshash":"3141ac91006be504af431cda23df7e325d8e15466082d67eaffe1cc55cead22432878d","first_seen":"2025-09-12T02:44:04.635127Z","last_seen":"2026-04-06T08:48:01.425286Z","times_seen":1225,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":155,"dns":0,"connect":17,"send":0,"wait":37,"receive":0,"ssl":137},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"matomo.isocketsoftware.com/matomo.php?action_name=Browser%20verification\u0026idsite=1\u0026rec=1\u0026r=929290\u0026h=2\u0026m=37\u0026s=53\u0026url=https%3A%2F%2Fisocketsoftware.com%2Fverify.html\u0026_id=051eef13e3de933c\u0026_idn=1\u0026send_image=0\u0026_refts=0\u0026dimension1=isocketsoftware.com\u0026pv_id=KAAEQG\u0026pf_net=0\u0026pf_srv=42\u0026pf_tfr=0\u0026pf_dm1=34\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024","fqdn":"matomo.isocketsoftware.com","domain":"isocketsoftware.com","tld":"com"},"ip":{"addr":"172.67.200.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://isocketsoftware.com/verify.html","date":"2025-09-30T02:37:53.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"isocketsoftware.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 16:03:54 GMT","end":"Sun, 23 Nov 2025 17:01:15 GMT"},"fingerprint":{"sha1":"5A:7C:E6:1F:98:76:D8:0F:22:E7:C6:69:17:47:06:4A:2D:9E:4C:EF","sha256":"86:F3:ED:A3:F2:DC:9B:A0:F7:35:94:C8:06:47:7B:C7:99:E1:32:CC:B5:C3:60:7F:57:A1:EA:EF:4E:35:AE:9A"}}},"request":{"raw":"POST /matomo.php?action_name=Browser%20verification\u0026idsite=1\u0026rec=1\u0026r=929290\u0026h=2\u0026m=37\u0026s=53\u0026url=https%3A%2F%2Fisocketsoftware.com%2Fverify.html\u0026_id=051eef13e3de933c\u0026_idn=1\u0026send_image=0\u0026_refts=0\u0026dimension1=isocketsoftware.com\u0026pv_id=KAAEQG\u0026pf_net=0\u0026pf_srv=42\u0026pf_tfr=0\u0026pf_dm1=34\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024 HTTP/1.1\r\nHost: matomo.isocketsoftware.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 0\r\nOrigin: https://isocketsoftware.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://isocketsoftware.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Tue, 30 Sep 2025 02:37:53 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ojK7Rl4DtSTA7v4oda9H4meRTlvzehQVU0nVPckdrPFvQDSpeZHMEX37VGsdwDttzTsUseeyx1G%2B9wzqbvNY%2FSkdmW35hH%2FPN%2B9m2dNVr87MrqDrVXXqDfWX\"}]}\r\naccess-control-allow-origin: https://isocketsoftware.com\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9870574acbbe35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rrh2mrb.crazys-ladyonlines.com/media/exit-new/exit1.js","fqdn":"rrh2mrb.crazys-ladyonlines.com","domain":"crazys-ladyonlines.com","tld":"com"},"ip":{"addr":"172.67.170.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rrh2mrb.crazys-ladyonlines.com/y6tp83x","date":"2025-09-30T02:37:55.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"crazys-ladyonlines.com","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Mon, 25 Aug 2025 20:55:48 GMT","end":"Sun, 23 Nov 2025 21:02:38 GMT"},"fingerprint":{"sha1":"34:F2:FF:1A:CB:2C:BE:5C:B1:90:D1:E1:5A:3F:76:96:14:2A:8D:0C","sha256":"F9:03:DB:A0:4C:04:3C:70:E6:0F:9B:56:3B:65:9E:7C:61:68:46:DD:07:8D:E0:89:46:02:22:03:D6:89:63:3D"}}},"request":{"raw":"GET /media/exit-new/exit1.js HTTP/1.1\r\nHost: rrh2mrb.crazys-ladyonlines.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rrh2mrb.crazys-ladyonlines.com/y6tp83x\r\nCookie: sid=t3~kzqc3hvlgj2x1cvacz33tz2i\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Sep 2025 02:37:55 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3473\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"625e5e2950612f771e246beb33c9ea61\"\r\nlast-modified: Thu, 01 Aug 2024 07:20:12 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-id-2: 42aa5a63a589b4374a9c1295fb1c20dcda18b77f2cb8e112e03c5ecdf9b92360\r\nx-amz-request-id: 1866F88BBB34CE31\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 336\r\nx-ratelimit-remaining: 336\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mc-attrs: atime:1720014412#200181126/gid:0/gname:root/mode:33279/mtime:1655385544#182688000/uid:0/uname:root\r\nx-amz-meta-mm-source-mtime: 2022-06-16T13:19:04.182688Z\r\nexpires: Sun, 20 Sep 2026 11:01:15 GMT\r\ncache-control: max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nage: 833800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g%2FwI7Upz2ZIwCovICHAvvoNdgR%2BLGykHQ1mvGUKCbkx4ac9b3LuubLP1AvCyxfu79P9SFRKqzIqpcSkvMyAmuOUsKbzpIjcP476mMyH8WXuQFx67td5hggiAy0X1pg%3D%3D\"}]}\r\ncf-ray: 987057568f250731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3473,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (641), with CRLF line terminators","md5":"625e5e2950612f771e246beb33c9ea61","sha1":"e4fc251c6c000496c285f8dc3fa097040b031681","sha256":"618f345a156a0eda55177a1bf0e8a414104f9b6c6ff5cdbe71966f081ccb8a46","sha512":"655f0b373c605d0a464bedca4df204fb3aa12442c5b0aa3b8bf13e0604fd1e89480356e9c6cc9a432f81305bf1151caf4ac4ad9d8eb24eb78cbd11318e5b9657","ssdeep":"","tlshash":"e36156e4720e31ad93db3764c27fb11a7876e4b2d416a0b5a44c5c907434a1d6376cfd","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-02-01T11:35:43.37734Z","times_seen":13050,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-30","alert":"Sinkholed","trigger":"rrh2mrb.crazys-ladyonlines.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rrh2mrb.crazys-ladyonlines.com/y6tp83x","date":"2025-09-30T02:37:55.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rrh2mrb.crazys-ladyonlines.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 24 Sep 2025 17:34:04 GMT\r\nexpires: Thu, 24 Sep 2026 17:34:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 464631\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72964,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-04-06T10:02:19.531665Z","times_seen":18721,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":78,"dns":3,"connect":15,"send":0,"wait":17,"receive":25,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"isocketsoftware.com/check","fqdn":"isocketsoftware.com","domain":"isocketsoftware.com","tld":"com"},"ip":{"addr":"172.67.200.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-30T02:37:55.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"isocketsoftware.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 16:03:54 GMT","end":"Sun, 23 Nov 2025 17:01:15 GMT"},"fingerprint":{"sha1":"5A:7C:E6:1F:98:76:D8:0F:22:E7:C6:69:17:47:06:4A:2D:9E:4C:EF","sha256":"86:F3:ED:A3:F2:DC:9B:A0:F7:35:94:C8:06:47:7B:C7:99:E1:32:CC:B5:C3:60:7F:57:A1:EA:EF:4E:35:AE:9A"}}},"request":{"raw":"POST /check HTTP/1.1\r\nHost: isocketsoftware.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 189\r\nOrigin: https://isocketsoftware.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://isocketsoftware.com/verify.html\r\nCookie: js_enabled=1; _pk_id.1.d484=051eef13e3de933c.1759199874.; _pk_ses.1.d484=1; delayed=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Tue, 30 Sep 2025 02:37:55 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jTqeqB8OdnramCTZ%2FAr9hD4LFG49dICWZB5iKyBtAYCfLMiTIBt2j%2B5yVrq%2Fa3bDqvMZgXs52M1gWvVsXS4JFdSvs2tJ%2BRjp2TjUBEV7tIVOtoc%3D\"}]}\r\nserver: cloudflare\r\nlocation: https://rrh2mrb.crazys-ladyonlines.com/y6tp83x\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 987057531c1635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4961,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rrh2mrb.crazys-ladyonlines.com/media/dating/videoquestion23/images/poster.jpg","fqdn":"rrh2mrb.crazys-ladyonlines.com","domain":"crazys-ladyonlines.com","tld":"com"},"ip":{"addr":"172.67.170.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rrh2mrb.crazys-ladyonlines.com/y6tp83x","date":"2025-09-30T02:37:55.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"crazys-ladyonlines.com","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Mon, 25 Aug 2025 20:55:48 GMT","end":"Sun, 23 Nov 2025 21:02:38 GMT"},"fingerprint":{"sha1":"34:F2:FF:1A:CB:2C:BE:5C:B1:90:D1:E1:5A:3F:76:96:14:2A:8D:0C","sha256":"F9:03:DB:A0:4C:04:3C:70:E6:0F:9B:56:3B:65:9E:7C:61:68:46:DD:07:8D:E0:89:46:02:22:03:D6:89:63:3D"}}},"request":{"raw":"GET /media/dating/videoquestion23/images/poster.jpg HTTP/1.1\r\nHost: rrh2mrb.crazys-ladyonlines.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rrh2mrb.crazys-ladyonlines.com/y6tp83x\r\nCookie: sid=t3~kzqc3hvlgj2x1cvacz33tz2i\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Sep 2025 02:37:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 64215\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"21607e8912c9014cb25fb33116747b96\"\r\nlast-modified: Wed, 20 Nov 2024 16:19:51 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-id-2: 31f7dd36b65146a775b93356924fa83cf99019d4a4dfda4a9a6512d5179fdf9c\r\nx-amz-request-id: 1866F892EFFDEA51\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 364\r\nx-ratelimit-remaining: 364\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mc-attrs: atime:1732119590#456259998/gid:0/gname:root/mode:33188/mtime:1732119591#596260254/uid:0/uname:root\r\nx-amz-meta-mm-source-mtime: 2024-11-20T16:19:51.753Z\r\nexpires: Sun, 20 Sep 2026 11:01:14 GMT\r\ncache-control: max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nage: 833800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=upFrCVyKuWF5jBW9Xf%2BND702nys5eJhoP5AzbBVdKDTy1Ffs7vesViFRITnlviHQvXv2B3BJbAfi8JUzga3A3%2F%2BSVbIeIYPWtLRhTT7THBhHPcg5eiNH%2BnTCBuNAmA%3D%3D\"}]}\r\ncf-ray: 987057568f1e0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64215,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 603x1080, components 3","md5":"21607e8912c9014cb25fb33116747b96","sha1":"a95d5432f324de0c4c41f0efc1f30691707c9431","sha256":"9a0e814e6f3647dcf2704f59cc629233b4cf42b12a51cd3a060b71d6b36bccf5","sha512":"7966b71b477adf9a66731e1732acc52f9309acf60df7b891eb4c8cfc96d468a24677189018fb56318c84ba15aef23eef60e998ecfd64f1e122c0cd777caa89af","ssdeep":"1536:jt9f2NVqRJHkgO9xIbwJVY1RfjMlvr2LYAQ3Tm9dLlnp:mHqRJu9jVqylvr7VDmrFp","tlshash":"f35302298453bb8262852f6e0ee1469ba3dbd1e3dde301d46efcd8ec7531561a87309c","first_seen":"2024-11-29T14:20:12.722929Z","last_seen":"2025-10-07T02:56:22.069473Z","times_seen":1117,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-30","alert":"Sinkholed","trigger":"rrh2mrb.crazys-ladyonlines.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rrh2mrb.crazys-ladyonlines.com/media/dating/videoquestion23/media/video-1.mp4","fqdn":"rrh2mrb.crazys-ladyonlines.com","domain":"crazys-ladyonlines.com","tld":"com"},"ip":{"addr":"172.67.170.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://rrh2mrb.crazys-ladyonlines.com/y6tp83x","date":"2025-09-30T02:37:55.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crazys-ladyonlines.com","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Mon, 25 Aug 2025 20:55:48 GMT","end":"Sun, 23 Nov 2025 21:02:38 GMT"},"fingerprint":{"sha1":"34:F2:FF:1A:CB:2C:BE:5C:B1:90:D1:E1:5A:3F:76:96:14:2A:8D:0C","sha256":"F9:03:DB:A0:4C:04:3C:70:E6:0F:9B:56:3B:65:9E:7C:61:68:46:DD:07:8D:E0:89:46:02:22:03:D6:89:63:3D"}}},"request":{"raw":"GET /media/dating/videoquestion23/media/video-1.mp4 HTTP/1.1\r\nHost: rrh2mrb.crazys-ladyonlines.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rrh2mrb.crazys-ladyonlines.com/y6tp83x\r\nCookie: sid=t3~kzqc3hvlgj2x1cvacz33tz2i\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Tue, 30 Sep 2025 02:37:55 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 931352\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"e6ea91a06ca748a1cb83a22219c47fd4\"\r\nlast-modified: Wed, 20 Nov 2024 16:20:04 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, accept-encoding\r\nx-amz-id-2: 5bbf9b091ca9dd795595b773b0f1d036407937e2098457815217f1ddbc67c996\r\nx-amz-request-id: 1866F893195DC3B7\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 343\r\nx-ratelimit-remaining: 343\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mc-attrs: atime:1732119599#464262021/gid:0/gname:root/mode:33188/mtime:1732119604#832263224/uid:0/uname:root\r\nx-amz-meta-mm-source-mtime: 2024-11-20T16:20:05.112Z\r\nexpires: Sun, 20 Sep 2026 11:01:15 GMT\r\ncache-control: max-age=31536000, no-transform\r\naccept-ranges: bytes\r\nage: 833800\r\ncontent-range: bytes 0-931351/931352\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RXy5qmad7Q1cJrNzzQHlsLJMGV0HMjFKHj1VxnbPucPat5POf4Omt2W64CF0N%2BP33OpPUuvCrCFOQ2%2B%2BmFf3Ce6RDfNvb6BFdbQ26%2B6XvBTy06iyunSddy6i6Hc%3D\"}]}\r\ncf-ray: 987057581f6856ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":931352,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"e6ea91a06ca748a1cb83a22219c47fd4","sha1":"a184fdd3422f521fce725656bed8a3f7cbe37877","sha256":"bd40dd957489d3e419c5c4dfc4fa2ef098d1f1f73f0517ce65dd5949ff744354","sha512":"1facfd13a2ea9db8d740951cd995fd49a35e37b934ae862fb7122d385921cf9e9e9b3706dd86b73df6d111c483f4dc0eb46d25afdb8843ffeedbe11aec14c4f9","ssdeep":"24576:1nexkjZ35quHE/VG3eujxfdIdh+udvrrS8sOna7Xg:1tj7qqE/g3eujx2dFvrmBOnIXg","tlshash":"0c15338f807362add7f4c33469f1ef54d666d83de8988110a4cc7a86e24d58aed39c27","first_seen":"2024-08-20T05:21:33Z","last_seen":"2026-04-06T02:27:32.630367Z","times_seen":1951,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-30","alert":"Sinkholed","trigger":"rrh2mrb.crazys-ladyonlines.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}