{"report_id":"2396c6c4-0507-41d2-9504-6fcdcde988b8","version":6,"status":"done","tags":[],"date":"2025-08-18T05:28:38Z","url":{"schema":"http","addr":"av4.vid4.uk/v/s/aporntv.com/video/sister-riding-me-real-incest-claim-29493.html","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"104.21.15.245","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"title":"Hot Videos 人気動画-動画@AV4.us"},"submit":{"url":{"schema":"http","addr":"av4.vid4.uk/v/s/aporntv.com/video/sister-riding-me-real-incest-claim-29493.html","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"104.21.15.245","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-22T05:28:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":3,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-18T05:27:55Z","timestamp":1755494875,"ip_dst":{"addr":"172.18.0.24","port":52856,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"117.55.203.143","port":443,"asn":3920,"as":"ESTOXY OU","country":"The Netherlands","country_code":"NL"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2025-08-18T05:27:55.395956+0000\",\"flow_id\":560285896869796,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"117.55.203.143\",\"src_port\":443,\"dest_ip\":\"172.18.0.24\",\"dest_port\":52856,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=pict.ebenporno.com\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL RSA Domain Secure Site CA\",\"serial\":\"0C:42:F3:44:7A:DC:93:D5:B0:32:CA:F3:0A:3A:0A:E4\",\"fingerprint\":\"ab:97:c6:88:8d:d5:19:20:80:26:b9:f7:50:d9:49:79:99:a1:3f:6a\",\"sni\":\"pict.ebenporno.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-08-05T00:00:00\",\"notafter\":\"2025-11-03T23:59:59\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":8,\"pkts_toclient\":7,\"bytes_toserver\":1146,\"bytes_toclient\":5764,\"start\":\"2025-08-18T05:27:55.329636+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-18T05:28:03Z","timestamp":1755494883,"ip_dst":{"addr":"104.21.43.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.24","port":41592,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ETPRO INFO .moe Domain in TLS SNI","source":"{\"timestamp\":\"2025-08-18T05:28:03.049208+0000\",\"flow_id\":300401721213465,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.24\",\"src_port\":41592,\"dest_ip\":\"104.21.43.90\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2827579,\"rev\":7,\"signature\":\"ETPRO INFO .moe Domain in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2017_08_17\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Moderate\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"play.anh.moe\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3430,\"start\":\"2025-08-18T05:28:02.918041+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-18T05:28:03Z","timestamp":1755494883,"ip_dst":{"addr":"172.18.0.24","port":57848,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"89.248.193.244","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2025-08-18T05:28:03.829749+0000\",\"flow_id\":243497699581370,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"89.248.193.244\",\"src_port\":443,\"dest_ip\":\"172.18.0.24\",\"dest_port\":57848,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=vidmo.org\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"00:FD:39:8C:48:08:0D:C3:39:BA:F1:37:0C:24:6E:22:07\",\"fingerprint\":\"3e:7a:0a:9a:4c:6e:5b:d4:a1:c7:2a:33:ca:0a:32:cc:26:1d:4e:3b\",\"sni\":\"vidmo.org\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-07-07T00:00:00\",\"notafter\":\"2025-10-05T23:59:59\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"0191d81a4ad7ee1a330a1e2c51d23ace\",\"string\":\"771,49195,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1202,\"bytes_toclient\":3633,\"start\":\"2025-08-18T05:28:03.531898+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-18","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-18","alert":"Sinkholed","trigger":"awjqxiaokeai.buzz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"oedy9.com","ip":{"addr":"45.92.29.80","port":443,"asn":64236,"as":"UNREAL-SERVERS","country":"United States","country_code":"US"},"domain_registered":"2023-10-27","domain_rank":150266,"first_seen":"2023-10-27T10:41:23Z","last_seen":"2025-08-13T22:23:53.771397Z","alert_count":0,"request_count":1,"received_data":163,"sent_data":426,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn5-thumbs.motherlessmedia.com","ip":{"addr":"185.107.92.224","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2008-10-11","domain_rank":905009,"first_seen":"2018-12-23T05:30:23Z","last_seen":"2025-08-17T14:42:59.855895Z","alert_count":0,"request_count":6,"received_data":149842,"sent_data":2730,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.sexsex61.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-04-17","domain_rank":3526336,"first_seen":"2025-03-12T03:12:00.175026Z","last_seen":"2025-08-18T05:28:24.149226Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":433,"comment":"","tags":null,"fingerprints":null},{"fqdn":"lsbzytp.com","ip":{"addr":"173.249.235.62","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"domain_registered":"2023-04-09","domain_rank":243364,"first_seen":"2023-05-07T13:36:46Z","last_seen":"2025-08-13T22:24:54.3457Z","alert_count":0,"request_count":1,"received_data":101999,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.fastmediaing.my","ip":{"addr":"172.67.195.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":4577577,"first_seen":"2025-07-21T13:44:38.27514Z","last_seen":"2025-08-13T22:23:56.979578Z","alert_count":0,"request_count":1,"received_data":52885,"sent_data":419,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn-images.realgfporn.com","ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2009-02-25","domain_rank":5529709,"first_seen":"2017-03-21T15:56:46Z","last_seen":"2025-08-16T03:55:57.423219Z","alert_count":0,"request_count":1,"received_data":24044,"sent_data":505,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"pornolomka2.com","ip":{"addr":"91.194.110.16","port":443,"asn":213166,"as":"UA-Hosting SIA","country":"The Netherlands","country_code":"NL"},"domain_registered":"2022-09-21","domain_rank":230553,"first_seen":"2022-09-21T16:18:33Z","last_seen":"2025-08-13T22:23:53.136196Z","alert_count":0,"request_count":2,"received_data":23832,"sent_data":898,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"xxxzooporn.net","ip":{"addr":"172.67.178.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-04-22","domain_rank":197474,"first_seen":"2022-04-22T18:13:36Z","last_seen":"2025-08-11T10:40:56.585257Z","alert_count":0,"request_count":1,"received_data":1738,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"yaebus13.ru","ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-03-01","domain_rank":338419,"first_seen":"2024-03-03T21:39:25Z","last_seen":"2025-08-11T10:40:57.991652Z","alert_count":0,"request_count":1,"received_data":1229,"sent_data":428,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"media.hentaifreak.org","ip":{"addr":"144.178.205.175","port":443,"asn":39686,"as":"Eurofiber Nederland BV","country":"The Netherlands","country_code":"NL"},"domain_registered":"2015-12-28","domain_rank":4755848,"first_seen":"2023-01-21T21:40:13Z","last_seen":"2025-08-17T14:42:59.366723Z","alert_count":0,"request_count":2,"received_data":39189,"sent_data":909,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"cloudflare-br-pic.kwai.net","ip":{"addr":"54.240.174.55","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1999-10-05","domain_rank":526119,"first_seen":"2023-06-29T09:22:43Z","last_seen":"2025-08-18T05:28:22.915295Z","alert_count":0,"request_count":2,"received_data":32446,"sent_data":1160,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"kompoz2.com","ip":{"addr":"172.67.206.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-04","domain_rank":1845,"first_seen":"2020-09-07T18:13:33Z","last_seen":"2025-08-11T22:21:57.603685Z","alert_count":0,"request_count":1,"received_data":610,"sent_data":428,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.14","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"chomikuj.pl","ip":{"addr":"104.20.20.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2006-06-16","domain_rank":38076,"first_seen":"2015-04-03T14:15:54Z","last_seen":"2025-08-11T22:21:58.109778Z","alert_count":0,"request_count":3,"received_data":15400,"sent_data":1333,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"x4.static-chomikuj.pl","ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-10-19","domain_rank":0,"first_seen":"2016-04-18T14:38:18Z","last_seen":"2025-08-02T18:10:29.249624Z","alert_count":0,"request_count":1,"received_data":910,"sent_data":445,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"thumbs.dreamstime.com","ip":{"addr":"151.101.1.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2000-06-11","domain_rank":190133,"first_seen":"2012-05-30T02:38:19Z","last_seen":"2025-08-17T17:18:34.647997Z","alert_count":0,"request_count":1,"received_data":21241,"sent_data":529,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"www.gettyimages.com","ip":{"addr":"3.167.2.85","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"1999-01-05","domain_rank":12222,"first_seen":"2016-01-13T19:34:02Z","last_seen":"2025-07-25T14:18:46.033489Z","alert_count":0,"request_count":1,"received_data":5827,"sent_data":436,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"mubi.com","ip":{"addr":"34.232.132.213","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2002-08-06","domain_rank":18060,"first_seen":"2012-08-25T08:36:31Z","last_seen":"2025-08-06T23:42:03.217445Z","alert_count":0,"request_count":1,"received_data":5863,"sent_data":425,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pornfamily.org","ip":{"addr":"104.21.43.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-10","domain_rank":406602,"first_seen":"2022-01-10T10:50:04Z","last_seen":"2025-07-31T14:14:22.998513Z","alert_count":0,"request_count":1,"received_data":7520,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cav105.com","ip":{"addr":"45.145.72.132","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"domain_registered":"2022-07-28","domain_rank":188408,"first_seen":"2015-04-19T16:20:06Z","last_seen":"2025-08-15T16:29:43.488559Z","alert_count":0,"request_count":2,"received_data":112282,"sent_data":892,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"suckinganimalsex.info","ip":{"addr":"104.21.41.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-05-07","domain_rank":622919,"first_seen":"2021-05-07T15:30:05Z","last_seen":"2025-08-10T08:21:35.74055Z","alert_count":0,"request_count":2,"received_data":9355,"sent_data":891,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.gettyimages.co.jp","ip":{"addr":"3.167.2.85","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2002-02-01","domain_rank":133957,"first_seen":"2012-09-30T12:29:03Z","last_seen":"2025-02-17T18:15:36.118415Z","alert_count":0,"request_count":1,"received_data":2000,"sent_data":582,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"realincest.me","ip":{"addr":"172.67.168.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-11-03","domain_rank":215480,"first_seen":"2017-02-25T20:17:15Z","last_seen":"2025-08-11T10:40:56.537675Z","alert_count":0,"request_count":1,"received_data":6001,"sent_data":454,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"volosnya.com","ip":{"addr":"31.10.5.4","port":443,"asn":207728,"as":"EUROHOSTER Ltd.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2019-02-21","domain_rank":1436377,"first_seen":"2025-07-19T00:56:18.988145Z","last_seen":"2025-08-11T22:27:25.340347Z","alert_count":0,"request_count":1,"received_data":2078,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fapello.com","ip":{"addr":"104.20.18.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-10-11","domain_rank":1679,"first_seen":"2021-10-11T09:03:39Z","last_seen":"2025-08-18T05:28:25.152589Z","alert_count":0,"request_count":1,"received_data":17020,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"motherless.com","ip":{"addr":"185.107.81.233","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2005-11-19","domain_rank":1728,"first_seen":"2012-05-21T16:56:06Z","last_seen":"2025-08-13T22:23:57.123152Z","alert_count":0,"request_count":1,"received_data":1500,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn77-t.boyfriendtv.com","ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2010-06-24","domain_rank":684272,"first_seen":"2025-07-08T06:08:04.854148Z","last_seen":"2025-08-10T16:50:36.930318Z","alert_count":0,"request_count":1,"received_data":43656,"sent_data":519,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"realincest.net","ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-10","domain_rank":441515,"first_seen":"2013-07-19T13:05:20Z","last_seen":"2025-08-14T14:04:32.283785Z","alert_count":0,"request_count":1,"received_data":5461,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"yaebus14.ru","ip":{"addr":"172.67.197.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-05-27","domain_rank":437254,"first_seen":"2025-06-19T07:10:01.647773Z","last_seen":"2025-08-11T10:40:56.536737Z","alert_count":0,"request_count":1,"received_data":1225,"sent_data":428,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"momsonporn.cc","ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-10","domain_rank":2850302,"first_seen":"2022-01-10T11:39:48Z","last_seen":"2024-09-21T03:21:41Z","alert_count":0,"request_count":1,"received_data":6370,"sent_data":455,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"i1.wp.com","ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":44421,"first_seen":"2012-09-27T05:17:34Z","last_seen":"2025-08-16T02:33:59.554355Z","alert_count":0,"request_count":3,"received_data":38371,"sent_data":1460,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.effedupmovies.com","ip":{"addr":"45.138.107.14","port":443,"asn":208414,"as":"WEDOS Internet, a.s.","country":"Czechia","country_code":"CZ"},"domain_registered":"2017-08-24","domain_rank":121897,"first_seen":"2018-01-06T11:19:22Z","last_seen":"2025-08-14T15:51:09.541834Z","alert_count":0,"request_count":1,"received_data":12936,"sent_data":467,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}]},{"fqdn":"vdo.x4men.com","ip":{"addr":"104.21.40.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-03-19","domain_rank":4244765,"first_seen":"2023-09-28T06:15:38Z","last_seen":"2025-08-11T10:41:01.393206Z","alert_count":0,"request_count":1,"received_data":26562,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.blacktowhite.net","ip":{"addr":"192.243.63.82","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2007-09-21","domain_rank":120301,"first_seen":"2014-01-17T17:34:06Z","last_seen":"2025-08-17T11:59:48.576972Z","alert_count":0,"request_count":2,"received_data":11536,"sent_data":948,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.17.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"karlikporno.com","ip":{"addr":"51.83.228.93","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"2020-02-24","domain_rank":3950633,"first_seen":"2020-02-24T09:30:46Z","last_seen":"2025-06-18T13:29:03.143056Z","alert_count":0,"request_count":2,"received_data":24951,"sent_data":895,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.clporn.com","ip":{"addr":"172.67.222.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-10-16","domain_rank":764883,"first_seen":"2015-04-11T05:54:49Z","last_seen":"2025-08-15T16:29:41.959706Z","alert_count":0,"request_count":2,"received_data":11220,"sent_data":870,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"images.mubicdn.net","ip":{"addr":"151.101.2.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2015-02-24","domain_rank":1401804,"first_seen":"2020-02-26T10:06:48Z","last_seen":"2025-08-06T23:42:04.849453Z","alert_count":0,"request_count":1,"received_data":73475,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"jsjs.4jpg.top","ip":{"addr":"104.21.77.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-03-07","domain_rank":3562357,"first_seen":"2024-03-08T20:38:07Z","last_seen":"2025-08-17T11:59:48.830481Z","alert_count":0,"request_count":1,"received_data":761,"sent_data":415,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"awjqxiaokeai.buzz","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-07-14","domain_rank":225783,"first_seen":"2025-03-21T10:58:20.901193Z","last_seen":"2025-03-21T10:58:20.901193Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":434,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xvideosrei.com","ip":{"addr":"194.102.104.213","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"domain_registered":"2017-09-21","domain_rank":80835,"first_seen":"2018-01-03T10:28:29Z","last_seen":"2025-08-11T10:40:58.151276Z","alert_count":0,"request_count":3,"received_data":57588,"sent_data":1412,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pornogids.cc","ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-07-24","domain_rank":212462,"first_seen":"2024-07-27T09:52:56Z","last_seen":"2025-08-16T16:56:14.107794Z","alert_count":0,"request_count":2,"received_data":68325,"sent_data":938,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"jpgjingpinx.com","ip":{"addr":"104.21.26.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-06-22","domain_rank":166501,"first_seen":"2024-07-25T07:47:53Z","last_seen":"2025-08-15T16:29:44.287857Z","alert_count":0,"request_count":2,"received_data":1176,"sent_data":958,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ro.fapello.com","ip":{"addr":"104.20.18.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-10-11","domain_rank":923847,"first_seen":"2025-08-06T16:36:18.153101Z","last_seen":"2025-08-16T16:55:35.564937Z","alert_count":0,"request_count":1,"received_data":263,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sex18.photos","ip":{"addr":"31.10.5.97","port":443,"asn":207728,"as":"EUROHOSTER Ltd.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2015-10-01","domain_rank":225743,"first_seen":"2016-02-14T19:06:16Z","last_seen":"2025-08-10T00:30:34.439288Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"18-girls-av.com","ip":{"addr":"162.43.96.5","port":443,"asn":131965,"as":"Xserver Inc.","country":"Japan","country_code":"JP"},"domain_registered":"2024-09-07","domain_rank":527796,"first_seen":"2025-07-07T05:40:26.683079Z","last_seen":"2025-08-16T03:56:00.20682Z","alert_count":0,"request_count":3,"received_data":14479,"sent_data":1359,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"pornolomka3.com","ip":{"addr":"91.194.110.16","port":443,"asn":213166,"as":"UA-Hosting SIA","country":"The Netherlands","country_code":"NL"},"domain_registered":"2022-09-28","domain_rank":368895,"first_seen":"2022-09-30T07:57:16Z","last_seen":"2025-08-13T22:23:56.489601Z","alert_count":0,"request_count":2,"received_data":16770,"sent_data":898,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"rapefilms.net","ip":{"addr":"5.63.144.84","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2012-04-01","domain_rank":485196,"first_seen":"2013-12-26T12:02:57Z","last_seen":"2025-08-14T15:51:09.674179Z","alert_count":0,"request_count":1,"received_data":186,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"missvid.com","ip":{"addr":"45.92.29.80","port":443,"asn":64236,"as":"UNREAL-SERVERS","country":"United States","country_code":"US"},"domain_registered":"2024-10-18","domain_rank":151886,"first_seen":"2025-06-15T23:41:05.496964Z","last_seen":"2025-08-13T22:23:54.516812Z","alert_count":0,"request_count":1,"received_data":163,"sent_data":428,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"as2.ftcdn.net","ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2010-11-08","domain_rank":219876,"first_seen":"2015-07-06T07:59:51Z","last_seen":"2025-08-10T23:45:32.611209Z","alert_count":0,"request_count":1,"received_data":115737,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.ekkofilm.dk","ip":{"addr":"65.109.19.181","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"2002-12-18","domain_rank":1269056,"first_seen":"2017-01-31T08:59:34Z","last_seen":"2025-08-08T07:49:54.868399Z","alert_count":0,"request_count":2,"received_data":106474,"sent_data":901,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"zakladchitsa.ru","ip":{"addr":"77.83.175.19","port":443,"asn":211381,"as":"Podaon SIA","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-11-08","domain_rank":415870,"first_seen":"2024-12-03T12:52:36Z","last_seen":"2025-08-11T10:40:59.977288Z","alert_count":0,"request_count":1,"received_data":222,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"turboporno.info","ip":{"addr":"62.60.230.53","port":443,"asn":51396,"as":"Pfcloud UG","country":"The Netherlands","country_code":"NL"},"domain_registered":"2016-11-13","domain_rank":3848354,"first_seen":"2017-02-23T12:23:57Z","last_seen":"2025-08-16T16:55:35.763781Z","alert_count":0,"request_count":3,"received_data":16736,"sent_data":1294,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"c.amcdn.pics","ip":{"addr":"172.67.139.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":78658,"sent_data":428,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"av4.vid4.uk","ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-22","domain_rank":0,"first_seen":"2025-07-31T14:14:22.946912Z","last_seen":"2025-07-31T14:14:22.946912Z","alert_count":0,"request_count":2,"received_data":369994,"sent_data":1027,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"hentaifreak.org","ip":{"addr":"172.67.156.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-12-28","domain_rank":103326,"first_seen":"2015-12-29T14:49:37Z","last_seen":"2025-08-17T14:42:57.079858Z","alert_count":0,"request_count":1,"received_data":1731,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.1.25","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]},{"fqdn":"filtradas.com","ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"domain_registered":"2025-04-09","domain_rank":184383,"first_seen":"2025-06-15T07:12:29.914989Z","last_seen":"2025-08-13T22:23:52.690382Z","alert_count":0,"request_count":17,"received_data":1062647,"sent_data":8422,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.sexmutant.com","ip":{"addr":"172.67.195.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-11-07","domain_rank":121148,"first_seen":"2020-07-17T21:09:23Z","last_seen":"2025-08-02T18:09:50.970808Z","alert_count":0,"request_count":2,"received_data":70634,"sent_data":920,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"zakladchitsy.ru","ip":{"addr":"77.83.175.19","port":443,"asn":211381,"as":"Podaon SIA","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-10-22","domain_rank":388062,"first_seen":"2024-12-03T12:52:13Z","last_seen":"2025-08-11T10:40:59.976959Z","alert_count":0,"request_count":1,"received_data":17017,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cowanimalsex.fun","ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-05-07","domain_rank":479430,"first_seen":"2021-05-07T17:30:47Z","last_seen":"2025-08-04T22:25:47.888412Z","alert_count":0,"request_count":2,"received_data":14932,"sent_data":879,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"p16-kimg.kwai.net","ip":{"addr":"95.101.11.10","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1999-10-05","domain_rank":305176,"first_seen":"2024-07-17T19:55:13Z","last_seen":"2025-08-18T05:28:25.427101Z","alert_count":0,"request_count":1,"received_data":6152,"sent_data":649,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"www.kwai.com","ip":{"addr":"95.101.11.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2002-01-16","domain_rank":13387,"first_seen":"2014-12-08T08:52:52Z","last_seen":"2025-08-13T22:23:54.803565Z","alert_count":0,"request_count":1,"received_data":3691,"sent_data":429,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img2.russkoeporno.tv","ip":{"addr":"104.21.91.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":4128436,"first_seen":"2024-12-03T12:50:28Z","last_seen":"2025-08-13T22:23:57.111476Z","alert_count":0,"request_count":1,"received_data":17346,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"mc.webvisor.org","ip":{"addr":"77.88.21.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"2009-08-25","domain_rank":99131,"first_seen":"2017-08-16T02:40:17Z","last_seen":"2025-08-16T11:11:29.06882Z","alert_count":0,"request_count":2,"received_data":4772,"sent_data":3305,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"pornyc.com","ip":{"addr":"104.21.2.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-05-13","domain_rank":67935,"first_seen":"2017-01-20T12:37:34Z","last_seen":"2025-08-11T10:41:00.788697Z","alert_count":0,"request_count":2,"received_data":14400,"sent_data":865,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"tvzvezda.ru","ip":{"addr":"95.129.232.3","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2005-02-03","domain_rank":31156,"first_seen":"2015-09-27T05:29:17Z","last_seen":"2025-08-12T15:18:56.387677Z","alert_count":0,"request_count":1,"received_data":15817,"sent_data":428,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}]},{"fqdn":"www.xvideos.com","ip":{"addr":"185.88.181.8","port":443,"asn":46652,"as":"SERVERSTACK-ASN","country":"The Netherlands","country_code":"NL"},"domain_registered":"1997-12-30","domain_rank":1943,"first_seen":"2012-05-21T20:29:12Z","last_seen":"2025-08-14T12:53:24.678747Z","alert_count":0,"request_count":1,"received_data":15388,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.twi-dl.net","ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-05-15","domain_rank":124394,"first_seen":"2024-09-09T09:24:24Z","last_seen":"2025-08-17T14:42:59.83979Z","alert_count":0,"request_count":1,"received_data":737,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pornsexyoung.com","ip":{"addr":"185.73.221.134","port":443,"asn":32338,"as":"HOSTISERVER","country":"The Netherlands","country_code":"NL"},"domain_registered":"2019-11-29","domain_rank":360033,"first_seen":"2025-05-27T07:10:28.725216Z","last_seen":"2025-08-14T16:14:10.364826Z","alert_count":0,"request_count":1,"received_data":168,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"static.bad.news","ip":{"addr":"104.26.12.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-08-28","domain_rank":3049996,"first_seen":"2025-05-21T07:11:43.074342Z","last_seen":"2025-08-13T22:23:56.967745Z","alert_count":0,"request_count":2,"received_data":58644,"sent_data":1020,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"e1nn.com","ip":{"addr":"104.21.6.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-02-16","domain_rank":158415,"first_seen":"2019-02-17T22:15:29Z","last_seen":"2025-08-14T14:04:32.039097Z","alert_count":0,"request_count":1,"received_data":12984,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdne-pics.youjizz.com","ip":{"addr":"64.210.135.113","port":443,"asn":30361,"as":"SWIFTWILL2","country":"United States","country_code":"US"},"domain_registered":"2007-10-22","domain_rank":731156,"first_seen":"2017-01-30T06:19:28Z","last_seen":"2025-08-17T14:42:57.374911Z","alert_count":0,"request_count":3,"received_data":44999,"sent_data":1400,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ch.hdsex.org","ip":{"addr":"190.2.144.111","port":443,"asn":49981,"as":"WorldStream B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2004-11-12","domain_rank":1021328,"first_seen":"2020-05-18T08:21:44Z","last_seen":"2025-07-19T00:56:21.679265Z","alert_count":0,"request_count":1,"received_data":458,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"img.redwap-cdn.com","ip":{"addr":"172.67.128.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-01-27","domain_rank":3022826,"first_seen":"2019-01-28T01:00:21Z","last_seen":"2025-08-14T16:14:12.094973Z","alert_count":0,"request_count":1,"received_data":11946,"sent_data":453,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn77-pic.xvideos-cdn.com","ip":{"addr":"185.76.9.7","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2017-08-25","domain_rank":75108,"first_seen":"2018-09-06T22:43:13Z","last_seen":"2025-08-14T13:45:43.226344Z","alert_count":0,"request_count":5,"received_data":64058,"sent_data":2655,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"twitter.yandex.com.tr","ip":{"addr":"87.250.255.11","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"2010-03-15","domain_rank":1612077,"first_seen":"2023-09-22T13:36:46Z","last_seen":"2025-08-06T23:42:05.301018Z","alert_count":0,"request_count":1,"received_data":3023,"sent_data":438,"comment":"","tags":null,"fingerprints":null},{"fqdn":"m.itsmyfetish.com","ip":{"addr":"172.67.149.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-04-21","domain_rank":1144540,"first_seen":"2025-07-19T04:22:58.874972Z","last_seen":"2025-08-10T23:30:00.404266Z","alert_count":0,"request_count":1,"received_data":735,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"gcore-pic.xvideos-cdn.com","ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"domain_registered":"2017-08-25","domain_rank":91016,"first_seen":"2023-11-29T03:20:25Z","last_seen":"2025-08-15T16:29:45.302974Z","alert_count":0,"request_count":2,"received_data":27474,"sent_data":1061,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.steppe-flower.com","ip":{"addr":"104.21.6.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-02-02","domain_rank":0,"first_seen":"2015-03-31T07:12:21Z","last_seen":"2025-08-04T22:25:47.714711Z","alert_count":0,"request_count":1,"received_data":690,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.redd.tube","ip":{"addr":"104.26.15.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-05-03","domain_rank":13819,"first_seen":"2022-05-09T18:20:16Z","last_seen":"2025-08-14T16:14:14.391674Z","alert_count":0,"request_count":2,"received_data":1986,"sent_data":818,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"xgx.mobi","ip":{"addr":"172.67.223.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-09-17","domain_rank":25814,"first_seen":"2017-09-13T02:28:38Z","last_seen":"2025-08-09T08:58:11.698745Z","alert_count":0,"request_count":1,"received_data":24559,"sent_data":458,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"xzx.mobi","ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-09-17","domain_rank":72397,"first_seen":"2020-08-27T12:46:20Z","last_seen":"2025-08-11T12:46:33.577649Z","alert_count":0,"request_count":1,"received_data":13049,"sent_data":450,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"brasileirowtf.z00.monster","ip":{"addr":"148.113.152.129","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"domain_registered":"2019-08-26","domain_rank":0,"first_seen":"2020-08-27T01:12:48Z","last_seen":"2025-07-20T11:20:45.022394Z","alert_count":0,"request_count":1,"received_data":6841,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"hdsex.org","ip":{"addr":"190.2.144.111","port":443,"asn":49981,"as":"WorldStream B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2004-11-12","domain_rank":37826,"first_seen":"2013-04-23T07:57:45Z","last_seen":"2025-08-17T14:42:58.462554Z","alert_count":0,"request_count":1,"received_data":783,"sent_data":395,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"tubetubetube.com","ip":{"addr":"104.21.65.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2006-11-09","domain_rank":69859,"first_seen":"2013-12-23T09:04:30Z","last_seen":"2025-08-11T22:27:24.022194Z","alert_count":0,"request_count":1,"received_data":41509,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pornohub24.ru","ip":{"addr":"193.163.7.2","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2015-12-18","domain_rank":222572,"first_seen":"2016-02-13T06:11:04Z","last_seen":"2025-08-11T22:27:25.221788Z","alert_count":0,"request_count":2,"received_data":11389,"sent_data":910,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"g.uuu.cam","ip":{"addr":"172.67.193.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-04-10","domain_rank":4415821,"first_seen":"2025-01-11T12:08:34Z","last_seen":"2025-08-11T22:21:58.9685Z","alert_count":0,"request_count":2,"received_data":318546,"sent_data":906,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"im1.mediacont.net","ip":{"addr":"104.160.9.33","port":443,"asn":63119,"as":"Angelnet Limited","country":"United States","country_code":"US"},"domain_registered":"2024-01-13","domain_rank":1854337,"first_seen":"2024-02-20T09:09:36Z","last_seen":"2025-08-17T20:29:46.36986Z","alert_count":0,"request_count":1,"received_data":17653,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-08-13T15:20:17.649055Z","alert_count":0,"request_count":1,"received_data":11709,"sent_data":444,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"chezcathy.com","ip":{"addr":"169.150.247.40","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"domain_registered":"2007-03-03","domain_rank":55670,"first_seen":"2012-05-29T12:07:35Z","last_seen":"2025-08-17T11:59:48.029826Z","alert_count":0,"request_count":6,"received_data":79384,"sent_data":2635,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"east-asia.uk","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-01-14","domain_rank":2102308,"first_seen":"2025-06-17T01:30:27.379808Z","last_seen":"2025-08-13T22:23:57.278282Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":429,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ods.manyvids.com","ip":{"addr":"3.167.2.99","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2013-03-11","domain_rank":1976229,"first_seen":"2018-04-19T04:24:42Z","last_seen":"2025-08-17T14:42:59.441239Z","alert_count":0,"request_count":2,"received_data":136481,"sent_data":1014,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"yaebus15.ru","ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-11-20","domain_rank":427413,"first_seen":"2024-12-17T11:43:47Z","last_seen":"2025-08-11T10:40:56.966797Z","alert_count":0,"request_count":1,"received_data":22099,"sent_data":455,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"css.4jpg.top","ip":{"addr":"104.21.77.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-03-07","domain_rank":1675736,"first_seen":"2024-03-18T04:19:51Z","last_seen":"2025-08-17T11:59:47.904458Z","alert_count":0,"request_count":1,"received_data":4931,"sent_data":427,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"159i.net","ip":{"addr":"172.67.200.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-11-06","domain_rank":162531,"first_seen":"2025-05-20T07:09:11.067593Z","last_seen":"2025-08-16T02:44:00.081317Z","alert_count":0,"request_count":1,"received_data":32689,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sorkab.com","ip":{"addr":"172.67.140.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-06-30","domain_rank":60433,"first_seen":"2021-02-01T01:07:10Z","last_seen":"2025-08-17T14:43:00.406088Z","alert_count":0,"request_count":7,"received_data":184230,"sent_data":3151,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"rtgallery.net","ip":{"addr":"5.63.144.84","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2021-12-29","domain_rank":78203,"first_seen":"2022-03-30T19:38:20Z","last_seen":"2025-08-16T03:55:56.88955Z","alert_count":0,"request_count":4,"received_data":93690,"sent_data":1743,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s9631.chomikuj.pl","ip":{"addr":"95.211.227.195","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2006-06-16","domain_rank":0,"first_seen":"2022-01-23T08:08:23Z","last_seen":"2025-08-02T18:10:28.424949Z","alert_count":0,"request_count":1,"received_data":496,"sent_data":552,"comment":"","tags":null,"fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"videosnudes.com","ip":{"addr":"38.180.16.130","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Brazil","country_code":"BR"},"domain_registered":"2016-06-18","domain_rank":252932,"first_seen":"2017-02-28T18:54:55Z","last_seen":"2025-08-14T16:14:13.367266Z","alert_count":0,"request_count":2,"received_data":21573,"sent_data":898,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fixedjs.jtube.top","ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-03-07","domain_rank":3735676,"first_seen":"2024-06-18T01:29:39Z","last_seen":"2025-08-17T11:59:47.277835Z","alert_count":0,"request_count":1,"received_data":9452,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pornoperso.com","ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2000-06-06","domain_rank":25644,"first_seen":"2017-06-17T23:41:58Z","last_seen":"2025-08-16T03:55:58.97581Z","alert_count":0,"request_count":3,"received_data":53831,"sent_data":1364,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"avatars.mds.yandex.net","ip":{"addr":"87.250.247.183","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"2000-11-14","domain_rank":37773,"first_seen":"2014-12-15T11:43:59Z","last_seen":"2025-08-12T09:35:26.165799Z","alert_count":0,"request_count":4,"received_data":83569,"sent_data":1831,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"de.chezcathy.com","ip":{"addr":"138.199.36.9","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"domain_registered":"2007-03-03","domain_rank":5293391,"first_seen":"2024-10-07T10:54:04Z","last_seen":"2025-08-13T22:23:54.408712Z","alert_count":0,"request_count":1,"received_data":2396,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"s8301.chomikuj.pl","ip":{"addr":"95.211.227.195","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2006-06-16","domain_rank":0,"first_seen":"2017-02-11T09:37:30Z","last_seen":"2025-08-05T22:56:23.838664Z","alert_count":0,"request_count":1,"received_data":13975,"sent_data":552,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-08-13T15:12:46.750635Z","alert_count":0,"request_count":1,"received_data":274775,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.tabooporn.tv","ip":{"addr":"167.114.1.130","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"domain_registered":"unknown","domain_rank":297352,"first_seen":"2019-04-11T09:59:03Z","last_seen":"2025-08-15T16:29:44.043863Z","alert_count":0,"request_count":2,"received_data":32900,"sent_data":908,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.9188porn.xyz","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-02-21","domain_rank":3270384,"first_seen":"2025-03-12T03:12:05.263544Z","last_seen":"2025-08-17T14:43:00.362831Z","alert_count":27,"request_count":27,"received_data":0,"sent_data":12939,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img.apian088.sbs","ip":{"addr":"172.96.160.18","port":443,"asn":23470,"as":"RELIABLESITE","country":"United States","country_code":"US"},"domain_registered":"2025-07-15","domain_rank":4180399,"first_seen":"2025-07-19T07:04:29.096235Z","last_seen":"2025-08-13T22:23:55.346805Z","alert_count":0,"request_count":2,"received_data":14136,"sent_data":913,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"pict.ebenporno.com","ip":{"addr":"117.55.203.143","port":443,"asn":3920,"as":"ESTOXY OU","country":"The Netherlands","country_code":"NL"},"domain_registered":"2016-12-14","domain_rank":7021758,"first_seen":"2025-03-25T03:26:50.99845Z","last_seen":"2025-08-11T22:21:59.114311Z","alert_count":0,"request_count":1,"received_data":12888,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"img.youtube.com","ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-02-15","domain_rank":6546,"first_seen":"2012-05-30T07:03:49Z","last_seen":"2025-08-16T00:28:37.296525Z","alert_count":0,"request_count":5,"received_data":65823,"sent_data":2205,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img.imghuo.cfd","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-07-16","domain_rank":3764022,"first_seen":"2024-07-28T22:31:34Z","last_seen":"2025-08-18T05:28:22.956063Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":449,"comment":"","tags":null,"fingerprints":null},{"fqdn":"stock.adobe.com","ip":{"addr":"151.101.130.49","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"1986-11-17","domain_rank":11504,"first_seen":"2015-06-16T07:17:22Z","last_seen":"2025-08-09T08:58:12.75455Z","alert_count":0,"request_count":1,"received_data":1925,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"www.oedy9.com","ip":{"addr":"45.92.29.80","port":443,"asn":64236,"as":"UNREAL-SERVERS","country":"United States","country_code":"US"},"domain_registered":"2023-10-27","domain_rank":3836162,"first_seen":"2023-10-27T17:25:38Z","last_seen":"2025-08-12T15:18:57.743023Z","alert_count":0,"request_count":1,"received_data":163,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"leaknudes.com","ip":{"addr":"185.178.208.188","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2019-10-14","domain_rank":187294,"first_seen":"2020-06-14T12:35:47Z","last_seen":"2025-08-05T22:57:01.37Z","alert_count":0,"request_count":1,"received_data":43717,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}]},{"fqdn":"www.apornvideo.com","ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-10-31","domain_rank":2701,"first_seen":"2015-12-18T03:17:09Z","last_seen":"2025-08-08T07:49:54.898762Z","alert_count":0,"request_count":2,"received_data":10609,"sent_data":919,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"filmesporno.xxx","ip":{"addr":"192.124.249.88","port":443,"asn":30148,"as":"SUCURI-SEC","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":10355,"first_seen":"2019-03-31T05:29:58Z","last_seen":"2025-08-18T05:28:26.452605Z","alert_count":0,"request_count":3,"received_data":534,"sent_data":1398,"comment":"","tags":null,"fingerprints":[{"name":"Sucuri","description":"Sucuri is a cybersecurity company that provides website security solutions and services.","website":"https://sucuri.net/","common_platform_enumeration":"","icon":"sucuri.svg","categories":["CDN","Security"]}]},{"fqdn":"en.chezcathy.com","ip":{"addr":"138.199.36.8","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"domain_registered":"2007-03-03","domain_rank":899677,"first_seen":"2024-05-28T09:30:18Z","last_seen":"2025-08-17T11:59:49.058384Z","alert_count":0,"request_count":1,"received_data":2396,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"images.pornoreino.com","ip":{"addr":"79.127.216.112","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"domain_registered":"2015-03-20","domain_rank":0,"first_seen":"2021-02-12T12:37:43Z","last_seen":"2025-08-11T22:21:58.940163Z","alert_count":0,"request_count":1,"received_data":52995,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"g.itsmyfetish.com","ip":{"addr":"172.67.149.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-04-21","domain_rank":7064203,"first_seen":"2025-07-19T04:22:58.873147Z","last_seen":"2025-08-10T23:30:00.459159Z","alert_count":0,"request_count":1,"received_data":627,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2025-08-13T15:43:42.429518Z","alert_count":0,"request_count":2,"received_data":175806,"sent_data":882,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gettyimages.no","ip":{"addr":"3.167.2.85","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2001-09-21","domain_rank":805545,"first_seen":"2018-10-29T22:57:58Z","last_seen":"2025-07-23T17:13:47.982202Z","alert_count":0,"request_count":1,"received_data":5988,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"xmaza.co","ip":{"addr":"104.21.44.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-03-12","domain_rank":11833,"first_seen":"2025-03-25T21:53:30.275271Z","last_seen":"2025-07-25T08:10:22.031757Z","alert_count":0,"request_count":3,"received_data":41166,"sent_data":1377,"comment":"","tags":null,"fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"as1.ftcdn.net","ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2010-11-08","domain_rank":214038,"first_seen":"2015-07-06T07:59:47Z","last_seen":"2025-08-14T00:26:20.410963Z","alert_count":0,"request_count":1,"received_data":112539,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"abc30.com","ip":{"addr":"3.167.7.37","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"1997-05-23","domain_rank":53057,"first_seen":"2014-05-17T00:20:33Z","last_seen":"2025-08-06T16:15:55.039833Z","alert_count":0,"request_count":1,"received_data":17572,"sent_data":426,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"brasileiro.wtf","ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-05-31","domain_rank":373986,"first_seen":"2024-10-19T16:33:16.552622Z","last_seen":"2025-07-20T11:20:46.938852Z","alert_count":0,"request_count":1,"received_data":698,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"weav.xyz","ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-06-24","domain_rank":91500,"first_seen":"2015-07-11T20:29:43Z","last_seen":"2025-08-14T16:14:08.736802Z","alert_count":0,"request_count":1,"received_data":596,"sent_data":425,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sbzytpimg1.com","ip":{"addr":"173.249.235.62","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"domain_registered":"2024-04-24","domain_rank":160397,"first_seen":"2024-07-25T07:47:58Z","last_seen":"2025-08-13T22:23:55.37197Z","alert_count":0,"request_count":16,"received_data":1143502,"sent_data":7728,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"im2.mediacont.net","ip":{"addr":"104.160.9.33","port":443,"asn":63119,"as":"Angelnet Limited","country":"United States","country_code":"US"},"domain_registered":"2024-01-13","domain_rank":2088534,"first_seen":"2024-01-15T00:31:55Z","last_seen":"2025-08-11T10:40:57.20155Z","alert_count":0,"request_count":1,"received_data":12686,"sent_data":454,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fapdig.com","ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-03-03","domain_rank":199248,"first_seen":"2017-08-25T19:59:36Z","last_seen":"2025-08-14T16:14:15.345878Z","alert_count":0,"request_count":4,"received_data":29212,"sent_data":1754,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"icdn05.4kpornvideos.tv","ip":{"addr":"45.133.44.6","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":4106070,"first_seen":"2022-11-09T12:16:02Z","last_seen":"2025-08-11T22:27:28.320226Z","alert_count":0,"request_count":1,"received_data":42368,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"timg216.top","ip":{"addr":"104.20.25.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-04","domain_rank":157563,"first_seen":"2025-05-11T16:24:46.418762Z","last_seen":"2025-08-13T08:02:54.198257Z","alert_count":0,"request_count":2,"received_data":115668,"sent_data":970,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"realincest.pro","ip":{"addr":"172.67.155.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-08-22","domain_rank":429403,"first_seen":"2017-09-10T05:22:13Z","last_seen":"2025-08-13T22:23:55.440798Z","alert_count":0,"request_count":1,"received_data":6955,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.9188porn.com","ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-06-18","domain_rank":3479355,"first_seen":"2025-02-07T09:21:52Z","last_seen":"2025-08-17T11:59:46.791136Z","alert_count":0,"request_count":7,"received_data":5073,"sent_data":3201,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"yaebus17.ru","ip":{"addr":"5.129.208.148","port":443,"asn":50923,"as":"Metroset","country":"Russia","country_code":"RU"},"domain_registered":"2025-05-15","domain_rank":73865,"first_seen":"2025-06-03T07:12:18.448679Z","last_seen":"2025-08-16T16:55:33.367296Z","alert_count":0,"request_count":4,"received_data":37339,"sent_data":1766,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.kompoz2.com","ip":{"addr":"172.67.206.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-04","domain_rank":2252290,"first_seen":"2020-09-27T10:24:26Z","last_seen":"2025-08-16T16:55:33.326162Z","alert_count":0,"request_count":1,"received_data":5503,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"uqetyzxa.com","ip":{"addr":"64.112.76.12","port":443,"asn":6939,"as":"HURRICANE","country":"United States","country_code":"US"},"domain_registered":"2024-09-17","domain_rank":169320,"first_seen":"2024-09-18T17:57:27Z","last_seen":"2025-08-15T16:29:43.140704Z","alert_count":0,"request_count":1,"received_data":8623,"sent_data":441,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"vidmo.pro","ip":{"addr":"89.248.193.244","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2022-04-10","domain_rank":59347,"first_seen":"2019-07-12T22:27:24Z","last_seen":"2025-08-09T22:03:37.414267Z","alert_count":0,"request_count":4,"received_data":75999,"sent_data":1857,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.tubetubetube.com","ip":{"addr":"104.21.65.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2006-11-09","domain_rank":6178130,"first_seen":"2012-10-08T02:05:54Z","last_seen":"2025-08-11T22:27:25.389504Z","alert_count":0,"request_count":1,"received_data":41425,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"content.jwplatform.com","ip":{"addr":"3.167.2.118","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2010-04-13","domain_rank":42202,"first_seen":"2017-09-15T13:11:36Z","last_seen":"2025-08-14T09:32:22.962089Z","alert_count":0,"request_count":1,"received_data":344,"sent_data":439,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"stickamvids.net","ip":{"addr":"80.92.205.167","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"United States","country_code":"US"},"domain_registered":"2011-03-02","domain_rank":222913,"first_seen":"2014-10-12T04:57:06Z","last_seen":"2025-08-11T10:40:59.079473Z","alert_count":0,"request_count":2,"received_data":7139,"sent_data":883,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"media.crazyshit.com","ip":{"addr":"45.133.44.4","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"1999-02-20","domain_rank":2942510,"first_seen":"2019-08-06T22:57:07Z","last_seen":"2025-08-13T22:24:55.361725Z","alert_count":0,"request_count":1,"received_data":346809,"sent_data":453,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pornvideoq.com","ip":{"addr":"104.21.235.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-10-27","domain_rank":358741,"first_seen":"2015-10-29T23:25:48Z","last_seen":"2025-08-11T10:41:01.823303Z","alert_count":0,"request_count":1,"received_data":5729,"sent_data":556,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-08-13T15:26:13.000794Z","alert_count":0,"request_count":1,"received_data":222925,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sexsex10.com","ip":{"addr":"118.107.32.199","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2023-04-17","domain_rank":688235,"first_seen":"2025-07-08T05:40:36.488095Z","last_seen":"2025-08-13T22:23:54.223713Z","alert_count":0,"request_count":1,"received_data":4546,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"blumpkintube.com","ip":{"addr":"104.21.79.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-11-26","domain_rank":91888,"first_seen":"2017-05-23T16:37:55Z","last_seen":"2025-08-18T05:28:24.990553Z","alert_count":0,"request_count":3,"received_data":26491,"sent_data":1348,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.pornohype.info","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2019-01-25","domain_rank":1311446,"first_seen":"2021-06-28T21:14:56Z","last_seen":"2025-08-16T02:43:59.496292Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":892,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.coolvintageporn.com","ip":{"addr":"46.229.163.229","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2020-02-25","domain_rank":0,"first_seen":"2025-05-22T17:21:25.409271Z","last_seen":"2025-08-16T16:55:34.086714Z","alert_count":0,"request_count":1,"received_data":172,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.hurtsex.com","ip":{"addr":"172.67.173.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-11-16","domain_rank":1018353,"first_seen":"2014-10-07T18:43:32Z","last_seen":"2025-08-14T14:04:32.98363Z","alert_count":0,"request_count":1,"received_data":9397,"sent_data":464,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"rucelka.com","ip":{"addr":"31.10.5.4","port":443,"asn":207728,"as":"EUROHOSTER Ltd.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2019-02-22","domain_rank":730004,"first_seen":"2024-11-02T00:01:05.192233Z","last_seen":"2025-07-22T04:45:21.472887Z","alert_count":0,"request_count":1,"received_data":1949,"sent_data":428,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn4.nudegirls.wiki","ip":{"addr":"134.19.178.222","port":443,"asn":49453,"as":"Global Layer B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2021-04-27","domain_rank":7218469,"first_seen":"2022-02-02T16:24:56Z","last_seen":"2025-07-18T18:49:59.07613Z","alert_count":0,"request_count":1,"received_data":10785,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"page.phic4.top","ip":{"addr":"104.21.73.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-03-07","domain_rank":4536559,"first_seen":"2024-03-28T08:56:57Z","last_seen":"2025-08-17T11:59:47.508511Z","alert_count":0,"request_count":2,"received_data":1370,"sent_data":814,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn2.geefap.com","ip":{"addr":"31.10.5.97","port":443,"asn":207728,"as":"EUROHOSTER Ltd.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2017-09-12","domain_rank":4560962,"first_seen":"2019-09-14T00:30:50Z","last_seen":"2025-08-10T00:30:36.582289Z","alert_count":0,"request_count":2,"received_data":40420,"sent_data":946,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cacrz.4jpg.top","ip":{"addr":"104.21.77.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-03-07","domain_rank":4780815,"first_seen":"2024-04-16T13:36:39Z","last_seen":"2025-08-17T11:59:48.136679Z","alert_count":0,"request_count":2,"received_data":18898,"sent_data":860,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"asianpornxbb.sbs","ip":{"addr":"104.21.23.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-13","domain_rank":195805,"first_seen":"2025-03-18T06:53:36.727587Z","last_seen":"2025-08-13T22:23:54.916375Z","alert_count":0,"request_count":2,"received_data":233469,"sent_data":964,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"vidmo.org","ip":{"addr":"89.248.193.244","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2012-10-07","domain_rank":73868,"first_seen":"2013-01-12T05:42:46Z","last_seen":"2025-08-10T00:28:03.387069Z","alert_count":0,"request_count":1,"received_data":5697,"sent_data":426,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"mcdn2.tvzvezda.ru","ip":{"addr":"95.129.232.3","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2005-02-03","domain_rank":5241855,"first_seen":"2024-09-10T06:30:50Z","last_seen":"2025-08-12T15:18:58.35021Z","alert_count":0,"request_count":1,"received_data":35827,"sent_data":497,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}]},{"fqdn":"pornolomka.com","ip":{"addr":"91.194.110.16","port":443,"asn":213166,"as":"UA-Hosting SIA","country":"The Netherlands","country_code":"NL"},"domain_registered":"2016-03-19","domain_rank":243943,"first_seen":"2016-04-02T10:35:30Z","last_seen":"2025-08-17T14:43:00.276002Z","alert_count":0,"request_count":1,"received_data":249,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"nlt02.hdsex.org","ip":{"addr":"104.26.0.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-11-12","domain_rank":3402418,"first_seen":"2022-07-29T00:28:25Z","last_seen":"2025-08-13T10:14:08.402361Z","alert_count":0,"request_count":1,"received_data":26432,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"videopreview.chezcathy.com","ip":{"addr":"79.127.216.112","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"domain_registered":"2007-03-03","domain_rank":4588502,"first_seen":"2024-11-08T00:06:20.946875Z","last_seen":"2025-08-11T22:22:00.436851Z","alert_count":0,"request_count":1,"received_data":11432,"sent_data":454,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"im4.mediacont.net","ip":{"addr":"104.160.9.33","port":443,"asn":63119,"as":"Angelnet Limited","country":"United States","country_code":"US"},"domain_registered":"2024-01-13","domain_rank":2140888,"first_seen":"2024-01-23T00:26:56Z","last_seen":"2025-08-14T04:41:15.191166Z","alert_count":0,"request_count":1,"received_data":13850,"sent_data":450,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"nudegirls.wiki","ip":{"addr":"109.202.99.24","port":443,"asn":49453,"as":"Global Layer B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2021-04-27","domain_rank":96966,"first_seen":"2021-06-09T14:55:04Z","last_seen":"2025-08-18T05:28:25.464436Z","alert_count":0,"request_count":1,"received_data":143,"sent_data":431,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.porn100.tv","ip":{"addr":"104.21.37.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":126842,"first_seen":"2023-03-11T17:36:20Z","last_seen":"2025-08-14T14:04:34.853607Z","alert_count":0,"request_count":1,"received_data":17921,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}]},{"fqdn":"sexsex61.com","ip":{"addr":"118.107.32.199","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2023-04-17","domain_rank":155642,"first_seen":"2025-03-24T07:20:20.686063Z","last_seen":"2025-08-13T22:24:55.995637Z","alert_count":0,"request_count":1,"received_data":4546,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"thumb.aporntv.com","ip":{"addr":"104.26.1.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-07","domain_rank":3254568,"first_seen":"2018-03-19T05:34:25Z","last_seen":"2025-08-11T10:40:56.598108Z","alert_count":0,"request_count":4,"received_data":21850,"sent_data":2252,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.youjizz.com","ip":{"addr":"66.254.114.242","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"domain_registered":"2007-10-22","domain_rank":2431,"first_seen":"2012-05-22T02:44:21Z","last_seen":"2025-08-17T14:43:00.130156Z","alert_count":0,"request_count":1,"received_data":4737,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cav102.com","ip":{"addr":"45.145.72.132","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"domain_registered":"2022-07-28","domain_rank":211254,"first_seen":"2022-07-28T18:32:21Z","last_seen":"2025-08-11T10:40:59.756633Z","alert_count":0,"request_count":2,"received_data":109016,"sent_data":892,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"play.anh.moe","ip":{"addr":"104.21.43.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-12","domain_rank":1995834,"first_seen":"2024-03-13T12:36:20Z","last_seen":"2025-08-16T03:56:01.23668Z","alert_count":0,"request_count":1,"received_data":897,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.abcotvs.com","ip":{"addr":"184.25.3.167","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2014-08-26","domain_rank":215301,"first_seen":"2017-06-28T05:29:55Z","last_seen":"2025-08-10T00:30:35.317011Z","alert_count":0,"request_count":1,"received_data":371003,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"steppe-flower.com","ip":{"addr":"104.21.6.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-02-02","domain_rank":740608,"first_seen":"2017-06-01T14:51:25Z","last_seen":"2025-08-04T22:25:49.082998Z","alert_count":0,"request_count":1,"received_data":102666,"sent_data":409,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"images.embed-player.space","ip":{"addr":"51.77.85.40","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"domain_registered":"2016-12-02","domain_rank":3894588,"first_seen":"2021-05-27T18:53:58Z","last_seen":"2025-08-15T07:16:34.343282Z","alert_count":0,"request_count":1,"received_data":13532,"sent_data":455,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"gokahani.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-09-30","domain_rank":4136423,"first_seen":"2024-10-24T14:35:11.131363Z","last_seen":"2025-08-06T16:16:40.282646Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":912,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.sexsex2.com","ip":{"addr":"202.95.16.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2023-04-17","domain_rank":4970360,"first_seen":"2025-03-22T13:12:53.724204Z","last_seen":"2025-08-17T14:43:00.792652Z","alert_count":0,"request_count":1,"received_data":4546,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"celebjihad.com","ip":{"addr":"104.26.14.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2008-03-18","domain_rank":24389,"first_seen":"2014-11-23T17:32:00Z","last_seen":"2025-08-04T15:48:32.969051Z","alert_count":0,"request_count":1,"received_data":16300,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pics.pornsexyoung.com","ip":{"addr":"104.21.2.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-11-29","domain_rank":0,"first_seen":"2025-05-27T07:10:28.862048Z","last_seen":"2025-08-14T16:14:11.739093Z","alert_count":0,"request_count":1,"received_data":17244,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.manyvids.com","ip":{"addr":"54.240.174.37","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2013-03-11","domain_rank":32300,"first_seen":"2014-10-30T04:59:05Z","last_seen":"2025-08-15T22:09:27.369664Z","alert_count":0,"request_count":1,"received_data":16121,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]}]},{"fqdn":"images-z.embed-player.space","ip":{"addr":"37.221.208.213","port":443,"asn":41075,"as":"ATW Internet Kft.","country":"Hungary","country_code":"HU"},"domain_registered":"2016-12-02","domain_rank":1618632,"first_seen":"2025-06-17T09:46:06.929Z","last_seen":"2025-08-06T23:42:04.114124Z","alert_count":0,"request_count":1,"received_data":20859,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdntube.b-cdn.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2016-04-25","domain_rank":1905183,"first_seen":"2020-07-01T07:44:50Z","last_seen":"2025-08-16T03:55:57.621057Z","alert_count":0,"request_count":1,"received_data":3109,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"www.w3schools.com","ip":{"addr":"23.36.76.136","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2000-03-21","domain_rank":2135,"first_seen":"2014-02-05T20:15:46Z","last_seen":"2025-08-17T01:14:26.61584Z","alert_count":0,"request_count":1,"received_data":24013,"sent_data":430,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-18T05:27:55Z","timestamp":1755494875,"ip_dst":{"addr":"172.18.0.24","port":52856,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"117.55.203.143","port":443,"asn":3920,"as":"ESTOXY OU","country":"The Netherlands","country_code":"NL"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2025-08-18T05:27:55.395956+0000\",\"flow_id\":560285896869796,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"117.55.203.143\",\"src_port\":443,\"dest_ip\":\"172.18.0.24\",\"dest_port\":52856,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=pict.ebenporno.com\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL RSA Domain Secure Site CA\",\"serial\":\"0C:42:F3:44:7A:DC:93:D5:B0:32:CA:F3:0A:3A:0A:E4\",\"fingerprint\":\"ab:97:c6:88:8d:d5:19:20:80:26:b9:f7:50:d9:49:79:99:a1:3f:6a\",\"sni\":\"pict.ebenporno.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-08-05T00:00:00\",\"notafter\":\"2025-11-03T23:59:59\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":8,\"pkts_toclient\":7,\"bytes_toserver\":1146,\"bytes_toclient\":5764,\"start\":\"2025-08-18T05:27:55.329636+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-18T05:28:03Z","timestamp":1755494883,"ip_dst":{"addr":"104.21.43.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.24","port":41592,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ETPRO INFO .moe Domain in TLS SNI","source":"{\"timestamp\":\"2025-08-18T05:28:03.049208+0000\",\"flow_id\":300401721213465,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.24\",\"src_port\":41592,\"dest_ip\":\"104.21.43.90\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2827579,\"rev\":7,\"signature\":\"ETPRO INFO .moe Domain in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2017_08_17\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Moderate\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"play.anh.moe\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3430,\"start\":\"2025-08-18T05:28:02.918041+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-18T05:28:03Z","timestamp":1755494883,"ip_dst":{"addr":"172.18.0.24","port":57848,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"89.248.193.244","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2025-08-18T05:28:03.829749+0000\",\"flow_id\":243497699581370,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"89.248.193.244\",\"src_port\":443,\"dest_ip\":\"172.18.0.24\",\"dest_port\":57848,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=vidmo.org\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"00:FD:39:8C:48:08:0D:C3:39:BA:F1:37:0C:24:6E:22:07\",\"fingerprint\":\"3e:7a:0a:9a:4c:6e:5b:d4:a1:c7:2a:33:ca:0a:32:cc:26:1d:4e:3b\",\"sni\":\"vidmo.org\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-07-07T00:00:00\",\"notafter\":\"2025-10-05T23:59:59\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"0191d81a4ad7ee1a330a1e2c51d23ace\",\"string\":\"771,49195,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1202,\"bytes_toclient\":3633,\"start\":\"2025-08-18T05:28:03.531898+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/yandex-metrica-watch/watch.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a05c7e05d346fbefce649220d1661355","sha1":"8f48ab21bc78edcf0c6c7bf534637e31615d235c","sha256":"eb4f0d58fe9d3d1ef0899348cd0535e42f815474aaaccb9456b60a558f00af1a","sha512":"5c24ce3b45cd940cdce666d9de04a29c7dc05a85867b24a2e2cb35556e851d02e88d29a48a26f5dac9ee322e20e422c480a94d7879a07f88aca441827d7c3405","ssdeep":"3072:J9XPTcXV4c3ZeEGCHE18Ua3OTpa/0m0hal6IugZ6rkZQRIWqDZ1sc:J9fTcGd7aE1rTAh0hZg0rkNWqcc","tlshash":"3b24d8d936927466937334b4a02f410f72be78a6f1088958f185e9d93e78dac5237f2c","size":221789,"data":"","first_seen":"2025-08-15T16:30:03.150891Z","last_seen":"2025-08-19T17:42:12.75921Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4b936eab4235f662d4eb756534d69d7","sha1":"4ee18cb14eaf40e117a19a7f86dcefe6291bc0cf","sha256":"f7650ed40588ee2d1128869afc47866ee4eb09d4860ce1c3e07c9860b7242d33","sha512":"8ab68f0f71a5ed1bfef35dbdad985867b7695f46cd03e3d3bbf2ebe8de35b5a95638f5fdb41fdd52b85ecca95cbcb4a341f6fa560f1cb6a39a2026e22a9af10c","ssdeep":"","tlshash":"0260003c003f00030cc03c0000c0c000c000003c000303f00f030000000003030cc00c","size":12,"data":"","first_seen":"2023-03-07T12:07:12Z","last_seen":"2026-06-03T05:36:21.511045Z","times_seen":2321,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/nosleep/0.11.0/NoSleep.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea77f824de2ef57acb12e7cb6596365e","sha1":"10bad0dbdf30a0471c2c786b349daeb1dd19180e","sha256":"2b19d92ce83bf3b498f73103ba1240f09c84798b1f92aedf1491ccf0aa6f5e4c","sha512":"cf69dd76334b7318c829868da8a7e9c2097ef261555388132fc69f95d42e91420e2988056c3d93c830b20059422ae5a82e1109e3dce9127ccb0e23cc5ca27591","ssdeep":"192:N0rZbTPe+fl9SKRGyFgkw+wi+FrZJqbzr+5rA7wbUCzebIkm:N09voK7gzi+FrZJqbzrarAyUX5m","tlshash":"7a22f8b33133fd9f8fba085ac61d61045c7dbc6f4aa94091bb0884e86af4558ead5d34","size":10687,"data":"","first_seen":"2023-03-07T12:02:01Z","last_seen":"2026-06-03T05:36:21.490019Z","times_seen":2356,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jsjs.4jpg.top/index.php?js=av4\u0026advertisement\u0026","fqdn":"jsjs.4jpg.top","domain":"4jpg.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa75948185c19295f4c91115d1272ea3","sha1":"727570602788de1277bdc2325cfca27fa63ee96a","sha256":"4285a7d354f22ccf31c75a6a988ed15d3f71fb20a3c3c36252479ad859dc7cf7","sha512":"3ed38bd1b7c93a1d7106f6466de3d6f0667fe2e5f7c808c18a274278033f5f1cda4b38d061736d1505edf022067a0682f7fc54de3de69b0e11cbbc3de48a60e9","ssdeep":"3072:mhVwyzHrlwnaNU/kV/Otiv414EOtsCtJNSKDm+VHG4QNx:SmyzHJSaNU/k0ivNK+VHG4QNx","tlshash":"8214e9f73608502951f312a78a768648f833a02b99416884fd1c6d751f78e7f196affc","size":190441,"data":"","first_seen":"2025-08-18T05:28:50.860199Z","last_seen":"2025-08-18T05:29:08.823618Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jsjs.4jpg.top/index.php?js=very","fqdn":"jsjs.4jpg.top","domain":"4jpg.top","tld":"top"},"ip":{"addr":"104.21.77.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"77542f8a3ada1bb8b45eb9139c5e69ef","sha1":"08556fa802dce18bec90fc57d62c7caaa4dbbdd0","sha256":"4a12c40c3eb9ed0e055519dbd5be4cb7e88ee707739484aa38e3e3284c0bdc46","sha512":"6b9938d1d6ec6dc835bab5a041396050d45888f323b9e7e4df78254d280e054bf4ecb8f296e5d9dad8e9c6d8a02511f526e41fa305aaa78c5fa45168d9981358","ssdeep":"","tlshash":"cda01210f004c43815841428c0e6074617c990cc86c3170149402b0744367d56202060","size":82,"data":"","first_seen":"2024-04-16T15:37:11Z","last_seen":"2025-10-17T05:03:07.441404Z","times_seen":1803,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0b92303a1cb08e00253e7879d304ee26","sha1":"68bdd0c37dddd5312507918516eaa994a1a1cb93","sha256":"7f10c6dc85b21ab592994c008eea9b75e836674d27bef1d026c511b4fb158432","sha512":"ea194370faf1c720d260f547d126b2beb99385dbbb29af6d954059e7bd3e622bf4040ad7731eaffea192c45551bf8816b8ba85ba40ef1a5ea1edae09e4c770e7","ssdeep":"","tlshash":"e7e0c035342d010202170260ac772a6a743dea750fc060b0d23825787684cb661596fd","size":353,"data":"","first_seen":"2024-05-18T10:55:44Z","last_seen":"2026-06-03T05:36:21.51369Z","times_seen":1367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-620120-3","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"16a1ae71a411950b1dd958ce1dcd2a3b","sha1":"b9acf30725463eb49facfebf110d132f99e3ff4c","sha256":"d3f1f44f55d8229329d35a70be1863da142e11949e559d5dad3e19a7ea967edf","sha512":"61e20341c3d806e96e342f9b775e58f74f38aaaa04265e0c12c07e91b4b864bf119e195458ca5a70793ba67f567926b282a916ea51ec6873c3da5548478e8b96","ssdeep":"3072:LP1g61JLwDPrA8B0Sg5D3Sb5qlUmxxgKX6ctaW/uSoTQtF021vDnIpdf7:xmLrAOtIx1wW/uSoTuFHvDI/","tlshash":"af44f9cc73d6b46243a36478503f014bb23b7992f84cd894e182d9d92e74aaa4277f7d","size":273729,"data":"","first_seen":"2025-08-18T05:29:08.760089Z","last_seen":"2025-08-18T05:29:08.760089Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js?1","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-06-10T02:11:05.47072Z","times_seen":134248,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"6a6d49c6c2ae70af7aaf37b59e1992be","sha1":"7ec9c0209de4ee75d15551de5b41d72ef95a53d2","sha256":"01cad962eb3c779b21c51c5b10914e8f949d1c08ea965e804a60b5882846833d","sha512":"e65a14ab5a1147e6103f4f6f7b703f5d94c4d06887a51a1ec6ce33769227d9e8636b88c1d3523e3a24523bcd9896f4020be259edcd7249bf8c58ecf8ce74d1a9","ssdeep":"","tlshash":"44110000e2208a28002028332800020800020000c08008008002002000208030ea000a","size":958,"data":"","first_seen":"2025-03-21T10:58:41.402631Z","last_seen":"2025-11-24T03:08:53.460613Z","times_seen":537,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8981d7d5762da819fd76fb9a6af69502","sha1":"73a6a054048f292202869c25a5be190ad5bb9cc6","sha256":"3c9e5317128af17847a8e308e8aa0c38c6be139b91afbd3d9598607d8de2b42e","sha512":"e99a831f0872d06c82bb4e84b19140c45feb6953e8da6515464ad5617b73b041c65c543ff25ee2a24509d749b16814d815388be58733c560da07742f0dc64d58","ssdeep":"","tlshash":"3990047f143d35101145115dc0c3547c400df14d57d14c054c53d045104c435d14100d","size":48,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T07:58:42.956301Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"fc99276790fd60430168f66babce9b5f","sha1":"aa97ed55496c03dc06f7ecad4721d094b456ffdf","sha256":"877bccd98aed1b71b4998a16cafbb93bfe0028f121304b26b07d9af90bb91205","sha512":"126086c45cc6532d590023e0bf76d0cd2749d280283968e0a2f2df98ba0aff1c28ed8aad898695cf6895655ee25166d2d75787eb40d67cf1fd828aa5235f9f56","ssdeep":"","tlshash":"9ca0025e116f693121414544a1c3665e504ab11a49768a09b853a8e111844796385d14","size":61,"data":"","first_seen":"2024-07-17T16:44:11Z","last_seen":"2025-11-13T10:13:36.967139Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"4b4b5c916fca1f879ae406eafa073906","sha1":"b188d4ad342b5264c33cf9c6f655aa95118fb6d0","sha256":"7b5253c47ccce336175a06c9279a4527663c82e012d9b6627083c6503d1cefb4","sha512":"cf604182780915ab807f343ec51e4bd81d18ff6681610e0f6f8105847e40047a11c42acb33d97549cf69d501914cf44f7e8ce2860f8c7c46fd90a58a20a6207b","ssdeep":"","tlshash":"818004405f10517441d0015051445007dc4530d5007f35c3040004030434d103145411","size":30,"data":"","first_seen":"2024-04-16T15:37:12Z","last_seen":"2025-09-07T23:10:19.579541Z","times_seen":1685,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"2badd01f80cd03eb7ffce90487ab3f71","sha1":"1d0af7cc184466c7d86216085ea60242daeb1eb4","sha256":"e8f6c4dca8b7093bad96494bef55525265ce366c13dc6f76d9358cca8ee182d4","sha512":"ec9d7c3fe33550482bf70ec70ab0f2bb4c989ce096f4744d2e29646fae993113711dcf2c447e743ce4d422299d5b5155561522571a5b3c617d138ea55299078c","ssdeep":"","tlshash":"0b900410c47007103004550cc47573570531430d5f45171c0f10d4d3f5cf110553014c","size":43,"data":"","first_seen":"2023-03-07T12:07:12Z","last_seen":"2026-06-03T05:36:21.532319Z","times_seen":2368,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"edc24b7d2fc7536422daee6621435edf","sha1":"71fd4875b509449d820e6a3dd7d83e5f6c31fac8","sha256":"ec599569faa2feb73e0954dcb1f0f7ac5ba6d49ad50d17d3932506608b86a2fc","sha512":"04c6206b3bc1bac7456e96da9d1c58b9a9173e86ff91e8c94fbcd1088b011b5660519419f7971fae6370e8f281951c046c3539ea74a00f7b29830311e0174b34","ssdeep":"","tlshash":"c79002532d0494c2214558c564a0a80f9411644a58a4869688a5051161082ec0842500","size":55,"data":"","first_seen":"2024-04-16T15:37:12Z","last_seen":"2026-06-03T05:36:21.530773Z","times_seen":2339,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"8da66cae5fc09ad0ad54710cd4960dbd","sha1":"01ef404d9c252491d6f0cd6900cce145d4b76db1","sha256":"90b1ab53462f9b18c6a0d06704f07055e834c86239bdc87a3708514e9a6b6762","sha512":"5d4f175963755b790e21d7765434cab11676f9d02d4d9fa2885c05dbb2dd665ec871d93e3b7d9f50f79de7ed991f8815f7e6dc1bf82f9b1c70c8d4becf28e953","ssdeep":"","tlshash":"c1b0124b1d0c882f25319c40a552647f0072f0263510caee84b40120dc302cc4420400","size":88,"data":"","first_seen":"2023-03-07T12:02:01Z","last_seen":"2026-06-03T05:36:21.527428Z","times_seen":2438,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"33e50c65bc34e7205dd72147375dd7ee","sha1":"45d7704eefa9421415ddfe589dba26be6f3e0a1e","sha256":"f17654210f6b478323ef0f08d7591e4844f6c6d9c2e00672cbc8b7d211a0d688","sha512":"18656d1462e7e19b5872d2c6f52641ba01c64fa4bba62fe302f4e420f5a75c87088aca6e13f60cbbb18b8970154765e2a0aaa920c7d04e487730e421171a4f38","ssdeep":"","tlshash":"81d0a76b0c1ff453862052e8d053601cc08ed01d93e4cd5380c384716244aea066d819","size":228,"data":"","first_seen":"2024-11-18T15:29:42.20345Z","last_seen":"2025-11-13T10:13:36.984718Z","times_seen":682,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"i1.wp.com/jpgjingpinx.com/upload/vod/20231224-1/accb5996ea8075ad23a6281df27a6e88.jpg","fqdn":"i1.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 Aug 2025 19:44:50 GMT","end":"Tue, 04 Nov 2025 19:44:49 GMT"},"fingerprint":{"sha1":"E3:33:F6:CB:1D:54:80:51:6E:94:B6:72:D6:8D:22:88:EC:CF:5C:C2","sha256":"A2:6F:1C:4D:B8:5F:EC:D5:D1:31:F6:0A:A1:D3:C4:05:9B:6A:16:37:15:5E:C6:BE:AE:95:93:6E:79:6F:7D:8E"}}},"request":{"raw":"GET /jpgjingpinx.com/upload/vod/20231224-1/accb5996ea8075ad23a6281df27a6e88.jpg HTTP/1.1\r\nHost: i1.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30686\r\nlast-modified: Fri, 14 Feb 2025 23:54:51 GMT\r\nexpires: Mon, 15 Feb 2027 11:54:51 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://jpgjingpinx.com/upload/vod/20231224-1/accb5996ea8075ad23a6281df27a6e88.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"46bcdeb14893f6aa\"\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 2\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30686,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 718x404, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bca64364bf9c932496faa168d8a0cd0d","sha1":"3173e3ee86e3aa8a9cfc86fb81305835fc28a311","sha256":"6efa1a30340d2cc23529c111795189a9086358889e44a1a9dfb5993b2f34dade","sha512":"7dc475eb2b6fddccf52336290dcb173fd068235e212455f87f766cfc4740a79695f215451cf238a4c18f922ee480da1413f941b9468174c16c868f410019ffe4","ssdeep":"768:NkI08Gc9BTCf3+80LC7074zGAUjfKkkRbhnLfaTyei41q:eAGEBmfO8gjaVnzEO41q","tlshash":"c0d2f1395718a0f8e31abdb0439808bfd779051acbd79786a2b64037ad53a6343f413b","first_seen":"2025-08-18T05:29:08.596322Z","last_seen":"2025-08-29T05:39:00.292035Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2549,"timings":{"blocked":353,"dns":3,"connect":7,"send":0,"wait":13,"receive":13,"ssl":2150},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"18-girls-av.com/wp-includes/images/w-logo-blue-white-bg.png","fqdn":"18-girls-av.com","domain":"18-girls-av.com","tld":"com"},"ip":{"addr":"162.43.96.5","port":443,"asn":131965,"as":"Xserver Inc.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.18-girls-av.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:13:35 GMT","end":"Wed, 01 Oct 2025 22:13:34 GMT"},"fingerprint":{"sha1":"4E:F6:C4:2F:32:54:16:EF:3C:DB:BC:D2:DC:8E:96:FF:D4:A9:7E:D1","sha256":"D8:DC:51:0B:18:B0:E9:DB:6B:66:8F:F6:2E:25:81:FC:F1:95:14:75:77:0D:90:81:E7:3A:CE:EE:D5:02:15:02"}}},"request":{"raw":"GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1\r\nHost: 18-girls-av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:28:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 4119\r\nlast-modified: Thu, 01 Aug 2024 05:01:06 GMT\r\nexpires: Tue, 18 Aug 2026 05:07:19 GMT\r\ncache-control: max-age=31536000, public\r\netag: W/\"PSA-AAv2ScyPa_\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4119,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"000bf649cc8f6bf27cfb04d1bcdcd3c7","sha1":"d73d2f6d74ec6cdcbae07955592962e77d8ae814","sha256":"6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0","sha512":"73d2ea5ffc572c1ae73f37f8f0ff25e945afee8e077b6ee42ce969e575cdc2d8444f90848ea1cb4d1c9ee4bd725aee2b4576afc25f17d7295a90e1cbfe6edfd5","ssdeep":"96:h3bdWfcmTY+aRF1pXWZL2+42HGhIUc8KeLEd:hgXTY+as02mOB8XLEd","tlshash":"00814b63df38c566e66a2b189ff6bca56b290fd50ca1194c0eecb025632c06d1065089","first_seen":"2023-04-08T12:31:37Z","last_seen":"2026-06-10T01:56:20.450986Z","times_seen":66608,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20240609-1/7e765b2a225b732eea9667cbd64a1808.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.62","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20240609-1/7e765b2a225b732eea9667cbd64a1808.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 96160\r\nlast-modified: Sun, 09 Jun 2024 05:12:17 GMT\r\nvary: Accept-Encoding\r\netag: \"666539b1-177a0\"\r\nexpires: Tue, 19 Aug 2025 16:35:23 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96160,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 718 x 334, 8-bit colormap, non-interlaced","md5":"ce7440f385f8f29bc39d48a05b6e9da5","sha1":"eee110708e8f1f59388301ac9e4484e530be79e4","sha256":"8ab45a39162c5a39d75cff31203811d3f8e82b93e49e7e7e4cf360d4d9f959d3","sha512":"107051871c8cc6dde8e8776eed610cfe1a5da77fe1d865147631898ffd59a7baffb3043a23362060c8e580576dbc1dfe7e86c8feb27afab345dac4a15f77cb67","ssdeep":"1536:AjIOnuR/gdBmuL6fMg0RbjABGN6PCbvNKnE0l2nHNY6meCLITFnwaPK:AjIOuBuL6fNYMEb6muJeCLSnw8K","tlshash":"c99302538203a2d971187b9df9d9d23810ed387b66cc5c69128a1df55aeff210a663c8","first_seen":"2025-08-04T15:48:44.237381Z","last_seen":"2026-05-24T12:50:40.878164Z","times_seen":53,"resource_available":false,"data":null}},"time_used":3813,"timings":{"blocked":1052,"dns":6,"connect":229,"send":0,"wait":163,"receive":2,"ssl":2330},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play.anh.moe/favicon.ico","fqdn":"play.anh.moe","domain":"anh.moe","tld":"moe"},"ip":{"addr":"104.21.43.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anh.moe","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Jul 2025 04:52:08 GMT","end":"Wed, 08 Oct 2025 05:50:24 GMT"},"fingerprint":{"sha1":"C1:AD:83:50:B9:D3:EC:E0:3E:33:84:BC:CE:A5:43:08:8F:D6:A3:37","sha256":"1F:65:1A:41:8A:9A:AE:FF:38:0E:19:4D:BD:12:F7:3F:CC:CA:46:95:86:1A:DB:17:D3:3C:0A:43:2A:AA:04:A4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: play.anh.moe\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Mon, 18 Aug 2025 05:28:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://play.anh.moe\r\nvary: Origin, accept-encoding\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, X-CSRF-TOKEN, X-Requested-With\r\naccess-control-allow-credentials: true\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6mI1ZH9JjwudtQZg8IszbNpUgD0V%2FLMAZFFegVOPJP%2FPHZJiBRY0JKsR0lff%2FQZh8xp%2BZq2KH%2BIqSfKD4LNM7u4QwFankX6YBWs%3D\"}]}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=14400, must-revalidate\r\npragma: no-cache\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\ncf-ray: 970f016ffb99569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":1162,"timings":{"blocked":-1,"dns":29,"connect":16,"send":0,"wait":221,"receive":0,"ssl":778},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stickamvids.net/photos/2019/05/10531_0_300.jpg","fqdn":"stickamvids.net","domain":"stickamvids.net","tld":"net"},"ip":{"addr":"80.92.205.167","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"stickamvids.net","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Jul 2025 23:22:45 GMT","end":"Fri, 24 Oct 2025 23:22:44 GMT"},"fingerprint":{"sha1":"35:A2:7D:CE:1A:D1:98:97:4D:35:18:E3:E3:7C:73:A6:12:04:45:40","sha256":"92:37:E6:C7:AB:10:30:50:25:4C:90:26:5E:0B:9B:18:4C:21:BC:45:0F:1F:AA:23:14:69:73:8C:67:60:02:9D"}}},"request":{"raw":"GET /photos/2019/05/10531_0_300.jpg HTTP/1.1\r\nHost: stickamvids.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Mon, 18 Aug 2025 05:27:57 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 6622\r\nLast-Modified: Wed, 14 Feb 2024 13:08:40 GMT\r\nConnection: keep-alive\r\nETag: \"65ccbb58-19de\"\r\nExpires: Tue, 19 Aug 2025 05:27:57 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6622,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 230x172, components 3","md5":"57cba93f4c17a5aae601ba6c91659ec6","sha1":"a27647f0406cf78e39c18ff817108f3eaa5fd552","sha256":"8b6f46bb4871220e3cac1cd070ed8fcb4356751e78a94c28b10a582b560fd1d6","sha512":"e7560dccbd2994c7ad34a85d61f293bba09501daca303e5cb33e40868ac3d872d6588a4888f3f7fa4704d6d7eaaf6e07345e58f171d15b5a6910ebffe245e754","ssdeep":"192:LQQPD/JSBrA1cHr8RNqI1cAsxWOt+PPCJa2g1S:L5tMr6qIIFKPCc+","tlshash":"49d1af89902bd660bf672abee0796483c711e103916ab13a35d4a30ee6e4cf124d1bd8","first_seen":"2025-06-15T07:12:43.066113Z","last_seen":"2025-08-18T05:29:08.603082Z","times_seen":5,"resource_available":false,"data":null}},"time_used":4596,"timings":{"blocked":1963,"dns":10,"connect":110,"send":0,"wait":105,"receive":0,"ssl":2340},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"motherless.com/favicon.ico","fqdn":"motherless.com","domain":"motherless.com","tld":"com"},"ip":{"addr":"185.107.81.233","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:02.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.motherless.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Wed, 02 Apr 2025 00:00:00 GMT","end":"Sun, 03 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BC:66:10:ED:31:C2:E1:48:61:92:BF:BD:98:9C:71:7C:41:97:BB:15","sha256":"DC:4B:D9:73:E2:0F:70:E0:0F:00:83:14:04:82:39:70:D2:DC:F4:3D:ED:56:CB:DA:C8:73:69:B1:19:73:4A:D9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: motherless.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 18 Aug 2025 05:28:03 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 1150\r\nConnection: keep-alive\r\nLast-Modified: Thu, 20 Apr 2023 06:59:04 GMT\r\nETag: \"6440e2b8-47e\"\r\nX-Server-W: web804\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nCache-Control: max-age=315360000\r\nX-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"71fed71dccb91a13bdf68a6444f25ce4","sha1":"38da7202842147ecda5521d50f094a54d1381f2c","sha256":"18f6675d329e6cb3bb7d7d1e546a1c68c5cc599f1b3ae98c2abbd21a53dc42c2","sha512":"5026edac9534773d52080439a13fe7dd5de5516c7813e062d25501d90ee67cf4cc01cf721070b90fc47f2d164a33a968c475d511c09fa528850a6294bb54795a","ssdeep":"","tlshash":"fc213e8ad700d86cc57456bce13a31f73e88ce40da20286b6f1a3c007c3522178ecc84","first_seen":"2023-05-25T17:44:41Z","last_seen":"2026-05-29T18:20:14.801317Z","times_seen":807,"resource_available":false,"data":null}},"time_used":945,"timings":{"blocked":-1,"dns":7,"connect":19,"send":0,"wait":84,"receive":0,"ssl":822},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/original/1X/30c44880b4d0d19da4efc075c769e94810d38ea8.png","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 16:04:05 GMT","end":"Sun, 09 Nov 2025 16:04:04 GMT"},"fingerprint":{"sha1":"DF:EC:86:BA:09:B3:17:C2:2B:66:0A:BF:62:3E:3C:4D:90:D2:A4:33","sha256":"EF:3A:5A:BF:D7:FE:5F:99:1A:3F:CD:49:ED:AF:84:68:4F:09:27:DC:47:7B:D5:51:4C:E2:DB:A2:A1:6A:3C:FF"}}},"request":{"raw":"GET /uploads/default/original/1X/30c44880b4d0d19da4efc075c769e94810d38ea8.png HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 66415\r\nlast-modified: Wed, 23 Apr 2025 20:00:47 GMT\r\nexpires: Tue, 18 Aug 2026 05:27:55 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":66415,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 180, 8-bit/color RGB, non-interlaced","md5":"acec77d59384f994cd98aa34a196d548","sha1":"30c44880b4d0d19da4efc075c769e94810d38ea8","sha256":"96cfcc33dd7f24bf385e0d98757f832766ff0ccdb5f254cf9cd3d6ca10aa8021","sha512":"d87de18e49ef650bbf64e54636849ddd547be2c70f70c54bbe28cbf6174c8da8ea2da1eabcef305688b8b547c5594768eb5d2792ca60a164573044d7595b3e51","ssdeep":"1536:8alTSit1W/V6qLzVKTb/LKmVj7FGQRqRMSEHcJqoTzxT:8aJS4WYacvRVPUvMSEHgqOzN","tlshash":"e65302acda9bf4858a7634a00434567bf7e5df2782e2103ebaf757600260c52b0b4de6","first_seen":"2025-07-20T11:20:55.62601Z","last_seen":"2025-10-20T16:31:01.012001Z","times_seen":23,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornyc.com/favicon.ico","fqdn":"pornyc.com","domain":"pornyc.com","tld":"com"},"ip":{"addr":"104.21.2.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:02.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornyc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 13:13:14 GMT","end":"Mon, 22 Sep 2025 14:11:38 GMT"},"fingerprint":{"sha1":"8F:2C:9D:5E:1C:7B:DB:39:77:83:B6:6B:48:7E:4D:0C:89:98:DF:09","sha256":"F5:1B:76:96:9A:8A:F9:DB:D8:02:15:CC:97:98:A7:FF:CA:F9:17:48:43:47:AF:50:31:F7:D9:38:14:05:55:E1"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pornyc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 Aug 2025 05:28:02 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 1150\r\nserver: cloudflare\r\nlast-modified: Tue, 21 Sep 2021 08:49:38 GMT\r\netag: \"61499ca2-47e\"\r\nexpires: Fri, 31 Jul 2026 06:57:10 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, no-transform\r\nage: 1549851\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=As0vybq3%2BQgD9qlBRXtPihzSxnC5McCRYfN3tpLFsw46Bbr8xh%2FAsSTiZDskh1KBkz63yuxIw8Uc1rLYO7adgdaloFwiFKuy\"}]}\r\nvary: accept-encoding\r\ncf-ray: 970f0168e9d156ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"76a87b9c0965503d64dc4f0a9b73e3cb","sha1":"b2a7bea1303bb39aea20f3f05b820c8c388efcdf","sha256":"98734b691a87d139a39c2cf171a653311834a47bb9f7aeef888a26b0fc579837","sha512":"cb6b1b18513db2530ed7ffda6f6d84fc9082b205d23a0442f2bbce9711c2df2d541fcf385be4bc0c957e23987efd6cc1def5bdf25b154af90afc5138f1ebb5bb","ssdeep":"","tlshash":"a82168d1b849e91dd338e9fa03edce05a19511007c7850a69b601aa0672a36cf8d91ff","first_seen":"2024-10-22T15:18:10.975603Z","last_seen":"2026-05-24T12:50:40.648517Z","times_seen":292,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241010-11/17d6c4e3abbed6e8e2b3f2aa6d5d582d.png","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.716Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241010-11/17d6c4e3abbed6e8e2b3f2aa6d5d582d.png HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-18","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.apornvideo.com/thumb/young-hindi-desi-teen-takes-a-shower-sex-moviesxxx.jpg","fqdn":"www.apornvideo.com","domain":"apornvideo.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apornvideo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Jun 2025 22:33:59 GMT","end":"Sat, 20 Sep 2025 23:33:57 GMT"},"fingerprint":{"sha1":"0E:31:A8:4A:C0:A9:D0:B9:7D:E4:11:7B:EE:E4:10:42:05:52:F0:92","sha256":"08:27:DA:F5:12:CC:A0:FF:07:6A:14:F4:FA:0B:69:63:F4:16:27:FC:B7:93:7B:D7:7F:AB:46:BB:7E:AB:4D:E3"}}},"request":{"raw":"GET /thumb/young-hindi-desi-teen-takes-a-shower-sex-moviesxxx.jpg HTTP/1.1\r\nHost: www.apornvideo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9276\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sLgHMzTqJWaZr5zoEtw2Fi9fKxuLrr%2BgajeL8caJSsLlaiauE1baPmkw6q81wz6lwuOpZ6EL2PDc7Ij8CvH4QHf0FVTy9tntNfa8iwjqLAE%3D\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 23 Aug 2025 08:48:21 GMT\r\nlast-modified: Thu, 07 Jul 2022 21:00:05 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \r\nage: 160775\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-ray: 970f0145297c56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9276,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 320x180, components 3","md5":"4a17afd376e64d4ef9c260ef424133de","sha1":"fad772ae9e38bac97f238e164c01754db89d8b3a","sha256":"bd028dfd0b9fa60b0c9f749362a962340889fdded5b8af3a6bd6eb831f0e14a3","sha512":"111fb95c5687ebc6524ccf5ee65f53f7af650506bd738ff308a75c99eed20bcc94aa87b73c74a3d9ded3362fce67e510238c2490840bc7dda06db88a07ddbbd6","ssdeep":"192:/IbB5TJMJmtwhhIaWusuv7G1pRXBnTcpq2jqNI0:wbPTeq0JWcSbxIpq2mNI0","tlshash":"13129d75c871fad05c7a3fbd56805db8395e384d786932a0e433cb83c7109d8b5a258d","first_seen":"2025-07-22T04:45:31.738036Z","last_seen":"2026-03-02T16:55:39.748106Z","times_seen":36,"resource_available":false,"data":null}},"time_used":2049,"timings":{"blocked":-1,"dns":10,"connect":33,"send":0,"wait":21,"receive":0,"ssl":1970},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/41/8e/4b/418e4bfe4cd0d834f4f6d160ee284e50-1/418e4bfe4cd0d834f4f6d160ee284e50.30.jpg","fqdn":"cdn77-pic.xvideos-cdn.com","domain":"xvideos-cdn.com","tld":"com"},"ip":{"addr":"185.76.9.7","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xvideos.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 03 Oct 2024 00:00:00 GMT","end":"Mon, 03 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"27:E9:05:C0:A5:FC:40:B1:D6:44:DC:D3:39:EE:11:78:2C:E2:F0:78","sha256":"5F:C0:7A:63:35:DB:CB:28:20:1B:40:83:91:40:36:2B:7A:97:63:77:7A:67:2A:45:FF:4E:80:15:A3:03:3C:4A"}}},"request":{"raw":"GET /videos/thumbs169ll/41/8e/4b/418e4bfe4cd0d834f4f6d160ee284e50-1/418e4bfe4cd0d834f4f6d160ee284e50.30.jpg HTTP/1.1\r\nHost: cdn77-pic.xvideos-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12435\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Mon, 19 Sep 2016 20:33:13 GMT\r\ncache-control: max-age=10368000, public\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBuUwJBgH3jr48AAwBT3/TEgH3IME/AAwBbT1apAH3tuETAA\r\nx-77-nzt-ray: 5451992da7b8403cdab9a268eef73432\r\nx-accel-expires: @1761267782\r\nx-accel-date: 1751513932\r\nx-accel-date-max: 1741145020\r\nx-77-cache: HIT\r\nx-77-age: 3980942\r\nserver: CDN77-Turbo\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":12435,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85\", baseline, precision 8, 352x198, components 3","md5":"6dba17d8323bbb71de0633e56638c15f","sha1":"a2d0ebad60e1199e0ec4d7c9733366dd699185d5","sha256":"a0f1c3ab625898d9c51c672fbb3fc241f69422a486dc50173481a9a330f78a16","sha512":"3b66fb60d6ad132510ab6cd57c4d2ebee69bd3fc2e3c3b985a17102dd5b6d849c4c05f4dacd7962a4dac8e1438e5eae9310327b09743d0320e816d429cc0cc4e","ssdeep":"192:P5VN1UOUg/RP3tW8BJ35kb/Q+61j+NU5XyUWmSyEmQlE5j9tT20+E9Kd:PkOU6Roo5q/L61j+NU1QmSyf3pj+","tlshash":"f442be275290eda2b81e926b50e679756388046078c3aa3739a70882bf720893de961c","first_seen":"2025-08-18T05:29:08.607245Z","last_seen":"2025-08-18T05:29:08.607245Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xgx.mobi/preview/girls-at-age-under-15-doing-porn.jpg","fqdn":"xgx.mobi","domain":"xgx.mobi","tld":"mobi"},"ip":{"addr":"172.67.223.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xgx.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 31 Jul 2025 03:29:05 GMT","end":"Wed, 29 Oct 2025 04:26:22 GMT"},"fingerprint":{"sha1":"70:85:6D:08:D3:3D:DA:A0:EB:F9:19:81:AC:7E:4B:6F:F5:20:38:44","sha256":"9E:BC:A5:51:EA:E5:A5:1C:7C:A2:14:B2:89:B5:2E:A0:5E:AC:AB:86:E8:14:6A:29:D0:34:68:19:91:61:72:26"}}},"request":{"raw":"GET /preview/girls-at-age-under-15-doing-porn.jpg HTTP/1.1\r\nHost: xgx.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23849\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 28 Aug 2025 21:05:41 GMT\r\nlast-modified: Wed, 05 Oct 2022 00:09:18 GMT\r\nx-response-time: 0.055073\r\nx-status: 0.000 HIT\r\nage: 1371611\r\ncache-control: max-age=920264\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wiipthdxRSMkpsM7xQr93ps0heZI5TMauG3jZvYfPyA81g8qyIVz4JD8byqS5dTBe4oO7W3v3uJZRmWquuP67AymGhdDyQ%3D%3D\"}]}\r\ncf-ray: 970f01463df65685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23849,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"\"Girls At Age Under 15 Doing Porn\" saved from https://xgx.mobi\", baseline, precision 8, 564x317, components 3","md5":"6f854c4b8a1eb995617101411b003a46","sha1":"5463aa7d95f4f711e1fc610e90298fd1409d80da","sha256":"259f8e290cf7516c66242039eafb5a9b010cf155957afbb775367f1141ca095d","sha512":"82dcffa103e6d0b5a44e3aa95ee8925a646d7ee31382c05a13430f479fb82f74e44d23b313a3ff11f2f0d16608a7dd37e0fb1eea288862afeb7871002aaad63b","ssdeep":"384:EUE2cJHAu30TRdgOYwWv5aXhNEATMaHIz5VxFnVmUtgM90nJrokq5QQW0S:EUctAK0TRpWhahiAYt/xbmgT90JrPquH","tlshash":"b8b2d1b90f23af0480bfd5621589d67207984ad08e7f96560968f0b5773ace02787bb3","first_seen":"2025-04-11T22:57:41.387019Z","last_seen":"2026-03-03T14:10:03.670225Z","times_seen":83,"resource_available":false,"data":null}},"time_used":3728,"timings":{"blocked":1574,"dns":14,"connect":13,"send":0,"wait":16,"receive":2,"ssl":2086},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.com/upload/vod/20241010-10/77836b3af04b16aae84a86fd4da28dce.png","fqdn":"www.9188porn.com","domain":"9188porn.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:59.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9188porn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 Aug 2025 03:09:41 GMT","end":"Tue, 04 Nov 2025 04:07:22 GMT"},"fingerprint":{"sha1":"EB:B8:01:44:FF:51:3D:14:69:83:0A:39:AA:EF:CC:38:7E:50:BE:11","sha256":"05:E5:3A:05:E1:05:99:09:0C:DA:48:BA:A6:C6:72:62:2B:A1:11:85:17:AA:84:E0:C6:E1:0F:2E:68:63:E2:BD"}}},"request":{"raw":"GET /upload/vod/20241010-10/77836b3af04b16aae84a86fd4da28dce.png HTTP/1.1\r\nHost: www.9188porn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 18 Aug 2025 05:27:59 GMT\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XmDckBPom%2FvnW7L%2B8fb4xRepPQLW0yHHwkznPRKCdTMmVZ%2FIvWJlJeeI%2BBczmZBkE%2FjYw4m9PU002hgxzIPlufbsSuaDD%2Fvt1wzRV9vJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 970f0156bed356b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.apian088.sbs/media/videos/tmb/000/001/927/4.jpg","fqdn":"img.apian088.sbs","domain":"apian088.sbs","tld":"sbs"},"ip":{"addr":"172.96.160.18","port":443,"asn":23470,"as":"RELIABLESITE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.apian088.sbs","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Jul 2025 00:20:15 GMT","end":"Thu, 16 Oct 2025 00:20:14 GMT"},"fingerprint":{"sha1":"1A:44:15:2C:81:51:42:F7:A5:CB:5C:2A:6B:C6:E3:F9:A1:7F:F8:C3","sha256":"65:E3:E0:B1:37:C4:0C:15:0C:73:81:96:E8:BF:18:DF:A8:B9:42:F3:DD:AF:68:6D:B8:F4:20:B7:6A:43:74:C5"}}},"request":{"raw":"GET /media/videos/tmb/000/001/927/4.jpg HTTP/1.1\r\nHost: img.apian088.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 18 Aug 2025 05:27:57 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 6434\r\nLast-Modified: Sat, 23 Mar 2024 12:21:42 GMT\r\nConnection: keep-alive\r\nETag: \"65fec956-1922\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":6434,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"158c99426d8fe38941c3577c6dcca1b7","sha1":"c6c954da1d9df87989508258cce6e75ff85ff809","sha256":"ed3167f74538c9301c970b1b625798a257646bf186f4812b3a28572a24abe3ca","sha512":"4f379e3b5b31af1675ecb728587d432f6899ddcb07e7812521ad8470d7ababa00ed39acba745193cf2a85743124f9aecffb03513350c0642c3b66cea26273469","ssdeep":"96:GzQzYWP4IBW5YFi2gPsg8t7itY7a7UJmrL+qNivQdcolNybb5mIHT44YxWXVfce:GLWP7kTPg7itca7UJsLivDoIHETxWXJJ","tlshash":"39d17d95ee995221fb9c22b1f8a2ff9c2f67ae55114c538f9868e9491fd32cd0c08c94","first_seen":"2024-04-29T10:29:29Z","last_seen":"2026-04-03T21:47:16.584742Z","times_seen":51,"resource_available":false,"data":null}},"time_used":2789,"timings":{"blocked":-1,"dns":5,"connect":167,"send":0,"wait":189,"receive":0,"ssl":2425},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornolomka2.com/favicon.ico","fqdn":"pornolomka2.com","domain":"pornolomka2.com","tld":"com"},"ip":{"addr":"91.194.110.16","port":443,"asn":213166,"as":"UA-Hosting SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pornolomka2.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 22:39:00 GMT","end":"Mon, 20 Oct 2025 22:38:59 GMT"},"fingerprint":{"sha1":"2D:08:DD:58:79:7E:A4:0B:01:CF:E4:8A:E0:C9:48:0D:CD:8D:0A:23","sha256":"33:2C:A6:FD:06:A5:95:EA:DA:92:A1:96:DB:00:53:02:64:F1:FB:98:4F:03:4F:22:20:08:4F:6F:48:7B:73:37"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pornolomka2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx/1.10.3\r\ndate: Mon, 18 Aug 2025 05:25:56 GMT\r\ncontent-type: text/html\r\ncontent-length: 169\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"missvid.com/favicon.ico","fqdn":"missvid.com","domain":"missvid.com","tld":"com"},"ip":{"addr":"45.92.29.80","port":443,"asn":64236,"as":"UNREAL-SERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.missvid.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 07:55:47 GMT","end":"Sun, 09 Nov 2025 07:55:46 GMT"},"fingerprint":{"sha1":"99:10:04:C4:E2:0E:8B:73:80:83:FC:B2:B2:7E:B6:FF:D5:7F:32:D6","sha256":"94:0F:FA:B6:FB:F3:DE:B6:A1:AB:BC:00:18:50:F4:6A:72:D0:F7:CF:51:F8:68:A5:C5:A2:F0:92:FC:75:55:B8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: missvid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:28:04 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\netag: \"68800810-8a\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":1375,"timings":{"blocked":-1,"dns":15,"connect":134,"send":0,"wait":153,"receive":0,"ssl":1009},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fixedjs.jtube.top/AV4.us.jpg","fqdn":"fixedjs.jtube.top","domain":"jtube.top","tld":"top"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jtube.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Jun 2025 14:15:44 GMT","end":"Sat, 27 Sep 2025 15:12:36 GMT"},"fingerprint":{"sha1":"A3:B6:4E:8F:24:4C:E6:A9:DD:02:11:1A:1B:C4:41:C8:7C:6E:B0:32","sha256":"2C:9B:70:34:A1:FF:F0:92:98:F0:1B:09:27:7B:71:D6:F8:2A:F6:FA:56:C7:FF:1E:6A:B8:7E:39:B3:25:0C:C3"}}},"request":{"raw":"GET /AV4.us.jpg HTTP/1.1\r\nHost: fixedjs.jtube.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8741\r\nserver: cloudflare\r\netag: \"2225-614075c7eff6b\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\ncache-control: public, max-age=360000\r\nage: 33126\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3iASSBukzRsCwtYgVfmYfcq6JS8nWeMOzbrD2AiVYVZYvtfBnfau8JwsAfuiVZKVywEWEAP8HktstjV1yg6pCWJavOYCFKzZHkg4I9paBA%3D%3D\"}]}\r\ncf-ray: 970f01360a6cb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8741,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 307x82, components 3","md5":"edfe007a6e5b3d268b2528f564b60b43","sha1":"1644c8ef97c871079e07e5079d613af5cb94052f","sha256":"bf5bb657f5e788af0c02b9b437d3f15bec91e27175e5a654e3d431fb6d063390","sha512":"8eab965dcd5098e29ccc1cf94459fa6b8fda97331a35139ae6c57cacbe0ed733cd53af8f7e2ca8a82c2cb9f785cafe46f4a34f99aadbdde53ca81cae25403d93","ssdeep":"192:YkyyBW+1ajsm2w0aCqPGfAzC4TvykEobWwK5Fi:YkvU4DqufJ4TvyXO0i","tlshash":"b702bf4a2da48fb326c1c5508cdff34b2ec78a5c67efb16f97319e5af4017165904849","first_seen":"2024-04-16T15:37:12Z","last_seen":"2025-11-15T09:18:18.740899Z","times_seen":2006,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gcore-pic.xvideos-cdn.com/videos/thumbs169ll/b2/b3/6b/b2b36b7fb90a0100bd3bfb20a8a5fa56/b2b36b7fb90a0100bd3bfb20a8a5fa56.8.jpg","fqdn":"gcore-pic.xvideos-cdn.com","domain":"xvideos-cdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xvideos.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 03 Oct 2024 00:00:00 GMT","end":"Mon, 03 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"27:E9:05:C0:A5:FC:40:B1:D6:44:DC:D3:39:EE:11:78:2C:E2:F0:78","sha256":"5F:C0:7A:63:35:DB:CB:28:20:1B:40:83:91:40:36:2B:7A:97:63:77:7A:67:2A:45:FF:4E:80:15:A3:03:3C:4A"}}},"request":{"raw":"GET /videos/thumbs169ll/b2/b3/6b/b2b36b7fb90a0100bd3bfb20a8a5fa56/b2b36b7fb90a0100bd3bfb20a8a5fa56.8.jpg HTTP/1.1\r\nHost: gcore-pic.xvideos-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12495\r\ntraceparent: 00-15a39328a5499da5a3fb731bb4561a94-9c4c84961bd7e1f7-01\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Thu, 14 Mar 2019 12:18:51 GMT\r\nexpires: Thu, 29 May 2025 22:16:08 GMT\r\ncache-control: max-age=10368000, public\r\naccess-control-allow-origin: *\r\nx-id-shield: am3-hw-edge-gc131\r\nage: 6936241\r\nx-id: osix-hw-edge-gc4\r\ncache: HIT\r\nx-cached-since: 2025-06-12T11:46:34+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12495,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 352x198, components 3","md5":"7f4c74f5c1d49fb8fa38b9825ea2f1a3","sha1":"4d56fc3de8f2747defc5b1d73eac8ee60ffa112a","sha256":"7ad008dc43c06796ce8a07af1a2cc5eca9022dd8d7f026cc390a7799148e030e","sha512":"9ba747ae2cab5fdc1d7672985f261eee113ccccf5bc491e02d70a338ab889f03db725e8eea0ff8f3df7e1c3a4e7132003e0e0017289e43887634c8f15454418d","ssdeep":"384:yilVvi9MBvM9xiZ8fCYoRFpxQ+IyF5DBgAJi:yilXF8xiZgCtq+3f10","tlshash":"4b42b05352b90711a93e4977836f8b3594b70dbdb2cebe310bc90427d7ba55a460f04b","first_seen":"2025-08-18T05:29:08.611785Z","last_seen":"2025-08-18T05:29:08.611785Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2414,"timings":{"blocked":114,"dns":11,"connect":3,"send":0,"wait":7,"receive":0,"ssl":2267},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realincest.pro/thumbs/336/3824942639029252336_0.jpg","fqdn":"realincest.pro","domain":"realincest.pro","tld":"pro"},"ip":{"addr":"172.67.155.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"realincest.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Jun 2025 21:54:27 GMT","end":"Sat, 20 Sep 2025 22:50:40 GMT"},"fingerprint":{"sha1":"A7:74:C0:D3:D2:68:01:B8:F5:5B:C4:8D:6C:DE:84:7E:B0:91:95:1D","sha256":"AD:BF:36:FC:CC:7E:E6:70:05:0B:19:EE:D0:0B:C4:35:A6:2E:54:D1:AF:76:87:EC:B7:89:E7:A0:9A:62:16:85"}}},"request":{"raw":"GET /thumbs/336/3824942639029252336_0.jpg HTTP/1.1\r\nHost: realincest.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6240\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Mar 2020 23:09:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"5e618698-1860\"\r\nexpires: Wed, 17 Sep 2025 02:03:18 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 12278\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=61zzHi1wdv9zWLRsq0mCFs5oe8Uevr9%2BTiuTLiTzKvxNbOpbDqIsiujwZwVfUGisX0gGYt8qIBNY1coQnLDxslq0GBiOGJOL8nJ9wg%3D%3D\"}]}\r\ncf-ray: 970f0145db3756bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6240,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 240x180, components 3","md5":"a16307d17447d0a66b93e7e4608ebee3","sha1":"4ac57ff9dfd9c6bf21851cbf4c5a69f19a005b36","sha256":"afc407184d7a8db6b2d9c3c878b0426d3d704df38a03ba1793c2396048f07440","sha512":"e2e1b859fc5995534f47c866d4179c592d3e202a54302579f536bcb7a74d2cb595bb863467e215cdf1a47b35ea18fdfe89cf9b236982ad3374994da552c4a80f","ssdeep":"96:Ft3t86G5HCi4jSIYBDwFXvMq/2ttx04YzXtrvpWK6Jk/EnNvtywia57xZFczvDjs:nLqHLsFXvMqrvpl6KEn2wdPGzOlUC","tlshash":"5ad18f83a261e74aff3e167f1626a2dd6609a501c980d137c243513b7faf0c8c57191f","first_seen":"2025-03-22T13:13:11.079999Z","last_seen":"2026-05-12T22:12:52.58834Z","times_seen":16,"resource_available":false,"data":null}},"time_used":2137,"timings":{"blocked":-1,"dns":31,"connect":11,"send":0,"wait":29,"receive":1,"ssl":2038},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornolomka3.com/favicon.ico","fqdn":"pornolomka3.com","domain":"pornolomka3.com","tld":"com"},"ip":{"addr":"91.194.110.16","port":443,"asn":213166,"as":"UA-Hosting SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pornolomka3.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 22:39:10 GMT","end":"Mon, 20 Oct 2025 22:39:09 GMT"},"fingerprint":{"sha1":"00:66:91:FF:F1:AB:08:C2:3C:C2:43:F6:5B:52:C0:60:B5:9D:2F:31","sha256":"8A:31:22:A6:3B:27:CA:3C:35:FD:9F:FF:9A:CB:F7:DB:6F:4B:5F:4F:3A:64:D3:AC:77:C6:EB:CE:57:2E:18:9D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pornolomka3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx/1.10.3\r\ndate: Mon, 18 Aug 2025 05:25:56 GMT\r\ncontent-type: text/html\r\ncontent-length: 169\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":1464,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1464,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sexmutant.com/preview/chibolas-de-15-a-os.jpg","fqdn":"www.sexmutant.com","domain":"sexmutant.com","tld":"com"},"ip":{"addr":"172.67.195.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sexmutant.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 11:11:27 GMT","end":"Thu, 25 Sep 2025 12:08:41 GMT"},"fingerprint":{"sha1":"71:D1:5C:7E:C4:20:97:59:7D:06:19:DF:82:61:AA:A7:C6:7A:FD:AC","sha256":"31:38:43:4B:F1:D7:31:D9:54:54:3B:8B:CA:DA:CC:DE:69:5C:86:FE:BD:FC:52:AB:9D:FC:D2:AC:87:D9:81:6E"}}},"request":{"raw":"GET /preview/chibolas-de-15-a-os.jpg HTTP/1.1\r\nHost: www.sexmutant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 44066\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 09 Sep 2025 13:52:02 GMT\r\nlast-modified: Sat, 13 Nov 2021 02:39:44 GMT\r\nx-response-time: 0.037953\r\nx-status: 0.000 HIT\r\nage: 659987\r\ncache-control: max-age=1931048\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zi%2F8XbgzJIiKPtUp1wxgzDV%2BjbvJPXotoMWX1z7MkQeQgdMUM8%2FbcMMbo8CMhAdFYgNCO%2BbTbWTMC%2FkebmuRMK%2BO1gYAapAjBgmHWqjZ6A%3D%3D\"}]}\r\ncf-ray: 970f01367ac356bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44066,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"\"Chibolas De 15 A Os\" saved from https://www.sexmutant.com\", baseline, precision 8, 564x317, components 3","md5":"da5a41b811226f2f5645a20cd3814611","sha1":"0135728fe7a29853988132e7bb517969e15a612a","sha256":"f235644656b1a3674617c4b65511a4be558e36315c8283c536622406fdfca691","sha512":"512c7f0a03d89dcac6c2441a4cd95788bd70e443ce2d2c17c3bf53c8fa65c11d110186af3df4affd79a919cb1fe4450fd3c4b581c731814f847cd756872b7080","ssdeep":"768:90VYJikOQHKotOdmt0AePeLZ3VD0q5m6bUmWD12y0L798NHc3Z6JJBo+K/3caWeZ:90VYJikOQHKW6SfePOZlD7w+DK1qh8Nm","tlshash":"0d13f17b70205be94ad41e60199be3c8b1bbd959073fb1144c7cf80c74d192bad7aaac","first_seen":"2025-06-07T06:19:16.157987Z","last_seen":"2026-04-12T19:29:51.644954Z","times_seen":8,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":5,"connect":10,"send":0,"wait":28,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youjizz.com/favicon.ico","fqdn":"www.youjizz.com","domain":"youjizz.com","tld":"com"},"ip":{"addr":"66.254.114.242","port":443,"asn":29789,"as":"REFLECTED","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:02.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.youjizz.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Dec 2024 00:00:00 GMT","end":"Tue, 06 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:A8:A8:35:DB:C2:7E:35:C3:7E:2A:75:C8:C8:D8:C6:09:86:45:D7","sha256":"B8:B2:2C:F3:DA:14:43:7C:79:64:F3:2C:36:B2:0A:52:EF:A7:AE:C8:FF:5D:57:E2:D1:26:9D:FD:B8:D7:77:B9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.youjizz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:28:02 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Tue, 25 Feb 2020 06:57:19 GMT\r\netag: \"5e54c54f-10be\"\r\naccept-ranges: bytes\r\nset-cookie: RNLBSERVERID=ded6731; path=/\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version\r\nalt-svc: h3=\":443\"; ma=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"cd65da5df2a2cfd472a198524ec61296","sha1":"e51ea1800eec5985026a37498f4aa7044c757d04","sha256":"321ac040acb1c782abf632960125319b8925361510e13b1a9dfd904a9e733515","sha512":"cc9c5a4b3aa6509950565314184d43312530129c5b891ac8e7bc4f830dfa476c8da2ad281f4482b8f633edd6718536b1313005a26798c4452dca43bbccc21b7d","ssdeep":"24:sub7bP5a7a5TaBFraLahza8C9ajaRGa6RagaAOaAOa5F7aq9ramaP:df5a7iMZcyBSMUGzRnsdOG7NR","tlshash":"7c91efe1972ef89ecb4c82b4e01ad1fdd52e5d08d590031ba0dfbe6b7eb2366147010a","first_seen":"2023-07-17T14:42:33Z","last_seen":"2026-06-09T09:03:15.261121Z","times_seen":678,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":2,"connect":19,"send":0,"wait":35,"receive":1,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js?1","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:06.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /ajax/libs/jquery/3.3.1/jquery.min.js?1 HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30399\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 14 Aug 2025 10:35:17 GMT\r\nexpires: Fri, 14 Aug 2026 10:35:17 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 327169\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86927,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-06-10T02:11:05.47072Z","times_seen":134248,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":13,"connect":0,"send":0,"wait":27,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cav102.com/favicon.ico","fqdn":"cav102.com","domain":"cav102.com","tld":"com"},"ip":{"addr":"45.145.72.132","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cav102.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 15:24:03 GMT","end":"Fri, 17 Oct 2025 15:24:02 GMT"},"fingerprint":{"sha1":"4C:E6:D2:27:03:49:C7:8C:A1:8B:DF:24:7C:A6:C4:E5:3D:A6:C5:F5","sha256":"02:AE:EA:91:A7:2B:29:79:58:2E:C8:D0:32:14:9C:37:11:B8:20:1A:63:46:73:26:EF:73:0C:F8:CB:B2:C5:1D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cav102.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:28:02 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Mon, 25 Jul 2022 15:38:39 GMT\r\netag: \"62deb8ff-10be\"\r\nstrict-transport-security: max-age=31536000\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"79ca959796fd758988aa0acfb9952640","sha1":"8a8e7fa57c016b5cbc943faefc7c651e8959b0ce","sha256":"01d4884a0070a4804680dc80361b4695aa48ca7b37eb6768127b17d9763464cb","sha512":"93862024062645f7a461f4d8b7fac1304642d17c8017d03643a9a20a069437950f2716ec736198b7e201fef0d0d0e3e420e564790e6f8337c8579b87ed530e0f","ssdeep":"24:sueJWJ6kDtRzPzXsComfXGUDe6WSCWn6/+GXG7oJ32n:YkDtRz7XsCn/he9SZU+s2n","tlshash":"899155bbaa7ff1cdec74fe32629006024f2f5d3c46e661838716bd948630c106d8e10a","first_seen":"2024-02-24T21:02:43Z","last_seen":"2026-06-04T11:10:24.28737Z","times_seen":304,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241010-11/57e546a5581574b5cfe949e84bc0d69c.png","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.050Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241010-11/57e546a5581574b5cfe949e84bc0d69c.png HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-18","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sorkab.com/wp-content/uploads/2023/12/0004972.jpg","fqdn":"sorkab.com","domain":"sorkab.com","tld":"com"},"ip":{"addr":"172.67.140.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sorkab.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Jul 2025 05:04:20 GMT","end":"Tue, 30 Sep 2025 06:02:59 GMT"},"fingerprint":{"sha1":"16:84:FD:F0:8B:34:EC:ED:34:DC:E3:85:84:D6:61:18:B4:5E:4B:EA","sha256":"86:34:DF:06:FE:6E:41:05:4E:3F:F6:C9:BA:1A:19:A9:C1:73:4C:60:96:57:81:73:EC:10:89:7B:FF:36:47:0B"}}},"request":{"raw":"GET /wp-content/uploads/2023/12/0004972.jpg HTTP/1.1\r\nHost: sorkab.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24105\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 29 Jul 2026 22:45:30 GMT\r\nlast-modified: Sun, 10 Dec 2023 02:03:57 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: User-Agent,Accept-Encoding,Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: geolocation=(), midi=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), payment=(), fullscreen=(self)\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1644887\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H6GH1r%2FRBtV4nQVoEJQDEzc4MXDDP8KN1gpcCQBtlENZbMcRIKWbHBs2ff7YEWDggDW5b2kQ784IRw7pcI7LarmlQMK2rlRY\"}]}\r\ncf-ray: 970f01386caeb4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24105,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x360, components 3","md5":"9dbc32c318d0eb87dd2596fc0c58e804","sha1":"d055ef529a252c58c6db7146ce46965943f7409e","sha256":"0a7b571aeaa0c6f7c011a3766b9ed98dd9e3fd00de56251b10a0472965550c32","sha512":"582c2a32af2d0ba681663439bf6a5e1c5e9fe81c5239b0db6fc91b280742ba54d4acc9b7d5da4e141d8af03a687ec7c7f503ea51f5c0d47b83ed02d42ceefc92","ssdeep":"384:Im1IfmWLyNKjHb4LnsgIm+d9hgNCDFZNvg9Jpj/FlHZM+s2HITzOPO517Tj6Zdvh:Z4m3NoOIdd9hzfNY9nj/b5M+s2uOPO5y","tlshash":"e3b2f1f49b2db9b39b74eaa90a7f5cd598dd511407f443cc821200e0a8ac1a7be4f3d8","first_seen":"2024-12-19T14:13:56.713165Z","last_seen":"2025-11-14T03:02:02.709454Z","times_seen":21,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.w3schools.com/w3css/4/w3.css","fqdn":"www.w3schools.com","domain":"w3schools.com","tld":"com"},"ip":{"addr":"23.36.76.136","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:01.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"certification.w3schools.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 06:07:48 GMT","end":"Sun, 09 Nov 2025 06:07:47 GMT"},"fingerprint":{"sha1":"2D:4B:B7:99:2C:DB:9C:A3:25:D3:AF:38:20:23:6B:D0:9E:33:CB:F2","sha256":"B6:F5:DB:F2:A0:3A:F9:73:5F:AD:92:0F:16:0E:28:2E:19:C0:1C:7B:B9:68:9E:B5:55:21:94:F8:03:AE:FF:0C"}}},"request":{"raw":"GET /w3css/4/w3.css HTTP/1.1\r\nHost: www.w3schools.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nlast-modified: Mon, 11 Aug 2025 09:32:48 GMT\r\naccept-ranges: bytes\r\netag: \"0605be6a2adc1:0\"\r\ncontent-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com https://pathfinder.w3schools.com;\r\nx-content-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com https://pathfinder.w3schools.com;\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 5256\r\ncache-control: public, max-age=30948136\r\nexpires: Tue, 11 Aug 2026 10:10:17 GMT\r\ndate: Mon, 18 Aug 2025 05:28:01 GMT\r\nx-loc: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23427,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"75b37d4abbdde1322116d2744181081d","sha1":"6d6b5ff442af4682c30e970c382002a7c694ac5b","sha256":"c4f2aba13970ecf8303fb9329f97c8824861569273b0aa27acce48abc61d04f5","sha512":"8ba303e078af3f71176b6e7fa5c32b0f3984014393133a960da7103bc78204a144a3d034a3d1ad7126f1547f45408e00e036175f54766ffccc8cf84cd4c129a5","ssdeep":"384:aHHLO7eS0F4bBY/fn6jZcy9/cGK1q8CarY64Cb+dOy:aHHCLYXfl1q8CarY64Cb+dl","tlshash":"fbb2f022ff8a1138261a873660d5fbfc573a8681df9f1b7a7030373943894c26796e49","first_seen":"2023-06-26T21:08:35Z","last_seen":"2026-06-10T01:52:16.347336Z","times_seen":17010,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":124,"dns":3,"connect":5,"send":0,"wait":12,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pict.ebenporno.com/imgr/a/g/y/u/i/vikas_fucks_maid_while_wife_is_away-4_tmb.jpg","fqdn":"pict.ebenporno.com","domain":"ebenporno.com","tld":"com"},"ip":{"addr":"117.55.203.143","port":443,"asn":3920,"as":"ESTOXY OU","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pict.ebenporno.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Mon, 03 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"AB:97:C6:88:8D:D5:19:20:80:26:B9:F7:50:D9:49:79:99:A1:3F:6A","sha256":"B3:15:49:F7:B0:31:D4:EB:C2:43:1D:D6:51:A3:81:CA:31:F8:56:16:5E:FF:E2:8C:D7:6A:9E:E2:21:CD:1A:15"}}},"request":{"raw":"GET /imgr/a/g/y/u/i/vikas_fucks_maid_while_wife_is_away-4_tmb.jpg HTTP/1.1\r\nHost: pict.ebenporno.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 18 Aug 2025 05:27:57 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 12565\r\nLast-Modified: Tue, 28 Apr 2015 10:55:31 GMT\r\nConnection: keep-alive\r\nETag: \"553f6723-3115\"\r\nExpires: Wed, 17 Sep 2025 05:27:57 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":12565,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", baseline, precision 8, 320x240, components 3","md5":"82578134fc10855287f1f719eeb2b90b","sha1":"08f24519e76fd60b5edfdc11c96a807bc74f32ce","sha256":"da9bc7a3ab2cd8a7b998c50225d0df30b9b60ddbe1f31725fdd149d075953826","sha512":"dea27b82da0eb63c8370ba1bafc63c92668a6d278e5296a9fc64cfff91cc1a1867300586dcade38bde890cd1bcb87ef8f0d3999b029a996f966088925582def4","ssdeep":"192:jF0/S/EIlcJWIShExRZjPcB7GMNZJwtAN/A1CUDnAgNwah2edLTDCUSfC4eyJ3oa:jF0/ShcU+R2BqUrNcTAiwu2EBKJYVnit","tlshash":"1142b03d32d053c4add7c57354263ad2d78ec9ed111b1b3d97d7aa9141608da904898e","first_seen":"2025-06-02T14:12:00.863244Z","last_seen":"2026-01-16T14:52:31.745067Z","times_seen":14,"resource_available":false,"data":null}},"time_used":2497,"timings":{"blocked":-1,"dns":5,"connect":18,"send":0,"wait":27,"receive":0,"ssl":2437},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.com/favicon.ico","fqdn":"www.9188porn.com","domain":"9188porn.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:02.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9188porn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 Aug 2025 03:09:41 GMT","end":"Tue, 04 Nov 2025 04:07:22 GMT"},"fingerprint":{"sha1":"EB:B8:01:44:FF:51:3D:14:69:83:0A:39:AA:EF:CC:38:7E:50:BE:11","sha256":"05:E5:3A:05:E1:05:99:09:0C:DA:48:BA:A6:C6:72:62:2B:A1:11:85:17:AA:84:E0:C6:E1:0F:2E:68:63:E2:BD"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.9188porn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 18 Aug 2025 05:28:02 GMT\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IPT2VN4vgPFjMlF8f8kiBXwlJhHmsEAxFxuDswozVONCELSAmF8fad6NiOtC%2BCR1R2BEP2WNS5hmPTN7DAtcWh3VjdRA84ihUfgB7JvE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 970f0167386256b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sorkab.com/favicon.ico","fqdn":"sorkab.com","domain":"sorkab.com","tld":"com"},"ip":{"addr":"172.67.140.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:02.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sorkab.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Jul 2025 05:04:20 GMT","end":"Tue, 30 Sep 2025 06:02:59 GMT"},"fingerprint":{"sha1":"16:84:FD:F0:8B:34:EC:ED:34:DC:E3:85:84:D6:61:18:B4:5E:4B:EA","sha256":"86:34:DF:06:FE:6E:41:05:4E:3F:F6:C9:BA:1A:19:A9:C1:73:4C:60:96:57:81:73:EC:10:89:7B:FF:36:47:0B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sorkab.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Mon, 18 Aug 2025 05:28:02 GMT\r\ncontent-type: text/html\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nserver: cloudflare\r\nvary: User-Agent,Accept-Encoding,Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: geolocation=(), midi=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), payment=(), fullscreen=(self)\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oQe71tysdknxP%2F8KmwQJ5gJzB8gbaRx14uQDVcU4RdjMrWmfk5qlohxBqkuNhpW%2Bba%2FyjxxI%2FSiB6zShshR8fpmAn8%2Bu2Mey\"}]}\r\ncf-ray: 970f0164e86b0b45-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornoperso.com/favicon.ico","fqdn":"pornoperso.com","domain":"pornoperso.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornoperso.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Jun 2025 10:31:44 GMT","end":"Thu, 18 Sep 2025 11:30:11 GMT"},"fingerprint":{"sha1":"DB:55:F8:33:AA:13:56:2E:55:12:14:F2:6B:C2:7E:C8:8C:1E:32:53","sha256":"9B:70:D9:A9:BB:50:01:07:B8:70:9B:EF:08:46:8F:DF:AF:FB:1A:72:FF:EF:60:7F:E1:4C:02:F1:8A:6C:FA:4F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pornoperso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Mon, 18 Aug 2025 05:28:02 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nversion: MS25061701\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: max-age=300, must-revalidate\r\nstrict-transport-security: max-age=31536000;\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TZmScRw8cqfICM7WkMPuYpZ8BL2itVMUJNCC2sbdjeZtpVVsCWSOy%2BsthQxKJZq2gIiGJ%2F%2FDNG4BfIldJdTnWpok0VxdhxrkLRtjuQ%3D%3D\"}]}\r\nserver: cloudflare\r\nage: 1653981\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 970f016a2c0e5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/original/1X/5fb30b9540d31eeebb55a6d163e22174e3ce30e3.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 16:04:05 GMT","end":"Sun, 09 Nov 2025 16:04:04 GMT"},"fingerprint":{"sha1":"DF:EC:86:BA:09:B3:17:C2:2B:66:0A:BF:62:3E:3C:4D:90:D2:A4:33","sha256":"EF:3A:5A:BF:D7:FE:5F:99:1A:3F:CD:49:ED:AF:84:68:4F:09:27:DC:47:7B:D5:51:4C:E2:DB:A2:A1:6A:3C:FF"}}},"request":{"raw":"GET /uploads/default/original/1X/5fb30b9540d31eeebb55a6d163e22174e3ce30e3.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 137216\r\nlast-modified: Sat, 03 May 2025 01:36:37 GMT\r\nexpires: Tue, 18 Aug 2026 05:27:55 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":137216,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x1789, components 3","md5":"160988c2fadb3cdf19df9ddb90704315","sha1":"5fb30b9540d31eeebb55a6d163e22174e3ce30e3","sha256":"23ab5d1f61abc221db2aece10edcfe5f2119124742745a374912af2059056a14","sha512":"5678ea9c95ce1b41a3ca8dd9396cf97d5f4747129e6d92ff19254dc5c99c16f1f1d5077c6baefd9f3283040642e56be349ed43a7c65950fd97c91867c3bb2c5b","ssdeep":"3072:MsGL5yKdsPffBlZTHVT8raIOmPf00ZbDg2n9PIVymTEcx:l2Q2olTAdFg2n9w3D","tlshash":"08d312a68ee26de4b2cd23c20dc603026bf6497336d4293693d8b6ee3ddc6d2644511e","first_seen":"2025-08-16T16:56:32.556501Z","last_seen":"2025-09-07T18:04:27.150054Z","times_seen":9,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yaebus17.ru/uploads/posts/2024-04/1714154016_1.jpg","fqdn":"yaebus17.ru","domain":"yaebus17.ru","tld":"ru"},"ip":{"addr":"5.129.208.148","port":443,"asn":50923,"as":"Metroset","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:57.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yaebus17.ru","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 00:14:59 GMT","end":"Sun, 09 Nov 2025 00:14:58 GMT"},"fingerprint":{"sha1":"3B:2D:A6:ED:58:65:42:BD:4E:6F:49:5B:21:EF:A4:99:EA:0C:44:51","sha256":"8A:70:89:69:EE:5D:63:08:B9:B3:BE:BC:8D:0E:A1:7B:F9:3D:C2:1C:02:F2:F6:FB:B8:71:17:C9:12:2E:CB:4D"}}},"request":{"raw":"GET /uploads/posts/2024-04/1714154016_1.jpg HTTP/1.1\r\nHost: yaebus17.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://av4.vid4.uk/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:28:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21435\r\nlast-modified: Thu, 12 Jun 2025 21:51:03 GMT\r\netag: \"684b4bc7-53bb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21435,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 299x180, components 3","md5":"2cfb93d8b3b6fbca7d7b48414b615b0f","sha1":"7a28220f50b49cf7171348a8b91f1b1b88b66959","sha256":"060b3648db93e7ea9cffd9f513fb8450eec325278f7552048c661f33ab4c73d8","sha512":"c03073222446a2af917e523a5989c1155289bcae9fb5a85c370b4a6098802dbb54affa7ed28ee83b3929012a59d44e9f2f4e196125eec37968659c22bc8ad23d","ssdeep":"384:2Hkzo/1YuW8FkaEvCCadL0VI0nYfnWoCXnHeZcbgfndK3aP/g8WIglV+pOtguf:mjeGz1bL0VI0YfWovw8DglmOtjf","tlshash":"3da2e0bf086aefd9a4f8013660f05587eacafc5c95729e08f6d877301ccc948236d49a","first_seen":"2025-06-11T07:13:33.954775Z","last_seen":"2025-09-11T07:55:57.08515Z","times_seen":5,"resource_available":false,"data":null}},"time_used":6122,"timings":{"blocked":3039,"dns":11,"connect":37,"send":0,"wait":28,"receive":25,"ssl":2915},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20250804-1/5876c300852b02896b1aff9256d4267a.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.62","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20250804-1/5876c300852b02896b1aff9256d4267a.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 136183\r\nlast-modified: Mon, 04 Aug 2025 06:37:58 GMT\r\nvary: Accept-Encoding\r\netag: \"68905546-213f7\"\r\nexpires: Wed, 03 Sep 2025 07:18:39 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136183,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x360, components 3","md5":"607198e10918110a6b2bf0146f8de37e","sha1":"f6a0fee0b063e9b40d6a75cc52a0de43cc443b28","sha256":"45ef493005860f102ad95dcbe315b003fb293a6613fe89944ad9c40cc7f29f58","sha512":"de749310eb095938f5fc0ec04095fec512516d2e6db99242cee5df40b7554c357adfbdafdd5e176a5dc6889fc6b476b7c2b6c10e79f38b3e8e3f001b8639b013","ssdeep":"3072:SOCFda2BF1c0b5CREdBznJMoFbBtb84JDKtfVeG:SX1qIRFB3Od","tlshash":"dad313c94eb6359becb6ce30930c0a80752e68d4cc79314781a2bde6b7797ef447905a","first_seen":"2025-08-08T23:03:00.236342Z","last_seen":"2025-12-25T17:24:20.042861Z","times_seen":56,"resource_available":false,"data":null}},"time_used":2893,"timings":{"blocked":1908,"dns":0,"connect":0,"send":0,"wait":572,"receive":413,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.steppe-flower.com/favicon.ico","fqdn":"www.steppe-flower.com","domain":"steppe-flower.com","tld":"com"},"ip":{"addr":"104.21.6.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"steppe-flower.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Jul 2025 01:09:47 GMT","end":"Sat, 11 Oct 2025 02:08:19 GMT"},"fingerprint":{"sha1":"CA:E8:1D:F4:23:01:2D:E3:CF:D2:4F:48:B1:82:45:B3:57:BA:55:10","sha256":"D3:C7:75:C1:3B:10:57:91:37:57:E2:80:F2:25:CB:2D:CB:E1:B6:22:94:1E:A2:97:67:27:46:D1:4B:FA:07:09"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.steppe-flower.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Mon, 18 Aug 2025 05:28:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Nsa%2FyKfNTQPA0E%2BDACF2fE7MFp%2FN39Gq8A2nJlTlhJiXwyS9aImDeaViAqEXabpLhgLxQcjUc9X%2FBAl6kW9YWQgb2cVH9youifYenTB%2F0M3fjA%3D\"}]}\r\ncontent-encoding: br\r\nvary: accept-language,accept-charset, accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-language: en\r\nexpires: Mon, 18 Aug 2025 06:01:42 GMT\r\nage: 1657\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 970f016bf94f569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":122,"connect":18,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.youtube.com/vi/BlB1_whIqEg/0.jpg","fqdn":"img.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:06.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"GET /vi/BlB1_whIqEg/0.jpg HTTP/1.1\r\nHost: img.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 17459\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 18 Aug 2025 04:13:26 GMT\r\nexpires: Mon, 18 Aug 2025 06:13:26 GMT\r\ncache-control: public, max-age=7200\r\nage: 4480\r\netag: \"1587413392\"\r\ncontent-type: image/jpeg\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17459,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3","md5":"ddf112d718ef975ffc9bba0b4e89ea85","sha1":"d13d7aa43bdf90017f0f2932f345cdb54813ed79","sha256":"ebada0f66e2a82c6bed1d1d894bd56b1c970f3a12585907c96296240926e8511","sha512":"070c484f5e6cda304d35f20d65f3b512f4cb9b692a4b4d33dcbd6f5edfba82d8745da9c504095bb5168ceb2ed27648ed6f7e68a8389faac6d5beff690cc4025d","ssdeep":"384:e7ZBQm1jbawZVaZfTLmFMLkp6qsC9L5eSGIoqodXZ8Y4/5:ep1j1aZfPoMLkI6Xo3ZvU5","tlshash":"af72bea7666b1112fc073eb6024e03e874d80985bdf04fbb4b81506c5da69eb4ee49f6","first_seen":"2025-08-18T05:29:08.623153Z","last_seen":"2025-08-19T17:55:12.630072Z","times_seen":2,"resource_available":false,"data":null}},"time_used":897,"timings":{"blocked":189,"dns":493,"connect":14,"send":0,"wait":16,"receive":9,"ssl":164},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumb.aporntv.com/thumbs/5/d/e/7/f/5de7700f32fe1real%20incest%20mom%20son%20and%20dad.mp4/5de7700f32fe1real%20incest%20mom%20son%20and%20dad.mp4-3.jpg","fqdn":"thumb.aporntv.com","domain":"aporntv.com","tld":"com"},"ip":{"addr":"104.26.1.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aporntv.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 21:49:41 GMT","end":"Thu, 18 Sep 2025 21:49:40 GMT"},"fingerprint":{"sha1":"50:0C:10:6B:00:1B:44:9C:CE:70:EC:C4:D7:65:07:04:ED:C9:F6:A4","sha256":"2B:C9:C5:75:F1:0B:10:F6:54:65:7D:EE:A5:19:31:FF:89:E0:62:87:A3:4E:9C:14:F8:01:60:B4:66:83:C9:45"}}},"request":{"raw":"GET /thumbs/5/d/e/7/f/5de7700f32fe1real%20incest%20mom%20son%20and%20dad.mp4/5de7700f32fe1real%20incest%20mom%20son%20and%20dad.mp4-3.jpg HTTP/1.1\r\nHost: thumb.aporntv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4954\r\ncf-ray: 970f014b597156a9-OSL\r\ncache-control: public, max-age=16070400\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: status=not_needed\r\netag: \"5de7f653-135a\"\r\nexpires: Fri, 22 Aug 2025 09:01:08 GMT\r\nlast-modified: Wed, 04 Dec 2019 18:09:23 GMT\r\ncf-cache-status: HIT\r\nage: 246409\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=VMTYMQs0azxU24tJyUuNvqx5%2F2omzRARDUUmgQIsVhPl8winipnwGNjLedYFgpTv9RXNDsyndQHcfYwD5643iNrSzsYs4BKqoR7LJmCsfZObkRWbrobfvXpFMhw0c%2F5kTEBi\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1532\u0026min_rtt=418\u0026rtt_var=2040\u0026sent=6\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=2508\u0026recv_bytes=1296\u0026delivery_rate=3464114\u0026cwnd=253\u0026unsent_bytes=0\u0026cid=2ab895a80bc82c90\u0026ts=2151\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4954,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x150, components 3","md5":"ed3085c6d90a9f0934981d8701609670","sha1":"7524b1fa28f2630c38b885fefecef863b8a4c17e","sha256":"8497b958beecb102ea1b2bbedae48b2771c9c6a1e14d17a7899731fea144a382","sha512":"11231d46e05bf39658cf7ff61fc05a499adebaac7fdc5bdc8f9178c5c5dab245286bf1968c40ee2c32f0d802b10c8c94fb29a4b8e0afced6969a313a938ce5fd","ssdeep":"96:TEs3+8Khx+lifTrsVxwATnUL3ihrETJIQfeivbsV+clhlSKUMS2lm6:btlgfszFn5KFvbsRlCKyum6","tlshash":"1fa17cf8134290c2ef654534526ead66e313a4c54bb0716bf056108335fb8507f6a2f9","first_seen":"2025-08-18T05:29:08.626604Z","last_seen":"2025-08-18T05:29:08.626604Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2653,"timings":{"blocked":478,"dns":11,"connect":2,"send":0,"wait":27,"receive":0,"ssl":2133},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gokahani.com/resources/desktop/images/tags_icon.jpg","fqdn":"gokahani.com","domain":"gokahani.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.644Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /resources/desktop/images/tags_icon.jpg HTTP/1.1\r\nHost: gokahani.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hurtsex.com/thumbs/d7f16d1d366a975b154ebbb41670229e.jpg","fqdn":"www.hurtsex.com","domain":"hurtsex.com","tld":"com"},"ip":{"addr":"172.67.173.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hurtsex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 31 Jul 2025 23:39:00 GMT","end":"Thu, 30 Oct 2025 00:36:35 GMT"},"fingerprint":{"sha1":"88:56:19:24:A7:07:38:3D:17:06:4A:83:08:D4:1D:2B:94:F8:92:02","sha256":"0D:AE:DD:F0:D7:06:A1:3A:90:48:15:2F:95:2F:80:3E:16:EF:40:ED:7C:0E:FA:87:27:19:E9:70:5F:E5:DF:08"}}},"request":{"raw":"GET /thumbs/d7f16d1d366a975b154ebbb41670229e.jpg HTTP/1.1\r\nHost: www.hurtsex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8678\r\nserver: cloudflare\r\nlast-modified: Mon, 28 Jul 2014 00:16:51 GMT\r\netag: \"53d59673-21e6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 3776824\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LyrHB8twQjg%2FhV9SiKZtx338s6QwoCI1Ayok4lXjYCEnoETR7bJmTvT6LcpH99gdoRaq6ueW1d7IX%2FB96d34erESIsYNnsu3h4eoKWU%3D\"}]}\r\ncf-ray: 970f0152af1d7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8678,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, software=ACD Systems Digital Imaging, datetime=2010:06:04 19:28:03], baseline, precision 8, 160x120, components 3","md5":"2d2f44c193b3fab1c41bfcc42cb4b5f8","sha1":"63d0241253179b4b9ac0098b021cb43ab4bc9e55","sha256":"fa17f09663947f4c395140006f8737ec135d36b0f42509eb85a25e8b433244cd","sha512":"1650cd10fedb5bd5097903613f74bdc986081640331ec5f90129f85b5450f23d448c9b25d35c90889e93e0c9c5a0bb91ae38611f36a441acbef3d66d109745fb","ssdeep":"192:Ik67/VBZ0VsuqBRGca8qccwzl9WE3u8v4S9M1J:Ik6V0VsuqmZ855blFUJ","tlshash":"be02aedc0c0e2813d700ac3f8ba63bfa556bd7ab0140db1f293879d8be296718a019c4","first_seen":"2025-06-06T07:13:00.534406Z","last_seen":"2026-03-03T14:10:03.795743Z","times_seen":11,"resource_available":false,"data":null}},"time_used":3436,"timings":{"blocked":1032,"dns":12,"connect":36,"send":0,"wait":9,"receive":1,"ssl":2298},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.fastmediaing.my/sdk/p/?zid=9801","fqdn":"cdn.fastmediaing.my","domain":"fastmediaing.my","tld":"my"},"ip":{"addr":"172.67.195.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:56.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fastmediaing.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Jul 2025 12:39:35 GMT","end":"Thu, 09 Oct 2025 13:35:13 GMT"},"fingerprint":{"sha1":"EC:C1:67:30:17:05:74:A5:1C:DA:42:F4:98:1E:86:70:F3:B4:44:BD","sha256":"79:99:58:46:36:D3:4B:3D:A0:FD:12:83:F6:14:D6:D6:E6:6A:C9:3A:C8:0B:58:EA:91:4A:91:15:CA:B1:19:2E"}}},"request":{"raw":"GET /sdk/p/?zid=9801 HTTP/1.1\r\nHost: cdn.fastmediaing.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t17oJfqQ0%2BuBCNy%2BTtHUyd01%2BBfbjiWZuX7ltWxTuI31YMR%2Fog%2BLCCVNkOZNozG%2FzEF13xdOkDyftcD4KJhWl%2BAtWsf8fLv7%2FL5TNirFRGfc\"}]}\r\nx-time: 1755494878\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 970f014ced000b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52286,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (51798)","md5":"e2f53a3d6ecce69a8970272c2089a643","sha1":"3311094e78d86e2377a22dfb9abf07535d93d323","sha256":"62cd8465c6d80462149ae78ee279cbd14d551f072793d8b668d304089d0f0ea0","sha512":"1daaec3f0ae9353ea72b7fc569b95a70977962e4eead4e98338c9c4c23992675b6077be2487789a1e9c3fbe4a19f3955f8c8d3d0254ff1a48d3659b2c8bd95fc","ssdeep":"768:AgEZCGdaxWGkFNU6SmrvpgIzTFwu/P5zOLQNO7ntsTmNKxy4TeGZ64WNI/z4qqHM:EZCGgmyu/P5qmHLW8Egc+","tlshash":"643395883ed06c9813d75f7ab32fa4d4e0664d5e2e84488fe215fd6063e521feab5630","first_seen":"2025-08-18T05:29:08.629932Z","last_seen":"2025-08-18T05:29:08.629932Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2102,"timings":{"blocked":-1,"dns":16,"connect":51,"send":0,"wait":52,"receive":0,"ssl":1972},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mcdn2.tvzvezda.ru/storage/old-images/news/vstrane_i_mire/content/201601211656-wj7p.htm/1.jpg","fqdn":"mcdn2.tvzvezda.ru","domain":"tvzvezda.ru","tld":"ru"},"ip":{"addr":"95.129.232.3","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tvzvezda.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 19 May 2025 13:20:37 GMT","end":"Sat, 20 Jun 2026 13:20:36 GMT"},"fingerprint":{"sha1":"B4:45:CA:59:A9:2D:C2:DB:F5:FF:EC:31:DB:12:20:9E:C1:26:37:7D","sha256":"85:40:74:3B:64:53:52:C5:9E:13:A9:A5:77:29:7A:3F:9D:51:0F:01:97:3F:57:02:77:30:28:30:3C:C5:E8:67"}}},"request":{"raw":"GET /storage/old-images/news/vstrane_i_mire/content/201601211656-wj7p.htm/1.jpg HTTP/1.1\r\nHost: mcdn2.tvzvezda.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=lcHOUsEwIwzddzHz; Domain=.tvzvezda.ru; Path=/; Expires=Mon, 18-Aug-2025 05:47:56 GMT\n__ddg10_=1755494876; Domain=.tvzvezda.ru; Path=/; Expires=Mon, 18-Aug-2025 05:47:56 GMT\n__ddg9_=91.90.42.154; Domain=.tvzvezda.ru; Path=/; Expires=Mon, 18-Aug-2025 05:47:56 GMT\n__ddg1_=wfq20o5NXsAoWouISugX; Domain=.tvzvezda.ru; HttpOnly; Path=/; Expires=Tue, 18-Aug-2026 05:27:56 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Mon, 21 Jul 2025 09:31:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 35027\r\nlast-modified: Tue, 24 May 2022 22:17:43 GMT\r\netag: \"628d5987-88d3\"\r\nexpires: Tue, 21 Jul 2026 09:31:05 GMT\r\ncache-control: max-age=31536000, public\r\naccept-ranges: bytes\r\nage: 2404611\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":35027,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 457x257, components 3","md5":"67cfc8cb9f079ef0df639e3e392dbfd1","sha1":"0be6c294d085c83ac945fef59574ce48b9f0dbe3","sha256":"7b922619b343f5d54cc726938f30091e7d31baf546a878b664680a95cc6b7829","sha512":"4f974f7c653982f63cb296ff446dbe0a3273b21252b49c9f7978f0d013d014d37e7f340a07789413640b12b7bbf18b8b3aa99a99856b0868bab0e67482bde5e9","ssdeep":"768:CiIDQbGTmlwgWRHzN4SN8/otKEuMrLiUykdpNFNm/O:eDmGmOZ4CEMKMA85Nm/O","tlshash":"58f2e131fa2e7b55e466d43255b5be3718df29c040c4c4aa99f0ce186e4f2db31e5326","first_seen":"2025-06-03T07:12:33.376445Z","last_seen":"2026-01-19T21:59:48.00624Z","times_seen":34,"resource_available":false,"data":null}},"time_used":3413,"timings":{"blocked":1505,"dns":42,"connect":20,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20240629-1/1d67f07df1dac59a27b884fec17c9d22.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.62","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20240629-1/1d67f07df1dac59a27b884fec17c9d22.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:56 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nstrict-transport-security: max-age=63072000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":2023,"timings":{"blocked":1219,"dns":0,"connect":0,"send":0,"wait":614,"receive":190,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornogids.cc/contents/videos_screenshots/78000/78994/preview.jpg","fqdn":"pornogids.cc","domain":"pornogids.cc","tld":"cc"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornogids.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Jul 2025 14:47:11 GMT","end":"Mon, 13 Oct 2025 15:44:35 GMT"},"fingerprint":{"sha1":"19:DD:62:75:7E:64:FF:84:35:8D:3F:A3:86:D0:6C:90:E0:25:6F:29","sha256":"16:2A:73:65:E6:88:9B:E7:7F:C2:87:44:29:5E:7B:D7:8D:3D:DA:A2:2D:74:34:62:D0:BC:66:67:20:5E:42:32"}}},"request":{"raw":"GET /contents/videos_screenshots/78000/78994/preview.jpg HTTP/1.1\r\nHost: pornogids.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27055\r\nserver: cloudflare\r\nlast-modified: Sat, 08 Mar 2025 09:18:57 GMT\r\netag: \"67cc0b81-69af\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1480336\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GEBqHzG0RGUHpT1NW0tGvI2b0Hk35%2FpcZJXoUa2oZnDk1XszMrHFtZmZEvLtQuIPTJH16%2BKd8172FgnDZwzkTsn1svHAZjkORzI%3D\"}]}\r\ncf-ray: 970f0143bf5d568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27055,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc60.31.102\", baseline, precision 8, 640x360, components 3","md5":"f9e97ec823af01bc5fa6bb28b9ce05ef","sha1":"76ba9658077bf4c44435b0efa1eb085ddec76eca","sha256":"80976faf3ceb1c363af71560dece0960888ba0883988f1d3ef01afaf1e88a33e","sha512":"86ecca736e80f8a14609be4b8507b5bf2b18457832417e598aaaadfa28728c6bdd9ae0a9a17fd6e2443657a67bf3f75b36c3da1d8f23a2d5bce85863bd711f6a","ssdeep":"384:sKrGD+sLl5Wdly150ZPGSijKka2coOtfh+OvH4ywXygjyNEBC5/kuf0tU6U/jdDg:sKSX5clyuniROtf1vYFXyD5Bvjd2P","tlshash":"02c2e13b3d4055a496f28c3c32165603c51e76f16e97038d9c7b2c64db288e7ee4372a","first_seen":"2025-05-21T07:12:06.52206Z","last_seen":"2025-11-14T08:41:47.71937Z","times_seen":35,"resource_available":false,"data":null}},"time_used":1852,"timings":{"blocked":-1,"dns":17,"connect":1,"send":0,"wait":29,"receive":1,"ssl":1793},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20240524-1/7cdf3f0cef59b3e7737ec90d3113f0c0.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.62","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20240524-1/7cdf3f0cef59b3e7737ec90d3113f0c0.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40860\r\nlast-modified: Fri, 24 May 2024 04:31:47 GMT\r\nvary: Accept-Encoding\r\netag: \"66501833-9f9c\"\r\nexpires: Tue, 19 Aug 2025 19:44:05 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40860,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 646x380, components 3","md5":"dae9027c60b1b757e10647c16630df2a","sha1":"6f52243c6f2ebaa488aea963a40fe7cfe4507535","sha256":"7e304220fcc4668374536e7faf3a443a9451e2e13b7046fa01403d02986fa9b2","sha512":"18e391a4c4a25cdc10269ca75ee57924c427e77654783121054c1c5b47db47fbd52af35c4d856e2b1502bcd06841da0295e5d6e5312fb9b49bb2799c9a6d8aad","ssdeep":"768:LhIQl2S8WcWFRS40jtzxdNS3bgZIp+REurC5G7q5QbcWD6BX2TJeOS6JnM:LhIQ0S8W1FRS4mtNdI3f+REurOGcpW+T","tlshash":"b403026a76471af27258a1b89e907c4e97cdbab26dfe364ad1d72003bf41181c250d1f","first_seen":"2025-05-28T07:11:16.824399Z","last_seen":"2026-03-01T19:27:35.617241Z","times_seen":21,"resource_available":false,"data":null}},"time_used":2039,"timings":{"blocked":1363,"dns":0,"connect":0,"send":0,"wait":613,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241010-11/50465685c3a388851eb330e5de689d06.png","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.313Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241010-11/50465685c3a388851eb330e5de689d06.png HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-18","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sexsex10.com/favicon.ico","fqdn":"sexsex10.com","domain":"sexsex10.com","tld":"com"},"ip":{"addr":"118.107.32.199","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:02.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sex83.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 08:23:53 GMT","end":"Sun, 14 Sep 2025 08:23:52 GMT"},"fingerprint":{"sha1":"0B:7E:0A:8A:80:38:2E:69:4B:02:F6:A7:72:1D:5B:21:2E:80:7E:07","sha256":"04:D2:80:6C:EF:4F:FD:E0:06:E2:E3:E5:DA:05:F3:E7:26:2E:BB:73:FB:62:DF:F6:50:61:94:FB:9E:42:AD:61"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sexsex10.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/x-icon\r\ndate: Mon, 18 Aug 2025 02:49:04 GMT\r\netag: \"645b773c-10be\"\r\nlast-modified: Mon, 18 Aug 2025 05:02:25 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, memory\r\ncontent-length: 4286\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"da00228045bbdc9fc485eee15ae466f7","sha1":"51acd57ef4439a7e622281388e2aa83d53b3fe33","sha256":"18a2fc0c936b1782fb1f1dec65e9ea9dfff00e1a081594c8c3049a5b435c1d2d","sha512":"b7ba13392ab3c6d8c1077989d482399892c1c094599e798b69dc3c6720b5d26dd6186d414f46cacf8ed48061e091d23978248b63cace28ebc601e41348ce608a","ssdeep":"48:uTOtJTTH7TTS/LY64wSKd2sci/6aq3EDP+3yk:uOH73wSKdEv/3v3yk","tlshash":"e2912fa8edf928bfd22403785f0697f8c8338e1f6ce4593308227c9b272ed51848611d","first_seen":"2023-05-17T22:14:46Z","last_seen":"2026-06-04T23:04:17.902241Z","times_seen":565,"resource_available":false,"data":null}},"time_used":3113,"timings":{"blocked":1317,"dns":0,"connect":302,"send":0,"wait":294,"receive":1,"ssl":1069},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"159i.net/uploads/allimg/2411/D-11300P5361Ud0424413.jpg","fqdn":"159i.net","domain":"159i.net","tld":"net"},"ip":{"addr":"172.67.200.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"159i.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 05:41:09 GMT","end":"Thu, 16 Oct 2025 06:39:17 GMT"},"fingerprint":{"sha1":"BC:F2:07:47:C9:15:98:10:69:B2:C4:AE:EB:1E:3D:2C:A4:19:85:D1","sha256":"F8:FA:83:05:EB:8E:F2:DB:51:AA:07:66:2F:A3:4D:3C:0B:2E:70:12:01:75:FD:CB:2D:A2:E8:AC:DF:A3:0F:0D"}}},"request":{"raw":"GET /uploads/allimg/2411/D-11300P5361Ud0424413.jpg HTTP/1.1\r\nHost: 159i.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 32037\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 30 Nov 2024 00:05:36 GMT\r\naccept-ranges: bytes\r\nage: 5743\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7RVH%2BOR%2BgGxatohCWNzKQRiNFH9%2FnkYfTNpY6biQgJ3H%2BFKvykL3ROPCJTCsZJ%2BSAj2t%2BjYjmFsAqxMZwTRiFWuZh0ZxKA%3D%3D\"}]}\r\ncf-ray: 970f0149c87156cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32037,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85\", baseline, precision 8, 800x450, components 3","md5":"dc0c2ae0105109f830263e0e87951900","sha1":"8e0d28cdf79927dea72990054d06fa64ee690ebb","sha256":"c6b5a60f18fa1c338f78ca45175a8751df97479555e34caa5581c44b1db89c03","sha512":"4a699616588c061d48318e0557bc5866cb89d6f7e177b7209f29f8a1d3be9cca6eec6a764f2d6e33f30825cc5ac3ea5cd4d9eea6dcdf531e2966cefa0cbdd5e5","ssdeep":"768:Dk0duUa2OZdhweCdfC1umccqXqp6le06qBw2V2Y0gn9pz:DdduBweCdfCVWqKXAhY0K","tlshash":"7fe24907cc5d8b83545d97f87e076eb86b0e674c9c95abfe06324edb6e242620d4b01e","first_seen":"2025-06-15T07:12:43.043523Z","last_seen":"2025-10-12T01:34:23.242345Z","times_seen":60,"resource_available":false,"data":null}},"time_used":2459,"timings":{"blocked":129,"dns":7,"connect":9,"send":0,"wait":10,"receive":1,"ssl":2295},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.clporn.com/thumbs/36/396--.jpg","fqdn":"www.clporn.com","domain":"clporn.com","tld":"com"},"ip":{"addr":"172.67.222.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clporn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 02:56:44 GMT","end":"Sun, 09 Nov 2025 03:55:26 GMT"},"fingerprint":{"sha1":"5A:F6:F4:35:71:1B:E9:42:58:FC:26:5A:EE:F5:C9:12:AF:9A:61:26","sha256":"86:98:2B:3C:AC:C8:32:9D:CE:71:89:3D:D9:41:6E:2C:A0:12:61:C0:BA:6A:0B:56:5B:7C:A3:4B:57:C6:C7:30"}}},"request":{"raw":"GET /thumbs/36/396--.jpg HTTP/1.1\r\nHost: www.clporn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8603\r\nserver: cloudflare\r\nlast-modified: Tue, 07 Jul 2020 13:08:56 GMT\r\netag: \"5f0473e8-219b\"\r\nexpires: Tue, 04 Aug 2026 02:32:36 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, no-transform\r\nage: 1220118\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EZn0F%2FcLzLa4begxws8xJwliZdJKbjJ2v4UNChpM3SEPDjkNoyFH1hXp4ukcAZC5adpr10kbPMrLDtDucw6KT6ii3GvtRNCUpqVUtg%3D%3D\"}]}\r\ncf-ray: 970f01370a7f56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8603,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 312x208, components 3","md5":"78fcf05b1a085bdf00fdb9789e8b7813","sha1":"cba3dcc1576e971b1aa959479e23578f4d400773","sha256":"33f17a824533b45d8f364ae5b56608a789004e45c744a9df5de615b94801cc4f","sha512":"4f4a80dc00f305ba9f0fb0f2660b4360fbe61c8eaaea424fc5f918c62f382d5da9dc10891a9c1c80cfa93c0a1cca45b6843ce7393d11bdd1a823b96129d47b9c","ssdeep":"192:ZXS/kVLdUEri8XR2XRJQA8/Ulu8PMqW7pt32795QjB7EqcWT:Zi/SLbrfgXRJg8lmlmU17VT","tlshash":"9402ae9b94c8e4d570f11ca8b7630e7b59f687e15202268a07c114619aef3aa1bb781b","first_seen":"2024-05-10T10:13:00Z","last_seen":"2026-03-03T09:47:10.783448Z","times_seen":37,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":7,"connect":10,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"as2.ftcdn.net/v2/jpg/01/71/17/33/1000_F_171173315_HSAoAkTaHXKLpBTAYIvmEVDGCrMV3IYA.jpg","fqdn":"as2.ftcdn.net","domain":"ftcdn.net","tld":"net"},"ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ftcdn.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 14:43:24 GMT","end":"Thu, 02 Oct 2025 14:43:23 GMT"},"fingerprint":{"sha1":"2B:53:65:E1:97:AE:99:02:83:3A:DE:2A:26:D1:1F:25:EF:23:95:EE","sha256":"9E:E2:9C:44:01:ED:8F:DE:88:D3:E7:35:CE:BC:CA:BE:B6:3E:EC:69:B7:74:ED:8C:FD:C0:79:D8:9D:B7:BE:58"}}},"request":{"raw":"GET /v2/jpg/01/71/17/33/1000_F_171173315_HSAoAkTaHXKLpBTAYIvmEVDGCrMV3IYA.jpg HTTP/1.1\r\nHost: as2.ftcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 18 Dec 2020 08:04:19 GMT\r\netag: \"cf95d1b813b75bca7ca358f59dc9c6dc\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\ndate: Mon, 18 Aug 2025 05:27:54 GMT\r\nage: 987763\r\nx-served-by: cache-lhr-egll1980020-LHR, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 1116, 1\r\nstrict-transport-security: max-age=31536000\r\ncontent-length: 115268\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":115268,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2], baseline, precision 8, 1000x563, components 3","md5":"cf95d1b813b75bca7ca358f59dc9c6dc","sha1":"fc2e0e8161d451bb5297215504a703f227a85560","sha256":"e5f43fe6457cc6cf455a1dce279944636f128008800b522d678983dff7f7d056","sha512":"96aa02558194ff68ddd3e07ab3065e1ed65b8199812cada76b32f2aa92f6f4075c3349ebab1e4f0c0f7bc15abf926e21c99478c21759106442fef7ea6eee0508","ssdeep":"1536:SNYRPqmNaquQtCddoi9SKWdEgs9z35dpp8xjgJ0NIvE1teG13tXT6iUNXf8x8sl0:SNYWjQt2uAzpGA0NI8L59Xu7NPWp0","tlshash":"e1b312ca9330bd4ac2a5e470cef944ba238d56d6fd42c641393c4d573fa2768eb540ab","first_seen":"2025-06-03T02:09:38.244529Z","last_seen":"2025-11-17T02:01:22.282673Z","times_seen":4,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":10,"connect":17,"send":0,"wait":20,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.apornvideo.com/favicon.ico","fqdn":"www.apornvideo.com","domain":"apornvideo.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apornvideo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Jun 2025 22:33:59 GMT","end":"Sat, 20 Sep 2025 23:33:57 GMT"},"fingerprint":{"sha1":"0E:31:A8:4A:C0:A9:D0:B9:7D:E4:11:7B:EE:E4:10:42:05:52:F0:92","sha256":"08:27:DA:F5:12:CC:A0:FF:07:6A:14:F4:FA:0B:69:63:F4:16:27:FC:B7:93:7B:D7:7F:AB:46:BB:7E:AB:4D:E3"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.apornvideo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\nserver: cloudflare\r\ndate: Mon, 18 Aug 2025 05:28:02 GMT\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VrQFdYW2iAOxEgOjXbWtn4bM7QQ1unOiprS9HHodnv91isFk62dg7mwxCkyAriJZflr%2F%2BjFnSfpkXWQFkXRogz7zl6vm2umHoWAIjPPsi9c%3D\"}]}\r\ncf-ray: 970f016a48960b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornolomka.com/favicon.ico","fqdn":"pornolomka.com","domain":"pornolomka.com","tld":"com"},"ip":{"addr":"91.194.110.16","port":443,"asn":213166,"as":"UA-Hosting SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:02.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pornolomka.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Jun 2025 22:43:35 GMT","end":"Sat, 20 Sep 2025 22:43:34 GMT"},"fingerprint":{"sha1":"B4:5B:9E:C4:E2:DB:97:3A:0A:DF:3A:58:FC:19:27:8D:8D:78:99:DA","sha256":"04:2A:33:D2:00:B9:C3:2B:5B:9E:23:7A:C2:91:20:AE:17:8C:20:FB:67:96:9F:52:94:5A:75:96:C7:77:31:57"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pornolomka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: nginx/1.10.3\r\ndate: Mon, 18 Aug 2025 05:25:55 GMT\r\ncontent-type: text/html\r\ncontent-length: 185\r\nlocation: https://pornolomka2.com/favicon.ico\r\nstrict-transport-security: max-age=15768000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":361,"timings":{"blocked":46,"dns":10,"connect":28,"send":0,"wait":80,"receive":2,"ssl":170},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jpgjingpinx.com/upload/vod/20250112-1/ed156b326bcc6d01f834bf8ac7420629.jpg","fqdn":"jpgjingpinx.com","domain":"jpgjingpinx.com","tld":"com"},"ip":{"addr":"104.21.26.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:59.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jpgjingpinx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Jun 2025 13:43:33 GMT","end":"Sat, 27 Sep 2025 13:55:11 GMT"},"fingerprint":{"sha1":"0D:D1:54:77:E2:0B:2E:04:33:A1:B6:DA:13:2E:4C:0B:1A:43:9F:5A","sha256":"DD:4B:5E:E7:4E:DF:93:63:C8:C5:F1:BC:45:FF:57:20:52:98:6C:87:D2:0A:BB:DC:B1:19:4D:B4:36:8B:E5:80"}}},"request":{"raw":"GET /upload/vod/20250112-1/ed156b326bcc6d01f834bf8ac7420629.jpg HTTP/1.1\r\nHost: jpgjingpinx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Mon, 18 Aug 2025 05:27:59 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nage: 73\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FtCLoJQmmA9ZnNFCXylfQD%2B6st0rt1eStDWinqq7tzHghDC96hKcVimpKfdWgb%2Ffc01xi6z5ZpifGxpHWRIceZ1CCCkU8sYit8NlM6Y%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 970f01570ec756a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g.uuu.cam/movie/tokyohot/rena.yamamoto/n1025_rena_yamamoto_ss/19.jpg","fqdn":"g.uuu.cam","domain":"uuu.cam","tld":"cam"},"ip":{"addr":"172.67.193.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:00.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uuu.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 01:23:43 GMT","end":"Thu, 16 Oct 2025 02:21:09 GMT"},"fingerprint":{"sha1":"C3:B8:28:3C:2C:A1:24:A1:B6:AC:45:E2:E7:3D:BB:F8:CE:87:D9:C1","sha256":"81:36:15:2F:88:4A:77:E0:FD:F7:1B:D0:BE:E5:05:5B:EB:7A:06:59:66:0C:66:74:3B:E6:EE:46:5D:0D:07:5C"}}},"request":{"raw":"GET /movie/tokyohot/rena.yamamoto/n1025_rena_yamamoto_ss/19.jpg HTTP/1.1\r\nHost: g.uuu.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://av4.vid4.uk/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:28:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40847\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 30 Jun 2015 11:34:55 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=klu3Rd19FNVFNhPbyvHvG0g5HPrjrWufVCIfPtW7DAcSjFtysqv645YrXsJXkcRgxTK63XKCFKIT3oBmY8qh4XdT%2F0wZ7kQ%3D\"}]}\r\netag: \"55927edf-9f8f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 429182\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\ncf-ray: 970f0159be9556c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40847,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 700x393, components 3","md5":"437b0399f2f8babb36e457803f65fb24","sha1":"825f0e33cb1c79480b23f6e0f1ce98628e6f998a","sha256":"7a96fe80c293ed400aef6a020aabd94f73a91f890f43f466b2a01651e72d313c","sha512":"e767bc4d8d80bfc513594ed3d7a10b65711c43d2a95f957834517f224e15319d42d3cbbba9713dfcbeedfe9c3f4a7feff90d2ab993b68cc8f743969d66f18b1b","ssdeep":"768:Krz5To68n7OO55N84gZ+3/WjzXHqMxcrZb1+CCTEyIBsJKHjXIaOuOKN:c5To68iO55N8fZ+PWPXQR1+JTEdK8XIc","tlshash":"7b0302cd93227f0946963c88c431d1269b5fbb85854020d79df564ef27a07fb2c35d8a","first_seen":"2024-08-19T19:51:34.32664Z","last_seen":"2025-12-07T01:27:28.229733Z","times_seen":3,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xvideosrei.com/wp-content/uploads/2021/08/https-xvideosrei-com-porno-novinha-mostrando-os-peitinhos.jpg","fqdn":"xvideosrei.com","domain":"xvideosrei.com","tld":"com"},"ip":{"addr":"194.102.104.213","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xvideosrei.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 12:24:51 GMT","end":"Tue, 28 Oct 2025 12:24:50 GMT"},"fingerprint":{"sha1":"A0:30:D4:FA:D2:DC:B3:94:F2:3B:8A:C2:5F:7C:B1:DA:5C:3D:4F:12","sha256":"04:44:9F:44:21:F8:A8:56:32:CF:41:4C:93:54:3A:6E:A7:A0:39:F9:96:6D:E7:DB:0B:82:E4:63:3F:7A:BF:19"}}},"request":{"raw":"GET /wp-content/uploads/2021/08/https-xvideosrei-com-porno-novinha-mostrando-os-peitinhos.jpg HTTP/1.1\r\nHost: xvideosrei.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 18 Aug 2025 05:27:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21607\r\nlast-modified: Wed, 11 Aug 2021 22:24:09 GMT\r\netag: \"61144e09-5467\"\r\nversion: MS25061701\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=2592000, must-revalidate\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nx-served-by: xvideosrei.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21607,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x337, components 3","md5":"8fafcf42ba91da484d1a4ebc71708582","sha1":"6ca4f491c963bb551d987b8408f670cd98f14722","sha256":"34d1eb796371dbb0b3e4eed20e0e007ac17e717d9400f180c124cf6d70eebece","sha512":"d79f05773cdb8b4bdef953ef00777fba356f3202606a2b08274485a333578328a875f04f685ec78608d04630ec883e57b048c9a457825a98aae471029237aa44","ssdeep":"384:7RU3bZ86rz03sAR7cXE8kzaf6ZE4aiQXRPplkPzU:7MlrzN6cXUA66JiQX52U","tlshash":"bba2cf074c4c1aa3f49ad3f6fe1b1e8e67166b48fa427fab00111ee77ba49214c4d41e","first_seen":"2025-05-21T07:12:06.518252Z","last_seen":"2026-02-12T20:20:41.841661Z","times_seen":24,"resource_available":false,"data":null}},"time_used":2663,"timings":{"blocked":-1,"dns":11,"connect":59,"send":0,"wait":239,"receive":20,"ssl":2317},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cav102.com/contents/videos_screenshots/7000/7268/preview.jpg","fqdn":"cav102.com","domain":"cav102.com","tld":"com"},"ip":{"addr":"45.145.72.132","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cav102.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 15:24:03 GMT","end":"Fri, 17 Oct 2025 15:24:02 GMT"},"fingerprint":{"sha1":"4C:E6:D2:27:03:49:C7:8C:A1:8B:DF:24:7C:A6:C4:E5:3D:A6:C5:F5","sha256":"02:AE:EA:91:A7:2B:29:79:58:2E:C8:D0:32:14:9C:37:11:B8:20:1A:63:46:73:26:EF:73:0C:F8:CB:B2:C5:1D"}}},"request":{"raw":"GET /contents/videos_screenshots/7000/7268/preview.jpg HTTP/1.1\r\nHost: cav102.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 104073\r\nlast-modified: Sun, 25 Sep 2022 19:00:11 GMT\r\netag: \"6330a53b-19689\"\r\nexpires: Mon, 18 Aug 2025 05:28:59 GMT\r\ncache-control: max-age=60\r\nstrict-transport-security: max-age=31536000\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":104073,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.89.100\", baseline, precision 8, 720x1280, components 3","md5":"9b893f32567e852fb3a1fcdfb881926f","sha1":"797d89c6b0af79d9c4682b004be77e4296d7d77e","sha256":"d6bfa10297c9b6c29bdf28822a7bbbacd737b9d19a307577672ce9c697c77cd3","sha512":"70aeb8b9155e8b0918bd219bd21744d044133d4ea5954018b03001eade510c2d36239bfaf5cbdd82c348028750248cba66270ff6f2ac9813a559044d7f42f7e5","ssdeep":"3072:eB35T1IK0tEhYcDLj44RWZ108Rec/JlaV4IA6PcK:eBx53GajnK10cec/Ha61K","tlshash":"f3a312fb36c2c7548ff8ac33219d3482a54de85669bb71dc1394ae1ba028db2570c49f","first_seen":"2024-12-07T03:44:49.555286Z","last_seen":"2026-03-01T16:28:28.707284Z","times_seen":75,"resource_available":false,"data":null}},"time_used":3986,"timings":{"blocked":769,"dns":9,"connect":170,"send":0,"wait":274,"receive":317,"ssl":2377},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4.nudegirls.wiki/uploads11/posters/1/768/skinny-brush-brush-brush-spit-noLBou.jpg","fqdn":"cdn4.nudegirls.wiki","domain":"nudegirls.wiki","tld":"wiki"},"ip":{"addr":"134.19.178.222","port":443,"asn":49453,"as":"Global Layer B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn4.nudegirls.wiki","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 Aug 2025 03:48:35 GMT","end":"Mon, 03 Nov 2025 03:48:34 GMT"},"fingerprint":{"sha1":"8E:CD:81:8F:FA:68:DE:C8:60:B7:80:62:21:63:5A:CE:6C:84:7B:D2","sha256":"F5:2C:CF:53:FD:15:6D:A5:3B:7B:14:B1:59:7A:1A:E0:6E:A5:3F:A5:14:54:BE:F6:E3:27:A1:78:05:22:D3:02"}}},"request":{"raw":"GET /uploads11/posters/1/768/skinny-brush-brush-brush-spit-noLBou.jpg HTTP/1.1\r\nHost: cdn4.nudegirls.wiki\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10073\r\nlast-modified: Tue, 15 Mar 2022 13:13:37 GMT\r\netag: \"62309101-2759\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10073,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 216x366, components 3","md5":"092f0af3d44e55a38f25a72cd9db8aa1","sha1":"542c48736fffb15ebc3ff36e847e9e5612836b6a","sha256":"a74d5a6f7b46096abb139bb67bbd658100d73d5c4f48919dbc7dd1d209b8c38a","sha512":"b8730eef393f1237198584b7c3a9efa847cec082319f1cde2b7e64681b0188e21f0cb7745879294afafa080e895c19c4798b4dd917e5913033cc6bb9924e68cf","ssdeep":"192:ZCMGgz9v1Xb49mV+dD/Opocu9H35Qt4W0BADr2NG6XOfJmRTlAl:Z7hZ+8+dDWp27QeBADyNG6+mRT0","tlshash":"a122be5931d37706ec0ef5bd7341e3382b06d2a42a5bce8f316ae7a911c06a50fb351a","first_seen":"2025-06-02T14:12:00.718462Z","last_seen":"2025-09-25T14:10:40.183573Z","times_seen":11,"resource_available":false,"data":null}},"time_used":3079,"timings":{"blocked":758,"dns":10,"connect":50,"send":0,"wait":35,"receive":0,"ssl":2193},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.abcotvs.com/dip/images/5600472_100719-kfsn-11p-kassidy-salas-vid.jpg?w=1600","fqdn":"cdn.abcotvs.com","domain":"abcotvs.com","tld":"com"},"ip":{"addr":"184.25.3.167","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn1.edgedatg.com","organization":"The Walt Disney Company"},"issuer":{"commonName":"COMODO ECC Organization Validation Secure Server CA","organization":"COMODO CA Limited"},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"ED:8A:51:A9:A5:5E:9E:4F:61:F8:1B:C1:89:17:4E:2F:76:1C:BC:E3","sha256":"FC:6B:F9:C6:0F:FB:69:DF:9F:82:12:B7:F1:2F:46:A1:5B:CC:2A:99:17:6D:C2:A8:A8:8B:D0:B7:52:A2:34:DE"}}},"request":{"raw":"GET /dip/images/5600472_100719-kfsn-11p-kassidy-salas-vid.jpg?w=1600 HTTP/1.1\r\nHost: cdn.abcotvs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/jpeg\r\nX-Varnish: 90796662\r\nAccept-Ranges: bytes\r\nDate: Mon, 18 Aug 2025 05:27:59 GMT\r\nContent-Length: 370830\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":370830,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1600x900, components 3","md5":"3293dcca0563ecdd69cbd456cbc60f82","sha1":"c904509d6c826f4777dd9d4187164f57a5b6117e","sha256":"8bb04b4cc96ba97684f4830d2f792dd16f4228b693875f195f6e84b589070117","sha512":"23a9a901b6e06c86fde91ec56b3015461488818affe00c0f8b0f7db3b06224ac7472f9f9a6f4676f00c945019538436308b2d5195d72c4b9d1006a28f3e86476","ssdeep":"6144:MJAkDzDYzFlWrcm0QtINQwQxxqLaicuQuaJvUeW1U7/+6xnCJpZBcOnNRM:MJvAzFqAQtRwQOLaicuRaqB1WCvZBpnU","tlshash":"717423d1b0fde604e51eb0aebc42516840f1d595fc6b3b2a5805fc7b5bac54a0ab8ecc","first_seen":"2024-12-08T18:32:56.264289Z","last_seen":"2026-03-01T22:30:17.140309Z","times_seen":57,"resource_available":false,"data":null}},"time_used":3448,"timings":{"blocked":1034,"dns":16,"connect":39,"send":0,"wait":8,"receive":14,"ssl":2308},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapello.com/content/b/a/babylipss13/1000/babylipss13_0019.jpg","fqdn":"fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"104.20.18.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 20:21:00 GMT","end":"Sun, 28 Sep 2025 21:20:57 GMT"},"fingerprint":{"sha1":"A0:2D:9E:EB:53:F2:55:DE:A9:23:BE:C7:B5:45:34:70:94:30:FE:9F","sha256":"C1:D4:49:D9:B2:79:A3:31:A2:AD:7F:29:BE:21:A4:89:6E:63:0D:5C:51:2D:3D:33:A2:8D:51:4B:BF:13:ED:EC"}}},"request":{"raw":"GET /content/b/a/babylipss13/1000/babylipss13_0019.jpg HTTP/1.1\r\nHost: fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16627\r\ncf-ray: 970f0147ec5656ab-OSL\r\nlast-modified: Wed, 06 Jul 2022 20:35:16 GMT\r\netag: \"62c5f204-40f3\"\r\nexpires: Sat, 23 Aug 2025 06:11:10 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 170206\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16627,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc58.54.100\", baseline, precision 8, 264x480, components 3","md5":"068c5b7fc9ce04f0baf544622bb562e2","sha1":"c1ee99a7f221bd528c53b869aa11afb202d20dfb","sha256":"ab86c351e1fc40564fb8b1361af79f38232e308bbc98a678eefe9bab615b0db9","sha512":"9824efd06ba80a84507e2aba4362e28ba1e29efb02b100a3a889839a111bef4ad5726902502ba479853bddc058cd0d48a5f2f17ed2eab3b806fd902e27924d61","ssdeep":"384:wYy+FMi8w4PEF8jjsWw5hvdYjf/yU3MLPBaBAp7FnTuSWK/u:ty+gDEFQjsWw5oD6U3MLPBqQZnTudK/u","tlshash":"c872d0cb7631141be85ee3ae9d538e7b50fb2734191a084eae4f1434e6162b09889523","first_seen":"2025-08-06T16:36:49.224051Z","last_seen":"2026-04-03T21:47:16.571335Z","times_seen":22,"resource_available":false,"data":null}},"time_used":3856,"timings":{"blocked":1621,"dns":10,"connect":1,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.manyvids.com/favicon.ico","fqdn":"www.manyvids.com","domain":"manyvids.com","tld":"com"},"ip":{"addr":"54.240.174.37","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.manyvids.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 11 Dec 2024 00:00:00 GMT","end":"Sat, 10 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:BD:1E:7B:79:B2:1A:F3:8F:5F:16:39:8E:49:1A:F4:D9:9F:1F:2A","sha256":"6A:DC:C7:D1:D2:7F:95:B0:40:6A:EE:D0:02:28:9E:9E:B2:DE:D4:DA:C0:9A:3F:A7:CF:24:98:79:C4:E7:E2:56"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.manyvids.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-length: 15086\r\ndate: Tue, 29 Jul 2025 19:05:33 GMT\r\nset-cookie: AWSALB=Wjnwvb8Rnvu8j33SIJg3CNLbZtt4aMCW2wOjZoimmjuNrJ4pmJvJr5KGmyZCj08hZM09Zsb/wYIHS4rhXFCLSGEerU76vjQB04VFYQ7lJ3pSobymml3QSkqiYlnL; Expires=Tue, 05 Aug 2025 19:05:33 GMT; Path=/\nAWSALBCORS=Wjnwvb8Rnvu8j33SIJg3CNLbZtt4aMCW2wOjZoimmjuNrJ4pmJvJr5KGmyZCj08hZM09Zsb/wYIHS4rhXFCLSGEerU76vjQB04VFYQ7lJ3pSobymml3QSkqiYlnL; Expires=Tue, 05 Aug 2025 19:05:33 GMT; Path=/; SameSite=None; Secure\r\nlast-modified: Tue, 29 Jul 2025 13:45:40 GMT\r\netag: \"3aee-63b119fb22900\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Thu, 28 Aug 2025 19:05:33 GMT\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 36C7yzjPQOAtDaitpDobyrXToAW1WFLOkFHEaWdJWszwShxr4-UFRA==\r\nage: 1678950\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"b4c706c77e46f093de900a6a7bc51305","sha1":"27ef8b88481324b5756e84eee68f3bb98dd1d62c","sha256":"a8b4eab72261736e4fb04fd45b07487dd64025b4c0f0aa1f3e5942538f6e6d1f","sha512":"5ce7a4035f298d6200b1d7a86215fe07eb7d5e2daa45a84abb1a3860058f21889bc6418130b80cf97e218a707b4c62746337ac80ab5ad23d7c4f783291e0a449","ssdeep":"96:j6eMYYw9oO847mI9zFWIwPcJN4+CunDUjZhNPgfz:jjMYLg47V9zFWIwUJNwuDqZfPgL","tlshash":"2d62db50074fbc4bd9645ef0583a057a4ae66fa2c07c3bce716fbd811fb2252204ed9a","first_seen":"2024-09-19T21:52:34.333836Z","last_seen":"2026-05-19T07:01:35.158694Z","times_seen":95,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":8,"connect":7,"send":0,"wait":30,"receive":1,"ssl":374},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gettyimages.no/favicon.ico","fqdn":"www.gettyimages.no","domain":"gettyimages.no","tld":"no"},"ip":{"addr":"3.167.2.85","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.gettyimages.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Sat, 18 Jan 2025 00:00:00 GMT","end":"Sun, 15 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"88:CD:2C:2D:C4:66:05:DF:F9:4E:9D:DD:90:E4:82:97:74:80:D2:63","sha256":"7F:E3:88:5E:26:8F:F7:EA:BF:56:EE:C3:42:79:74:EF:02:0B:66:CC:D6:72:C7:D5:82:26:CD:CB:3B:32:F3:1D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.gettyimages.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/x-icon\r\ncontent-length: 5430\r\ndate: Mon, 18 Aug 2025 05:28:03 GMT\r\nselected-fe: getty_frontend\r\nlast-modified: Tue, 12 Aug 2025 16:30:32 GMT\r\naccept-ranges: bytes\r\nx-backend: app_landing\r\nx-proxy-build: 2876300\r\nstrict-transport-security: max-age=2592000\r\nx-timing-wait: 26/0/0/1\r\netag: \"689b6c28-1536\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 94fbdabfcc07b91a0e8ffbb741347df8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: tzZ5j-kXAPQ304-FY6GmUI-5gAZJJgvm0jIf8a_-ziQAkAUa8IBorA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":5430,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"fe929595b29a6bcada00c6ba5d8cebfa","sha1":"011a0927b40e8970b79dc7ba47d3dd40d612d4c6","sha256":"9799af79458a084207b19b9ac02da7d31087dbbe41f62c7edb0c81deeea54c4d","sha512":"8554cbab5f3e16999ada3b18e246e67b8d026ccbf892d915e945ef77f56a4b224ffaf367fd059860ae944afe076b593855c278993d5f07ec917866ce88d46fcc","ssdeep":"24:E3f8UofQgm1YGbIbMeAqU1miHbn4sLQaIQ:XG1/Iqb4sLPd","tlshash":"9bb131252b20c758d8b89a7956239fca62f97e203abdfc0051e5bcbd247b4c3504b25b","first_seen":"2023-09-11T18:38:57Z","last_seen":"2026-03-23T00:43:39.257037Z","times_seen":16,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chomikuj.pl/ImageThumbnail.aspx?id=8665881655","fqdn":"chomikuj.pl","domain":"chomikuj.pl","tld":"pl"},"ip":{"addr":"104.20.20.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chomikuj.pl","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Jul 2025 02:24:17 GMT","end":"Fri, 10 Oct 2025 03:24:13 GMT"},"fingerprint":{"sha1":"ED:AF:6A:5A:23:58:8F:75:8C:69:F2:59:EE:AB:E5:CB:88:6C:9D:BD","sha256":"5C:2C:69:A1:6C:E0:FC:F2:B1:BD:86:16:70:4D:CE:13:0D:A5:66:8B:3A:4C:DD:AB:30:6A:0E:53:A1:A5:F4:3F"}}},"request":{"raw":"GET /ImageThumbnail.aspx?id=8665881655 HTTP/1.1\r\nHost: chomikuj.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 18 Aug 2025 05:27:54 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 276\r\nlocation: https://s9631.chomikuj.pl/Thumbnail.aspx?e=MkuKgTvUyRu9YxDVl_desn9tri8p_ZHeJb6gxMX2KyC44TsC3kPeqlSW9TEdS-mcYHeer7Ax8Eq1zqWCn40x21Y4MXz4doOMwSQmOft25Po\u0026pv=2\r\ncf-ray: 970f0138089c56a5-OSL\r\ncache-control: private\r\nset-cookie: rcid=6; expires=Tue, 18-Aug-2026 05:27:54 GMT; path=/; SameSite=Lax\r\nx-server: m51\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmaza.co/favicon.ico","fqdn":"xmaza.co","domain":"xmaza.co","tld":"co"},"ip":{"addr":"104.21.44.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmaza.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:43:15 GMT","end":"Sun, 21 Sep 2025 09:41:38 GMT"},"fingerprint":{"sha1":"C2:26:7A:91:7F:53:BC:6C:8F:5E:01:94:13:E8:19:0B:5C:2A:B8:25","sha256":"80:79:77:D5:22:CE:CD:55:E0:FD:A0:C3:A8:A9:1F:2A:15:1A:7E:C6:59:D0:59:E4:11:7D:04:BD:07:68:2E:F7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xmaza.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://xmaza.co/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-redirect-by: WordPress\r\nlocation: https://xmaza.co/wp-content/uploads/2024/10/icon-150x150.png\r\nvary: accept-encoding\r\ndate: Mon, 18 Aug 2025 05:28:02 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HtBXnFghBlN7dY54HLQ5qLiTYqgtexgNPhqrvZ40yjE3S6K2uZ7zO%2BfLYjxldsXFe%2FS4A%2BFK5HZoRWUjywQM3v2qNqL8yQ%3D%3D\"}]}\r\ncf-ray: 970f01694d2156b5-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10153,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oedy9.com/favicon.ico","fqdn":"oedy9.com","domain":"oedy9.com","tld":"com"},"ip":{"addr":"45.92.29.80","port":443,"asn":64236,"as":"UNREAL-SERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:02.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.oedy9.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 07:53:40 GMT","end":"Sun, 09 Nov 2025 07:53:39 GMT"},"fingerprint":{"sha1":"A2:06:65:4A:90:B6:18:CA:AD:9D:D8:6B:CA:ED:D7:66:59:C5:32:9F","sha256":"62:22:2B:F0:AD:CC:FD:A7:BA:3F:FC:12:95:03:05:19:AF:5D:25:E6:F2:4D:23:42:9E:C4:E6:B0:8D:80:DA:14"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: oedy9.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:28:03 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\netag: \"68800810-8a\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":2180,"timings":{"blocked":925,"dns":2,"connect":142,"send":0,"wait":151,"receive":0,"ssl":921},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"as1.ftcdn.net/v2/jpg/05/61/66/50/1000_F_561665045_QedPBn9P1ZZ9XFpm9y1SCq71uam3jTMF.jpg","fqdn":"as1.ftcdn.net","domain":"ftcdn.net","tld":"net"},"ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ftcdn.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 14:43:24 GMT","end":"Thu, 02 Oct 2025 14:43:23 GMT"},"fingerprint":{"sha1":"2B:53:65:E1:97:AE:99:02:83:3A:DE:2A:26:D1:1F:25:EF:23:95:EE","sha256":"9E:E2:9C:44:01:ED:8F:DE:88:D3:E7:35:CE:BC:CA:BE:B6:3E:EC:69:B7:74:ED:8C:FD:C0:79:D8:9D:B7:BE:58"}}},"request":{"raw":"GET /v2/jpg/05/61/66/50/1000_F_561665045_QedPBn9P1ZZ9XFpm9y1SCq71uam3jTMF.jpg HTTP/1.1\r\nHost: as1.ftcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 16 Jan 2023 00:28:20 GMT\r\netag: \"7e0ca31f12e89fee9c005075466d2966\"\r\nx-amz-server-side-encryption: AES256\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\ndate: Mon, 18 Aug 2025 05:27:55 GMT\r\nage: 27524\r\nx-served-by: cache-lhr-egll1980084-LHR, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 22, 1\r\nstrict-transport-security: max-age=31536000\r\ncontent-length: 112035\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":112035,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2], baseline, precision 8, 1000x563, components 3","md5":"7e0ca31f12e89fee9c005075466d2966","sha1":"bcd21b6b4415133e0058ed4ed338e169877b9670","sha256":"0a9e7e61f6cf8eb56c4c0e0e0e53a4d881f8a3e4dcc15ce27cc8acdee0135e45","sha512":"b25f95819077c5e10216610cd23c473c9949ba2cd21a5cead60c37d552a8a031cfb9b0051f98c812f5e371eb6fdde77b0c78889ff4b8062e3949e0e38f269c6a","ssdeep":"1536:Su59o9i39PZOzAOFUOIT0rHFGZKsMOAD7ypPr4KXJfqu6H7QoXTsQ72qzNWtHh9:SGVN8ZFRHgl2D7ypPr4wJfPo3XYn","tlshash":"40b312919faa37d8ef9ee734b46e05a604039537ccda6cc7b81f384bd7a625844068dc","first_seen":"2025-08-18T05:29:08.647954Z","last_seen":"2025-08-18T05:29:08.647954Z","times_seen":1,"resource_available":false,"data":null}},"time_used":631,"timings":{"blocked":594,"dns":7,"connect":0,"send":0,"wait":14,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.imghuo.cfd/sp/media/videos/tmb/336/1.jpg","fqdn":"img.imghuo.cfd","domain":"imghuo.cfd","tld":"cfd"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.imghuo.cfd","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 10:08:50 GMT","end":"Tue, 14 Oct 2025 10:08:49 GMT"},"fingerprint":{"sha1":"2F:E3:26:95:B5:80:CB:E9:5D:3A:66:05:15:9A:CA:84:29:D2:83:27","sha256":"C6:D7:07:B0:13:8C:BC:69:54:67:4A:C3:A7:2F:DD:05:2A:4B:74:22:36:4E:BB:BD:3A:71:DA:AC:BE:5B:EB:77"}}},"request":{"raw":"GET /sp/media/videos/tmb/336/1.jpg HTTP/1.1\r\nHost: img.imghuo.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":4110,"timings":{"blocked":1040,"dns":13,"connect":135,"send":0,"wait":0,"receive":0,"ssl":2903},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.mds.yandex.net/get-vthumb/1437442/b25be7e7b8cd596a79ca94253621cf19/564x318_1","fqdn":"avatars.mds.yandex.net","domain":"yandex.net","tld":"net"},"ip":{"addr":"87.250.247.183","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:56.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.avatars.mds.yandex.net","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 03 Apr 2025 14:25:03 GMT","end":"Wed, 01 Oct 2025 20:59:59 GMT"},"fingerprint":{"sha1":"E6:CA:01:EF:27:C5:A7:B7:36:66:BC:E5:64:C2:63:12:FB:3C:8F:91","sha256":"F3:AE:1B:55:A4:70:1A:43:35:87:50:83:E5:F5:ED:99:44:E6:CE:26:D5:B1:CC:24:A7:21:CF:AC:A8:E3:2E:24"}}},"request":{"raw":"GET /get-vthumb/1437442/b25be7e7b8cd596a79ca94253621cf19/564x318_1 HTTP/1.1\r\nHost: avatars.mds.yandex.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:28:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17670\r\nlast-modified: Mon, 07 Apr 2025 05:20:26 GMT\r\ncache-control: max-age=604800,immutable\r\nx-request-id: 70b6b9186018e886\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 600, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nreport-to: {\"group\": \"network-errors\", \"max_age\": 600, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/s3_nel?datacenter=KLG\"}]}\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17670,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 564x318, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1b16a99c4a165ffa3cb30cb51071d832","sha1":"f518c1bb0fda94b9ab009a026bc0032377fd7b5b","sha256":"816a896423b0db49a9486b3dac78c91611e072e126137919e5f850142d9878cc","sha512":"adbbe8bf0cf9d751ce3885a820e25e1729739319cfe3da150b9f2b61c23a194607a70528f94c33dd1432cc21e29ae7745ee86a7f210f4552fa0f02ebfc4fff25","ssdeep":"384:3dhssgt4Ar8Qhs309HcE/eWehu7GnYYk2gvJ:3dhst4A8Qq3098E/eWehKbYk2gvJ","tlshash":"8582d0405f614783e29ee8d28fdde1d09e5243ca711ae8321c8795ae376e1395db0897","first_seen":"2024-08-20T01:00:01.837605Z","last_seen":"2025-12-18T09:21:03.205451Z","times_seen":34,"resource_available":false,"data":null}},"time_used":4068,"timings":{"blocked":984,"dns":8,"connect":67,"send":0,"wait":62,"receive":1,"ssl":2930},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nlt02.hdsex.org/9/3/6/9361e98b18fc26807bd4e8ab03146b6b/thumbs/480x270/1.jpeg","fqdn":"nlt02.hdsex.org","domain":"hdsex.org","tld":"org"},"ip":{"addr":"104.26.0.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdsex.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 21:16:16 GMT","end":"Sun, 21 Sep 2025 22:16:05 GMT"},"fingerprint":{"sha1":"FC:2E:1F:E3:5C:E4:5A:3F:A1:25:E5:34:65:DF:20:33:DA:73:6A:92","sha256":"29:90:7C:2B:B8:60:47:6B:E4:90:CB:A5:48:3E:88:D8:9F:D6:94:10:43:95:5E:FD:07:58:74:B0:C6:7A:F9:7C"}}},"request":{"raw":"GET /9/3/6/9361e98b18fc26807bd4e8ab03146b6b/thumbs/480x270/1.jpeg HTTP/1.1\r\nHost: nlt02.hdsex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25509\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Metrics-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nlast-modified: Fri, 30 Aug 2024 17:22:57 UTC\r\naccept-ranges: bytes\r\nage: 4433\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cUPWnMT6WhA7BSUicOVKTlv0sjq4g%2BNxyEHgED77Hdt%2FlOUikV7xA6XZPNcpgCMjvBDFeB9M7IZltZJr8fjOA7UM2DgNd77H2QA%2Feg%3D%3D\"}]}\r\ncf-ray: 970f0146ba8db51e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25509,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 480x270, components 3","md5":"c208c86c277da6e4f89dd650f2fbef81","sha1":"82ae73ca058bc61617b9a5c0ff4508a7f440d888","sha256":"f86e82e78b2499adc245d1fdc197467600e913021550b54afe91c2a47dff731b","sha512":"a22d371244904f02ba1c35f54b1d5d81d11bf9a9812a6043a07f0bde210bd0d5064c6434cf98ad020c48f411ac9626af0417c996b1cd8f10d3c91e186ce1d83b","ssdeep":"768:Gh6iJEFioRe/rPVdYqRABie7phM6oPbL3sYRG4l4i:Gh6i6iYe/rddYqRAp7phM5bjDRD","tlshash":"75b2d13fe3547af0397180bfda2f9c1063ef5274e484980d23a6656d8a1e59b0035eae","first_seen":"2025-08-18T05:29:08.651788Z","last_seen":"2026-01-20T12:10:26.343494Z","times_seen":18,"resource_available":false,"data":null}},"time_used":3778,"timings":{"blocked":1600,"dns":10,"connect":9,"send":0,"wait":14,"receive":1,"ssl":2135},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/original/2X/a/a4cdfb886fd79409ab829c36e30625551bb0fdff.png","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 16:04:05 GMT","end":"Sun, 09 Nov 2025 16:04:04 GMT"},"fingerprint":{"sha1":"DF:EC:86:BA:09:B3:17:C2:2B:66:0A:BF:62:3E:3C:4D:90:D2:A4:33","sha256":"EF:3A:5A:BF:D7:FE:5F:99:1A:3F:CD:49:ED:AF:84:68:4F:09:27:DC:47:7B:D5:51:4C:E2:DB:A2:A1:6A:3C:FF"}}},"request":{"raw":"GET /uploads/default/original/2X/a/a4cdfb886fd79409ab829c36e30625551bb0fdff.png HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 262192\r\nlast-modified: Wed, 30 Jul 2025 23:11:39 GMT\r\nexpires: Tue, 18 Aug 2026 05:27:55 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":262192,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 476 x 850, 8-bit/color RGB, non-interlaced","md5":"91d41fa1d03ba68d1afd8230c853385e","sha1":"a4cdfb886fd79409ab829c36e30625551bb0fdff","sha256":"e0f345b8a73de1c4eb380e0621c78d5416964bef08531675762a7b1276057228","sha512":"79d8a2c6fe3a851a9f15c3354533667677f6b92abc0fc74f0f8629fc1581e7231036932672e53e459a98e61789a4a3d6e74e71dfbc4f288273f943150cf01e97","ssdeep":"6144:s7+UvWt8sFHDtXe3HOMYdiV99D9/Cd+vZnTL9k:s7+z8sFj03uSpZTxk","tlshash":"654423c054f2b9baecc46cfb6a7963686361473047e6b5162780f2f3a711384766d0fa","first_seen":"2025-08-08T23:03:00.193924Z","last_seen":"2026-03-02T16:55:39.906019Z","times_seen":74,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.twi-dl.net/favicon.ico","fqdn":"www.twi-dl.net","domain":"twi-dl.net","tld":"net"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:02.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twi-dl.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Jul 2025 13:41:54 GMT","end":"Tue, 30 Sep 2025 14:38:58 GMT"},"fingerprint":{"sha1":"0B:0B:8D:21:32:F3:E7:AA:32:51:DF:63:69:22:ED:A7:C6:5A:A7:E7","sha256":"F1:3B:95:AA:FB:6D:86:EE:8A:FC:5E:94:EB:17:37:6B:3F:26:1E:C9:A8:BF:97:BB:1A:68:00:67:13:94:59:16"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.twi-dl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Mon, 18 Aug 2025 05:28:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wgHWVhcIGKJ3CBlw6eT5usD4bIR8Zr7VoOAtuxQJyHe5Ir%2B2fh2O1MUkV15O98A5uCdNyl2FY9jV3TLB9xymDY4vURvybxr23IwyEQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 970f0168d897b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":9,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"page.phic4.top/myda.php","fqdn":"page.phic4.top","domain":"phic4.top","tld":"top"},"ip":{"addr":"104.21.73.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:59.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phic4.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 03:01:01 GMT","end":"Sun, 28 Sep 2025 03:59:36 GMT"},"fingerprint":{"sha1":"F2:09:4F:FE:B4:3B:79:00:DB:C3:0D:CA:18:B2:B2:8B:DC:59:19:11","sha256":"B8:93:E7:F0:6B:B8:97:78:FC:24:E3:35:84:CD:BB:BB:89:B7:8F:EC:45:29:16:60:EA:66:CA:76:36:B5:3B:4E"}}},"request":{"raw":"GET /myda.php HTTP/1.1\r\nHost: page.phic4.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:28:01 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nmyda: myda91.123.46.188\r\nvary: User-Agent, accept-encoding\r\nage: 6045\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Mon, 18 Aug 2025 03:47:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ri8y7W%2FJnXxD6hvibzDyd%2FbNnPAGJuSpN3lJurYo1pq%2Bc5pkdvB4Qmx9zqbXNkzm%2Fg28MTUvw59pruSS4Q1OtjZ9nwL7TshmI6RasQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 970f01601862568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":2802,"timings":{"blocked":1366,"dns":19,"connect":7,"send":0,"wait":16,"receive":0,"ssl":1370},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sexsex2.com/favicon.ico","fqdn":"www.sexsex2.com","domain":"sexsex2.com","tld":"com"},"ip":{"addr":"202.95.16.30","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.sexsex22.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 08:25:48 GMT","end":"Sun, 14 Sep 2025 08:25:47 GMT"},"fingerprint":{"sha1":"89:05:1D:69:A5:E3:02:8A:22:24:BF:20:D2:82:8E:19:57:49:BC:63","sha256":"18:CA:C5:38:86:E7:00:D6:94:CA:E6:2E:D2:6E:B6:E9:40:11:42:FC:46:AF:20:C3:DF:70:EB:B6:D7:C8:DC:43"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.sexsex2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/x-icon\r\ndate: Sun, 17 Aug 2025 16:16:44 GMT\r\netag: \"645b773c-10be\"\r\nlast-modified: Mon, 18 Aug 2025 04:46:08 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, memory\r\ncontent-length: 4286\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"da00228045bbdc9fc485eee15ae466f7","sha1":"51acd57ef4439a7e622281388e2aa83d53b3fe33","sha256":"18a2fc0c936b1782fb1f1dec65e9ea9dfff00e1a081594c8c3049a5b435c1d2d","sha512":"b7ba13392ab3c6d8c1077989d482399892c1c094599e798b69dc3c6720b5d26dd6186d414f46cacf8ed48061e091d23978248b63cace28ebc601e41348ce608a","ssdeep":"48:uTOtJTTH7TTS/LY64wSKd2sci/6aq3EDP+3yk:uOH73wSKdEv/3v3yk","tlshash":"e2912fa8edf928bfd22403785f0697f8c8338e1f6ce4593308227c9b272ed51848611d","first_seen":"2023-05-17T22:14:46Z","last_seen":"2026-06-04T23:04:17.902241Z","times_seen":565,"resource_available":false,"data":null}},"time_used":2368,"timings":{"blocked":-1,"dns":35,"connect":300,"send":0,"wait":286,"receive":0,"ssl":1668},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cav105.com/contents/videos_screenshots/7000/7359/preview.jpg","fqdn":"cav105.com","domain":"cav105.com","tld":"com"},"ip":{"addr":"45.145.72.132","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cav102.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 15:24:03 GMT","end":"Fri, 17 Oct 2025 15:24:02 GMT"},"fingerprint":{"sha1":"4C:E6:D2:27:03:49:C7:8C:A1:8B:DF:24:7C:A6:C4:E5:3D:A6:C5:F5","sha256":"02:AE:EA:91:A7:2B:29:79:58:2E:C8:D0:32:14:9C:37:11:B8:20:1A:63:46:73:26:EF:73:0C:F8:CB:B2:C5:1D"}}},"request":{"raw":"GET /contents/videos_screenshots/7000/7359/preview.jpg HTTP/1.1\r\nHost: cav105.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 107339\r\nlast-modified: Sun, 25 Sep 2022 19:55:08 GMT\r\netag: \"6330b21c-1a34b\"\r\nexpires: Mon, 18 Aug 2025 05:28:59 GMT\r\ncache-control: max-age=60\r\nstrict-transport-security: max-age=31536000\r\nx-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":107339,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.89.100\", baseline, precision 8, 720x1280, components 3","md5":"29f3fb4ff821b86d10e96079034e06a3","sha1":"b2ba9327571bd9c8e05fdc135dce97fa628def72","sha256":"1d97cef4cc7677561c0c0ae63affb9f0fb7740898c74a6d77b184705e75eb88d","sha512":"e63e671bf1226af0105f5e1199dd6163fe953304b05dc7dd1caa3173cad1e97f920bae431b088065b370dbada7c36302c6396a5dac5e31bf3d14f6445ca2ce82","ssdeep":"3072:Fibq8mhNAFpAUIdsxyM25FYQN44BPI4RUE93BF:OdeNUOAyM2EhiPI4RUE93BF","tlshash":"23a3120efe44e210c585ac7529292202f9860ec67b957baf5d3731f643c5dc2edb62e2","first_seen":"2024-12-08T10:57:50.542248Z","last_seen":"2026-01-31T10:39:20.836667Z","times_seen":73,"resource_available":false,"data":null}},"time_used":3953,"timings":{"blocked":788,"dns":21,"connect":159,"send":0,"wait":156,"receive":460,"ssl":2345},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"suckinganimalsex.info/tmbs/66/356_chick-have.jpg","fqdn":"suckinganimalsex.info","domain":"suckinganimalsex.info","tld":"info"},"ip":{"addr":"104.21.41.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"suckinganimalsex.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 03:30:20 GMT","end":"Sat, 18 Oct 2025 04:27:36 GMT"},"fingerprint":{"sha1":"A0:48:18:28:AD:04:DD:0E:62:85:E1:07:B4:5C:74:C1:B7:4F:6F:4D","sha256":"5D:E6:CB:55:30:4C:43:60:1D:7B:5D:FE:4E:06:B5:3B:65:60:4D:DE:2C:82:80:0C:26:01:F7:6E:B9:07:8E:A4"}}},"request":{"raw":"GET /tmbs/66/356_chick-have.jpg HTTP/1.1\r\nHost: suckinganimalsex.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7989\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 12 May 2021 13:32:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WyapR4W4iwg42R74ldrz5sNPBI8wD89XcHJ36SRoxlEykYkRU%2BT2ggAue36iQ95%2BjgyWU6iJNVlQ1fzr2z8DrhguYKyD1lRbcyGDkHaWNwmMf8A%3D\"}]}\r\netag: \"609bd8d0-1f35\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-request-id: 7ecd8e3653ed8396a6341f78e80abe5c\r\naccept-ranges: bytes\r\nage: 1220413\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 970f0150fa77569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7989,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x230, components 3","md5":"735250900447f6cc6645a3f46d7440c0","sha1":"ed16840e5fd8e51759024f029c34de3a43571181","sha256":"94bf944c81f4be6c610bbfcf169897a601e1bea93b48ecc68e695b9cbca2019f","sha512":"76f36eb6b70b2c098c5a112ae423af3a2e3791a7da09f87fcade5a273654ba19499445b1e3bf6fce8912b89a45466fdbc5a3737b7d75e4b1b1baa8fb7b362d45","ssdeep":"192:br7ufbbzHbBOn1+t27pn+J8BAlabbbMthFEbxvV1KBPYbbbMWUTLVrL0wp:varbI1g2tn+J8BAPt6xCtY4TBgwp","tlshash":"58f18f2b9d2609b3e8ef19328f11b6bd2092ab505762e0b92e475e7f7f9c149cd45830","first_seen":"2024-10-17T13:29:34.668537Z","last_seen":"2026-04-22T17:26:51.40925Z","times_seen":11,"resource_available":false,"data":null}},"time_used":3212,"timings":{"blocked":825,"dns":13,"connect":28,"send":0,"wait":22,"receive":1,"ssl":2174},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/2X/c/c6d45068e90c0118ccfa3869963200381d932505_2_580x1024.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:59.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 16:04:05 GMT","end":"Sun, 09 Nov 2025 16:04:04 GMT"},"fingerprint":{"sha1":"DF:EC:86:BA:09:B3:17:C2:2B:66:0A:BF:62:3E:3C:4D:90:D2:A4:33","sha256":"EF:3A:5A:BF:D7:FE:5F:99:1A:3F:CD:49:ED:AF:84:68:4F:09:27:DC:47:7B:D5:51:4C:E2:DB:A2:A1:6A:3C:FF"}}},"request":{"raw":"GET /uploads/default/optimized/2X/c/c6d45068e90c0118ccfa3869963200381d932505_2_580x1024.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:59 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kompoz2.com/favicon.ico","fqdn":"kompoz2.com","domain":"kompoz2.com","tld":"com"},"ip":{"addr":"172.67.206.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kompoz2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 12:55:31 GMT","end":"Wed, 15 Oct 2025 13:53:50 GMT"},"fingerprint":{"sha1":"F4:F9:67:17:CF:4C:3C:BE:97:26:C3:E7:2E:C2:80:F4:2E:2D:BA:93","sha256":"9F:4E:F0:44:2A:39:B7:C1:52:26:59:3A:10:11:3C:8C:51:93:7B:06:A0:9E:F3:B8:6C:8C:F8:C1:A3:18:B3:9A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: kompoz2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Mon, 18 Aug 2025 05:28:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7oCiNY%2FKqvyp2Poiq7AlS%2FeouEmwrOJnK1hc55uQdweUHyfOIeA59zREUnZ9LuWLqpzgria3aJPhA4dWH29NZH%2FWGNVbXApB0w%3D%3D\"}]}\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.4.14\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 101\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\ncf-ray: 970f0169b942b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.14","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":20,"connect":14,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stock.adobe.com/favicon.ico","fqdn":"stock.adobe.com","domain":"adobe.com","tld":"com"},"ip":{"addr":"151.101.130.49","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:06.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"stock.adobe.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 17 Apr 2025 19:56:39 GMT","end":"Tue, 19 May 2026 19:56:38 GMT"},"fingerprint":{"sha1":"E3:47:86:30:F7:AD:14:79:84:83:22:E9:11:73:3B:37:89:DC:90:DD","sha256":"0A:1B:73:01:49:E7:F9:23:1F:BA:93:4D:94:23:57:89:0D:C1:9A:E6:2E:07:6C:66:2B:67:45:BD:15:15:C1:33"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: stock.adobe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-timer: S1754194746.136116,VS0,VE2\r\nx-stock-served-from: Flex\r\ncontent-type: image/x-icon\r\nlast-modified: Thu, 31 Jul 2025 20:50:59 GMT\r\netag: \"688bd733-506\"\r\nvia: 1.1 varnish, 1.1 varnish, 1.1 varnish\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\ndate: Mon, 18 Aug 2025 05:28:06 GMT\r\nage: 1300141\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nset-cookie: Variant_flex=1; max-age=3600\r\nx-served-by: cache-dub4344-DUB, cache-dub4344-DUB, cache-hel1410021-HEL\r\nx-cache: MISS, HIT, HIT\r\nx-cache-hits: 0, 403, 45\r\ncontent-length: 1286\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 17x17, 32 bits/pixel","md5":"a4ada75778f0be8cc418038305968053","sha1":"c1a7595b30c5db6bcce31616fa29872cc0771940","sha256":"7aec6f1564b0113b7ea83b84745ff928a1d4c7ca88a0dd585ea0d0f2c6e40ce0","sha512":"917587434b1be951da75c77df1fd266298509427f69a57c7be583ff0c1b0dd28515628c14e6b3905d8c24e544e046372a8e77d67cd855f13f2029267c0b107a3","ssdeep":"","tlshash":"6b2192136a09e788cc6412bcd53517f98e194d72dd58c7eb2532fe2cb4f9b882161366","first_seen":"2023-05-10T20:35:34Z","last_seen":"2026-05-29T14:46:47.098508Z","times_seen":127,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":1,"connect":13,"send":0,"wait":14,"receive":0,"ssl":129},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20240702-1/187b8efd6462fc2c0fa2f846f9dc34ec.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.62","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20240702-1/187b8efd6462fc2c0fa2f846f9dc34ec.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 98938\r\nlast-modified: Tue, 02 Jul 2024 04:14:16 GMT\r\nvary: Accept-Encoding\r\netag: \"66837e98-1827a\"\r\nexpires: Tue, 09 Sep 2025 16:23:00 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":98938,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 718 x 404, 8-bit colormap, non-interlaced","md5":"170d38dc216af49c6bdfe7ad7b1c82a9","sha1":"f5c35ad4150fd095cf17ce151bf3bd4a96a764a0","sha256":"6de6ac8e3de5ec8f3a07c4dd87df3f77560940a38a107df6aaee743c9c61640e","sha512":"26d65eddbda74142fb055497a54ad5c25409f06bc52b36c3f865505c5efcc1cf9593daa88b1c2339e633fd4b11bdf171f6057f54bb4e5cfd3087bd0014fa4efe","ssdeep":"3072:GAY99uNvTlJexRxlKVvtCBtuZVhhT4b7h:nY98NvTlsRxQtCBtuZVh+b7h","tlshash":"83a31294371a94ff85da58837d881af39e4470e791b3d0031d5f9329b972283ee0e69e","first_seen":"2025-08-09T01:33:32.66499Z","last_seen":"2026-02-15T23:32:24.85462Z","times_seen":18,"resource_available":false,"data":null}},"time_used":2170,"timings":{"blocked":1226,"dns":0,"connect":0,"send":0,"wait":614,"receive":330,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jpgjingpinx.com/upload/vod/20250112-1/ed156b326bcc6d01f834bf8ac7420629.jpg","fqdn":"jpgjingpinx.com","domain":"jpgjingpinx.com","tld":"com"},"ip":{"addr":"104.21.26.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jpgjingpinx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Jun 2025 13:43:33 GMT","end":"Sat, 27 Sep 2025 13:55:11 GMT"},"fingerprint":{"sha1":"0D:D1:54:77:E2:0B:2E:04:33:A1:B6:DA:13:2E:4C:0B:1A:43:9F:5A","sha256":"DD:4B:5E:E7:4E:DF:93:63:C8:C5:F1:BC:45:FF:57:20:52:98:6C:87:D2:0A:BB:DC:B1:19:4D:B4:36:8B:E5:80"}}},"request":{"raw":"GET /upload/vod/20250112-1/ed156b326bcc6d01f834bf8ac7420629.jpg HTTP/1.1\r\nHost: jpgjingpinx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Mon, 18 Aug 2025 05:27:57 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nage: 70\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aeXn%2FYM%2BFXDggwKa41g6gwUUjEgnlZ%2FufaXgVKZcV3sRLBjGIRgCEBF%2B5NFJRqFiZTtslh%2FdAWytxgsCrmRNo3riAHWr73igxTc3q2E%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 970f01470f4f56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":3852,"timings":{"blocked":1642,"dns":9,"connect":3,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241010-11/5d5a030b5cb99bac68111cfce4b0a62e.png","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:59.819Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241010-11/5d5a030b5cb99bac68111cfce4b0a62e.png HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-18","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cloudflare-br-pic.kwai.net/upic/2019/02/18/22/BMjAxOTAyMTgyMjQ4MjhfMTI1NzE1NDEzOV8xMDg2MDQ3Nzc0Ml8yXzM=_B88923b800983296be2985ccb013c2bd3.jpg?tag=1-1753790711-s-0-0i4szhgi6q-f549954f7c591518","fqdn":"cloudflare-br-pic.kwai.net","domain":"kwai.net","tld":"net"},"ip":{"addr":"54.240.174.55","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kwai.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 11 Nov 2024 00:00:00 GMT","end":"Thu, 11 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"CD:0B:C7:F0:0E:3D:EB:FE:26:15:85:4D:E4:6B:CD:BB:C1:A1:34:08","sha256":"82:C1:1A:19:E3:7F:5B:F5:64:5A:98:C7:E5:48:DA:CE:13:71:55:24:22:C9:2E:12:95:F4:6C:D7:79:09:1A:58"}}},"request":{"raw":"GET /upic/2019/02/18/22/BMjAxOTAyMTgyMjQ4MjhfMTI1NzE1NDEzOV8xMDg2MDQ3Nzc0Ml8yXzM=_B88923b800983296be2985ccb013c2bd3.jpg?tag=1-1753790711-s-0-0i4szhgi6q-f549954f7c591518 HTTP/1.1\r\nHost: cloudflare-br-pic.kwai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 21716\r\ndate: Tue, 03 Jun 2025 18:41:31 GMT\r\naccept-ranges: bytes\r\nx-bs-object-status: 0\r\nexpires: Wed, 03 Jun 2026 18:41:31 GMT\r\ncache-control: public, max-age=31536000\r\nx-kslogid: 732024414893566869\r\nlast-modified: Mon, 18 Feb 2019 14:48:35 GMT\r\nx-nws-log-uuid: 14205667529975136153\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: E5su5w3MmXhKxWBN5U-WX73XSi5wy30-3GisoxiJP3e5zVNmU8M9BA==\r\nage: 6518786\r\ntiming-allow-origin: *\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":21716,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 480x846, components 3","md5":"35de6b2e85475c0f8a5a3c5750dd44f0","sha1":"4862a7caca61406973c0d46d73d0fc7d28214f39","sha256":"bd56461c75b3441c9818d76361d2edceee15c0507886cb936f18e10987a5d171","sha512":"4444972281ed468dfc250af36648419da416ea8efe46de4684544f24182cd2c6299615f123e545ca3a5d408f7b4562bfccbcc3d5156658d2be9a297e0d97986b","ssdeep":"384:e/qkbVX0cL6Z+gyLk6ALJYvJFMltikIaTlqXO8FHVMYH4UEY1ST7vRqSOFzSwWRj:OqcX0/ywKxaikIaTlq+8F1l4jCYvRqBa","tlshash":"a3a2e1971c5c7baf8b989619178ea210eaa9a73e953f19609c33837157b81d3f4201d3","first_seen":"2024-04-21T07:02:31Z","last_seen":"2026-01-11T15:11:42.588702Z","times_seen":75,"resource_available":false,"data":null}},"time_used":2087,"timings":{"blocked":-1,"dns":17,"connect":2,"send":0,"wait":10,"receive":1,"ssl":2044},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumb.aporntv.com/thumbs/5/e/3/1/c/5e3146c5ee95done%20of%20the%20best%20mom%20son%20blowjobs.mp4/5e3146c5ee95done%20of%20the%20best%20mom%20son%20blowjobs.mp4-3.jpg","fqdn":"thumb.aporntv.com","domain":"aporntv.com","tld":"com"},"ip":{"addr":"104.26.1.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aporntv.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 21:49:41 GMT","end":"Thu, 18 Sep 2025 21:49:40 GMT"},"fingerprint":{"sha1":"50:0C:10:6B:00:1B:44:9C:CE:70:EC:C4:D7:65:07:04:ED:C9:F6:A4","sha256":"2B:C9:C5:75:F1:0B:10:F6:54:65:7D:EE:A5:19:31:FF:89:E0:62:87:A3:4E:9C:14:F8:01:60:B4:66:83:C9:45"}}},"request":{"raw":"GET /thumbs/5/e/3/1/c/5e3146c5ee95done%20of%20the%20best%20mom%20son%20blowjobs.mp4/5e3146c5ee95done%20of%20the%20best%20mom%20son%20blowjobs.mp4-3.jpg HTTP/1.1\r\nHost: thumb.aporntv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4226\r\ncf-ray: 970f01506e6e56a9-OSL\r\ncache-control: public, max-age=16070400\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: status=not_needed\r\netag: \"5e31c9d6-1082\"\r\nexpires: Fri, 22 Aug 2025 11:10:12 GMT\r\nlast-modified: Wed, 29 Jan 2020 18:07:18 GMT\r\ncf-cache-status: HIT\r\nage: 238666\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Rjd1enWfSHiDRVpgabOT8YHzB8ZQc2XY4g6hWmSK0ZFq9U7ZWZQDQgE0sOWPQb8o2W9sMfFYagQagGUij4YLB1vIsEIJRJqJqrndmz3YQju32YuIDM9Fhq%2F526HMpq%2FapBqn\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2027\u0026min_rtt=418\u0026rtt_var=1537\u0026sent=26\u0026recv=16\u0026lost=0\u0026retrans=0\u0026sent_bytes=18242\u0026recv_bytes=1798\u0026delivery_rate=4084626\u0026cwnd=253\u0026unsent_bytes=0\u0026cid=2ab895a80bc82c90\u0026ts=2950\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4226,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, baseline, precision 8, 200x150, components 3","md5":"5a3498ef2f8e832d274fc9357a4b90c1","sha1":"f499ac28593f4ba4ce152ded082dd0f4898ffabc","sha256":"94f05884c9e8b09e4e57024642b91e7bc531ea879b774758c56a21b4192e8e58","sha512":"ebe4092aeaa4322830d5d967778b0abecbb7311fe3f133d8579741498ec98a66545c564866b51f7d9221e05310f605dc30a0f9e6ce02c9b32888ad4008b8cf1d","ssdeep":"96:RJxJtDX/BgN79b0Xdo54/fBNzQzTEHFLT/Bh4jMXfs7kVXSRb5yq:/xvrBomdq4/JNzQHMBmIZSRdyq","tlshash":"83918cb6855cb9efddfdafb02b5e044ac18aacad10d05458f2a46d1c740cc5346ab899","first_seen":"2025-06-03T04:10:59.21655Z","last_seen":"2026-03-01T22:32:14.200058Z","times_seen":30,"resource_available":false,"data":null}},"time_used":3134,"timings":{"blocked":789,"dns":18,"connect":36,"send":0,"wait":21,"receive":0,"ssl":2213},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xxxzooporn.net/favicon.ico","fqdn":"xxxzooporn.net","domain":"xxxzooporn.net","tld":"net"},"ip":{"addr":"172.67.178.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxxzooporn.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Jun 2025 09:29:45 GMT","end":"Tue, 23 Sep 2025 10:27:53 GMT"},"fingerprint":{"sha1":"66:56:59:A6:E4:97:6C:B2:D3:DC:09:8C:4E:CE:9D:75:72:69:BD:3A","sha256":"12:6E:4E:F7:CE:75:BB:93:C3:A8:5E:CC:48:1B:B7:2A:9F:92:17:10:8B:03:90:81:4E:D5:6F:0A:38:B9:56:12"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xxxzooporn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Mon, 18 Aug 2025 05:28:03 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"970f01701dd056b5\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hx%2FPft9dil0SxKE%2F27mwUoiPPSEIxTOdfFbTdaxXckc7F1SGm3%2B0PQRvvBS70V4JqOIdM3kRh%2BJ%2FWTsd6reoNCh3OsESHsKI%2BiKVgA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 970f01701dd056b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":882,"timings":{"blocked":-1,"dns":15,"connect":21,"send":0,"wait":19,"receive":0,"ssl":783},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.kompoz2.com/thumbs/ad/9b/f4/ad9bf414a500da38a33f76c8ae9bdbfc.webp","fqdn":"cdn.kompoz2.com","domain":"kompoz2.com","tld":"com"},"ip":{"addr":"172.67.206.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kompoz2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 12:55:31 GMT","end":"Wed, 15 Oct 2025 13:53:50 GMT"},"fingerprint":{"sha1":"F4:F9:67:17:CF:4C:3C:BE:97:26:C3:E7:2E:C2:80:F4:2E:2D:BA:93","sha256":"9F:4E:F0:44:2A:39:B7:C1:52:26:59:3A:10:11:3C:8C:51:93:7B:06:A0:9E:F3:B8:6C:8C:F8:C1:A3:18:B3:9A"}}},"request":{"raw":"GET /thumbs/ad/9b/f4/ad9bf414a500da38a33f76c8ae9bdbfc.webp HTTP/1.1\r\nHost: cdn.kompoz2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4194\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\netag: ab622c01507f6b337bec202f4d83ca82\r\nlast-modified: Mon, 14 Nov 2022 04:50:28 GMT\r\nx-timestamp: 1668401427.47235\r\nx-trans-id: tx17cbca28d90f4bbd9d323-0067fef9fd\r\nx-openstack-request-id: tx17cbca28d90f4bbd9d323-0067fef9fd\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\ncache-control: max-age=31536000\r\nexpires: Wed, 20 Aug 2025 03:23:29 GMT\r\nx-cdn-host-id: ds8140,ds9225\r\nx-proxy-cache: REVALIDATED\r\naccept-ranges: bytes\r\nage: 7467\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=axcR%2Fyie4VwKbTdZL0JR69k2TFQuZGzk%2FSLh%2FDDVjNK%2BVXEdtdzIZ2PmAUwFAPH7i339SvKkJUMPxXsdyYFNdp3wE5Y5NXGlnxrD05A%3D\"}]}\r\ncf-ray: 970f0148e8d756b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4194,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x180, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ab622c01507f6b337bec202f4d83ca82","sha1":"21b5c0fea6601f6ba051cac0316bc5315886cc39","sha256":"077bf7dd1c625f278e491736c42251d8fed0ecadaed059d25f8484c0e9ec8783","sha512":"8f74b8cf82adcc53c4a003bda9e263aaa65d986ca233e8e15767854600baefea201d22639155b3c1cf1ecdd647d151a1d094c3fede5b4bfab81ca5ef5e31f6d1","ssdeep":"96:GdnjUibFacQMLixhRX/jrlpJfvn8ywWOkuqpeZZTGHCHKsC5:GmibIaedpJ3nrwVqpeZFGiH/C5","tlshash":"7f818fbcb37c938c3006996e583015e77dbeaa40e0c55e8df8462f7155558becc5a90d","first_seen":"2025-08-18T05:29:08.661777Z","last_seen":"2025-08-18T05:29:08.661777Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2537,"timings":{"blocked":232,"dns":4,"connect":5,"send":0,"wait":12,"receive":0,"ssl":2281},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zakladchitsy.ru/uploads/posts/2024-11/screenshot_1.webp","fqdn":"zakladchitsy.ru","domain":"zakladchitsy.ru","tld":"ru"},"ip":{"addr":"77.83.175.19","port":443,"asn":211381,"as":"Podaon SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zakladchitsy.ru","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 02:50:46 GMT","end":"Mon, 20 Oct 2025 02:50:45 GMT"},"fingerprint":{"sha1":"08:02:FC:DB:8C:E4:F5:A6:E2:6E:BD:3E:F3:81:8A:BB:16:5D:50:DF","sha256":"C2:18:F7:3E:A3:1C:9A:FA:97:E9:74:56:97:6A:CD:A1:89:E7:00:D2:92:7B:6C:6F:87:EB:B4:6F:2B:53:5A:1E"}}},"request":{"raw":"GET /uploads/posts/2024-11/screenshot_1.webp HTTP/1.1\r\nHost: zakladchitsy.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 18 Aug 2025 05:27:59 GMT\r\nContent-Type: image/webp\r\nContent-Length: 16666\r\nLast-Modified: Sun, 10 Nov 2024 15:02:23 GMT\r\nConnection: keep-alive\r\nETag: \"6730caff-411a\"\r\nExpires: Tue, 19 Aug 2025 05:27:59 GMT\r\nCache-Control: max-age=86400\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16666,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 468x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8a5f684e6f6569122fc97a52bc96d4ae","sha1":"d6d0fe22ac77670363b6756f5a03e7035f39a327","sha256":"6d62a277ba0ff2bc7735c67b6221559d0953e188a0ecd2a00b87a2959626a730","sha512":"ad612af3791cac3627f67dea6a3c9e9ab002bbb26cae2d3d260448ff23696e5b359121d91a9c2f844f552f92e65f4ee897bf4952275d1195f9aed6b325822874","ssdeep":"384:+Oi41U6K3pIMg4/9u7hiPsPXjw0ZYipZ55o8saG9:+Oi36CiMB/9EP5ZYipP5ohN9","tlshash":"6572e185e9eeee371508c32cda66e3f0149783265bf8a296432ef657b2c19782735d04","first_seen":"2025-06-05T17:56:20.449779Z","last_seen":"2025-08-18T05:29:08.663892Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3492,"timings":{"blocked":1052,"dns":16,"connect":67,"send":0,"wait":35,"receive":1,"ssl":2287},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ekkofilm.dk/favicon.ico","fqdn":"www.ekkofilm.dk","domain":"ekkofilm.dk","tld":"dk"},"ip":{"addr":"65.109.19.181","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ekkofilm.dk","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Jul 2025 18:00:35 GMT","end":"Sun, 26 Oct 2025 18:00:34 GMT"},"fingerprint":{"sha1":"B2:D7:07:D3:9A:24:34:8D:AA:5E:3E:FC:9A:E3:E5:95:B5:B0:B6:88","sha256":"51:41:38:29:A7:0C:98:A7:2B:43:0A:B6:0E:01:A5:C4:D6:4C:BA:9C:3E:ED:C7:58:0A:98:87:5B:D0:0B:C3:31"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.ekkofilm.dk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0\r\nDate: Mon, 18 Aug 2025 05:28:02 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xzx.mobi/preview/masha-babko-blowjob-gifs.jpg","fqdn":"xzx.mobi","domain":"xzx.mobi","tld":"mobi"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xzx.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 Aug 2025 11:51:49 GMT","end":"Tue, 04 Nov 2025 12:49:10 GMT"},"fingerprint":{"sha1":"1C:10:6B:A6:70:D5:19:41:55:2F:72:C0:DA:A6:06:3C:C6:CE:BC:00","sha256":"2D:D4:25:11:F5:CF:81:57:48:C4:D6:91:C3:DC:5B:57:DA:F7:F9:EA:76:C2:45:3D:C0:50:F7:63:23:AB:0C:92"}}},"request":{"raw":"GET /preview/masha-babko-blowjob-gifs.jpg HTTP/1.1\r\nHost: xzx.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12358\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 01 Sep 2025 04:37:03 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 1385453\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 02 Aug 2025 04:37:03 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b79tOXZ4SJ%2F0bbMDje%2B8P7UwUFO1Lqa5lzrQeSCxNHJcHUMGgyEcTL3XBqxBMTs1z5YSqgwIcXN3hjmkyPbY9Ea%2BSa9ctA%3D%3D\"}]}\r\ncf-ray: 970f01423cae56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12358,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 640x360, components 3","md5":"4ac669190d2e535edf31c2a853dd18ff","sha1":"5295a3d7f4f58f9f2406f034a461d236acea6b4f","sha256":"cada4f1d41c4c28173d5c05a641001e448cca91595216595fefcb81d600e5d91","sha512":"efb519a0596f377ff51abbc457a3cc20da9233b41fb9e275e137b7344071ac5ef1355981c1cbc0426dec8b78ed3b5f547cc3fb0b2a81335d9434cc44f464579d","ssdeep":"384:Cpqp0bMuBb776WG6dBwzUXRNkW3hSaRWkBPv:50bM6v6FAecN/VRxv","tlshash":"2042d03d982f85bee0eb6d3040394fc3b91a258965c7f618f0a0244dcce38d6c4992e2","first_seen":"2024-04-21T18:54:08Z","last_seen":"2025-12-20T20:22:58.127871Z","times_seen":43,"resource_available":false,"data":null}},"time_used":2931,"timings":{"blocked":1192,"dns":6,"connect":9,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn77-t.boyfriendtv.com/b-boyfriendtv/thumbs/bftv-full/2011-02/2f/add3ac22f83e2eb82b45dd03cdf67bb7d.wmv-full-4.jpg","fqdn":"cdn77-t.boyfriendtv.com","domain":"boyfriendtv.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1792010627.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 Aug 2025 22:30:51 GMT","end":"Wed, 05 Nov 2025 22:30:50 GMT"},"fingerprint":{"sha1":"66:5D:0B:33:54:C4:6C:2C:20:7F:18:27:5F:16:3D:F5:E6:35:06:7D","sha256":"06:88:61:96:4C:BA:5C:72:C3:CB:2D:D8:06:39:B7:F7:5A:DF:94:5F:E6:37:FB:C9:22:20:2D:2E:D1:56:AB:1F"}}},"request":{"raw":"GET /b-boyfriendtv/thumbs/bftv-full/2011-02/2f/add3ac22f83e2eb82b45dd03cdf67bb7d.wmv-full-4.jpg HTTP/1.1\r\nHost: cdn77-t.boyfriendtv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 42613\r\nx-amz-meta-mtime: 1486890554\r\netag: \"b91fe2629b75353667a41e448205cf50\"\r\nlast-modified: Wed, 13 Jan 2021 04:06:01 GMT\r\nx-amz-id-2: txcc52b158edb2411f908c4-006814a2e8\r\nx-amz-request-id: txcc52b158edb2411f908c4-006814a2e8\r\nx-trans-id: txcc52b158edb2411f908c4-006814a2e8\r\nx-openstack-request-id: txcc52b158edb2411f908c4-006814a2e8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Amz-Content-Sha256,X-Amz-Date,X-Amz-User-Agent,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization,Amz-Sdk-Request,Amz-Sdk-Invocation-Id\r\nx-77-nzt: EwgBX63NDQFBDAG5TAoTAfdG1gwADAGckiEfAbf9VwIA\r\nx-77-nzt-ray: 2a494a158c8ae25802baa26854417e2e\r\nx-77-cache: HIT\r\nx-77-age: 841286\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":42613,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 720x528, components 3","md5":"b91fe2629b75353667a41e448205cf50","sha1":"8805a8bbd450e6d5fefd672bbb8c9b74a769ba0e","sha256":"783713fe35d15074fb688eb62922e3fb7e88c5ab909e4fc681c0c87a289b951b","sha512":"c4d1fc02e6ba4f648222080b4c59f19944533d9eb6b77fb9c35f9466bd71944a7c0c015d8bc661cbd3c363c7afb4cb791349ed85c467d3e961d686eb53d5ee35","ssdeep":"768:kxLxK2nVYeZW6j5Rf2LzFyVrWz8pXxIVTauYBVblauB6zChCmavsOTIB:kzKQ6eZjH60Vr68RxIVTauYsuBsaCm8E","tlshash":"6213f12933439083293d7d60833ed9897c3fed2739d06f65022a7f51a69a4da5fdc226","first_seen":"2025-08-18T05:29:08.665465Z","last_seen":"2025-11-08T17:52:04.15924Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2428,"timings":{"blocked":130,"dns":2,"connect":4,"send":0,"wait":35,"receive":1,"ssl":2255},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brasileirowtf.z00.monster/scj/thumbs/33/697_good-morning.jpg","fqdn":"brasileirowtf.z00.monster","domain":"z00.monster","tld":"monster"},"ip":{"addr":"148.113.152.129","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brasileirowtf.z00.monster","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 04:23:51 GMT","end":"Sat, 01 Nov 2025 04:23:50 GMT"},"fingerprint":{"sha1":"EE:3C:A8:DD:23:79:99:5F:E4:9C:DA:0E:99:AA:2E:6E:00:DB:DD:B9","sha256":"91:C0:24:EE:4D:89:2F:8B:88:3E:3D:BA:07:C1:DD:B6:4E:91:79:F2:4F:BD:EE:00:BF:86:90:1C:F0:29:07:91"}}},"request":{"raw":"GET /scj/thumbs/33/697_good-morning.jpg HTTP/1.1\r\nHost: brasileirowtf.z00.monster\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:28:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6539\r\nlast-modified: Thu, 17 Aug 2023 20:29:23 GMT\r\netag: \"64de8323-198b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6539,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x240, components 3","md5":"482cf74d2c76e1f24bb114ae1aedf867","sha1":"42e1a8cd5285be41ec3ff4f222ec927ab3bf35dd","sha256":"7a5a199e248871e3d0d8185696dfe1bed0cd42a73bdabc274421dc82891b0c86","sha512":"8a3a4061ebbd2e7e3cf11e11ddaeb698e447c5a85411e9217cbc204034aafeec4b15994a77e7c699f3c77cbc3ebb2c09dffbc4ba99139a6f18cec277248d14ff","ssdeep":"96:9AxBXXBpxBeRHc7t/pYJe8hMZSwn1qjS+820hxW+EEhR2bSTw0qt9B:aBVBeRHchSRJ6nI07W+EEds0qt3","tlshash":"10d108856a2049a05aef1ef20dc6458bd14411b6ffe7bdac8e223ca0f315f4da211b49","first_seen":"2024-10-19T16:33:53.786127Z","last_seen":"2026-01-31T10:39:20.988955Z","times_seen":24,"resource_available":false,"data":null}},"time_used":4263,"timings":{"blocked":1034,"dns":4,"connect":107,"send":0,"wait":99,"receive":1,"ssl":3005},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"im1.mediacont.net/azs_w/31/811_-sex-what.jpg","fqdn":"im1.mediacont.net","domain":"mediacont.net","tld":"net"},"ip":{"addr":"104.160.9.33","port":443,"asn":63119,"as":"Angelnet Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mediacont.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 03:04:20 GMT","end":"Sun, 05 Oct 2025 03:04:19 GMT"},"fingerprint":{"sha1":"DD:41:7F:B5:0C:40:69:16:BD:6C:DD:5B:AC:3D:31:57:F9:E4:BA:3F","sha256":"2C:FF:CF:50:97:D7:E5:33:1F:0C:18:46:2E:45:75:D5:52:CB:85:1E:36:40:7F:29:9C:56:2D:6B:A1:42:98:C5"}}},"request":{"raw":"GET /azs_w/31/811_-sex-what.jpg HTTP/1.1\r\nHost: im1.mediacont.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 18 Aug 2025 05:27:57 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 17272\r\nLast-Modified: Sun, 03 Sep 2023 15:02:41 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=30\r\nETag: \"64f4a011-4378\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nCache-Control: max-age=315360000\r\nX-Request-ID: 24255283c0954be6ba33a01491f4a262\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17272,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 260x173, components 3","md5":"f7a48ec542d1a4cd668da06a12bc2d48","sha1":"df542a73fae68f73ab7f3c15314dd27d9d8fd413","sha256":"4f94992a5f5df8067c04d6358617c15a091afada96f2d450933532639b515ede","sha512":"bc2439ca72778b4332619725ce333f26fca5260cc886fb627bbb7b7d52da0ed576110e3af57bd59e400544577c96e5f7f57ca0b159adcfc0179d0ba76ea2ddf3","ssdeep":"384:1WNHVeEvLmUTe4m1GMOVB0Zvj+WpaF18P7DuwWqwbV9NAjhsGXTQxGOJqVyWj9s:koUa4mc9VB+paP8zabV9GWGjQxGO4p9s","tlshash":"6172cfa7ed0c11ed29f76e76bf9afd764bea04047520f59198dca26cf280360156264c","first_seen":"2025-05-07T23:33:44.952587Z","last_seen":"2025-08-18T05:29:08.668214Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2567,"timings":{"blocked":71,"dns":2,"connect":48,"send":0,"wait":88,"receive":1,"ssl":2350},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"videopreview.chezcathy.com/ext/pre_3360854939.jpg","fqdn":"videopreview.chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"79.127.216.112","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"videopreview.chezcathy.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 14 Aug 2025 08:37:15 GMT","end":"Wed, 12 Nov 2025 08:37:14 GMT"},"fingerprint":{"sha1":"B8:6D:FC:D0:B7:25:90:8F:6F:00:A2:FF:96:4A:FC:D6:09:60:2F:C1","sha256":"89:92:98:D7:0D:57:1B:24:E6:56:DA:B0:A1:33:A6:8D:A3:6D:F3:C7:C7:FB:2F:15:61:EA:5E:4C:0B:E9:9F:77"}}},"request":{"raw":"GET /ext/pre_3360854939.jpg HTTP/1.1\r\nHost: videopreview.chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10489\r\nserver: BunnyCDN-DE1-755\r\ncdn-pullzone: 4336736\r\ncdn-uid: 0f7047b6-2b70-4588-b55a-df9b2a15bf91\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\netag: \"66685c7c-28f9\"\r\nlast-modified: Tue, 11 Jun 2024 14:17:32 GMT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/14/2025 09:42:23\r\ncdn-edgestorageid: 1082\r\ncdn-requestid: 9cb0778bb6a1043bdf5b46f08c4f9305\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":10489,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"9a507fd0e66ee7cf2efc511ec906ff4e","sha1":"42d9bff3a734cbb617c238697d91628e00e6a2e4","sha256":"521ed140f5e463e0c86237adf0a10315f94ba193c88add29574b3dbc1b23e9e6","sha512":"cdea8a9a166531091323305f2edadb2f8a618b8250855b37ecae37fef73dd1ada5dbaa83322ad2cddb0090c8d5862ef43ff5f57ba3002e776541076ff3813c89","ssdeep":"192:aW2uCnb/vtRWIcg4C8Mph6cxiH2cSo/WnSb0okC7/JcktSbHDYQqAz4m:aWvCzt8IP9JpxiWcDuSbzJN/Az4m","tlshash":"e522bf9373e0c1befcad067e472b17124b522d578236947bf8b16b1463317e60e90ad2","first_seen":"2025-08-18T05:29:08.669048Z","last_seen":"2026-01-21T05:47:16.473497Z","times_seen":27,"resource_available":false,"data":null}},"time_used":4051,"timings":{"blocked":1732,"dns":8,"connect":24,"send":0,"wait":27,"receive":1,"ssl":2206},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"18-girls-av.com/wp-content/uploads/2025/04/d_112912-0.avif","fqdn":"18-girls-av.com","domain":"18-girls-av.com","tld":"com"},"ip":{"addr":"162.43.96.5","port":443,"asn":131965,"as":"Xserver Inc.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.18-girls-av.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:13:35 GMT","end":"Wed, 01 Oct 2025 22:13:34 GMT"},"fingerprint":{"sha1":"4E:F6:C4:2F:32:54:16:EF:3C:DB:BC:D2:DC:8E:96:FF:D4:A9:7E:D1","sha256":"D8:DC:51:0B:18:B0:E9:DB:6B:66:8F:F6:2E:25:81:FC:F1:95:14:75:77:0D:90:81:E7:3A:CE:EE:D5:02:15:02"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/d_112912-0.avif HTTP/1.1\r\nHost: 18-girls-av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\ncontent-type: image/avif\r\ncontent-length: 5185\r\nlast-modified: Sat, 05 Apr 2025 09:19:50 GMT\r\ncache-control: max-age=31536000, public, s-maxage=10\r\nexpires: Tue, 18 Aug 2026 05:27:58 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5185,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"cbb6772c15be10bee119f0bf55d74da1","sha1":"b1a5343e3d0a723a351835932f0d874723ceebb8","sha256":"aac1947ae9c9ce436ec43ee8e58641fc7ae92a64d065ff389930865d2abe0332","sha512":"4bed0185891ce85dd9b22fa4b45aac497f1301a6150191b1f51d4cdecd4e6f5452581b7b5dedf3dfd744f655b0477ba1593aa78d7c75b087a0354fd3551b0869","ssdeep":"96:+cLjMbRQzPto6YBzqL6jEVihwJ+XM5ZRoKkJS6T15+cLqzCqW8:+WIl96YB+LirwwXM5HoDJS6pIM/qn","tlshash":"31b18d7f33486043f3a60279190387994252e0aed3a171995dee30840d369b8be157cf","first_seen":"2025-07-16T19:19:39.561899Z","last_seen":"2026-03-02T07:55:32.706925Z","times_seen":59,"resource_available":false,"data":null}},"time_used":3534,"timings":{"blocked":675,"dns":2,"connect":291,"send":0,"wait":295,"receive":0,"ssl":2268},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:56.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30399\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 14 Aug 2025 10:12:34 GMT\r\nexpires: Fri, 14 Aug 2026 10:12:34 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 328524\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86927,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-06-10T02:11:05.47072Z","times_seen":134248,"resource_available":true,"data":null}},"time_used":4996,"timings":{"blocked":2499,"dns":12,"connect":35,"send":0,"wait":35,"receive":42,"ssl":2344},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241010-10/6ad3de7da51b66351c8f8f854593bc9e.png","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:59.795Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241010-10/6ad3de7da51b66351c8f8f854593bc9e.png HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-18","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/nosleep/0.11.0/NoSleep.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:56.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/nosleep/0.11.0/NoSleep.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3953\r\ncf-ray: 970f014d2f790b61-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5ed16b69-29bf\"\r\nlast-modified: Fri, 29 May 2020 20:07:05 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 182901\r\nexpires: Sat, 08 Aug 2026 05:27:58 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Xu4DspKd%2B4XjBzESM4yYNRJ6s9T%2F8CUQIrPUt2duMxZiZaKAgB4Ey%2BoN39b7NE73Ke62FTt1UvoPaxFNDBQrYHBYBf2jf4c5RC%2FGnu5TZdK%2FWR3vKRx0Y%2BiCDOZ7QZGEOG6CtVZy\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10687,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10613)","md5":"ea77f824de2ef57acb12e7cb6596365e","sha1":"10bad0dbdf30a0471c2c786b349daeb1dd19180e","sha256":"2b19d92ce83bf3b498f73103ba1240f09c84798b1f92aedf1491ccf0aa6f5e4c","sha512":"cf69dd76334b7318c829868da8a7e9c2097ef261555388132fc69f95d42e91420e2988056c3d93c830b20059422ae5a82e1109e3dce9127ccb0e23cc5ca27591","ssdeep":"192:N0rZbTPe+fl9SKRGyFgkw+wi+FrZJqbzr+5rA7wbUCzebIkm:N09voK7gzi+FrZJqbzrarAyUX5m","tlshash":"7a22f8b33133fd9f8fba085ac61d61045c7dbc6f4aa94091bb0884e86af4558ead5d34","first_seen":"2023-03-07T12:02:01Z","last_seen":"2026-06-03T05:36:21.490019Z","times_seen":2356,"resource_available":true,"data":null}},"time_used":2077,"timings":{"blocked":3,"dns":10,"connect":23,"send":0,"wait":14,"receive":1,"ssl":2006},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/favicon.ico","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"169.150.247.40","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Jul 2025 06:11:45 GMT","end":"Sun, 12 Oct 2025 06:11:44 GMT"},"fingerprint":{"sha1":"D7:A2:44:26:5F:AE:CA:43:04:92:49:73:C4:48:A3:61:F6:F2:C8:A5","sha256":"A3:32:41:00:16:DA:A0:92:E3:0D:0F:F4:C9:0A:B8:B9:22:3B:50:DE:DF:7E:24:13:1B:65:07:8D:1B:E8:77:80"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:28:03 GMT\r\ncontent-length: 1406\r\nserver: BunnyCDN-DE1-1075\r\ncdn-pullzone: 4336709\r\ncdn-uid: 0f7047b6-2b70-4588-b55a-df9b2a15bf91\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\ncache-control: public, max-age=2592000\r\netag: W/\"1406-1744916365610\"\r\nlast-modified: Thu, 17 Apr 2025 18:59:25 GMT\r\nx-powered-by: Express\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/14/2025 09:11:25\r\ncdn-edgestorageid: 1334\r\ncdn-requestid: 386559ca10cc6c48f91897a6802058ee\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel","md5":"8851a1b28ebe567b927c9ae6600a8fc6","sha1":"113da6a02dff45d4b9c0d3c9ae531445a8c7b687","sha256":"b545a5091485f5dd485f0e9d2abcd55a06b22f9359c6da8955b8da7b1d3c9212","sha512":"f438008028a354d1600c8af6a136e3991dcbaa188759f20c22a6c76a3170390c14578561d886272741f029f6f161b3711afb959385bbf49166ccf170e3edf95d","ssdeep":"","tlshash":"2121e1213397e353db451ef532244b944243d32906f79b9411e80685aa4f3301fbc373","first_seen":"2025-05-02T17:12:40.010154Z","last_seen":"2026-05-24T12:50:40.566223Z","times_seen":635,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn5-thumbs.motherlessmedia.com/thumbs/CB5F1AC.jpg","fqdn":"cdn5-thumbs.motherlessmedia.com","domain":"motherlessmedia.com","tld":"com"},"ip":{"addr":"185.107.92.224","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.motherlessmedia.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Mon, 04 Nov 2024 00:00:00 GMT","end":"Fri, 05 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"57:B3:92:20:5F:2C:FA:27:4E:CD:E5:6F:BC:3E:04:43:42:3A:93:E8","sha256":"10:A9:10:0A:05:AC:3F:09:47:9C:0E:EF:B9:5A:60:87:2B:F1:D5:35:A8:E6:3B:67:04:9B:7C:A8:AA:53:B7:FE"}}},"request":{"raw":"GET /thumbs/CB5F1AC.jpg HTTP/1.1\r\nHost: cdn5-thumbs.motherlessmedia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty/1.21.4.1\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15693\r\nvary: x-s-token\r\nlast-modified: Sun, 07 Oct 2018 00:25:11 GMT\r\netag: \"3d4d-5779889a3ae86\"\r\nx-cache: HIT\r\nx-whom: cdn02\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15693,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 640x480, components 3","md5":"4f88ccdbbd8fe3acd9a4f04227dc75fc","sha1":"9cdf8326a8dc811a463d62c7bd212025fab9f42e","sha256":"6c4df3dfd22753ec006e4795fea046881d93c4d2dd91f28adde46aca41e93d8a","sha512":"fca8adb578e6a5831235047577be051ac948d8c880020856cbb128b9351664dcf5ccbcd4856f53bd8f5a2f95331783a3b92f1384a9b28d800d4474109f437fef","ssdeep":"384:XSM6LLNyh+K62yO7n+pzaPjiXSEnXlJmcMFIfMOtH7Gqf:XRyLIhx17n+haPcRXnmcC0f","tlshash":"b362d013ff5316a6e88cf47ec224df212f766299d330183d9290c1d16a36bf19a5eb06","first_seen":"2025-05-22T07:14:20.994003Z","last_seen":"2025-08-18T05:29:08.676241Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3385,"timings":{"blocked":1270,"dns":9,"connect":107,"send":0,"wait":32,"receive":1,"ssl":1955},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/original/1X/f8c1f7ddc66db9e6060815782c3fd3a8fea47804.png","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 16:04:05 GMT","end":"Sun, 09 Nov 2025 16:04:04 GMT"},"fingerprint":{"sha1":"DF:EC:86:BA:09:B3:17:C2:2B:66:0A:BF:62:3E:3C:4D:90:D2:A4:33","sha256":"EF:3A:5A:BF:D7:FE:5F:99:1A:3F:CD:49:ED:AF:84:68:4F:09:27:DC:47:7B:D5:51:4C:E2:DB:A2:A1:6A:3C:FF"}}},"request":{"raw":"GET /uploads/default/original/1X/f8c1f7ddc66db9e6060815782c3fd3a8fea47804.png HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 71278\r\nlast-modified: Sun, 20 Apr 2025 01:14:57 GMT\r\nexpires: Tue, 18 Aug 2026 05:27:54 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":71278,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 180, 8-bit/color RGB, non-interlaced","md5":"c324e9a2f20720cc45e25df2e4c6ca7b","sha1":"f8c1f7ddc66db9e6060815782c3fd3a8fea47804","sha256":"c1bdf96cf05449054b406d1323deeefe7511b4621fc835e51845dc17192214e0","sha512":"8bd8ef7c8b61b1ba011c48b88a2912c5fd8bbd3e24d2dedec635d334f744749588938c28ee3589ab77fe96a49f8b29bf25b7f4b115ef788c569c54537df08f13","ssdeep":"1536:abr2fex26mMIUnutJwOds4owMuI3rtLJbduoyR7jS6PG:af2gPNI6utJXs4oc65Lg9PG","tlshash":"7a6302fe9224875d367acc149a903b06f8724bc026855be6f85fd34db76632b44f42a8","first_seen":"2025-07-25T10:57:14.243353Z","last_seen":"2025-12-21T07:34:46.915399Z","times_seen":3,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn5-thumbs.motherlessmedia.com/thumbs/BF56F73.jpg","fqdn":"cdn5-thumbs.motherlessmedia.com","domain":"motherlessmedia.com","tld":"com"},"ip":{"addr":"185.107.92.224","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.motherlessmedia.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Mon, 04 Nov 2024 00:00:00 GMT","end":"Fri, 05 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"57:B3:92:20:5F:2C:FA:27:4E:CD:E5:6F:BC:3E:04:43:42:3A:93:E8","sha256":"10:A9:10:0A:05:AC:3F:09:47:9C:0E:EF:B9:5A:60:87:2B:F1:D5:35:A8:E6:3B:67:04:9B:7C:A8:AA:53:B7:FE"}}},"request":{"raw":"GET /thumbs/BF56F73.jpg HTTP/1.1\r\nHost: cdn5-thumbs.motherlessmedia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty/1.21.4.1\r\ndate: Mon, 18 Aug 2025 05:27:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19953\r\nvary: x-s-token\r\nlast-modified: Sat, 06 Oct 2018 17:50:18 GMT\r\netag: \"4df1-577930570ab8c\"\r\nx-cache: HIT\r\nx-whom: cdn08\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19953,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 32x27, segment length 16, baseline, precision 8, 640x480, components 3","md5":"586a0d478938120578cd6f31a279e25c","sha1":"d9aa5d64b5e8e1abc9e390aeac41ead7b2303f6e","sha256":"5b82c0c8c3ef80e91c295ace53f2f9c4cefb37292390f117b7fac32a6dd120c4","sha512":"fe72ba82098634403dcceb33f35ca99302dd8fb0a6604a72a0633019d727869e55fa4b17b3dbbd4f6f4c5fb4f3124926405263941f2d79e55100ea72de33695e","ssdeep":"384:PQ0mRq+OHrnw67Eydl5XtdgmxP7/vBnZv/rd05VvD41vDOhTIhQMS7:PQJqNnxQydlNTg2DBnZbd0zv8vDOhT9P","tlshash":"4d92d0037fadd8f6fc12f8b49214b175220d4c6a4eb51fafd77016aa286e069e1c05a8","first_seen":"2025-08-08T07:50:15.616326Z","last_seen":"2025-08-18T05:29:08.68075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2827,"timings":{"blocked":1055,"dns":7,"connect":19,"send":0,"wait":63,"receive":1,"ssl":1650},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rucelka.com/favicon.ico","fqdn":"rucelka.com","domain":"rucelka.com","tld":"com"},"ip":{"addr":"31.10.5.4","port":443,"asn":207728,"as":"EUROHOSTER Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rucelka.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Jul 2025 10:14:37 GMT","end":"Wed, 08 Oct 2025 10:14:36 GMT"},"fingerprint":{"sha1":"97:D8:C5:E6:10:A2:88:EE:A7:D9:4E:CA:94:99:4B:2C:80:FA:90:2E","sha256":"6A:00:A2:E1:BE:6C:13:B7:AC:BE:89:C6:51:7E:DF:70:01:2A:C4:36:68:B9:B0:0C:F8:FF:76:F2:F2:7E:7D:61"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rucelka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 18 Aug 2025 05:28:04 GMT\r\nContent-Type: image/vnd.microsoft.icon\r\nContent-Length: 1651\r\nConnection: keep-alive\r\nLast-Modified: Sun, 14 Apr 2019 17:00:46 GMT\r\nETag: \"673-586807a23d3eb\"\r\nAccept-Ranges: bytes\r\nStrict-Transport-Security: max-age=31536000;\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1651,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 32x32, components 3","md5":"42a2adc4597cee55b473aa29b9d57f6c","sha1":"cb5cf4279828ceccad427369a286419b12fb5cfb","sha256":"931b572572a9b3024727c1e6d0dfabc5644b844b2488a2076de8970574d13cd0","sha512":"4198ff2ac8593a8dda4e401ef18123f2418a6c5d717e9b6ddeb2da18a757fafeccea307e4838f85bcfc788f4ee9a73ef8ad8d23fdcceefe353333e1fb1591741","ssdeep":"","tlshash":"5031da39d2c75570ee2bd93e17061bc6d19d9e41bc0c4b857f304db4c5a498991c8a8c","first_seen":"2025-06-02T14:12:55.149504Z","last_seen":"2026-04-22T17:26:51.473707Z","times_seen":50,"resource_available":false,"data":null}},"time_used":1404,"timings":{"blocked":-1,"dns":45,"connect":58,"send":0,"wait":69,"receive":0,"ssl":1179},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornoperso.com/wp-content/uploads/2021/08/www-galitsin-news-com.jpg","fqdn":"pornoperso.com","domain":"pornoperso.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornoperso.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Jun 2025 10:31:44 GMT","end":"Thu, 18 Sep 2025 11:30:11 GMT"},"fingerprint":{"sha1":"DB:55:F8:33:AA:13:56:2E:55:12:14:F2:6B:C2:7E:C8:8C:1E:32:53","sha256":"9B:70:D9:A9:BB:50:01:07:B8:70:9B:EF:08:46:8F:DF:AF:FB:1A:72:FF:EF:60:7F:E1:4C:02:F1:8A:6C:FA:4F"}}},"request":{"raw":"GET /wp-content/uploads/2021/08/www-galitsin-news-com.jpg HTTP/1.1\r\nHost: pornoperso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20947\r\nlast-modified: Tue, 10 Aug 2021 22:24:20 GMT\r\netag: \"6112fc94-51d3\"\r\nversion: MS25061701\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=2592000, must-revalidate\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1759740\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B%2FgzLiGw9BVZztaGhwbegvIKYj%2Bl5%2F4W7KiuBmPLzUirWVsLpeFdQ2CABu20jbYCnNXEtPVGRIVr46tisRVPqsHx%2BJTXpcgYGkl9FA%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 970f014348730b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20947,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85\", baseline, precision 8, 600x337, components 3","md5":"85a9bf353615c757aa9b94948454e375","sha1":"09a4eafd3156c049cd86262e9a70c269b0e49cdd","sha256":"866a76a21b1741eabae8b01ba41a0cb3d291a1ed6d3a13f185e616eac39c565a","sha512":"d823ae2d44f33777e55043e8134ceba4fdf7cffd700080fe661f9bfed88fbd1511884825615b18825732ccd7ad40ca603b751e1e54b56be77c439e1eec0a5ac1","ssdeep":"384:q2AUOpV4075hdV/iiocDsnsjJzEzPc7YFNvgHPRF8HfVDF+eUM0j2kaRlVA:q4Op+075hfWcgsoFFuHPjmfVD/UMyAA","tlshash":"8292bf238e0483a7941dc3b47d039ee91aa75d4899a67edc712ace963f207346cee51c","first_seen":"2025-05-23T07:10:39.896333Z","last_seen":"2025-11-21T01:17:25.208804Z","times_seen":6,"resource_available":false,"data":null}},"time_used":980,"timings":{"blocked":949,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/favicon.ico","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:02.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 16:04:05 GMT","end":"Sun, 09 Nov 2025 16:04:04 GMT"},"fingerprint":{"sha1":"DF:EC:86:BA:09:B3:17:C2:2B:66:0A:BF:62:3E:3C:4D:90:D2:A4:33","sha256":"EF:3A:5A:BF:D7:FE:5F:99:1A:3F:CD:49:ED:AF:84:68:4F:09:27:DC:47:7B:D5:51:4C:E2:DB:A2:A1:6A:3C:FF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:28:02 GMT\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornsexyoung.com/favicon.ico","fqdn":"pornsexyoung.com","domain":"pornsexyoung.com","tld":"com"},"ip":{"addr":"185.73.221.134","port":443,"asn":32338,"as":"HOSTISERVER","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornsexyoung.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 05:21:38 GMT","end":"Thu, 02 Oct 2025 05:21:37 GMT"},"fingerprint":{"sha1":"66:85:26:E4:E5:B5:8A:D6:E4:72:D3:4B:68:96:92:AE:6B:96:43:2E","sha256":"E2:3E:C7:93:65:42:1D:5F:77:82:BE:B4:D0:EE:54:AC:20:59:1C:B9:C0:07:13:A5:55:05:C0:81:65:57:BD:90"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pornsexyoung.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:28:04 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":1461,"timings":{"blocked":17,"dns":12,"connect":94,"send":0,"wait":63,"receive":0,"ssl":1160},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20240629-1/1d67f07df1dac59a27b884fec17c9d22.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.62","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:59.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20240629-1/1d67f07df1dac59a27b884fec17c9d22.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:59 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nstrict-transport-security: max-age=63072000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ro.fapello.com/favicon.ico","fqdn":"ro.fapello.com","domain":"fapello.com","tld":"com"},"ip":{"addr":"104.20.18.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapello.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 20:21:00 GMT","end":"Sun, 28 Sep 2025 21:20:57 GMT"},"fingerprint":{"sha1":"A0:2D:9E:EB:53:F2:55:DE:A9:23:BE:C7:B5:45:34:70:94:30:FE:9F","sha256":"C1:D4:49:D9:B2:79:A3:31:A2:AD:7F:29:BE:21:A4:89:6E:63:0D:5C:51:2D:3D:33:A2:8D:51:4B:BF:13:ED:EC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ro.fapello.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Mon, 18 Aug 2025 05:28:03 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nage: 109\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-ray: 970f016c5dfb56ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":79,"connect":29,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdig.com/faviconico/","fqdn":"fapdig.com","domain":"fapdig.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdig.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Jul 2025 16:30:06 GMT","end":"Mon, 13 Oct 2025 17:27:49 GMT"},"fingerprint":{"sha1":"76:C7:CB:0F:48:7A:EF:2F:4D:47:B6:D3:91:60:42:CE:BC:A3:43:24","sha256":"2E:29:05:76:4F:50:CA:97:93:6D:CB:42:4C:D5:8B:AE:B9:59:EE:02:3E:8B:84:66:40:89:F9:FC:2E:8D:04:6E"}}},"request":{"raw":"GET /faviconico/ HTTP/1.1\r\nHost: fapdig.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Mon, 18 Aug 2025 05:28:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ztYO3fVVIQdGZE6mwTzsSJ%2BLAVBdFFvqCVGon0JyF5wHoUYoyG5bY83XYTLMilZFwtWuL14XUh5o8uv%2BqJNRo13UvfbPJKch\"}]}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nset-cookie: ASPro_1382933ca042bef776e8100bd5eb8ac5=ua4bplhm564e1mpjb0ltefrqv8; Path=/\r\ncontent-encoding: br\r\ncf-ray: 970f016f3de30b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":1227,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":1193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"steppe-flower.com/video/clip038.jpg","fqdn":"steppe-flower.com","domain":"steppe-flower.com","tld":"com"},"ip":{"addr":"104.21.6.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:56.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"steppe-flower.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Jul 2025 01:09:47 GMT","end":"Sat, 11 Oct 2025 02:08:19 GMT"},"fingerprint":{"sha1":"CA:E8:1D:F4:23:01:2D:E3:CF:D2:4F:48:B1:82:45:B3:57:BA:55:10","sha256":"D3:C7:75:C1:3B:10:57:91:37:57:E2:80:F2:25:CB:2D:CB:E1:B6:22:94:1E:A2:97:67:27:46:D1:4B:FA:07:09"}}},"request":{"raw":"GET /video/clip038.jpg HTTP/1.1\r\nHost: steppe-flower.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 101980\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 22 Apr 2014 14:41:00 GMT\r\netag: \"18e5c-4f7a29ac1d700\"\r\naccept-ranges: bytes\r\nage: 2930\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ptB91pqNTl5EGqQIv7vsVdGkISeQaqbCIfaNx%2F%2FoEsTbVmC2rmUetaWbQnhzoknvOToVT8B8DIRU2RAhblzk85aYB2JlHJaKmb6DRwQx6w%3D%3D\"}]}\r\ncf-ray: 970f014c2942b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101980,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 15x15, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2014:03:18 01:16:36], progressive, precision 8, 768x432, components 3","md5":"035e8c0acbf18c245bd73a1ec5aa4cc3","sha1":"77ffb501cca687f385d03c84e910865e5c96a002","sha256":"e6dad83a5498917024a18f6fb7a0d707f0a456167c887eda1c2c35c71069a1bb","sha512":"a18457be44db747f24855a3c5bfa72a6b33014f3f947b1403aab01c47b34ff0f6fe2e9c9219f37eb961939136542d69455e28016c8f64f1350f42cd65035e890","ssdeep":"1536:D91n74H7SNjY5IsIqUL868/5d3KDpr1Qu1epOlAO8glRX9tmVLgKaWovzPh9:D91S7Ejm73KD447lDdXTmp9aPbZ9","tlshash":"34a3f26122e8de13e4c162768017d3dbe5274d4ec28f5b4e789cb1d87fae765bd22220","first_seen":"2025-08-18T05:29:08.685535Z","last_seen":"2025-12-25T16:44:02.368511Z","times_seen":7,"resource_available":false,"data":null}},"time_used":4111,"timings":{"blocked":2042,"dns":21,"connect":10,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blumpkintube.com/thumbs/376/062_Corresses_Dick_Tight.jpg","fqdn":"blumpkintube.com","domain":"blumpkintube.com","tld":"com"},"ip":{"addr":"104.21.79.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blumpkintube.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 12:42:16 GMT","end":"Sat, 08 Nov 2025 13:40:57 GMT"},"fingerprint":{"sha1":"B5:5C:D6:3E:1F:1F:47:CA:75:11:10:36:23:AD:28:60:30:F6:F3:E6","sha256":"4F:EB:18:31:61:2F:FF:F3:CC:1A:17:F1:35:E5:4F:6C:16:A3:87:63:98:E1:24:08:83:65:C3:DC:3A:AE:72:64"}}},"request":{"raw":"GET /thumbs/376/062_Corresses_Dick_Tight.jpg HTTP/1.1\r\nHost: blumpkintube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9291\r\nserver: cloudflare\r\nlast-modified: Sat, 26 Sep 2020 03:59:46 GMT\r\netag: \"5f6ebcb2-244b\"\r\nexpires: Thu, 02 Jul 2026 06:26:53 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, no-transform\r\nage: 4057264\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JuYK4MwoWHrGBeI8n3qDb8G3pCiXNonQ8CPZOzgeb9IzYovLRJ%2BYs5%2B5Bb0pbjuhSwdOyy3k4yrUscQH4F0pZpz%2BglLexLXYnnVdAzfg\"}]}\r\ncf-ray: 970f014c9b3c56a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9291,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 312x208, components 3","md5":"f99fc284eeb2a7255189f1760d050bd5","sha1":"baa7b2395bc78a68620ae92291dfbd0d3f217d34","sha256":"56f56a9693787f8fbef1d27c93fe8e95cb2274722e702e17e1001ae7cb761c4d","sha512":"d6a185b5caa8e39b3f70058d5b0cdc547d9b71a35f9644374aa489f161c9d54fa44dc739aa139a864fa8654b53544cbae35f95ba7eb5b782b3bf5f55db98f260","ssdeep":"192:AtUn+pUq0L/c+f6n+D7u4iqlPbDdjKFuaI:DnSGc+C+D7D9lPFoI","tlshash":"be129e87575e03c9fda367582206cc2db3ed0d9a7aaa433662d0541dd273cb349e147d","first_seen":"2024-12-07T02:21:28.190396Z","last_seen":"2026-01-31T10:39:20.891595Z","times_seen":26,"resource_available":false,"data":null}},"time_used":2642,"timings":{"blocked":575,"dns":10,"connect":13,"send":0,"wait":9,"receive":1,"ssl":2021},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"18-girls-av.com/favicon.ico","fqdn":"18-girls-av.com","domain":"18-girls-av.com","tld":"com"},"ip":{"addr":"162.43.96.5","port":443,"asn":131965,"as":"Xserver Inc.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.18-girls-av.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Jul 2025 22:13:35 GMT","end":"Wed, 01 Oct 2025 22:13:34 GMT"},"fingerprint":{"sha1":"4E:F6:C4:2F:32:54:16:EF:3C:DB:BC:D2:DC:8E:96:FF:D4:A9:7E:D1","sha256":"D8:DC:51:0B:18:B0:E9:DB:6B:66:8F:F6:2E:25:81:FC:F1:95:14:75:77:0D:90:81:E7:3A:CE:EE:D5:02:15:02"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 18-girls-av.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:28:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nlocation: https://18-girls-av.com/wp-includes/images/w-logo-blue-white-bg.png\r\nlink: \u003chttps://18-girls-av.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-redirect-by: WordPress\r\ncache-control: max-age=1\r\nexpires: Mon, 18 Aug 2025 05:28:03 GMT\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":4119,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.blacktowhite.net/favicon.ico","fqdn":"www.blacktowhite.net","domain":"blacktowhite.net","tld":"net"},"ip":{"addr":"192.243.63.82","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"blacktowhite.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Jul 2025 00:00:00 GMT","end":"Fri, 28 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"29:7F:D6:17:0A:55:E3:DB:E8:59:A0:3D:66:88:A5:35:86:B8:EF:80","sha256":"16:D2:4C:56:09:A6:4E:FB:DC:AF:6D:06:8A:B4:A7:96:B1:B5:E6:6B:82:A7:EE:D8:13:2C:AA:59:3C:FC:F0:43"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.blacktowhite.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.17.6\r\ndate: Mon, 18 Aug 2025 05:28:03 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 2951\r\nlast-modified: Mon, 21 Dec 2015 10:18:34 GMT\r\netag: \"5677d1fa-b87\"\r\nexpires: Mon, 01 Sep 2025 05:28:03 GMT\r\ncache-control: max-age=1209600\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.17.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2951,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"7f61d30e4ff36ab9f7cbc9e8b4e3feda","sha1":"54f81165e7d7130826fd6d87d85a39735c391698","sha256":"60e32d8ca6041d4eedc2e9abf1ef3f012e86a01ba7cccc3004ee934bafb22742","sha512":"42fa4ee29441191acee2ce05a65e79aeb40c77e94a7bfed5b9d45b7c0eb10e9f9abd245b06f7826eb052b70f0c8357b69aad9c4f461b4cbb031414a03b0c4bae","ssdeep":"","tlshash":"d2512ada37446612d76bb871ec1428736d9118cb096f6fa882774d346f795372814770","first_seen":"2024-06-16T03:37:38Z","last_seen":"2026-05-24T12:50:40.688624Z","times_seen":434,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blumpkintube.com/favicon.ico","fqdn":"blumpkintube.com","domain":"blumpkintube.com","tld":"com"},"ip":{"addr":"104.21.79.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blumpkintube.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 12:42:16 GMT","end":"Sat, 08 Nov 2025 13:40:57 GMT"},"fingerprint":{"sha1":"B5:5C:D6:3E:1F:1F:47:CA:75:11:10:36:23:AD:28:60:30:F6:F3:E6","sha256":"4F:EB:18:31:61:2F:FF:F3:CC:1A:17:F1:35:E5:4F:6C:16:A3:87:63:98:E1:24:08:83:65:C3:DC:3A:AE:72:64"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: blumpkintube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 Aug 2025 05:28:02 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 1150\r\nserver: cloudflare\r\nlast-modified: Fri, 29 Nov 2019 11:53:39 GMT\r\netag: \"5de106c3-47e\"\r\nexpires: Sun, 02 Aug 2026 08:48:06 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, no-transform\r\nage: 1370396\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OPe16Hia6izHYOOvKO66wQk%2BcbS4SAU%2BehyTQps3qc2zZbmWb2pJOdgbucc40gpYoC6l7u2jTMNk2%2BLX95eywtKxFtT4tNdmv8d%2Bmv%2Bm\"}]}\r\nvary: accept-encoding\r\ncf-ray: 970f016a4fee56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"3de13983da1e7755426362ee988fae6a","sha1":"51d87d2cb8a6950b5e1c8ca24a257cb397664a93","sha256":"16c3dc433b7b2460b9ba12b1aa28a14c598e93f5bab8f7cb1b5afa3989457c05","sha512":"788bdd434e346a864dbebe4681af25ad503de3d27baf36fe96ac013fc9bd3d207f7641ff85a353da57ad6cccd6e5ce4419de2d6653dba9622bdcb4bac81b1d02","ssdeep":"","tlshash":"3721a45d6404a4bdfd98f77a331175068ede76b2317a00f507e01f676462258b8c6ea0","first_seen":"2024-05-18T21:25:43Z","last_seen":"2026-05-24T12:50:40.941739Z","times_seen":400,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zakladchitsa.ru/favicon.ico","fqdn":"zakladchitsa.ru","domain":"zakladchitsa.ru","tld":"ru"},"ip":{"addr":"77.83.175.19","port":443,"asn":211381,"as":"Podaon SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zakladchitsa.ru","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 02:51:46 GMT","end":"Mon, 20 Oct 2025 02:51:45 GMT"},"fingerprint":{"sha1":"ED:98:B3:05:5C:95:3E:5D:04:B1:B0:46:59:71:3C:DD:83:8D:46:D5","sha256":"37:2B:F2:74:72:61:6F:BB:5E:68:63:EC:30:2E:81:4B:68:E4:96:33:55:78:11:B7:30:B0:51:9D:CC:BF:64:7C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: zakladchitsa.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Mon, 18 Aug 2025 05:28:04 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":1486,"timings":{"blocked":-1,"dns":120,"connect":56,"send":0,"wait":88,"receive":0,"ssl":1174},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdsex.org/favicon.ico","fqdn":"hdsex.org","domain":"hdsex.org","tld":"org"},"ip":{"addr":"190.2.144.111","port":443,"asn":49981,"as":"WorldStream B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:04.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdsex.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 00:57:14 GMT","end":"Sat, 01 Nov 2025 00:57:13 GMT"},"fingerprint":{"sha1":"FB:53:86:1E:C6:2C:83:8C:32:38:7F:12:81:B6:FE:3F:4E:C0:9C:A3","sha256":"8C:2F:02:8B:4C:83:10:3F:55:5B:8E:23:5F:1D:3A:45:90:6B:9D:51:C1:19:1F:C9:4A:78:E2:4D:37:CE:AB:E6"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: hdsex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Mon, 18 Aug 2025 05:28:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver-timing: mw.not-found;dur=0.003022,mw.redirects;dur=0.388862,mw.user-country;dur=0.002184,mw.language;dur=0.027199,mw.niche;dur=0.000961,mw.meta;dur=0.001692,mw.utm;dur=0.000768,mw.referer;dur=0.000173,mw.request-vars;dur=0.086352,mw.data-processing;dur=9.348434,dp.Stripcash.GetOnlineModelsCount;dur=6.754252,dp.Videos.GetListByNiche;dur=2.180079,dp.Stripcash.GetOnlineModelsList;dur=9.310727,process-request;dur=4.008442,process-request_render;dur=3.996158\r\nx-envoy-upstream-service-time: 15\r\nx-envoy-decorator-operation: itube-gw-web.master.svc.cluster.local:8282/*\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":101,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornyc.com/thumbs/86/841_girl.jpg","fqdn":"pornyc.com","domain":"pornyc.com","tld":"com"},"ip":{"addr":"104.21.2.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornyc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Jun 2025 13:13:14 GMT","end":"Mon, 22 Sep 2025 14:11:38 GMT"},"fingerprint":{"sha1":"8F:2C:9D:5E:1C:7B:DB:39:77:83:B6:6B:48:7E:4D:0C:89:98:DF:09","sha256":"F5:1B:76:96:9A:8A:F9:DB:D8:02:15:CC:97:98:A7:FF:CA:F9:17:48:43:47:AF:50:31:F7:D9:38:14:05:55:E1"}}},"request":{"raw":"GET /thumbs/86/841_girl.jpg HTTP/1.1\r\nHost: pornyc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11804\r\nserver: cloudflare\r\nlast-modified: Fri, 17 Sep 2021 17:04:35 GMT\r\netag: \"6144caa3-2e1c\"\r\nexpires: Fri, 31 Jul 2026 09:07:17 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, no-transform\r\nage: 1542039\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SxBL5V%2BRX6Gc4U8COAXgwbt%2FbTgFcf6fg4zY7cupWxJPg6zS3CtcA2P4lh%2Bc5TxnoFhBbvpAmpaLo7GZY7xrDyU%2FE1oIWd15\"}]}\r\ncf-ray: 970f01446d53569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11804,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 312x208, components 3","md5":"af56805880f9b6e25f07f454d5567c04","sha1":"bb9f2574e57d7dd64cf8a6dbb05d3ff2ffe8a4bc","sha256":"0f81414716835e818ed478e666e6f32623155a588dc4f4bccbd9295f234161d9","sha512":"1515cfca7079cafb456089263e28c855adcfc33342580d4ba53353ace56dd8357d2bb0f8d058ccb46b1cb036994cc40ddb7084444b0bda1ad429abf64a0e8704","ssdeep":"192:KYUabKIDIjejMmIg8Cl+BG2E6NDOfuXAcaLhDgBb7QwnG5Qxtvk/:KYHbZIjDFGBluMLdSmQna","tlshash":"1032af1363ee55c7f9d2407d669b1edf80d84e2704a05a0a6ec5fa0e283db641d8ca37","first_seen":"2025-06-07T22:50:30.082393Z","last_seen":"2025-11-07T07:24:05.678424Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2076,"timings":{"blocked":98,"dns":18,"connect":2,"send":0,"wait":36,"receive":1,"ssl":1908},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20250710-1/96ff927429f7f91e9ff5c5a960dbbfd3.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.62","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20250710-1/96ff927429f7f91e9ff5c5a960dbbfd3.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5244\r\nlast-modified: Thu, 10 Jul 2025 02:47:18 GMT\r\nvary: Accept-Encoding\r\netag: \"686f29b6-147c\"\r\nexpires: Tue, 16 Sep 2025 16:53:51 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5244,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: \"Lavc57.89.100\", baseline, precision 8, 320x240, components 3","md5":"5cf355c5b84f22e1effb574fc76b9e7f","sha1":"4bb30a60b4b2beec3a445991a0fa3bda24f9024f","sha256":"b74d672237b97b2179216184414bd8944d8a3dd69f9084913cc58e9f035aa00d","sha512":"484c2b253f395bcb816a75ccf8d13a9fb3e08f18a0c4cc880a29ea04943eec45bea51a7b59fa7992ad1c9048c3755ffdab310f7c1c0969e1a36ef4233a934f7a","ssdeep":"96:RZ8zEIoXVScaI8GOzpubI1P6ks6riFAsVY+08yoxikpfpVb:Rm8VScOG+u81DsmS2cfxiqBl","tlshash":"79b19f977922010e8c0bbcbf0f1a781a61c84e4bcf355597f2af4052d659a7c496bf1d","first_seen":"2025-08-14T14:04:53.301642Z","last_seen":"2025-12-25T10:42:57.815201Z","times_seen":70,"resource_available":false,"data":null}},"time_used":1664,"timings":{"blocked":807,"dns":0,"connect":0,"send":0,"wait":614,"receive":243,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"de.chezcathy.com/favicon.ico","fqdn":"de.chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"138.199.36.9","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"de.chezcathy.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Jul 2025 06:11:18 GMT","end":"Sun, 12 Oct 2025 06:11:17 GMT"},"fingerprint":{"sha1":"ED:02:8A:4E:71:C8:8F:D7:E0:77:8F:23:D2:4B:A8:6C:78:E1:3A:DF","sha256":"87:BD:88:FE:30:C4:C4:B1:20:C6:5A:7C:65:FC:75:E5:25:BB:EB:12:64:56:46:4A:04:25:4D:17:8C:13:9F:E6"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: de.chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:28:03 GMT\r\ncontent-length: 1406\r\nserver: BunnyCDN-DE1-1049\r\ncdn-pullzone: 4336721\r\ncdn-uid: 0f7047b6-2b70-4588-b55a-df9b2a15bf91\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\ncache-control: public, max-age=2592000\r\netag: W/\"1406-1744916363745\"\r\nlast-modified: Thu, 17 Apr 2025 18:59:23 GMT\r\nx-powered-by: Express\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/14/2025 09:11:50\r\ncdn-edgestorageid: 1055\r\ncdn-requestid: a24160e5a79300b43db0f37d7df8393c\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel","md5":"8851a1b28ebe567b927c9ae6600a8fc6","sha1":"113da6a02dff45d4b9c0d3c9ae531445a8c7b687","sha256":"b545a5091485f5dd485f0e9d2abcd55a06b22f9359c6da8955b8da7b1d3c9212","sha512":"f438008028a354d1600c8af6a136e3991dcbaa188759f20c22a6c76a3170390c14578561d886272741f029f6f161b3711afb959385bbf49166ccf170e3edf95d","ssdeep":"","tlshash":"2121e1213397e353db451ef532244b944243d32906f79b9411e80685aa4f3301fbc373","first_seen":"2025-05-02T17:12:40.010154Z","last_seen":"2026-05-24T12:50:40.566223Z","times_seen":635,"resource_available":false,"data":null}},"time_used":973,"timings":{"blocked":-1,"dns":15,"connect":61,"send":0,"wait":34,"receive":0,"ssl":809},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"im4.mediacont.net/zscc/act/49/996_orgasms.jpg","fqdn":"im4.mediacont.net","domain":"mediacont.net","tld":"net"},"ip":{"addr":"104.160.9.33","port":443,"asn":63119,"as":"Angelnet Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mediacont.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 03:04:20 GMT","end":"Sun, 05 Oct 2025 03:04:19 GMT"},"fingerprint":{"sha1":"DD:41:7F:B5:0C:40:69:16:BD:6C:DD:5B:AC:3D:31:57:F9:E4:BA:3F","sha256":"2C:FF:CF:50:97:D7:E5:33:1F:0C:18:46:2E:45:75:D5:52:CB:85:1E:36:40:7F:29:9C:56:2D:6B:A1:42:98:C5"}}},"request":{"raw":"GET /zscc/act/49/996_orgasms.jpg HTTP/1.1\r\nHost: im4.mediacont.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 18 Aug 2025 05:27:55 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 13469\r\nLast-Modified: Thu, 03 Nov 2022 18:32:39 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=30\r\nETag: \"63640947-349d\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nCache-Control: max-age=315360000\r\nX-Request-ID: 9a674b4e5a11612e2c5cc694950cc395\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13469,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x166, components 3","md5":"69daaa605bc02bf97d4be3d57a200262","sha1":"ab5ee6bd95cbae647b01fe4561ef2b50e05e85f0","sha256":"0fc762107c19bd7222576281536ec49b0df1d8ed5b74b284fa5ef9803585081e","sha512":"b960edcb1a6cf205c206fd6c5fbdba7d8ba8e9179c75b17f1210540ea25e89a3911ff187fab63c603d235e46b589319edd445e16fbcd23293f545051fd4cfdd9","ssdeep":"384:odDf99z1NkDEf33+WyvALwAtq24ghzUUb:mrIDEfnIYVg2ZV","tlshash":"7152c0257459f214547f17ae7d0e62bc3ba097251e7a48ca66e27cdc33f6c88f21488e","first_seen":"2025-06-18T07:11:21.467167Z","last_seen":"2026-03-01T22:32:14.307469Z","times_seen":28,"resource_available":false,"data":null}},"time_used":946,"timings":{"blocked":337,"dns":21,"connect":66,"send":0,"wait":48,"receive":1,"ssl":164},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"karlikporno.com/files/screen/prew_video_1685711140i390.jpg","fqdn":"karlikporno.com","domain":"karlikporno.com","tld":"com"},"ip":{"addr":"51.83.228.93","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"karlikporno.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 23:57:53 GMT","end":"Wed, 22 Oct 2025 23:57:52 GMT"},"fingerprint":{"sha1":"1D:76:80:D4:59:D7:D0:47:67:0D:50:17:46:25:04:B4:AF:93:9A:D3","sha256":"07:36:AF:B4:3B:3D:3B:75:CA:F5:3B:EF:CA:FD:92:54:82:CC:7C:3D:99:D6:E9:8E:ED:6E:D2:E1:05:95:D3:5E"}}},"request":{"raw":"GET /files/screen/prew_video_1685711140i390.jpg HTTP/1.1\r\nHost: karlikporno.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23178\r\nlast-modified: Sun, 04 Jun 2023 16:29:02 GMT\r\netag: \"647cbbce-5a8a\"\r\nexpires: Thu, 13 Aug 2026 05:27:57 GMT\r\ncache-control: max-age=31104000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23178,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 320x640, components 3","md5":"7d2a1e3d81825b8a3d1b643a87389acf","sha1":"9d86dacff4f02cd6e27921cc50df5b40192a9c89","sha256":"d1e685616ce67733db531b167c3a57786be95a8c6a97bd06cd18f444b94f988d","sha512":"4b416b59781bbfa2e4fdb2e642ed1f8db1b7bc7d0a0b47f7b409c097fbe74db1ddf2287eac2f80aa8ebb828132d5bf465bbe168b5f27544fe7f73570b223de6c","ssdeep":"384:IOV1LnuRfuW1cYvBHNGrYL0m1CDqLva2MMWFoefAvwt1Hws/UaZt6b83UbZlgANn:I2FI225HEeD1+24FWv+1Hws7+6UdYPr4","tlshash":"50a2d159e2b3ac82871349bc536701904ddab0517fa7085153e0f2936beb99ed80b7a2","first_seen":"2025-08-18T05:29:08.69304Z","last_seen":"2025-08-18T05:29:08.69304Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2533,"timings":{"blocked":-1,"dns":3,"connect":56,"send":0,"wait":60,"receive":50,"ssl":2336},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s8301.chomikuj.pl/Thumbnail.aspx?e=Rs5-Avn2hKkRUClPNzLXvVBdKeokov4-0rtlReErtOyaKorboqnEUQyWUzxCXq_wOVzUQ_ltFvt6uZfGrhhT6IzZ3Y5zXpw0Tn-CSohJhoA\u0026pv=2","fqdn":"s8301.chomikuj.pl","domain":"chomikuj.pl","tld":"pl"},"ip":{"addr":"95.211.227.195","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:56.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.chomikuj.pl","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Dec 2024 00:00:00 GMT","end":"Sat, 10 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6F:5B:B0:9D:FF:F4:B0:50:D0:C8:F6:93:5D:DB:D5:E9:D2:32:A2:E0","sha256":"C0:96:36:8C:66:CD:C3:4A:CD:23:73:40:05:3C:3C:DF:07:4C:34:8D:1F:EE:B7:0E:12:E3:48:4A:E8:90:C0:CE"}}},"request":{"raw":"GET /Thumbnail.aspx?e=Rs5-Avn2hKkRUClPNzLXvVBdKeokov4-0rtlReErtOyaKorboqnEUQyWUzxCXq_wOVzUQ_ltFvt6uZfGrhhT6IzZ3Y5zXpw0Tn-CSohJhoA\u0026pv=2 HTTP/1.1\r\nHost: s8301.chomikuj.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://av4.vid4.uk/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: private\r\ncontent-type: image/jpeg\r\nserver: Microsoft-IIS/10.0\r\naccess-control-allow-origin: https://chomikuj.pl\r\nx-aspnet-version: 4.0.30319\r\nx-powered-by: ASP.NET\r\ndate: Mon, 18 Aug 2025 05:27:59 GMT\r\ncontent-length: 13698\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":13698,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 800x120, components 3","md5":"ba7afe0f48cd372ec2a8545e10cd16a7","sha1":"cec6a7c29eeb5ec6d8f1924d87c7b006b6ce5141","sha256":"c3e670e64a6adea15c116cbe76937cf6eb38d87ae8d595ff79b327ce1132f467","sha512":"4acee9f8d515d884462216624af6e392df930a8a344d3f48b1e0b8c639ac877aa32905c46b61465882480c01dcc88239119871913383829fb05273aa0063a7c1","ssdeep":"384:Y0zFvIw7A4X2mtitW/81/lAV7xjeuipvzNF5neuP:YUQws4X2nW2lAFx6ua5e8","tlshash":"1b52c00346c1852f27538fa4bd2f7af6087949c8297285f89b110f7e4d6cee8424e5ce","first_seen":"2025-05-13T15:08:22.390611Z","last_seen":"2025-12-25T16:44:02.29176Z","times_seen":21,"resource_available":false,"data":null}},"time_used":3961,"timings":{"blocked":937,"dns":23,"connect":39,"send":0,"wait":44,"receive":1,"ssl":2908},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gokahani.com/resources/desktop/images/tags_icon.jpg","fqdn":"gokahani.com","domain":"gokahani.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:59.915Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /resources/desktop/images/tags_icon.jpg HTTP/1.1\r\nHost: gokahani.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241010-11/4e0e1fcd88e763be8c7214ae71e21142.png","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:59.839Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241010-11/4e0e1fcd88e763be8c7214ae71e21142.png HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-18","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yaebus13.ru/favicon.ico","fqdn":"yaebus13.ru","domain":"yaebus13.ru","tld":"ru"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yaebus13.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 12:40:49 GMT","end":"Sat, 15 Nov 2025 13:38:25 GMT"},"fingerprint":{"sha1":"40:91:CB:A4:6B:91:49:6E:CC:B7:85:B3:A2:E2:62:13:E7:17:BC:CA","sha256":"9F:07:72:81:E0:82:E3:31:67:AA:A7:2F:95:E4:04:08:8A:B0:0D:5B:F9:FB:C9:66:E8:57:CB:E6:19:17:EE:CB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: yaebus13.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Mon, 18 Aug 2025 05:28:04 GMT\r\ncontent-type: text/html\r\nlocation: https://yaebus17.ru/favicon.ico\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 105\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZGEKkXfeUnJhRPn8plo6O%2Fi4%2B4sgelKIqoLgFBAt1pzZP76BierQviX9VCG%2BOEd3eZJw9yZlv2XkqgVCnu9bspX4mJ%2Bags862g%3D%3D\"}]}\r\ncf-ray: 970f01759a11569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":610,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":1413,"timings":{"blocked":36,"dns":64,"connect":52,"send":0,"wait":25,"receive":0,"ssl":1204},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241010-11/2e395e9b614bd7146d924a87f0ec30e9.jpg","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:59.831Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241010-11/2e395e9b614bd7146d924a87f0ec30e9.jpg HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-18","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realincest.net/thumbs/888/2273652250916926888_0.jpg","fqdn":"realincest.net","domain":"realincest.net","tld":"net"},"ip":{"addr":"172.67.221.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"realincest.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Jul 2025 12:36:44 GMT","end":"Thu, 09 Oct 2025 13:36:22 GMT"},"fingerprint":{"sha1":"62:67:D8:A8:5A:5A:A3:52:1E:FA:F5:90:64:00:9B:39:A1:47:F5:DF","sha256":"51:06:66:04:44:23:EC:00:08:F2:C0:17:C9:2F:CE:5F:6D:F3:6E:3F:95:63:7B:21:8D:1A:A8:92:94:E0:12:C5"}}},"request":{"raw":"GET /thumbs/888/2273652250916926888_0.jpg HTTP/1.1\r\nHost: realincest.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4740\r\nserver: cloudflare\r\nlast-modified: Sat, 19 Feb 2022 17:21:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6211272d-1284\"\r\nexpires: Sun, 31 Aug 2025 02:17:13 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 1480244\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j9ok4qiQnP97FmITB1uptG7yxYDmiMf1uzZAe63IHJDjk0o4RJ7tEgLH2%2F8gUQf8HE1%2FhF4I3fO6NszAGcjpuy8YkV2pjgKxghH%2BCg%3D%3D\"}]}\r\ncf-ray: 970f014b8d21569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4740,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 240x180, components 3","md5":"925813185a6bfca78d81baad21cd32d8","sha1":"8907720771256609e112879d57c61d146e5017f9","sha256":"9216f935a3e2db403c6b8e563abe835e92f917b84e7ffbbb018e26befd258f5e","sha512":"1734bbf99aaf10cfe54be0bf2a224d2a00562f59d9fed071386f304358641cc9604bfe5a0f54795a5cdc86872ca51819357e9d386f153bdb61a98133ef392308","ssdeep":"96:gEXbQao+kd1ya2/04KhbEU4LJsp/5rpCoiYHiabF8LrUP3FkEl2:g0Qao+keaYChohKgoinacUdh2","tlshash":"caa16d4f7900eda4cc9ae53a9749e79383cf82e651514e1e029d4088bf031de1cc5c57","first_seen":"2024-05-04T17:04:26Z","last_seen":"2026-01-24T16:50:11.426265Z","times_seen":24,"resource_available":false,"data":null}},"time_used":2652,"timings":{"blocked":511,"dns":3,"connect":6,"send":0,"wait":15,"receive":0,"ssl":2110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241010-11/ab97a51f53eec30416d347d20dc13716.png","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.551Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241010-11/ab97a51f53eec30416d347d20dc13716.png HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-18","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241010-11/d5fea0e0b8f908f29f68ca03f18833ef.png","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.639Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241010-11/d5fea0e0b8f908f29f68ca03f18833ef.png HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-18","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn2.geefap.com/uploads/posts/2018-04/thumbs/495445170_991088351.jpg","fqdn":"cdn2.geefap.com","domain":"geefap.com","tld":"com"},"ip":{"addr":"31.10.5.97","port":443,"asn":207728,"as":"EUROHOSTER Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn2.geefap.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Mon, 21 Oct 2024 00:00:00 GMT","end":"Tue, 21 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"AF:D5:79:17:2C:27:BD:47:ED:EC:E6:86:68:6C:15:FA:38:09:D7:18","sha256":"DB:FB:80:6C:8F:F3:EB:EF:08:23:74:15:33:0B:F5:0F:FB:ED:FF:4D:01:A3:EA:1F:EC:2D:FB:52:C8:0C:C3:50"}}},"request":{"raw":"GET /uploads/posts/2018-04/thumbs/495445170_991088351.jpg HTTP/1.1\r\nHost: cdn2.geefap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 18 Aug 2025 05:27:58 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 24727\r\nLast-Modified: Wed, 18 Apr 2018 04:57:41 GMT\r\nConnection: keep-alive\r\nETag: \"5ad6d045-6097\"\r\nExpires: Sat, 23 Aug 2025 05:27:58 GMT\r\nCache-Control: max-age=432000\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24727,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 300x420, components 3","md5":"3034ea6441cacd317bbbc243cd1d2b52","sha1":"6c7ea8a1ed1e69175d62a1627f5b9cc3d204bbbb","sha256":"98eb5805f183f45737979421d29deba2ee0e5079bb4eec507bfe739fe56ab032","sha512":"11e06816a225089778811ac1e53dffc31562ba54e62bf6f9f8b94bc6f348890c95a54a79d2ceeb976232895747568d711f7580a67a5e9b50f76b57738ab94992","ssdeep":"384:D6VuPvhl30urgtjKqgaN9Ei4P+tX9OorOA1D3vfj8sQHZPeP/Nyly3:D6IRl3BrgBKJ4CI/iA9j8sQHkP/Nd3","tlshash":"5bb2e175705a92c67029b09f3a561c3277f223dfc7b78e09dac52b34e70868119630e4","first_seen":"2024-05-06T16:02:15Z","last_seen":"2026-03-03T14:10:03.743739Z","times_seen":70,"resource_available":false,"data":null}},"time_used":3309,"timings":{"blocked":910,"dns":37,"connect":33,"send":0,"wait":33,"receive":22,"ssl":2208},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"abc30.com/favicon.ico","fqdn":"abc30.com","domain":"abc30.com","tld":"com"},"ip":{"addr":"3.167.7.37","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"abc7.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Tue, 08 Oct 2024 00:00:00 GMT","end":"Wed, 05 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"7D:24:C4:F3:41:9F:F4:D0:50:28:54:8F:BB:4F:3A:C1:A1:5B:13:10","sha256":"FF:D4:DC:57:B9:0B:EA:FB:BF:9C:31:80:03:70:2E:64:C7:EA:D6:54:EC:42:C2:FE:EC:F4:45:52:56:BA:07:9E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: abc30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/x-icon\r\ncontent-length: 16958\r\ndate: Mon, 18 Aug 2025 05:27:16 GMT\r\nset-cookie: region=ccpa; path=/; Expires=Mon, 25 Aug 2025 05:27:16 GMT;\n_dcf=1; path=/; Expires=Mon, 25 Aug 2025 05:27:16 GMT;\r\nserver: nginx\r\nlast-modified: Tue, 05 Aug 2025 19:54:14 GMT\r\nexpires: Mon, 08 Sep 2025 15:09:47 GMT\r\ncache-control: max-age=1849352\r\netag: \"68926166-423e\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 dfa43a17d6715f83d8bb6aa560e80366.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: Yd61wUgU0GOJ8zslOwjhFw9w4KWkEXRDov_7mMZI_WOcF1t8vCXggA==\r\nage: 48\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":16958,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"0aaf8457bd258cded94d0da46789c616","sha1":"f1eab8e01b5d8b640b3ba3ad6bd83fbcc999cdee","sha256":"5ae0d6e32bb5c1cd967fa78cd86b13bcaf0d523f47718f2701b84de234626750","sha512":"03ff3ac4e7a48de9b707bcb0cfd5b5fb18a0be22c6cba9573a9e922449d7f41836993770d845992a959655f649d540dcc80e2fdb4ba15efae235c91fb0a2d818","ssdeep":"96:dtATU74b7sS0GpZR4DGT1QwMJ6uw8WPqt3teDd799lP6vOAaB6tF2qXLQXt3oK5R:dmTU74b79Bp0GBji6uXPtcDdB9mkhkAH","tlshash":"d572611623e34592dc7449b2f24e99cbc64eadac76142047adb6bebaf3f21efc110114","first_seen":"2025-03-10T03:32:23.682636Z","last_seen":"2026-04-25T06:35:50.087946Z","times_seen":60,"resource_available":false,"data":null}},"time_used":1639,"timings":{"blocked":75,"dns":44,"connect":23,"send":0,"wait":52,"receive":1,"ssl":1390},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gettyimages.co.jp/detail/%E5%8B%95%E7%94%BB/drunk-young-asian-woman-having-hangover-after-celebrating-party-%E3%82%B9%E3%83%88%E3%83%83%E3%82%AF%E5%8B%95%E7%94%BB/1922008838","fqdn":"www.gettyimages.co.jp","domain":"gettyimages.co.jp","tld":"co.jp"},"ip":{"addr":"3.167.2.85","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.gettyimages.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Sat, 18 Jan 2025 00:00:00 GMT","end":"Sun, 15 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"88:CD:2C:2D:C4:66:05:DF:F9:4E:9D:DD:90:E4:82:97:74:80:D2:63","sha256":"7F:E3:88:5E:26:8F:F7:EA:BF:56:EE:C3:42:79:74:EF:02:0B:66:CC:D6:72:C7:D5:82:26:CD:CB:3B:32:F3:1D"}}},"request":{"raw":"GET /detail/%E5%8B%95%E7%94%BB/drunk-young-asian-woman-having-hangover-after-celebrating-party-%E3%82%B9%E3%83%88%E3%83%83%E3%82%AF%E5%8B%95%E7%94%BB/1922008838 HTTP/1.1\r\nHost: www.gettyimages.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ndate: Mon, 18 Aug 2025 05:27:59 GMT\r\nx-timing-wait: 26/0/0/194\r\nselected-fe: getty_frontend\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"b972001674ba7c872d27dde955d7a13f\"\r\ncache-control: max-age=0, private, must-revalidate\r\nset-cookie: unisess=CD9F8p11lH%2F4elbBgWC27JTQmeKiVSJgXkljPLFUZl5TIBMeyQNxek1zuCSdUFgx%2FQHNXNH%2FWvk4KJBn1fmGKD5QyQ7z0vcs5Os1laO4BMPQBgWgjfNTvIXc9t8FIGTghM0ztKMICOXbF0253edLj5Eat6clW%2B5gTW6SGtRe%2FFctzm%2FiOaEAX6HfOMGCSVY%3D--Vf6W%2FpXJdhl6cXHR--Cjryu3mKRqPXYyQyWvbdXg%3D%3D; path=/; secure; HttpOnly; SameSite=Lax\nvis=vid=0af5a9d7-79f7-4d40-ab0b-3e9f6a09afce; domain=.gettyimages.co.jp; path=/; expires=Fri, 18 Aug 2045 05:27:58 -0000; secure\nuac=t=WRlcCX2nTM1K6XNZPII3ET3SNdbipxzMTlD%2FjQdfmLpaqrBZQgBxU0sTkIHKNJVXcE48dhA0itY6B7wNHr%2BUlnoYR2eh14jS%2F8otb4brEatAVm4smKgWzt2PuveSbA8fIfR%2B%2FfO2vKeAONpj%2Bn0YY8YqK7SnY7p%2FRnd8PZEuQlI%3D%7C77u%2FQ1AySFlHMXFDTG1ZTk1UZndRWHEKMTAwCgpYMHVFR3c9PQpaMUtFR3c9PQowCgoKMAoxMDAKCjEwMAowCjBhZjVhOWQ3LTc5ZjctNGQ0MC1hYjBiLTNlOWY2YTA5YWZjZQoK%7C3%7C2%7C1\u0026d; path=/; expires=Fri, 18 Aug 2045 05:27:58 -0000; secure; HttpOnly\ngiu=nv=1\u0026lv=2025-08-18T05%3A27%3A58Z; path=/; expires=Fri, 18 Aug 2045 05:27:58 -0000; secure; HttpOnly\ncsrf=t=SseVHqTgfnwpO2AoYanRAZQ1uXQQvNGWXohjlegP3SQ%3D; path=/; expires=Fri, 18 Aug 2045 05:27:58 -0000; secure; HttpOnly\r\nx-request-id: 0A3300DF-8C04_0A3379A2-01BB_68A2B9DE_227350F-3DCC-219\r\nx-runtime: 0.191210\r\ncontent-encoding: gzip\r\nx-backend: app_asset_detail\r\nx-proxy-build: 2876300\r\nstrict-transport-security: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 94fbdabfcc07b91a0e8ffbb741347df8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: b3WZsLFJW_N5dzY0fMpmY3fXHYOtSlTtedaTOWwzbQ2srnGmnlXERQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":3449,"timings":{"blocked":738,"dns":39,"connect":16,"send":0,"wait":389,"receive":0,"ssl":2221},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bad.news/images/dm/5caa4a90811a1b0e4823618f8bc32d5b.jpg?secure=aSVw75mqEVnn2Z-8CWIUDw==,1734229888","fqdn":"static.bad.news","domain":"bad.news","tld":"news"},"ip":{"addr":"104.26.12.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"323e0cdf.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 29 Jul 2025 11:16:14 GMT","end":"Mon, 27 Oct 2025 12:16:07 GMT"},"fingerprint":{"sha1":"11:F8:F3:D9:C3:57:49:A9:A0:72:0C:C7:B7:20:D2:58:9B:B7:FA:95","sha256":"00:65:12:12:EA:77:8F:F2:2C:CB:5D:72:DD:45:E5:2F:B5:6F:D2:EF:4B:61:5C:C9:7E:F9:CA:89:A2:64:CB:58"}}},"request":{"raw":"GET /images/dm/5caa4a90811a1b0e4823618f8bc32d5b.jpg?secure=aSVw75mqEVnn2Z-8CWIUDw==,1734229888 HTTP/1.1\r\nHost: static.bad.news\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21847\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=slAlMqqmVNjG3BqiMTdMRgoLrJ2XbcCXTswLrVN9WYQtkMKzQz%2BRTXcBnMUtY1lM5xR4jES%2FFQSgOva18RyOyUF7SeBxtp6QI3SYmQ%3D%3D\"}]}\r\nage: 3790\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: origSize=22821\r\netag: \"67fa94f8da0b6338ac0acf7f63aa0b2b\"\r\nlast-modified: Fri, 13 Dec 2024 23:13:25 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\ncf-ray: 970f0151ad8b5690-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21847,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 640x360, components 3","md5":"0d6c3626f0a724823b883b289f8ee7b2","sha1":"d4911567af987532e11d26df596f18faaaf4c06e","sha256":"94dbc40f458ed7a084fe5086934ac8c301c6f2f532cfcc4f93453554440d10d3","sha512":"c991237c8c0150d918ccede84d209fa80bae3dd01c7b71ec9d19725d39b566c1a83ec3ddf3ae4c79ceb727b5408164c89272d9f8be9d8bafefc834d949520b09","ssdeep":"384:v44dOryUA+GaTdY1iItgnauPlqqlvUVfmldUVHjJGYDyn6l7gnDi+pkgjzLzCmrA:AGOr12aTaPkF8qaVoU1jJxGn6pg++pF4","tlshash":"2fa2d1bc3ad849ce99bcf27bd51741687d73db80001e6b44d2063b7029cf2ab5cb091a","first_seen":"2025-07-11T06:45:23.818725Z","last_seen":"2025-12-16T23:19:32.818387Z","times_seen":23,"resource_available":false,"data":null}},"time_used":3277,"timings":{"blocked":908,"dns":37,"connect":33,"send":0,"wait":10,"receive":1,"ssl":2212},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cowanimalsex.fun/favicon.ico","fqdn":"cowanimalsex.fun","domain":"cowanimalsex.fun","tld":"fun"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cowanimalsex.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Jul 2025 21:28:11 GMT","end":"Sun, 12 Oct 2025 22:20:24 GMT"},"fingerprint":{"sha1":"0C:BB:20:E6:8D:B9:30:A5:A0:FF:E9:DA:68:BB:93:50:D5:13:B9:92","sha256":"9E:35:38:E3:C2:6C:DB:4D:E5:0F:9B:98:44:1D:39:EE:9C:DF:69:D1:B2:05:5D:6D:05:C6:DB:55:11:2A:F9:17"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cowanimalsex.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Mon, 18 Aug 2025 05:28:03 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GbTiGXsiiq9gnxGcSnISRrqfPeQOhQpPqkuUXdp%2Fj%2B7%2F9v1JnFQTkSQ9rkMwn0in%2F4RV%2FffXGi6I5tY6P2Pvu4rCNS7DpLsfZQOMt85o\"}]}\r\ncache-control: max-age=14400\r\ncf-ray: 970f016a4ae00b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p16-kimg.kwai.net/kimg/EKzM1y8qmgEKAnMzEg1waG90by1vdmVyc2VhGoQBdXBpYy8yMDIxLzExLzI5LzE5L0JNakF5TVRFeE1qa3hPVFF6TlRsZk1UVXdNREF4TVRBeU16QTJOVGMzWHpFMU1EQTJNRE0wT1RnM016TTVNbDh5WHpNPV9vZmZuX0I5ZTY1MGU0MTdlMzQ5ODgyNmQ3YjM1NTJlYjA4ZDE1Yy53ZWJw.webp","fqdn":"p16-kimg.kwai.net","domain":"kwai.net","tld":"net"},"ip":{"addr":"95.101.11.10","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kwai.net","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 16 Apr 2025 08:08:20 GMT","end":"Mon, 18 May 2026 08:08:19 GMT"},"fingerprint":{"sha1":"88:41:08:16:B1:09:65:11:BC:B7:74:9F:3C:2B:7F:E4:B7:29:47:FC","sha256":"A7:08:07:07:A1:B9:AB:05:EF:83:67:DA:40:EB:1F:28:60:07:40:83:60:0A:E5:69:22:53:7E:B8:ED:61:8B:E7"}}},"request":{"raw":"GET /kimg/EKzM1y8qmgEKAnMzEg1waG90by1vdmVyc2VhGoQBdXBpYy8yMDIxLzExLzI5LzE5L0JNakF5TVRFeE1qa3hPVFF6TlRsZk1UVXdNREF4TVRBeU16QTJOVGMzWHpFMU1EQTJNRE0wT1RnM016TTVNbDh5WHpNPV9vZmZuX0I5ZTY1MGU0MTdlMzQ5ODgyNmQ3YjM1NTJlYjA4ZDE1Yy53ZWJw.webp HTTP/1.1\r\nHost: p16-kimg.kwai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 5228\r\nkrtid: gw5176f1e8c7b74247a0b9840a0a1b8518\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: 2v2d8-BZdvhq0d8Zu55CJmVvH34HZwTBQgt-5zAgWG4x3hkmDvUsfg==\r\ncache-control: max-age=31536000\r\nexpires: Tue, 18 Aug 2026 05:27:58 GMT\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nakamai-mon-iucid-del: 1668707\r\nx-ks-request-id: 0.1e0b655f.1755494878.1d699bde\r\nx-ks-cache: Hit from 95.101.11.10\r\nx-mai-cache-status: Y0-L0-0\r\nx-ks-client-ip: 91.90.42.154\r\nkwaisign: null\r\ntiming-allow-origin: *\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Server,range,hdntl,hdnts,Akamai-Mon-Iucid-Ing,Akamai-Mon-Iucid-Del,Akamai-Request-BC\r\naccess-control-allow-headers: origin,range,hdntl,hdnts\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":5228,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 322x574, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d93259de9ece53d2a6fdd217a21ba06b","sha1":"04b5fab13bc4126bc6ea846113d8d4bbe328cd37","sha256":"a5a0236c8be5ae3ef7d651bd1fc13c60a87ddbf28e8dada9120b62b5ea4cedb8","sha512":"ed5b13a46fb2422dd59b7d7ea00891d1d56339f5a8eea7f0c7c6589804eac9c1809e07e019daa5e11559b3c89637142ef4e00cfc58a3b212a8a3128f167f7afa","ssdeep":"96:7ZNpz0+qCyS2c8S28UWuGXL1mZsPf0I7M9Ik7ICgDaGZzULSc7L6Ol:73pz7ySat8UWuGXL1XP8IIIEICgD7ZzW","tlshash":"71b16d4292cc107d95a83456838de9f398956fd8979b73a00bdecd0770ac1dcb9e029d","first_seen":"2025-08-11T10:41:32.344145Z","last_seen":"2025-10-31T20:59:41.000189Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2999,"timings":{"blocked":785,"dns":7,"connect":13,"send":0,"wait":13,"receive":0,"ssl":2165},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/c5/20/f4/c520f431ca5d17b76ad8997d9e2d2e37/c520f431ca5d17b76ad8997d9e2d2e37.9.jpg","fqdn":"cdn77-pic.xvideos-cdn.com","domain":"xvideos-cdn.com","tld":"com"},"ip":{"addr":"185.76.9.7","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xvideos.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 03 Oct 2024 00:00:00 GMT","end":"Mon, 03 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"27:E9:05:C0:A5:FC:40:B1:D6:44:DC:D3:39:EE:11:78:2C:E2:F0:78","sha256":"5F:C0:7A:63:35:DB:CB:28:20:1B:40:83:91:40:36:2B:7A:97:63:77:7A:67:2A:45:FF:4E:80:15:A3:03:3C:4A"}}},"request":{"raw":"GET /videos/thumbs169ll/c5/20/f4/c520f431ca5d17b76ad8997d9e2d2e37/c520f431ca5d17b76ad8997d9e2d2e37.9.jpg HTTP/1.1\r\nHost: cdn77-pic.xvideos-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9647\r\nlast-modified: Fri, 09 Mar 2018 00:18:39 GMT\r\ncache-control: max-age=10368000, public\r\naccess-control-allow-origin: *\r\nx-accel-expires: @1759642052\r\nx-77-nzt: A7lMCQY3Nzf/83deACUTwkM3Nzf/As92AI/0Osgw/J///tYRAA\r\nx-77-nzt-ray: 5451992da7b8403cdbb9a2681e40eb03\r\nx-77-cache: HIT\r\nx-accel-date: 1749303784\r\nx-accel-date-max: 1646229510\r\nx-77-age: 6191091\r\nserver: CDN77-Turbo\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":9647,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 352x198, components 3","md5":"e5ce9c9f53be399dfa2037e43f8adfab","sha1":"c8ea356f97d95998b731d3ad1b83c469388b96ae","sha256":"6b567527d9d2c30de7a0b329f6334b3909ed4beec588af897e7b7c0408023419","sha512":"f2975e1516943c6b4cadaf0cbe896b81e26a7d86c8d607055422428b827d2aa9e5e8a62ee9bd5f71643dd995fb6fa13a959866f73d5d33c85564738d3c310339","ssdeep":"192:yTXptYXgTr0NV3lR/2tlFKFTttPBIC84QEgZSyh8LssCfgGfH:yTXfYv3elA7PBvTQzth8jCF","tlshash":"a1128da3ff008961f02ea7aebd338a3d915f1f4234a2e3f415685dd63794f691c88919","first_seen":"2025-08-18T05:29:08.70245Z","last_seen":"2025-08-18T05:29:08.70245Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241010-10/35e7629ebe40b78ee620fcddd66b8633.png","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.663Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241010-10/35e7629ebe40b78ee620fcddd66b8633.png HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-18","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"g.uuu.cam/douga/tgirljapan-hiromis-banana-and-cock-play.jpg","fqdn":"g.uuu.cam","domain":"uuu.cam","tld":"cam"},"ip":{"addr":"172.67.193.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:56.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uuu.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 01:23:43 GMT","end":"Thu, 16 Oct 2025 02:21:09 GMT"},"fingerprint":{"sha1":"C3:B8:28:3C:2C:A1:24:A1:B6:AC:45:E2:E7:3D:BB:F8:CE:87:D9:C1","sha256":"81:36:15:2F:88:4A:77:E0:FD:F7:1B:D0:BE:E5:05:5B:EB:7A:06:59:66:0C:66:74:3B:E6:EE:46:5D:0D:07:5C"}}},"request":{"raw":"GET /douga/tgirljapan-hiromis-banana-and-cock-play.jpg HTTP/1.1\r\nHost: g.uuu.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 276061\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 06 Apr 2025 14:06:21 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7qFw%2BAIGSDhs0%2FG78SMUg8Fy452qg25ePHQPd1%2FDAz7Gwj1iRzL2ijcb4ZB1M2IIXPmkKCXsPOX6s9VOWw%2BGarJwNpMPpTo%3D\"}]}\r\netag: \"67f28a5d-4365d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 447241\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\ncf-ray: 970f014c4ae256c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":276061,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 1874x1054, components 3","md5":"2c5e79322a9bc8dd2d29666fcdeaa646","sha1":"6b41703004e723b66726430a7df121d3c6b19dd3","sha256":"c1d04c6a994ee2bfa9c8c9b9368a795c356e8d9b13c97f2c46fde842242fb06f","sha512":"ccd90c2974b670fe025a62fb7d88805990761b7b6db7260b46e764e8284010c965912c687c349ce0b4dbb1ef3778042e60f30e08d79d62beb7fd8be0b2094f8b","ssdeep":"6144:e+UZsVPpzjjPCMMYLQh0wWBCQFvW4Tyjq3+b5hvPMEZO1wnLS:AMpzHvFnBLFvWJBbDXMJt","tlshash":"1e442303280442e7b5494f8a774825b15feae11eec6528fd8497c4facf56fb6283790d","first_seen":"2025-08-18T05:29:08.704464Z","last_seen":"2025-08-18T05:29:08.704464Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2083,"timings":{"blocked":-1,"dns":8,"connect":31,"send":0,"wait":14,"receive":19,"ssl":1997},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"celebjihad.com/wp-content/uploads/2020/01/t_celeb_nude_debuts_2019_2.jpg","fqdn":"celebjihad.com","domain":"celebjihad.com","tld":"com"},"ip":{"addr":"104.26.14.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"celebjihad.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Jul 2025 11:05:59 GMT","end":"Sun, 26 Oct 2025 12:05:52 GMT"},"fingerprint":{"sha1":"79:78:E5:3C:EE:8F:85:01:F0:84:BA:55:4B:51:CC:85:00:E1:04:8E","sha256":"70:37:91:CB:A0:75:90:09:78:3C:39:16:B5:3A:3E:77:ED:1D:49:4C:9D:3C:28:F6:64:5F:D3:BD:09:2A:17:CF"}}},"request":{"raw":"GET /wp-content/uploads/2020/01/t_celeb_nude_debuts_2019_2.jpg HTTP/1.1\r\nHost: celebjihad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15292\r\ncf-ray: 970f0149a8755694-OSL\r\ncache-control: max-age=2592000, public\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: degrade=85, origSize=21272, status=vary_header_present\r\nlast-modified: Sun, 28 Jan 2024 03:25:06 GMT\r\nvary: User-Agent, Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 112507\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1tNQeZqDmaldsr0eXYj8635mgW3c6JKUJAOCIT3wLU%2FStPuarSQwGZvb6CmM1kY34RwUo3%2FTMQln2GGQ0eZgXQaXYTvxPQiqq5PzpJde2KQTE7%2FdTdJLV70DnMrw7kr6\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1018\u0026min_rtt=443\u0026rtt_var=1051\u0026sent=7\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3284\u0026recv_bytes=1238\u0026delivery_rate=8029574\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=41958f4de1983d13\u0026ts=2338\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15292,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 310x310, components 3","md5":"69f67fc6051901700c035a13eea1bf15","sha1":"6f20bbeefe6eed77035989c0732903b1704d3803","sha256":"c5ecaf3cec164183286d9c48f3f75081520c1907defb2ffb671d3c4aa2b47a40","sha512":"43bb50237f044fc33806fa7e041e9d9784d19f8ddc955e35130aee70e4581c0ec4c699263011a08f9b84ef93436a1a9f507f3338ee4b9e2e2452af10b1f88e47","ssdeep":"384:LkI/hDpZ+n5BFSXeqImP7Ti8TCY159vzfRxVOfEvFF2KpD:vpZ+n5Bqlfi8TnL9rfR0XKF","tlshash":"3862c051792bd4eabf46aeb4ca5a1a616675c7f6367c6c0163c3930ee07cb5c14c08a4","first_seen":"2024-12-28T08:15:47.279334Z","last_seen":"2025-11-12T02:34:49.957306Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2899,"timings":{"blocked":552,"dns":2,"connect":2,"send":0,"wait":26,"receive":1,"ssl":2312},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.blacktowhite.net/data/xfmg/custom_thumbnail/191/191941-f0c93fc359b81dd93582f55968c45641.jpg?1534238503","fqdn":"www.blacktowhite.net","domain":"blacktowhite.net","tld":"net"},"ip":{"addr":"192.243.63.82","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"blacktowhite.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 28 Jul 2025 00:00:00 GMT","end":"Fri, 28 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"29:7F:D6:17:0A:55:E3:DB:E8:59:A0:3D:66:88:A5:35:86:B8:EF:80","sha256":"16:D2:4C:56:09:A6:4E:FB:DC:AF:6D:06:8A:B4:A7:96:B1:B5:E6:6B:82:A7:EE:D8:13:2C:AA:59:3C:FC:F0:43"}}},"request":{"raw":"GET /data/xfmg/custom_thumbnail/191/191941-f0c93fc359b81dd93582f55968c45641.jpg?1534238503 HTTP/1.1\r\nHost: www.blacktowhite.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.17.6\r\ndate: Mon, 18 Aug 2025 05:27:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7878\r\nlast-modified: Mon, 14 Jan 2019 13:18:05 GMT\r\netag: \"5c3c8c0d-1ec6\"\r\nexpires: Mon, 01 Sep 2025 05:27:59 GMT\r\ncache-control: max-age=1209600\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.17.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7878,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3","md5":"5ce48b0303807398c52f3a9aec8a450d","sha1":"785f4f07bde0a223571370ca7b78d9faaca55943","sha256":"80f011cd1a98137efdf577808cf9f747db3052f6a0dbcc75588f1d9565773a99","sha512":"3d2ef0d4407dc2950583dfd937475bdf5868f0955a4d5ba3cd546d1aff383a0558c7ca52a626e7222f9818636690c1f54253a1e3118d95dc6e32b30ce68c1955","ssdeep":"192:LoVtS5oNcbbEjZbjbw6+4eHJyibgNH3BXJbaZB+BXptCpbgFK6:US5oq0eQepy/NH3lntCo","tlshash":"99f18d7f7a7cd113db1d8926a0db3664242bf58625d10b7460309b4fea8dcf56bc9092","first_seen":"2025-08-18T05:29:08.709074Z","last_seen":"2025-11-10T06:57:32.53549Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4183,"timings":{"blocked":1018,"dns":9,"connect":118,"send":0,"wait":97,"receive":0,"ssl":2917},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sexsex61.com/favicon.ico","fqdn":"www.sexsex61.com","domain":"sexsex61.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.168Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.sexsex61.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":2136,"timings":{"blocked":-1,"dns":145,"connect":308,"send":0,"wait":0,"receive":0,"ssl":1643},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20250809-1/25d33c3649d59777a0cb85d3f7d4f64b.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.62","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20250809-1/25d33c3649d59777a0cb85d3f7d4f64b.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 72841\r\nlast-modified: Sat, 09 Aug 2025 02:29:00 GMT\r\nvary: Accept-Encoding\r\netag: \"6896b26c-11c89\"\r\nexpires: Mon, 08 Sep 2025 03:17:57 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":72841,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 500x281, components 3","md5":"fe4745b386a1c7f4750e0549633ef7c0","sha1":"db79da6b155feaa13cb0d5a904771292856fa2a2","sha256":"d09a3ef62959ef5299cc040cb464fce329f6136cf69b7388b769303b7d3176e0","sha512":"f2d2781c170c37b0bdf6e4563fbbb78e95ee9c9d460ce680039ee74a41ce437db88a7622278c8f5544e7e3bbd53c82065dbdf8b00e6e16f42ed03aff3c25974c","ssdeep":"1536:KFht4VbTKPPjJZB6BqecCis8WZhTkvFSO2WmGqmmsGIGYO0mhQ:wSb0PjJX1bs8e5Q32WmGqvJj0CQ","tlshash":"c16302b3308e9bc4179bd69061db1d5edbfe5793f22a0fca8a45855313b634d82208b9","first_seen":"2025-08-13T22:41:44.8924Z","last_seen":"2025-12-30T20:10:12.341314Z","times_seen":143,"resource_available":false,"data":null}},"time_used":2798,"timings":{"blocked":1872,"dns":0,"connect":0,"send":0,"wait":614,"receive":312,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/2X/6/626f13e741868d4f049ec027cf864c0e0444dee8_2_1024x573.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 16:04:05 GMT","end":"Sun, 09 Nov 2025 16:04:04 GMT"},"fingerprint":{"sha1":"DF:EC:86:BA:09:B3:17:C2:2B:66:0A:BF:62:3E:3C:4D:90:D2:A4:33","sha256":"EF:3A:5A:BF:D7:FE:5F:99:1A:3F:CD:49:ED:AF:84:68:4F:09:27:DC:47:7B:D5:51:4C:E2:DB:A2:A1:6A:3C:FF"}}},"request":{"raw":"GET /uploads/default/optimized/2X/6/626f13e741868d4f049ec027cf864c0e0444dee8_2_1024x573.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:54 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241010-11/d5fea0e0b8f908f29f68ca03f18833ef.png","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:59.913Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241010-11/d5fea0e0b8f908f29f68ca03f18833ef.png HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-18","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nudegirls.wiki/favicon.ico","fqdn":"nudegirls.wiki","domain":"nudegirls.wiki","tld":"wiki"},"ip":{"addr":"109.202.99.24","port":443,"asn":49453,"as":"Global Layer B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nudegirls.wiki","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 23:45:41 GMT","end":"Mon, 20 Oct 2025 23:45:40 GMT"},"fingerprint":{"sha1":"7D:9C:77:EF:8D:3E:44:BA:E0:67:40:45:23:6F:9F:21:35:F2:AE:67","sha256":"EF:EC:2B:23:29:73:86:98:A2:CE:04:38:D9:D4:A2:F5:42:D8:83:5B:93:C4:6C:11:30:EB:5E:44:7C:AC:7B:A5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: nudegirls.wiki\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Mon, 18 Aug 2025 05:28:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":1425,"timings":{"blocked":53,"dns":35,"connect":70,"send":0,"wait":63,"receive":0,"ssl":1145},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chomikuj.pl/ImageThumbnail.aspx?id=8599069170","fqdn":"chomikuj.pl","domain":"chomikuj.pl","tld":"pl"},"ip":{"addr":"104.20.20.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chomikuj.pl","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Jul 2025 02:24:17 GMT","end":"Fri, 10 Oct 2025 03:24:13 GMT"},"fingerprint":{"sha1":"ED:AF:6A:5A:23:58:8F:75:8C:69:F2:59:EE:AB:E5:CB:88:6C:9D:BD","sha256":"5C:2C:69:A1:6C:E0:FC:F2:B1:BD:86:16:70:4D:CE:13:0D:A5:66:8B:3A:4C:DD:AB:30:6A:0E:53:A1:A5:F4:3F"}}},"request":{"raw":"GET /ImageThumbnail.aspx?id=8599069170 HTTP/1.1\r\nHost: chomikuj.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 18 Aug 2025 05:27:54 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 276\r\nlocation: https://s8301.chomikuj.pl/Thumbnail.aspx?e=Rs5-Avn2hKkRUClPNzLXvVBdKeokov4-0rtlReErtOyaKorboqnEUQyWUzxCXq_wOVzUQ_ltFvt6uZfGrhhT6IzZ3Y5zXpw0Tn-CSohJhoA\u0026pv=2\r\ncf-ray: 970f0137d87756a5-OSL\r\ncache-control: private\r\nset-cookie: rcid=1; expires=Tue, 18-Aug-2026 05:27:54 GMT; path=/; SameSite=Lax\r\nx-server: m50\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13698,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":2,"connect":4,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"page.phic4.top/myda.php","fqdn":"page.phic4.top","domain":"phic4.top","tld":"top"},"ip":{"addr":"104.21.73.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:59.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phic4.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 03:01:01 GMT","end":"Sun, 28 Sep 2025 03:59:36 GMT"},"fingerprint":{"sha1":"F2:09:4F:FE:B4:3B:79:00:DB:C3:0D:CA:18:B2:B2:8B:DC:59:19:11","sha256":"B8:93:E7:F0:6B:B8:97:78:FC:24:E3:35:84:CD:BB:BB:89:B7:8F:EC:45:29:16:60:EA:66:CA:76:36:B5:3B:4E"}}},"request":{"raw":"GET /myda.php HTTP/1.1\r\nHost: page.phic4.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:28:01 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nmyda: myda91.123.46.188\r\nvary: User-Agent, accept-encoding\r\nage: 6045\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Mon, 18 Aug 2025 03:47:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0AGXIBIrjt9dDZY0GIBJD%2FtnmLJ8%2Bl785yJ0bDlbt%2FykKlO7CXjy0VLb9QN0s9mW7fX6GyJDU1oqaft9sHobKAwXs8xgGv%2F20%2F6P9A%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 970f0160689e568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":2881,"timings":{"blocked":1411,"dns":16,"connect":3,"send":0,"wait":12,"receive":0,"ssl":1406},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.oedy9.com/favicon.ico","fqdn":"www.oedy9.com","domain":"oedy9.com","tld":"com"},"ip":{"addr":"45.92.29.80","port":443,"asn":64236,"as":"UNREAL-SERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.oedy9.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 07:53:40 GMT","end":"Sun, 09 Nov 2025 07:53:39 GMT"},"fingerprint":{"sha1":"A2:06:65:4A:90:B6:18:CA:AD:9D:D8:6B:CA:ED:D7:66:59:C5:32:9F","sha256":"62:22:2B:F0:AD:CC:FD:A7:BA:3F:FC:12:95:03:05:19:AF:5D:25:E6:F2:4D:23:42:9E:C4:E6:B0:8D:80:DA:14"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.oedy9.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:28:05 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\netag: \"68800810-8a\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":1871,"timings":{"blocked":20,"dns":11,"connect":156,"send":0,"wait":161,"receive":0,"ssl":1444},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn2.geefap.com/uploads/posts/2018-03/thumbs/796093576_363897749.jpg","fqdn":"cdn2.geefap.com","domain":"geefap.com","tld":"com"},"ip":{"addr":"31.10.5.97","port":443,"asn":207728,"as":"EUROHOSTER Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn2.geefap.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Mon, 21 Oct 2024 00:00:00 GMT","end":"Tue, 21 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"AF:D5:79:17:2C:27:BD:47:ED:EC:E6:86:68:6C:15:FA:38:09:D7:18","sha256":"DB:FB:80:6C:8F:F3:EB:EF:08:23:74:15:33:0B:F5:0F:FB:ED:FF:4D:01:A3:EA:1F:EC:2D:FB:52:C8:0C:C3:50"}}},"request":{"raw":"GET /uploads/posts/2018-03/thumbs/796093576_363897749.jpg HTTP/1.1\r\nHost: cdn2.geefap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 18 Aug 2025 05:27:58 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 14989\r\nLast-Modified: Wed, 07 Mar 2018 14:07:54 GMT\r\nConnection: keep-alive\r\nETag: \"5a9ff23a-3a8d\"\r\nExpires: Sat, 23 Aug 2025 05:27:58 GMT\r\nCache-Control: max-age=432000\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14989,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 300x420, components 3","md5":"ecbc2841927c20960413f2aa68ce9a37","sha1":"ced81aab4b8d114c4f0e4192e723aeb391dd9dbe","sha256":"95540c31f6a306b2e77c300aa96d5f38f707ea9ece75c3ed15fae2307d460e2c","sha512":"cdb1d4d6c406f3286c1923c183378fc7694aba513c457a129bcc4a156484a91266d427ef1bca5f6af09bf495b25df383f306ba43d527708300fd87848a3019ec","ssdeep":"192:Db3fT7PWteemwEMskeo3M98ZEgTmXIOZ+mkCO4OigQN4uXcsKbcYst0sqrm0:DLr7uCwEyS8ZZTdOw3CZTGsqT1","tlshash":"ea62c0232d51baf27887c52efe259cf32ff4c2a0a94598366be101a2d541e4dd912ba0","first_seen":"2024-04-24T00:32:00Z","last_seen":"2026-04-12T19:29:51.605824Z","times_seen":61,"resource_available":false,"data":null}},"time_used":3307,"timings":{"blocked":840,"dns":2,"connect":18,"send":0,"wait":32,"receive":0,"ssl":2411},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241010-11/4e0e1fcd88e763be8c7214ae71e21142.png","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.314Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241010-11/4e0e1fcd88e763be8c7214ae71e21142.png HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-18","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"leaknudes.com/Uploads/Media/Jun20/Fri05/2932/51db36d9.jpg","fqdn":"leaknudes.com","domain":"leaknudes.com","tld":"com"},"ip":{"addr":"185.178.208.188","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leaknudes.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Jun 2025 09:06:28 GMT","end":"Sun, 28 Sep 2025 09:06:27 GMT"},"fingerprint":{"sha1":"51:67:6C:BB:35:4A:78:99:26:FF:6F:84:94:CD:AD:17:D0:58:0D:76","sha256":"95:49:C5:CE:2D:91:09:A4:4A:5A:23:D2:EA:01:6C:B0:89:16:73:61:E0:0E:C3:80:72:98:B1:E2:F2:2D:9C:D0"}}},"request":{"raw":"GET /Uploads/Media/Jun20/Fri05/2932/51db36d9.jpg HTTP/1.1\r\nHost: leaknudes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=qhwi1z6pDTvwwp5d; Domain=.leaknudes.com; Path=/; Expires=Mon, 18-Aug-2025 05:47:58 GMT\n__ddg10_=1755494878; Domain=.leaknudes.com; Path=/; Expires=Mon, 18-Aug-2025 05:47:58 GMT\n__ddg9_=91.90.42.154; Domain=.leaknudes.com; Path=/; Expires=Mon, 18-Aug-2025 05:47:58 GMT\n__ddg1_=Z9pzR1wpTKDaxGTVSuUi; Domain=.leaknudes.com; HttpOnly; Path=/; Expires=Tue, 18-Aug-2026 05:27:58 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncache-control: \r\nexpires: Wed, 17 Sep 2025 05:27:09 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 30 Jan 2024 15:06:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 42887\r\ndate: Mon, 18 Aug 2025 05:27:09 GMT\r\nvary: User-Agent,User-Agent\r\nage: 49\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":42887,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", baseline, precision 8, 850x478, components 3","md5":"99b61cce0883297e9bba61d904aad3e8","sha1":"919cf85369fc44a84bf1a71385c1088e58b5c672","sha256":"ea9e585f38f06be3bcfccdb66836d3b39318793f023d040bbe36c1dce41f2b37","sha512":"b1f33e06f1047544596869326775a2bd243a426017f3d004acc98652d7d4413f97628cd707b43a0ce9e1f8b5d6a1154df206c2f9f236d1dd12c798af874eca69","ssdeep":"768:SNnbC2GBSsuK9/asY15J1zXAaa/Jht4j2UkI+Rju4WQAaLuGejs70HjP4lTMiXiL:SnOsKIs8DpWJhte2UaRjuLCuGCsEMeMk","tlshash":"a713019b915ab4eb2e8ea57ad4348bf30fd08703602dff597d801b116d727522a4b932","first_seen":"2025-08-18T05:29:08.713332Z","last_seen":"2025-08-18T05:29:08.713332Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2920,"timings":{"blocked":564,"dns":11,"connect":28,"send":0,"wait":54,"receive":30,"ssl":2140},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cacrz.4jpg.top/AV4.us.jpg","fqdn":"cacrz.4jpg.top","domain":"4jpg.top","tld":"top"},"ip":{"addr":"104.21.77.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:06.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4jpg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Jun 2025 21:09:44 GMT","end":"Sat, 20 Sep 2025 22:08:25 GMT"},"fingerprint":{"sha1":"87:CB:34:CD:A8:80:20:88:6C:00:A6:45:55:4F:1A:BE:9C:F4:54:06","sha256":"01:9F:A5:58:0B:57:D0:CB:4F:B0:62:86:96:36:B0:C9:2A:66:FF:E0:4E:6E:7C:CD:B2:EA:D6:B8:E3:23:28:8A"}}},"request":{"raw":"GET /AV4.us.jpg HTTP/1.1\r\nHost: cacrz.4jpg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 Aug 2025 05:28:06 GMT\r\nserver: cloudflare\r\netag: \"2225-5499bcea176c0\"\r\naccept-ranges: bytes\r\ncontent-length: 8741\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\nahost: RZ\r\ncache-control: public, max-age=3600000\r\ncontent-type: image/jpeg\r\nage: 1370407\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HGOI0MzMGx6foxSc7ocBtZFEgBqTbfQl7M1NkbxWgOVwxyB%2B2%2BHKtomG%2B9eoWd7b5p%2B1dQ%2FCokIElJG0ukLOC8p8dsHwJTjaRsaZbw%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 970f01801f315691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8741,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 307x82, components 3","md5":"edfe007a6e5b3d268b2528f564b60b43","sha1":"1644c8ef97c871079e07e5079d613af5cb94052f","sha256":"bf5bb657f5e788af0c02b9b437d3f15bec91e27175e5a654e3d431fb6d063390","sha512":"8eab965dcd5098e29ccc1cf94459fa6b8fda97331a35139ae6c57cacbe0ed733cd53af8f7e2ca8a82c2cb9f785cafe46f4a34f99aadbdde53ca81cae25403d93","ssdeep":"192:YkyyBW+1ajsm2w0aCqPGfAzC4TvykEobWwK5Fi:YkvU4DqufJ4TvyXO0i","tlshash":"b702bf4a2da48fb326c1c5508cdff34b2ec78a5c67efb16f97319e5af4017165904849","first_seen":"2024-04-16T15:37:12Z","last_seen":"2025-11-15T09:18:18.740899Z","times_seen":2006,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumb.aporntv.com/thumbs/6/2/f/f/9/62fe17923708cDad%20fucks%20Daughter%20while%20Mother%20records.mp4/62fe17923708cDad%20fucks%20Daughter%20while%20Mother%20records.mp4-8.jpg","fqdn":"thumb.aporntv.com","domain":"aporntv.com","tld":"com"},"ip":{"addr":"104.26.1.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aporntv.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 21:49:41 GMT","end":"Thu, 18 Sep 2025 21:49:40 GMT"},"fingerprint":{"sha1":"50:0C:10:6B:00:1B:44:9C:CE:70:EC:C4:D7:65:07:04:ED:C9:F6:A4","sha256":"2B:C9:C5:75:F1:0B:10:F6:54:65:7D:EE:A5:19:31:FF:89:E0:62:87:A3:4E:9C:14:F8:01:60:B4:66:83:C9:45"}}},"request":{"raw":"GET /thumbs/6/2/f/f/9/62fe17923708cDad%20fucks%20Daughter%20while%20Mother%20records.mp4/62fe17923708cDad%20fucks%20Daughter%20while%20Mother%20records.mp4-8.jpg HTTP/1.1\r\nHost: thumb.aporntv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4253\r\ncf-ray: 970f014e9c7e56a9-OSL\r\ncache-control: public, max-age=16070400\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: status=not_needed\r\netag: \"62ff9d98-109d\"\r\nexpires: Sat, 23 Aug 2025 04:30:10 GMT\r\nlast-modified: Fri, 19 Aug 2022 14:26:32 GMT\r\ncf-cache-status: HIT\r\nage: 176268\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DFPcS2rLJKglhqkYxFkn3u6CWRVLVBfQH5NactQ6FLFnll5csJAaCQ9xhA4K3LAV7bz8%2FFgBDye2Y%2BmWCQRox%2BxySx5aTTWg%2Fbi6SOb2wZ3nqUC%2FmSvIeDN0WereV4VLIgmH\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1726\u0026min_rtt=418\u0026rtt_var=1918\u0026sent=13\u0026recv=12\u0026lost=0\u0026retrans=0\u0026sent_bytes=8347\u0026recv_bytes=1473\u0026delivery_rate=3464114\u0026cwnd=253\u0026unsent_bytes=0\u0026cid=2ab895a80bc82c90\u0026ts=2658\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4253,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, baseline, precision 8, 200x150, components 3","md5":"24d912a7fe6306be738be96e3d165ad7","sha1":"904038af23dfb3babb44c59120bf4728b19bd27f","sha256":"ab839f46a1ab2223dadd41d31ef9c2281e02c1020772f065522140e6ceacb101","sha512":"f84e1852e12eb558d3795f904587d76b332a48fe31def1d2e30d16f733913262b738f78a79dae1a7a2fafdd1c5da0c027ed338fbb4f88c6d5b52901124aee3d8","ssdeep":"96:RttEFt47/6LwHtXt18qJ+s5zMBEZ3P6qGzSa+WRQX9LNOjamSc3U+Qk55:7tC5wHtdmqcCMUrGB+mg9LoampvQk55","tlshash":"71917db5585f6186df4b0738dfced2a882a0b718d2014a9760d3bf1598ed99302cb426","first_seen":"2025-05-27T07:10:51.303584Z","last_seen":"2026-01-20T23:50:12.923156Z","times_seen":44,"resource_available":false,"data":null}},"time_used":2971,"timings":{"blocked":780,"dns":7,"connect":13,"send":0,"wait":24,"receive":0,"ssl":2122},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumb.aporntv.com/thumbs/5/d/7/4/6/5d74051bdf34fPakistani%20Girl%20incest%20sister.mp4/5d74051bdf34fPakistani%20Girl%20incest%20sister.mp4-3.jpg","fqdn":"thumb.aporntv.com","domain":"aporntv.com","tld":"com"},"ip":{"addr":"104.26.1.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aporntv.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 21:49:41 GMT","end":"Thu, 18 Sep 2025 21:49:40 GMT"},"fingerprint":{"sha1":"50:0C:10:6B:00:1B:44:9C:CE:70:EC:C4:D7:65:07:04:ED:C9:F6:A4","sha256":"2B:C9:C5:75:F1:0B:10:F6:54:65:7D:EE:A5:19:31:FF:89:E0:62:87:A3:4E:9C:14:F8:01:60:B4:66:83:C9:45"}}},"request":{"raw":"GET /thumbs/5/d/7/4/6/5d74051bdf34fPakistani%20Girl%20incest%20sister.mp4/5d74051bdf34fPakistani%20Girl%20incest%20sister.mp4-3.jpg HTTP/1.1\r\nHost: thumb.aporntv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4304\r\ncf-ray: 970f01503e4056a9-OSL\r\ncache-control: public, max-age=16070400\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: status=not_needed\r\netag: \"5d7461c4-10d0\"\r\nexpires: Fri, 22 Aug 2025 07:15:44 GMT\r\nlast-modified: Sun, 08 Sep 2019 02:04:52 GMT\r\ncf-cache-status: HIT\r\nage: 252734\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=zpGCoonHKYufrZ6bT%2Bn9zsA5XzZsUAcVj37nTWoJLx2aBNKNSBwqGFZ1EziCGRXGva0LgzqGJ7tBZpFXOF8EqdF%2B4LM55bo%2BqRe11JtIF7FUIBKeCFz5vCHdzlKai65j3j4e\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2012\u0026min_rtt=418\u0026rtt_var=2011\u0026sent=20\u0026recv=14\u0026lost=0\u0026retrans=0\u0026sent_bytes=13282\u0026recv_bytes=1629\u0026delivery_rate=3464114\u0026cwnd=253\u0026unsent_bytes=0\u0026cid=2ab895a80bc82c90\u0026ts=2920\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4304,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x150, components 3","md5":"beb2b68bf1d3c6e2218b173f083f11de","sha1":"485ef594e3be351993c70faf768fd348bac50a4e","sha256":"18a8c5eb675f524ea7865362de99695d4bda07517d125e11ba6396ceba009912","sha512":"3e82ef77cda1e26e49d20107e3a37676de015f5c0904d7f9374e544ee888af39e63157a6f765bdbb9226b90b18a449e0f6db19149fda2bd029058f6ae0a76e89","ssdeep":"96:5YAMts0VThKudyOlarI3V+GrlyyNmSTIT22cIn3liksBJlQ85t:pMtLVT8udFw3GrlyyNm7T22PnVZ6lQ8H","tlshash":"d5916c6f4984c2ed8a60013632a0f31247aeb1466338f7cb885199366e52ec6eea0380","first_seen":"2025-06-19T17:22:45.994225Z","last_seen":"2025-08-18T05:29:08.716045Z","times_seen":16,"resource_available":false,"data":null}},"time_used":3108,"timings":{"blocked":791,"dns":18,"connect":35,"send":0,"wait":21,"receive":0,"ssl":2201},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uqetyzxa.com/20221002/KhNnhdOy/1.jpg","fqdn":"uqetyzxa.com","domain":"uqetyzxa.com","tld":"com"},"ip":{"addr":"64.112.76.12","port":443,"asn":6939,"as":"HURRICANE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uqetyzxa.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Wed, 18 Sep 2024 00:27:40 GMT","end":"Sat, 18 Oct 2025 00:27:39 GMT"},"fingerprint":{"sha1":"E5:84:49:26:19:34:0F:60:FB:7B:C7:34:7C:74:DB:73:FF:1D:9B:FB","sha256":"2D:82:94:29:64:E1:20:72:59:93:BB:F0:E6:A9:F9:8E:10:0E:C4:40:30:05:34:25:60:63:64:28:26:39:8D:5B"}}},"request":{"raw":"GET /20221002/KhNnhdOy/1.jpg HTTP/1.1\r\nHost: uqetyzxa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 18 Aug 2025 05:27:57 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 8264\r\nConnection: keep-alive\r\nLast-Modified: Sun, 02 Oct 2022 17:43:44 GMT\r\nETag: \"6339cdd0-2048\"\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nCache-Control: public, max-age=15768000\r\nCache: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8264,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1708x2277, segment length 16, comment: \"Lavc57.89.100\", baseline, precision 8, 240x320, components 3","md5":"655a4a84686c014b77a36ab260415fcc","sha1":"5457bcf51198053db2299f43f850538380e8ba0d","sha256":"ecd13a71c698093cc8a8857566ba54daa40d0241f853225c91bfbb3e6870e894","sha512":"44a81cd13c853e33bfbf4607aa281536a3cb12230eda34198932ab7ff2141e15ea121530782898474689bfbcc73af14a982997f0dcb95123a573f2e3e1ecaa2e","ssdeep":"192:B9YPFUXlYdzEIBg/1SVwjv0P043yxv9GZA5V8MQnvo:B96FW+dVBe1MwrMz3ylU65V8MQg","tlshash":"b002b0d6cb184373cff240931ece80bc89cd03598a914f1573b0e28aa36ac9f5171746","first_seen":"2025-06-11T22:10:38.970861Z","last_seen":"2025-09-17T02:42:58.348352Z","times_seen":118,"resource_available":false,"data":null}},"time_used":5266,"timings":{"blocked":2273,"dns":9,"connect":151,"send":0,"wait":161,"receive":0,"ssl":2630},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.mubicdn.net/images/film/37504/cache-27443-1745490187/image-w1280.jpg","fqdn":"images.mubicdn.net","domain":"mubicdn.net","tld":"net"},"ip":{"addr":"151.101.2.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.mubicdn.net","organization":"MUBI Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 25 Feb 2025 00:00:00 GMT","end":"Sat, 28 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4C:E1:08:54:9C:83:DE:0B:BF:53:02:BC:49:86:B1:C8:F7:E0:B4:A0","sha256":"89:E5:97:D7:C2:CD:B5:32:20:64:8F:4A:91:44:82:3A:2D:A5:7B:10:81:D9:CD:09:FE:85:53:D5:DB:0D:70:D1"}}},"request":{"raw":"GET /images/film/37504/cache-27443-1745490187/image-w1280.jpg HTTP/1.1\r\nHost: images.mubicdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=604800,public\r\ncontent-type: image/webp\r\netag: \"e6eb711ef2d1868008f7fe9a7083a1b2fe5d2e86\"\r\nexpires: Sun, 03 Aug 2025 12:31:29 GMT\r\nserver: nginx\r\nx-frame-options: SAMEORIGIN\r\nx-hiring: Looking for a job? Visit mubi.com/jobs\r\nvia: 1.1 varnish, 1.1 varnish\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Mon, 18 Aug 2025 05:27:59 GMT\r\nage: 512191\r\nx-served-by: cache-iad-kcgs7200074-IAD, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 147, 1\r\nvary: Accept\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 72878\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":72878,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d7d76d637e9ec3a411a39f23c23f0407","sha1":"e6eb711ef2d1868008f7fe9a7083a1b2fe5d2e86","sha256":"6bd659bed3c9a95287f8b174fe15bfa4792ea4e25cc8592ac4a3e1ab1c648a71","sha512":"54438b0a43eb0e4d1a456ea7303159c5347cb4adaee186d7e5ff8ed1bcfbd578eedf8e9b6462031092c0cb85253703455134a2c839d8ec5614dab6fb2330a5f5","ssdeep":"1536:+D7sTtZFgtjvD+o6Tl8l1bp+wRqwajb25IVdOxce:cOt8rao66UiqwajbARxce","tlshash":"6f6302d959a22491b1f9ab763bb0103fc453ae7194b9c5e4dcee0b3dc00f1da8f99580","first_seen":"2025-06-03T06:10:03.765611Z","last_seen":"2025-11-09T11:07:29.791971Z","times_seen":7,"resource_available":false,"data":null}},"time_used":3713,"timings":{"blocked":893,"dns":17,"connect":38,"send":0,"wait":27,"receive":38,"ssl":2673},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20250710-1/cfaba834850e2ec8f69be7774cc29902.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.62","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20250710-1/cfaba834850e2ec8f69be7774cc29902.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 58259\r\nlast-modified: Thu, 10 Jul 2025 02:47:03 GMT\r\nvary: Accept-Encoding\r\netag: \"686f29a7-e393\"\r\nexpires: Tue, 16 Sep 2025 16:53:36 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58259,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=4, height=1200, software=www.meitu.com, width=2160], baseline, precision 8, 500x277, components 3","md5":"ef7e313734b68f1a4c01de1a5cea6d38","sha1":"bfdf6a0f06a36af5defe7694e8b92b369429923d","sha256":"d11b37fa02d5a93fb98cd4e5884e8764bfd8bdfb7c469c599500d0179b542344","sha512":"156e2467d9b34ad2a58dcce536ab030cd40c5a8c85a62dc225209abba0835696b52df97a0120860d0ad6d11512e117a881110f20031b82f8f5ec61cd977ef1d2","ssdeep":"1536:sfNOA3jGKO9U0BBc3tD7SOXeKTQ/FZ0+zHkI5A1QcEEyTK2sd:NA3yzU0/c9m0u/H0+zHk+fMd","tlshash":"a043018267460fd2a16630b412333e7ae9f1fec9c28d5a5f41e22669175a36debc2710","first_seen":"2025-08-13T22:24:19.548934Z","last_seen":"2025-11-17T02:57:03.570432Z","times_seen":71,"resource_available":false,"data":null}},"time_used":1667,"timings":{"blocked":1108,"dns":0,"connect":0,"send":0,"wait":453,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icdn05.4kpornvideos.tv/33279/1663903_1.jpg","fqdn":"icdn05.4kpornvideos.tv","domain":"4kpornvideos.tv","tld":"tv"},"ip":{"addr":"45.133.44.6","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icdn05.4kpornvideos.tv","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Jun 2025 02:33:14 GMT","end":"Sat, 27 Sep 2025 02:33:13 GMT"},"fingerprint":{"sha1":"BE:A7:90:18:C9:4B:1F:AD:3E:CE:6A:88:BF:8D:17:92:29:E2:82:A9","sha256":"0E:00:BB:AF:30:00:20:48:2F:EF:7C:26:88:85:8E:3E:07:7B:3F:A9:DC:AC:31:F8:C2:31:05:A4:44:BD:92:43"}}},"request":{"raw":"GET /33279/1663903_1.jpg HTTP/1.1\r\nHost: icdn05.4kpornvideos.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 41435\r\nserver: nginx/1.24.0\r\nx-object-meta-mtime: 1602265193.577199961\r\netag: 0b25abc3e8be9f2ab796000c229fe3b2\r\nlast-modified: Fri, 04 Nov 2022 20:40:00 GMT\r\nx-timestamp: 1667594399.03049\r\nx-trans-id: txc16acb661f4740c0bf749-0067542fef\r\nx-openstack-request-id: txc16acb661f4740c0bf749-0067542fef\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\ncache-control: max-age=2592000\r\nexpires: Wed, 17 Sep 2025 05:27:58 GMT\r\nx-cdn-host-id: ah1004,ds9225\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41435,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x169, components 3","md5":"0b25abc3e8be9f2ab796000c229fe3b2","sha1":"098d0e95d21e909fd118c3f943293c4f6990fa74","sha256":"2bf99ef2b5ae391fe79ba34a4ae1f6aad4bd2d2ede5e4cc96e5a71199493a85a","sha512":"ec8f7aadb17864d84b60fc8a72735988a511b543812e21dc55695193ccb8c081bb681248ea59c59873e573af465cff859d218746e52e04cbc9ee11dee409ca8f","ssdeep":"768:mwfBGYs7dertH5j4zNK+vS3CNR0XeEUxOzTiEW3xQPSw4zxvGUEpw:muNMdeb2ZS3CNR0Xe0zTdGu74zBt","tlshash":"15130220e5ffcd37b97df8b7b95c30b9c7d8549c0a5296443220985ee0fa59078a3932","first_seen":"2025-06-13T21:09:49.52853Z","last_seen":"2026-01-31T10:39:20.980079Z","times_seen":12,"resource_available":false,"data":null}},"time_used":3260,"timings":{"blocked":810,"dns":15,"connect":48,"send":0,"wait":21,"receive":44,"ssl":2188},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241010-11/2e395e9b614bd7146d924a87f0ec30e9.jpg","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.268Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241010-11/2e395e9b614bd7146d924a87f0ec30e9.jpg HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-18","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/b6/0b/eb/b60bebc06aaf3f04cc7780e98b67d49a/b60bebc06aaf3f04cc7780e98b67d49a.15.jpg","fqdn":"cdn77-pic.xvideos-cdn.com","domain":"xvideos-cdn.com","tld":"com"},"ip":{"addr":"185.76.9.7","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xvideos.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 03 Oct 2024 00:00:00 GMT","end":"Mon, 03 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"27:E9:05:C0:A5:FC:40:B1:D6:44:DC:D3:39:EE:11:78:2C:E2:F0:78","sha256":"5F:C0:7A:63:35:DB:CB:28:20:1B:40:83:91:40:36:2B:7A:97:63:77:7A:67:2A:45:FF:4E:80:15:A3:03:3C:4A"}}},"request":{"raw":"GET /videos/thumbs169ll/b6/0b/eb/b60bebc06aaf3f04cc7780e98b67d49a/b60bebc06aaf3f04cc7780e98b67d49a.15.jpg HTTP/1.1\r\nHost: cdn77-pic.xvideos-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18430\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Sun, 02 Oct 2016 20:39:55 GMT\r\ncache-control: max-age=10368000, public\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBuUwJBgH3+8AQAAwBJRPCRgH37oomAAwBj/Q63QH3A/cAAA\r\nx-77-nzt-ray: 5451992da7b8403cdab9a26873d9af28\r\nx-accel-expires: @1758825040\r\nx-accel-date: 1754396895\r\nx-accel-date-max: 1744028741\r\nx-77-cache: HIT\r\nx-77-age: 1097979\r\nserver: CDN77-Turbo\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18430,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85\", baseline, precision 8, 352x198, components 3","md5":"9ad75e0c4707180da626adfb56889d83","sha1":"e004e64d9e8aa2d7d70bf94f4e00c89a48bb61e3","sha256":"5c79d2893041fe70fdd8e990e66d768804eada6aec51c03427a9362ddf116638","sha512":"8c5a2843a46bed2ae80cb79bce2432bbe794a2429b1a008f1511218bf91215a14aa1bf551a79eed2fa25b807ca0ae33055da39828033aa8724d21c7541bc373c","ssdeep":"384:PW4zMrdzRSOW/yEyfHn56NAPWW2BNU8Km2D+rbT:PWuMrdz4T/6n5FPWg8jnrX","tlshash":"6982cf4bb60a1c970f0dd6382cd682adfe87585c7533b8f8a64483b79e96657da1c20c","first_seen":"2024-12-13T01:11:03.603413Z","last_seen":"2026-01-20T01:37:03.499947Z","times_seen":37,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sorkab.com/wp-content/uploads/2022/11/0002763.jpg","fqdn":"sorkab.com","domain":"sorkab.com","tld":"com"},"ip":{"addr":"172.67.140.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sorkab.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Jul 2025 05:04:20 GMT","end":"Tue, 30 Sep 2025 06:02:59 GMT"},"fingerprint":{"sha1":"16:84:FD:F0:8B:34:EC:ED:34:DC:E3:85:84:D6:61:18:B4:5E:4B:EA","sha256":"86:34:DF:06:FE:6E:41:05:4E:3F:F6:C9:BA:1A:19:A9:C1:73:4C:60:96:57:81:73:EC:10:89:7B:FF:36:47:0B"}}},"request":{"raw":"GET /wp-content/uploads/2022/11/0002763.jpg HTTP/1.1\r\nHost: sorkab.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 35259\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 29 Jul 2026 22:45:16 GMT\r\nlast-modified: Wed, 22 Feb 2023 08:34:08 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: User-Agent,Accept-Encoding,Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: geolocation=(), midi=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), payment=(), fullscreen=(self)\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1370302\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eGN7pcKuM19ESci0DO%2F7m7tDOONmTvTpnYb5o6EvD2mgmI0c2EEAr9ntCdDl7pSce8divNwLvQacmUJaoAoExnZAE7RxnX%2Bx\"}]}\r\ncf-ray: 970f01361aa3b4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35259,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x360, components 3","md5":"ba21a3ba6988a39155cd28821d5cf3b3","sha1":"43aff2d21d78fde21fac1d5587766597b0ba722c","sha256":"771ed2d6f2c2ae3b9b60ea665046aaccf3e7c8825f4699ebc6bdbd646a35fc11","sha512":"2e2359144419c3713495d3925b8ddfa3a4c97f5cfb8bf3435ee7e4782a8946df563b3b191b800b278baa137a9e9458ca55559781dc3f3dfe8abcd2b894e29b36","ssdeep":"768:W8u+vYqUbdnYhqJhtGxadQRr7xQ/o5I3o2Rx1dFK9K:NVwP9eq3t+aE7eA5I3o2Ndk9K","tlshash":"b6f2f1a368e0d6e9d83e3960b1c4c398491e6e99f0ebae39f33654543f119cd0896623","first_seen":"2024-12-07T03:44:49.253478Z","last_seen":"2025-09-21T08:27:47.461283Z","times_seen":22,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":1,"connect":4,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidmo.pro/thumbs_320/73/fb/73fb1fad48f82bccfe95e60e763e550a/12279858.jpg","fqdn":"vidmo.pro","domain":"vidmo.pro","tld":"pro"},"ip":{"addr":"89.248.193.244","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"en.vidmo.pro","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 20:44:46 GMT","end":"Wed, 22 Oct 2025 20:44:45 GMT"},"fingerprint":{"sha1":"74:46:04:C7:74:12:A2:65:84:34:3D:72:B8:ED:93:13:5A:09:2A:E0","sha256":"B8:96:1D:42:22:B9:F0:34:20:22:DA:FF:BB:BF:D0:89:2E:9E:C2:8D:4B:9A:26:32:9F:8C:EB:C6:3D:39:39:8B"}}},"request":{"raw":"GET /thumbs_320/73/fb/73fb1fad48f82bccfe95e60e763e550a/12279858.jpg HTTP/1.1\r\nHost: vidmo.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9539\r\nlast-modified: Sun, 20 Sep 2020 12:21:21 GMT\r\nexpires: Fri, 26 Apr 2024 22:07:53 GMT\r\ncache-control: max-age=604800, public, no-transform\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9539,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc58.35.100\", baseline, precision 8, 320x240, components 3","md5":"b5627632e5e1dc50099956c2e40fd3e0","sha1":"7987dffefb988fc9c00cdd9ac1e0ff936346fd7f","sha256":"f0bd3c91f04729ba6a5c82d1f130619da7f93353db7574f23136cecb9838c619","sha512":"e77864eff539342e9ff49add17ffcfbedae015c0dd0219cb07464e213cd97c3ec23d6b0b424d9fed6e1396b753af5cd4ed3f8fdf35b73a675275edd6408e4fc6","ssdeep":"192:t6vbbbFe+hCctA4jwePPTH9rF4wcV+uhro31/MMwJqQAXtv2bbbx:Z/MAQ7TdrewclCRdwJIXm","tlshash":"a412afd6b6cb8607cbc41a950702ff0d0d8aa242a56e4e64d1d8ee556ab1dc3560f33e","first_seen":"2025-05-20T07:09:21.224553Z","last_seen":"2026-04-03T21:47:16.563136Z","times_seen":22,"resource_available":false,"data":null}},"time_used":3330,"timings":{"blocked":1081,"dns":5,"connect":56,"send":0,"wait":64,"receive":0,"ssl":2112},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20250806-1/e8d8617a09d5f53697a2195a9e330f64.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.62","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20250806-1/e8d8617a09d5f53697a2195a9e330f64.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 127910\r\nlast-modified: Wed, 06 Aug 2025 05:27:51 GMT\r\nvary: Accept-Encoding\r\netag: \"6892e7d7-1f3a6\"\r\nexpires: Tue, 16 Sep 2025 16:53:38 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":127910,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, height=288, software=Android Gallery, orientation=[*0*], datetime=2024:10:03 22:14:49, width=512], baseline, precision 8, 512x288, components 3","md5":"0c05f3514750bf0bf0e87f53ed2d6711","sha1":"506120d008d3b1cdcabce78e3c8d1c4036643257","sha256":"228bf89f0c3761b2e1122dde94e707d248cb1f122f811dd713611963f4a858ad","sha512":"56205fd97a0b9e886e033513049d3f35b3f4610b50dd4a3f09f5e3c22610cbc2db328dafba80b6075ee819376de153d72c5440f18c2a62c3a3fe4df47624393c","ssdeep":"3072:g9EFiBulrXV0NLl1sKmDwjRzkmzEg5z7orZJTccx2p1MC:g9EFiGrEGD0zk2R7cL12p1MC","tlshash":"6dc31289cfddb570db4dd9a78610813623b1a378dc2d75868a8d8a11f28f1b77c0711b","first_seen":"2025-08-08T23:03:00.226288Z","last_seen":"2026-05-30T13:50:29.286722Z","times_seen":109,"resource_available":false,"data":null}},"time_used":1776,"timings":{"blocked":809,"dns":0,"connect":0,"send":0,"wait":614,"receive":353,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tubetubetube.com/tubes/tokyohot/rena.yamamoto/n1025_rena_yamamoto_ss/19.jpg","fqdn":"tubetubetube.com","domain":"tubetubetube.com","tld":"com"},"ip":{"addr":"104.21.65.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:00.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tubetubetube.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Jul 2025 14:01:25 GMT","end":"Fri, 17 Oct 2025 14:58:47 GMT"},"fingerprint":{"sha1":"34:5B:F6:B3:C4:7A:C4:35:72:7A:6D:06:E8:FD:D1:00:4E:0C:2B:39","sha256":"A6:40:0B:69:B1:8C:B8:C4:D9:5E:0A:3D:6A:9A:E8:F8:D6:06:DB:54:23:2D:40:74:DB:93:13:FA:F4:76:48:17"}}},"request":{"raw":"GET /tubes/tokyohot/rena.yamamoto/n1025_rena_yamamoto_ss/19.jpg HTTP/1.1\r\nHost: tubetubetube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://av4.vid4.uk/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Mon, 18 Aug 2025 05:28:00 GMT\r\ncontent-type: text/html\r\nlocation: https://g.uuu.cam/movie/tokyohot/rena.yamamoto/n1025_rena_yamamoto_ss/19.jpg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PUwz3EuP5qY8djaixE6617B3IrCQ8L25LBxJ9bAzG5oHwpMNs0IaSTdeIF4E6k2fdavnwHGP6tocAzG%2FixsEWj%2FGy0xOgxsKI%2BKGj30L\"}]}\r\nage: 72\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 970f01588e7d0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40847,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapefilms.net/favicon.ico","fqdn":"rapefilms.net","domain":"rapefilms.net","tld":"net"},"ip":{"addr":"5.63.144.84","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:02.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapefilms.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Jul 2025 06:52:30 GMT","end":"Thu, 23 Oct 2025 06:52:29 GMT"},"fingerprint":{"sha1":"E6:39:06:3F:CD:F5:EF:89:42:FC:3F:0D:94:BC:38:3C:BC:32:A0:6C","sha256":"3F:38:BF:8E:4E:28:D3:15:F7:BD:AD:8E:72:9D:A1:1A:E6:CC:16:4C:A3:F0:94:F9:66:FC:3E:2D:ED:7A:84:40"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rapefilms.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.22.1\r\nDate: Mon, 18 Aug 2025 05:28:02 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":5,"connect":21,"send":0,"wait":49,"receive":0,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"east-asia.uk/favicon.ico","fqdn":"east-asia.uk","domain":"east-asia.uk","tld":"uk"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.269Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: east-asia.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdig.com/media/videos/tmb/000/023/343/1.jpg","fqdn":"fapdig.com","domain":"fapdig.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdig.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Jul 2025 16:30:06 GMT","end":"Mon, 13 Oct 2025 17:27:49 GMT"},"fingerprint":{"sha1":"76:C7:CB:0F:48:7A:EF:2F:4D:47:B6:D3:91:60:42:CE:BC:A3:43:24","sha256":"2E:29:05:76:4F:50:CA:97:93:6D:CB:42:4C:D5:8B:AE:B9:59:EE:02:3E:8B:84:66:40:89:F9:FC:2E:8D:04:6E"}}},"request":{"raw":"GET /media/videos/tmb/000/023/343/1.jpg HTTP/1.1\r\nHost: fapdig.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10982\r\nserver: cloudflare\r\nlast-modified: Thu, 14 Apr 2016 08:49:01 GMT\r\netag: \"570f597d-2ae6\"\r\naccept-ranges: bytes\r\nage: 6883\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1nC8a%2BVWmSIAkUN1tvM5FKqHYoKafVaRMDSeMIJ4%2FgIkp%2F4vIeVSCUkyv%2F4z%2Fil%2BusYatF5FrmyGN0UH29Wx8%2BWKmFxGe7Ut\"}]}\r\ncf-ray: 970f01365b54b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10982,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 105x106, segment length 16, comment: \"Lavc57.28.103\", baseline, precision 8, 320x240, components 3","md5":"e6ad8051cea9019a8360f639d53f0df7","sha1":"e3acf85adc7f5bf26b2363c0580c9f304e3cb07a","sha256":"71b0e5af134cbf61f2408a9994c0067ae49f8b214a0e54eac37c21393225f567","sha512":"c0a5c0811619e1412ee05ca57bf46d2578d0a6e8b98fd8d6b019cd438eec275b8ec2ec68d06829f65254b2d6c9cb2cec17082432f52e2cd565d6ef5356609a30","ssdeep":"192:Nq/S3+6ZdgieXB6/YOE/XlY2nx7ZPkIkOLxU1lMxFsXjfl+BRK3RcM9t2yRx/:Nq/SOrNohs2u/HNU3s0vRx/","tlshash":"8a32bfc43252f3a8ce262b3ad05a5a4f5f4e42213df9b870e671ee546a4c2393107744","first_seen":"2024-08-19T19:45:06.240136Z","last_seen":"2026-04-03T22:52:06.936787Z","times_seen":12,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.apian088.sbs/media/videos/tmb/000/000/622/10.jpg","fqdn":"img.apian088.sbs","domain":"apian088.sbs","tld":"sbs"},"ip":{"addr":"172.96.160.18","port":443,"asn":23470,"as":"RELIABLESITE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.apian088.sbs","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Jul 2025 00:20:15 GMT","end":"Thu, 16 Oct 2025 00:20:14 GMT"},"fingerprint":{"sha1":"1A:44:15:2C:81:51:42:F7:A5:CB:5C:2A:6B:C6:E3:F9:A1:7F:F8:C3","sha256":"65:E3:E0:B1:37:C4:0C:15:0C:73:81:96:E8:BF:18:DF:A8:B9:42:F3:DD:AF:68:6D:B8:F4:20:B7:6A:43:74:C5"}}},"request":{"raw":"GET /media/videos/tmb/000/000/622/10.jpg HTTP/1.1\r\nHost: img.apian088.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 18 Aug 2025 05:28:00 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 7202\r\nLast-Modified: Sat, 23 Mar 2024 12:21:43 GMT\r\nConnection: keep-alive\r\nETag: \"65fec957-1c22\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":7202,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"56d5faefaddae7bd8c2fb35c6487835d","sha1":"3ec22ece710f55347749a9f8bf2f7a5e678b2a3e","sha256":"88d196bea34d454f68d58c79a00002a48e920513731b12e4e5ba4310940d9375","sha512":"b6cea61f310cd42dfce9594351d6ed1974fe0ada079630102fdfac168e58612b03a9c90355c5f2913b10af8f4ab2a8885b69050aaad8b956495d9cd75e065379","ssdeep":"192:lagLBDAjZSrs0XKsNcgvpaPbYpzpnFMo7QNKuhHa:UoD6Eo0XKXgxIkWphHa","tlshash":"6ce1afc949a89a86de3c4ff91eb5cf8be51ed8306124cb2bf28466a9073d0714c526f1","first_seen":"2024-12-10T06:27:48.903545Z","last_seen":"2026-04-03T22:52:06.906746Z","times_seen":28,"resource_available":false,"data":null}},"time_used":4414,"timings":{"blocked":945,"dns":23,"connect":192,"send":0,"wait":170,"receive":0,"ssl":3029},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sorkab.com/wp-content/uploads/2021/11/0000021.jpg","fqdn":"sorkab.com","domain":"sorkab.com","tld":"com"},"ip":{"addr":"172.67.140.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sorkab.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Jul 2025 05:04:20 GMT","end":"Tue, 30 Sep 2025 06:02:59 GMT"},"fingerprint":{"sha1":"16:84:FD:F0:8B:34:EC:ED:34:DC:E3:85:84:D6:61:18:B4:5E:4B:EA","sha256":"86:34:DF:06:FE:6E:41:05:4E:3F:F6:C9:BA:1A:19:A9:C1:73:4C:60:96:57:81:73:EC:10:89:7B:FF:36:47:0B"}}},"request":{"raw":"GET /wp-content/uploads/2021/11/0000021.jpg HTTP/1.1\r\nHost: sorkab.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19573\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 29 Jul 2026 22:45:15 GMT\r\nlast-modified: Wed, 22 Feb 2023 07:09:53 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: User-Agent,Accept-Encoding,Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: geolocation=(), midi=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), payment=(), fullscreen=(self)\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1665560\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F3kU112uH9SwylBiNxR%2FhUml4zNGO19k4oGxplHS6a9d0fzDMMq0dWUhaNgu05Stq1rZqseQYDQ1%2FhjwCFdxHn3oJerG7xFW\"}]}\r\ncf-ray: 970f0139bdf7b4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":19573,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 640x360, components 3","md5":"d3272c0df0f5504e75d76a1bac518149","sha1":"479719a747cde8a6b2867171a2578ed615545f31","sha256":"ef00bb07aad0bf9540fd5c65337bd89b377dd3965ddc9b4b1f871935c2b74a36","sha512":"b26fc22fe24f25a68b6a718d43d1fdd801afbffe3fb279d9174bab55b58ff5a8100abd04096bff0964186821a2eb4ccabc5a8c27ae7d084c1f2eecbd73d8135a","ssdeep":"384:jSl2aEMkKuORmpcFIPoLf07W2ZyohzldICt6jiAfKpdZrLxf5oZO:OEaKKPIpxALf0CkhxlMi1F5yO","tlshash":"ca92d0cbbe098a03e734b1abec35b138cc0e59db075fa8389352d2958152c3922d9bd5","first_seen":"2024-05-13T09:43:46Z","last_seen":"2025-11-11T09:44:12.60275Z","times_seen":15,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e1nn.com/vs/34372219.jpg","fqdn":"e1nn.com","domain":"e1nn.com","tld":"com"},"ip":{"addr":"104.21.6.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e1nn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Jul 2025 14:51:58 GMT","end":"Mon, 13 Oct 2025 15:50:11 GMT"},"fingerprint":{"sha1":"A9:B5:AD:11:5A:3D:4B:21:EC:EB:40:8D:B8:E1:D4:CC:97:15:8B:CB","sha256":"94:E9:2F:0B:FC:8A:9C:F8:3E:42:F3:F9:6E:FB:3A:1C:F5:FA:CF:95:A3:CD:CE:3E:BE:AB:8A:A4:F3:73:53:6C"}}},"request":{"raw":"GET /vs/34372219.jpg HTTP/1.1\r\nHost: e1nn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12238\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 29 Aug 2018 22:51:51 GMT\r\netag: \"5b872387-2fce\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-cache-status: HIT, HIT\r\naccept-ranges: bytes\r\nage: 1637686\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IWQDWeF9CGFYi9Oe1p7FyuLRhsWC0fzh42ViFfzcs4%2F%2FXmr%2FAlhq%2FAfBegiG7%2BVtvTHBhJQAbSqTEhHxAeK8CY7fSjZRUQ%3D%3D\"}]}\r\ncf-ray: 970f01485f3956b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12238,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 320x240, components 3","md5":"7006bfc06a2be1967380b454146a8d4b","sha1":"228fa594bb365b6c230ff6de5994fd5c3e0f9067","sha256":"ec91aa12b7514ebdb301646cf8473ca0c4bcacbde21017bcaed943f8442b2813","sha512":"d54fb612eaa12238efc5567bc741a89d6b27d8aefb310d5d9a447e59d533451d00964f35ac184bd4543c42f930964a2040c94a91e9803426506638724442fda4","ssdeep":"192:37H3tMJ44J1vfeSzvDacNHX0EsSvaeIB+ElpO/Zxb76hHAmi:37HWJJPGqDacFX0MW+ECZxbl","tlshash":"5f42b09f62024d53003cc574aebb2e4c1e78130aad74f4115893cdcf7a5d95992bfe84","first_seen":"2025-05-26T07:11:45.604233Z","last_seen":"2026-01-24T20:33:37.510137Z","times_seen":62,"resource_available":false,"data":null}},"time_used":2278,"timings":{"blocked":-1,"dns":11,"connect":8,"send":0,"wait":32,"receive":1,"ssl":2216},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn5-thumbs.motherlessmedia.com/thumbs/016E21C.jpg","fqdn":"cdn5-thumbs.motherlessmedia.com","domain":"motherlessmedia.com","tld":"com"},"ip":{"addr":"185.107.92.224","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.motherlessmedia.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Mon, 04 Nov 2024 00:00:00 GMT","end":"Fri, 05 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"57:B3:92:20:5F:2C:FA:27:4E:CD:E5:6F:BC:3E:04:43:42:3A:93:E8","sha256":"10:A9:10:0A:05:AC:3F:09:47:9C:0E:EF:B9:5A:60:87:2B:F1:D5:35:A8:E6:3B:67:04:9B:7C:A8:AA:53:B7:FE"}}},"request":{"raw":"GET /thumbs/016E21C.jpg HTTP/1.1\r\nHost: cdn5-thumbs.motherlessmedia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty/1.21.4.1\r\ndate: Mon, 18 Aug 2025 05:27:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18860\r\nvary: x-s-token\r\nlast-modified: Mon, 18 Mar 2019 20:58:27 GMT\r\netag: \"49ac-58464a669414b\"\r\nx-cache: HIT\r\nx-whom: cdn06\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":18860,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 32750x-32767, segment length 16, baseline, precision 8, 640x480, components 3","md5":"23739577d71542fb950867aab32fff14","sha1":"dd6404ad0735411dd9bad6df27bb751dd62c8ca7","sha256":"d0e52d324bf73c09913be1dbd3d13050082a14aa6d84134ece5aaf44ffee22d5","sha512":"8b7bb243701f50c408bf53864325b8817de0ec0d5bd4c6067e750f664a447da8e1d4df001de3c81d8996f7183223939f883ed5c0eb36461820ee231991821d19","ssdeep":"384:AUpTTYQ+4yqEsNMASk3khEbUkfUME0tgf6lXQPUWLSaYBp6Oguog4:AeQ74yqEsNMASikhbYjEWBQPSau6O3oj","tlshash":"1482e169b33d9365baaee13b710876472363e3063dc4d06e23b64bd15ce1d90d2f8294","first_seen":"2025-08-18T05:29:08.728684Z","last_seen":"2025-08-18T05:29:08.728684Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2720,"timings":{"blocked":982,"dns":4,"connect":18,"send":0,"wait":19,"receive":33,"ssl":1638},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blumpkintube.com/thumbs/166/916_Tight_Teenage.jpg","fqdn":"blumpkintube.com","domain":"blumpkintube.com","tld":"com"},"ip":{"addr":"104.21.79.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"blumpkintube.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 12:42:16 GMT","end":"Sat, 08 Nov 2025 13:40:57 GMT"},"fingerprint":{"sha1":"B5:5C:D6:3E:1F:1F:47:CA:75:11:10:36:23:AD:28:60:30:F6:F3:E6","sha256":"4F:EB:18:31:61:2F:FF:F3:CC:1A:17:F1:35:E5:4F:6C:16:A3:87:63:98:E1:24:08:83:65:C3:DC:3A:AE:72:64"}}},"request":{"raw":"GET /thumbs/166/916_Tight_Teenage.jpg HTTP/1.1\r\nHost: blumpkintube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13842\r\nserver: cloudflare\r\nlast-modified: Wed, 26 Aug 2020 13:14:36 GMT\r\netag: \"5f46603c-3612\"\r\nexpires: Tue, 07 Jul 2026 09:08:58 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, no-transform\r\nage: 3615538\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F9a15gil1fShIXOpjBNRNRP5kiDgfssDpFJBTX%2FP2E6M%2FGajqc6eoE46izVfQWNWdbZ5ZWo80Zi35W8xJVMh%2BH%2FX5e53UKIIfyXc7SyG\"}]}\r\ncf-ray: 970f0147bf3656a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13842,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 312x208, components 3","md5":"d96314f2937285e184ccf305cccb4c59","sha1":"76284a2eafcd552043f0f07a1563ed437e966c89","sha256":"ce546ada704e1f03bf95204139ed7406ab7173891b30914a37aa46bf99ddcde9","sha512":"1fa7c0c302bff1885b71c0b51d463304877e2632ef71fbf5d46bd765ac646ee36479c4408416729a2bf49540ec92438b852d1c25f40118b3b28eeca567c26c14","ssdeep":"384:/soWXLp9Z4w6AENmWNMyz2cFpdNpHPQTI:/soqLrZeN8R7cF7v6I","tlshash":"a052c06c12191cebf6a16ff16b8daf3befc4996244d78caa515e004acd11771ca0780a","first_seen":"2024-12-03T05:34:37.68946Z","last_seen":"2026-01-22T17:07:15.073423Z","times_seen":36,"resource_available":false,"data":null}},"time_used":3988,"timings":{"blocked":1729,"dns":12,"connect":2,"send":0,"wait":9,"receive":1,"ssl":2229},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.redd.tube/favicon.ico","fqdn":"www.redd.tube","domain":"redd.tube","tld":"tube"},"ip":{"addr":"104.26.15.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:02.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redd.tube","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 19:05:31 GMT","end":"Tue, 28 Oct 2025 20:05:13 GMT"},"fingerprint":{"sha1":"E1:CC:A2:57:19:42:1A:52:AA:84:E5:30:F1:6B:8B:D3:D0:54:1E:F2","sha256":"9A:80:7E:16:92:21:EA:31:78:BD:02:CC:B2:B3:B6:EB:D8:1D:6A:3E:86:28:E0:87:26:CA:F4:C8:6F:5E:7C:B2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.redd.tube\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Mon, 18 Aug 2025 05:28:02 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 229\r\nlocation: http://www.redd.tube/\r\ncf-ray: 970f0169089a0b59-OSL\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=KEo7h1XZ2wKx2zcO48VPSX%2FJ56iW%2FfRghNQO6%2B8xwIirffWhk9xdnBBqu0d5amr%2FcY%2BubBcgJiCqCpTp13Gjig4TStgWPTitlKnBsX%2F%2FdjqjDdZ%2FmVugHdaIlVpqxYM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2134\u0026min_rtt=489\u0026rtt_var=3323\u0026sent=7\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3271\u0026recv_bytes=1205\u0026delivery_rate=7438356\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=e724ead610b119e1\u0026ts=120\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":2,"connect":3,"send":0,"wait":73,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turboporno.info/template2/img/4.png","fqdn":"turboporno.info","domain":"turboporno.info","tld":"info"},"ip":{"addr":"62.60.230.53","port":443,"asn":51396,"as":"Pfcloud UG","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turboporno.info","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 10:37:25 GMT","end":"Tue, 14 Oct 2025 10:37:24 GMT"},"fingerprint":{"sha1":"DF:F5:01:92:36:38:AC:CE:35:8D:44:AA:35:20:43:AA:AA:1E:CB:DC","sha256":"EC:2A:8B:F7:A1:AC:6A:CF:81:48:F4:35:12:D0:E7:23:99:A9:84:52:03:FE:BD:8A:25:1E:6F:75:F1:A4:D7:24"}}},"request":{"raw":"GET /template2/img/4.png HTTP/1.1\r\nHost: turboporno.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 18 Aug 2025 05:28:03 GMT\r\nContent-Type: image/png\r\nContent-Length: 4890\r\nLast-Modified: Wed, 19 Jun 2024 12:15:52 GMT\r\nConnection: keep-alive\r\nETag: \"6672cbf8-131a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4890,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 83 x 89, 8-bit colormap, non-interlaced","md5":"cf8b0b4b5cfae29f12c830c67c92c097","sha1":"5e09ce09f94088e60ac4b8a3738cf2f4bed2918c","sha256":"8cbd76abb84bfab5895a3a8d72bd87a105006c5d4a2ec1eab945786e8828a0dd","sha512":"170eb6129199beddb37d96983b9b3f5efcb5bd12ef42b4841f4591aafbaa0d3fe081565fadcffa6a42a69f8fc0a7ec10d290b5fb3bd5cb9a2ac0f96e7532daf7","ssdeep":"96:5ky8Qtw9/50w+yXjoek/2skqRYLQx6gpy0UC8/XBQXCCc1Zc5zL0IcHMhiD9z:u/05gondkqRYLQrp8/XBQXCjc5zYs0hz","tlshash":"aca16c320b1bbaeca1dc33922a8748859997bbe804c2d58103276938d641b8b8727990","first_seen":"2025-08-16T16:55:58.324205Z","last_seen":"2026-01-16T18:59:05.751282Z","times_seen":6,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.effedupmovies.com/wp-content/uploads/2019/10/spoorloos.jpg","fqdn":"www.effedupmovies.com","domain":"effedupmovies.com","tld":"com"},"ip":{"addr":"45.138.107.14","port":443,"asn":208414,"as":"WEDOS Internet, a.s.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effedupmovies.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 00:10:21 GMT","end":"Mon, 10 Nov 2025 00:10:20 GMT"},"fingerprint":{"sha1":"97:8B:30:02:4C:8F:64:FA:13:8B:A6:1E:99:37:55:69:02:AC:87:C2","sha256":"21:4C:47:43:0F:73:92:19:29:1A:7B:82:BA:D1:DB:C8:C7:E3:12:A3:29:61:60:34:A8:0B:65:AC:E7:F9:03:C3"}}},"request":{"raw":"GET /wp-content/uploads/2019/10/spoorloos.jpg HTTP/1.1\r\nHost: www.effedupmovies.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:28:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12583\r\nlast-modified: Fri, 16 Feb 2024 14:27:11 GMT\r\netag: \"65cf70bf-3127\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-protocol: HTTP/2.0\r\nx-request-id: 55fd81ba3a599fd8b2c8ec5215041a7c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":12583,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 279x400, components 3","md5":"32657daf7081cf5314498c05b5fcd605","sha1":"993b937c2a779cba2d31a67517061be2894c46b0","sha256":"25fe623c1cb271eb86f5043eca41bee0288bb26b807d6dafbb8da1a90892c4a6","sha512":"8f2188dfc029abb579b0986cb3b64b764d57c63d9014111997f457b31dbb6ec15ec8357cac915f0864553125008ac3dcf8b0277676e7f418f23f6a19f477dc8d","ssdeep":"384:4ipvTTlQHkLzPo5mYWNR+59i2KIblRG3kjgD3:4oTpQHMooNR+fi2633D3","tlshash":"8a42cfd1992d8ed4ce194cf4270287940380f3aa306babd3df342949b3f64e63b5a971","first_seen":"2025-02-08T03:33:08.35228Z","last_seen":"2025-10-16T15:47:39.549612Z","times_seen":14,"resource_available":false,"data":null}},"time_used":10286,"timings":{"blocked":854,"dns":9,"connect":56,"send":0,"wait":7105,"receive":1,"ssl":2210},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdig.com/favicon.ico","fqdn":"fapdig.com","domain":"fapdig.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:02.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdig.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Jul 2025 16:30:06 GMT","end":"Mon, 13 Oct 2025 17:27:49 GMT"},"fingerprint":{"sha1":"76:C7:CB:0F:48:7A:EF:2F:4D:47:B6:D3:91:60:42:CE:BC:A3:43:24","sha256":"2E:29:05:76:4F:50:CA:97:93:6D:CB:42:4C:D5:8B:AE:B9:59:EE:02:3E:8B:84:66:40:89:F9:FC:2E:8D:04:6E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: fapdig.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\nserver: cloudflare\r\ndate: Mon, 18 Aug 2025 05:28:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://fapdig.com/faviconico/\r\nvary: accept-encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncf-cache-status: BYPASS\r\nset-cookie: ASPro_1382933ca042bef776e8100bd5eb8ac5=31co9ri63ak5u3u7svliv0jchf; Path=/\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0IJcAZNNly1%2FLevScv9AQ8TImTQ593yaWiEjcF3%2FO28PZjwB4oy%2FHjogFyDqPd9UITS4np%2BpqHd6gieFdSsiJ7C%2FIpBnGtWJ\"}]}\r\ncf-ray: 970f0167adac0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vdo.x4men.com/Img/285.jpg","fqdn":"vdo.x4men.com","domain":"x4men.com","tld":"com"},"ip":{"addr":"104.21.40.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x4men.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Jul 2025 10:01:17 GMT","end":"Sat, 11 Oct 2025 10:59:06 GMT"},"fingerprint":{"sha1":"98:F1:2D:F5:2B:38:EA:10:76:1E:A4:50:2E:F6:0D:B6:FD:A5:AF:AE","sha256":"D7:9C:89:5F:90:3A:29:4C:C2:E6:45:FB:B3:E2:96:A9:33:EC:4A:AA:88:78:0B:22:91:12:2A:80:FA:ED:3B:73"}}},"request":{"raw":"GET /Img/285.jpg HTTP/1.1\r\nHost: vdo.x4men.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25846\r\nserver: cloudflare\r\nlast-modified: Thu, 23 May 2024 19:51:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"664f9e35-64f6\"\r\nexpires: Tue, 19 Aug 2025 02:23:50 GMT\r\ncache-control: public, max-age=86400\r\naccept-ranges: bytes\r\nage: 11046\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FF9RLgT6IryIl9Wua9DrS9q%2BJPdSHd6SnxSY4NuZGSq3S22iSxRXLGnou2Sf0gkyMbs73dEa8wG9T3PHtU7pq90FLzRK9sAqR6PC\"}]}\r\ncf-ray: 970f01472bd87130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25846,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=185, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=300], progressive, precision 8, 300x185, components 3","md5":"c82a6c38e9600b1bb5bff5cb3e39a214","sha1":"516eccd7a10d50f8e1c649a3370942ce766281fb","sha256":"5db0ef0e2e97dddca6861fb66a8b03125e7049767a8dd4dcc682e521146858fc","sha512":"edac3a54c0dd7270b2e6a86267860f7b092dee72263c95bdd75f751dd37ccb5a0ebc92e68ddd5316a099f0080decad55bf1c10e35528bbf1a77649b61d14200f","ssdeep":"384:LQetRm7ibQetRMEnqCo085ypZZRe3/ocKDwom6Z85OQIpHHFjPFn7JGp0BYH3/:L/vm76/vMEBZQDgm62R2ljF760Bk","tlshash":"11c28d2ab7414d71fad01139d8dac763a3331ee4bb63674b758cb4023be06e44c6a356","first_seen":"2024-12-10T04:17:39.936958Z","last_seen":"2025-12-18T12:53:13.205969Z","times_seen":36,"resource_available":false,"data":null}},"time_used":2570,"timings":{"blocked":345,"dns":9,"connect":1,"send":0,"wait":21,"receive":1,"ssl":2186},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornolomka2.com/uploads/posts/2018-02/1517853085_00-18-32.jpg","fqdn":"pornolomka2.com","domain":"pornolomka2.com","tld":"com"},"ip":{"addr":"91.194.110.16","port":443,"asn":213166,"as":"UA-Hosting SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pornolomka2.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 22:39:00 GMT","end":"Mon, 20 Oct 2025 22:38:59 GMT"},"fingerprint":{"sha1":"2D:08:DD:58:79:7E:A4:0B:01:CF:E4:8A:E0:C9:48:0D:CD:8D:0A:23","sha256":"33:2C:A6:FD:06:A5:95:EA:DA:92:A1:96:DB:00:53:02:64:F1:FB:98:4F:03:4F:22:20:08:4F:6F:48:7B:73:37"}}},"request":{"raw":"GET /uploads/posts/2018-02/1517853085_00-18-32.jpg HTTP/1.1\r\nHost: pornolomka2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.10.3\r\ndate: Mon, 18 Aug 2025 05:25:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23331\r\nlast-modified: Sun, 30 Aug 2020 17:02:19 GMT\r\netag: \"5f4bdb9b-5b23\"\r\nexpires: Mon, 25 Aug 2025 05:25:49 GMT\r\ncache-control: max-age=604800\r\nstrict-transport-security: max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23331,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 450x361, components 3","md5":"c5e2ded964a0065a78bb9aa96744e065","sha1":"3f9497923c86526a543b8ee59a9470a5ba14febe","sha256":"54110c14411e5a97eb501daea708a8549c5cbc7b13a143239b669f76d4128da4","sha512":"abbef9548cc21aeef0a7409eb3b527c6850624d341dfdd512cfc2d630e0587b3bedc3a9e4c364aea9ace4dad240246bb20fb736ddb0ea23085beabb0dd72557d","ssdeep":"384:Wa2n09AhddqqgRF50p+QNL4hj+VsIhVuZ0dxMrKJE1gmDobggXCPZWnuMHm1:WjncAjoqgr50Mhj+V5hVA0HMuGQgZp","tlshash":"36a2e04b82e892dcf1e97b1fc664ff243dc3d0a5ea08d94d79d42e1164c74eac7a4a81","first_seen":"2024-04-30T18:10:32Z","last_seen":"2025-12-01T14:52:09.7242Z","times_seen":17,"resource_available":false,"data":null}},"time_used":2272,"timings":{"blocked":105,"dns":18,"connect":49,"send":0,"wait":58,"receive":1,"ssl":2032},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pornohype.info/contents/videos_screenshots/64000/64006/preview.jpg?v=1752457091","fqdn":"www.pornohype.info","domain":"pornohype.info","tld":"info"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:56.025Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /contents/videos_screenshots/64000/64006/preview.jpg?v=1752457091 HTTP/1.1\r\nHost: www.pornohype.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":2043,"timings":{"blocked":2037,"dns":6,"connect":29,"send":0,"wait":0,"receive":0,"ssl":2675},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turboporno.info/types/videohub/images/342684.jpg","fqdn":"turboporno.info","domain":"turboporno.info","tld":"info"},"ip":{"addr":"62.60.230.53","port":443,"asn":51396,"as":"Pfcloud UG","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:56.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turboporno.info","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 10:37:25 GMT","end":"Tue, 14 Oct 2025 10:37:24 GMT"},"fingerprint":{"sha1":"DF:F5:01:92:36:38:AC:CE:35:8D:44:AA:35:20:43:AA:AA:1E:CB:DC","sha256":"EC:2A:8B:F7:A1:AC:6A:CF:81:48:F4:35:12:D0:E7:23:99:A9:84:52:03:FE:BD:8A:25:1E:6F:75:F1:A4:D7:24"}}},"request":{"raw":"GET /types/videohub/images/342684.jpg HTTP/1.1\r\nHost: turboporno.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 18 Aug 2025 05:28:00 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5328\r\nLast-Modified: Fri, 03 Mar 2017 11:34:40 GMT\r\nConnection: keep-alive\r\nETag: \"58b954d0-14d0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5328,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85\", baseline, precision 8, 208x117, components 3","md5":"084ff064873fddce978dae35f906c57b","sha1":"c9a7f126562a80e8c8c876ebc144211b21797cf1","sha256":"178ddcaca5bb138ff9e95ca71508dc6750e512e12c0c98a84891717e0c4f5fb9","sha512":"c7717adc49bf45efcdd9bcaf027fe253873f04e85c0e570dbe3bc8e772ceea4b2c796dab379d091d9e5d4932cae9e16261399b695ac4ea76b032f43327838f07","ssdeep":"96:GMEgxEfpuOUwITqob8SHo64xakO32uMIknlHk7jXrbt+N98c:L9Elsqob896CakO3NklaXNI9l","tlshash":"01b17d5003e69581ef2fc5f5f4c65004930b96817e98a63ab7b393eff7b54d06488949","first_seen":"2024-05-14T01:22:03Z","last_seen":"2026-01-16T18:59:05.769391Z","times_seen":12,"resource_available":false,"data":null}},"time_used":4020,"timings":{"blocked":976,"dns":8,"connect":34,"send":0,"wait":30,"receive":0,"ssl":2925},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g.itsmyfetish.com/favicon.ico","fqdn":"g.itsmyfetish.com","domain":"itsmyfetish.com","tld":"com"},"ip":{"addr":"172.67.149.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"itsmyfetish.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 23:58:45 GMT","end":"Mon, 29 Sep 2025 00:56:04 GMT"},"fingerprint":{"sha1":"DD:1A:02:29:63:49:03:7D:D7:74:A8:C7:9F:0B:E7:CE:F2:0B:35:41","sha256":"28:DC:40:7A:89:0D:A6:C9:41:3C:6C:1A:59:38:F1:8D:F2:C4:88:1F:D7:9F:E2:E0:14:DF:92:31:D5:AC:32:EB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: g.itsmyfetish.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Mon, 18 Aug 2025 05:28:04 GMT\r\ncontent-type: text/html\r\nlocation: https://m.itsmyfetish.com/favicon.ico\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 809\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ow3IhOaaTHvKf8F1T%2FIlcdXGRQEqLCSP%2BgL5UHRAhhxIUqRdrWYNj4Iprt3XyBJTvptnqFIFqqRERfsXccXpLljtvK0x6Dnhrs0Mvx1jbg%3D%3D\"}]}\r\ncf-ray: 970f01735f43569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":1159,"timings":{"blocked":0,"dns":7,"connect":27,"send":0,"wait":32,"receive":0,"ssl":1041},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stickamvids.net/favicon.ico","fqdn":"stickamvids.net","domain":"stickamvids.net","tld":"net"},"ip":{"addr":"80.92.205.167","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"stickamvids.net","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Jul 2025 23:22:45 GMT","end":"Fri, 24 Oct 2025 23:22:44 GMT"},"fingerprint":{"sha1":"35:A2:7D:CE:1A:D1:98:97:4D:35:18:E3:E3:7C:73:A6:12:04:45:40","sha256":"92:37:E6:C7:AB:10:30:50:25:4C:90:26:5E:0B:9B:18:4C:21:BC:45:0F:1F:AA:23:14:69:73:8C:67:60:02:9D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: stickamvids.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.20.2\r\nDate: Mon, 18 Aug 2025 05:28:03 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cacrz.4jpg.top/AV4.us.jpg","fqdn":"cacrz.4jpg.top","domain":"4jpg.top","tld":"top"},"ip":{"addr":"104.21.77.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4jpg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Jun 2025 21:09:44 GMT","end":"Sat, 20 Sep 2025 22:08:25 GMT"},"fingerprint":{"sha1":"87:CB:34:CD:A8:80:20:88:6C:00:A6:45:55:4F:1A:BE:9C:F4:54:06","sha256":"01:9F:A5:58:0B:57:D0:CB:4F:B0:62:86:96:36:B0:C9:2A:66:FF:E0:4E:6E:7C:CD:B2:EA:D6:B8:E3:23:28:8A"}}},"request":{"raw":"GET /AV4.us.jpg HTTP/1.1\r\nHost: cacrz.4jpg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 Aug 2025 05:28:03 GMT\r\nserver: cloudflare\r\netag: \"2225-5499bcea176c0\"\r\naccept-ranges: bytes\r\ncontent-length: 8741\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\nahost: RZ\r\ncache-control: public, max-age=3600000\r\ncontent-type: image/jpeg\r\nage: 1370404\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ctXUEGbGDhUvlUF0P45CXNtVXvyM%2F2WyRB1ujvsoRxRA5qUc1A7r1LXCl0%2FAQcUMeZYHuvtnU1olIIosL3pOZEzX9uY2qLzeibmMtQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 970f016f3e9b5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8741,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 307x82, components 3","md5":"edfe007a6e5b3d268b2528f564b60b43","sha1":"1644c8ef97c871079e07e5079d613af5cb94052f","sha256":"bf5bb657f5e788af0c02b9b437d3f15bec91e27175e5a654e3d431fb6d063390","sha512":"8eab965dcd5098e29ccc1cf94459fa6b8fda97331a35139ae6c57cacbe0ed733cd53af8f7e2ca8a82c2cb9f785cafe46f4a34f99aadbdde53ca81cae25403d93","ssdeep":"192:YkyyBW+1ajsm2w0aCqPGfAzC4TvykEobWwK5Fi:YkvU4DqufJ4TvyXO0i","tlshash":"b702bf4a2da48fb326c1c5508cdff34b2ec78a5c67efb16f97319e5af4017165904849","first_seen":"2024-04-16T15:37:12Z","last_seen":"2025-11-15T09:18:18.740899Z","times_seen":2006,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":51,"connect":43,"send":0,"wait":18,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtgallery.net/tb/report_1.jpg","fqdn":"rtgallery.net","domain":"rtgallery.net","tld":"net"},"ip":{"addr":"5.63.144.84","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtgallery.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 07:06:55 GMT","end":"Mon, 20 Oct 2025 07:06:54 GMT"},"fingerprint":{"sha1":"FE:48:A0:70:A8:E4:6F:86:37:1B:38:AD:2B:76:29:45:09:3A:0B:05","sha256":"B9:B5:A1:EA:CE:3C:39:D6:3A:87:80:27:9A:0A:9A:C1:EF:44:C4:3C:E8:AA:2B:B4:61:7D:01:73:8B:B3:3B:1F"}}},"request":{"raw":"GET /tb/report_1.jpg HTTP/1.1\r\nHost: rtgallery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 18 Aug 2025 05:27:55 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 34189\r\nLast-Modified: Tue, 17 Dec 2019 17:34:39 GMT\r\nConnection: keep-alive\r\nETag: \"5df911af-858d\"\r\nCache-Control: private, max-age=600, must-revalidate\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34189,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: \"Created with GIMP\", progressive, precision 8, 480x360, components 3","md5":"eaebe193a163de8814b042e034b277c7","sha1":"12f021e5e06909108db39a9d66b707eceaa03362","sha256":"c9f02a553712121496787423113e2e4336e3795d06eebcb315d6aa9d562b6359","sha512":"d23409e2d0abb7e490a8209873f95e496b75a4bcda9ac9e11881f405b6f76f355acea40dc6abc8ff5c3f724bc5ce06b7a2f20259e9a35c01301a39671baa6074","ssdeep":"768:EE+z1eAPcETVdRjHUG73Lv9rEKx1vQuFpxzxeRnj8udnQ:EE+heATHxHU+Llx1vxBxWF1Q","tlshash":"21e2f1336eb55395f1fc8eb669ab0d88e3fd6c5a1944097b3c410eadc7a64d700c624b","first_seen":"2024-04-25T23:47:55Z","last_seen":"2025-11-26T07:53:44.458269Z","times_seen":60,"resource_available":false,"data":null}},"time_used":640,"timings":{"blocked":595,"dns":7,"connect":19,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pornohype.info/favicon.ico","fqdn":"www.pornohype.info","domain":"pornohype.info","tld":"info"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:02.917Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.pornohype.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":104,"dns":31,"connect":43,"send":0,"wait":0,"receive":0,"ssl":894},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"suckinganimalsex.info/favicon.ico","fqdn":"suckinganimalsex.info","domain":"suckinganimalsex.info","tld":"info"},"ip":{"addr":"104.21.41.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"suckinganimalsex.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 03:30:20 GMT","end":"Sat, 18 Oct 2025 04:27:36 GMT"},"fingerprint":{"sha1":"A0:48:18:28:AD:04:DD:0E:62:85:E1:07:B4:5C:74:C1:B7:4F:6F:4D","sha256":"5D:E6:CB:55:30:4C:43:60:1D:7B:5D:FE:4E:06:B5:3B:65:60:4D:DE:2C:82:80:0C:26:01:F7:6E:B9:07:8E:A4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: suckinganimalsex.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Mon, 18 Aug 2025 05:28:03 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9QrrvMQWWFX0MPaByxkLzO66Pgil3%2BnV5YkvqFrxg6gkYQyfmccG5NBYCMC1xU62ka4w9L5ocdmPqoRZs9uPET1kzfHuXAUr3A2JH0c6NbIzLss%3D\"}]}\r\nage: 73\r\ncache-control: max-age=14400\r\ncf-ray: 970f016b381956b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.redd.tube/","fqdn":"www.redd.tube","domain":"redd.tube","tld":"tube"},"ip":{"addr":"104.26.15.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:04.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redd.tube","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 19:05:31 GMT","end":"Tue, 28 Oct 2025 20:05:13 GMT"},"fingerprint":{"sha1":"E1:CC:A2:57:19:42:1A:52:AA:84:E5:30:F1:6B:8B:D3:D0:54:1E:F2","sha256":"9A:80:7E:16:92:21:EA:31:78:BD:02:CC:B2:B3:B6:EB:D8:1D:6A:3E:86:28:E0:87:26:CA:F4:C8:6F:5E:7C:B2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.redd.tube\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:28:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-ray: 970f0171b8d30b59-OSL\r\nx-content-type-options: nosniff\r\nx-frame-options: Deny\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nischrome: false\r\ncountry-code: NO\r\ncountry-code-uk: false\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=36b29f2de9831fbce9349db614ecc6c5; expires=Tue, 19-Aug-2025 05:28:04 GMT; Max-Age=86400; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ifcXudUlmrREsJ59dKxtDQDQBN8h4TRIdPBQVNu6WBgqeoS8kuGamk%2FhsPSdYA%2BgvawZhYZQcphGIEDVvYe2fxEDwGTM5R9LvxbO1mdi7LpC87gOTgO9ijKBRX5cEOw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2867\u0026min_rtt=489\u0026rtt_var=3959\u0026sent=12\u0026recv=13\u0026lost=0\u0026retrans=1\u0026sent_bytes=4212\u0026recv_bytes=1271\u0026delivery_rate=7438356\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=e724ead610b119e1\u0026ts=1487\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.porn100.tv/thumbs/927/3581127074_0.jpg","fqdn":"www.porn100.tv","domain":"porn100.tv","tld":"tv"},"ip":{"addr":"104.21.37.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"porn100.tv","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Jul 2025 18:01:34 GMT","end":"Mon, 06 Oct 2025 18:59:16 GMT"},"fingerprint":{"sha1":"4B:5B:3A:E1:18:00:08:E8:DA:92:83:82:3B:59:C2:95:3E:24:12:0C","sha256":"6B:07:4B:E7:36:00:32:22:CE:12:14:8C:B0:7A:8A:B6:57:0E:A0:87:9A:56:F8:6C:51:D2:C4:BF:DE:32:61:3A"}}},"request":{"raw":"GET /thumbs/927/3581127074_0.jpg HTTP/1.1\r\nHost: www.porn100.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17089\r\nserver: cloudflare\r\nlast-modified: Mon, 28 Apr 2025 09:02:19 GMT\r\nexpires: Fri, 17 Oct 2025 05:14:17 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: BYPASS\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 819\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BRsxy2y25MDrM14khmunm%2BlMGUl7Mwo6UyfhzKmcrm47%2FikHNudUOrDTXRa%2BfwTKGsSaJvnEInJrHe6o59k9JWiITroBWYzHCZuDaQ%3D%3D\"}]}\r\ncf-ray: 970f01469e0b56c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":17089,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3","md5":"3ef139e46d3bd1775b6667ebf595530f","sha1":"d3c50ac6655d40189516f5a6496fc62050e84a77","sha256":"3dc490e91ad90070c04a966530f67124e71f25e8c2c04c1af03ef2414ecf8a60","sha512":"69e58294aa6bb6833a792d08a50e108d27d6b848d4933c7bd62855d1c38b12741da0651f22a65a9d7649c6fe4dcf0914c9f396345e2ee145c93f7fc80b4c319b","ssdeep":"384:kCUh0n65OzA/t26pLfrYZWnRwBDWIIvs1mE8SWeBmqtlJM:k4n65OzgIAR8dVDFWewqtlJM","tlshash":"b072cf77c799d2e4fd03c2ee9eed3e1086d6ce0a2464538babccae9e4105ce645c15a4","first_seen":"2025-08-18T05:29:08.737564Z","last_seen":"2025-08-18T05:29:08.737564Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3841,"timings":{"blocked":1631,"dns":14,"connect":12,"send":0,"wait":24,"receive":1,"ssl":2115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/f0/1c/9f/f01c9fc24920cbb749ea5248126ae19a/f01c9fc24920cbb749ea5248126ae19a.2.jpg","fqdn":"cdn77-pic.xvideos-cdn.com","domain":"xvideos-cdn.com","tld":"com"},"ip":{"addr":"185.76.9.7","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xvideos.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 03 Oct 2024 00:00:00 GMT","end":"Mon, 03 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"27:E9:05:C0:A5:FC:40:B1:D6:44:DC:D3:39:EE:11:78:2C:E2:F0:78","sha256":"5F:C0:7A:63:35:DB:CB:28:20:1B:40:83:91:40:36:2B:7A:97:63:77:7A:67:2A:45:FF:4E:80:15:A3:03:3C:4A"}}},"request":{"raw":"GET /videos/thumbs169ll/f0/1c/9f/f01c9fc24920cbb749ea5248126ae19a/f01c9fc24920cbb749ea5248126ae19a.2.jpg HTTP/1.1\r\nHost: cdn77-pic.xvideos-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9945\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Fri, 15 Apr 2022 12:35:38 GMT\r\ncache-control: max-age=10368000, public\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBuUwJBgH3x6ckAAwBT3/TFQH3oIc7AAwBj/Q62AH3TnhpAA\r\nx-77-nzt-ray: 5451992da7b8403cdbb9a268fd763409\r\nx-accel-expires: @1763458753\r\nx-accel-date: 1753092628\r\nx-accel-date-max: 1711618746\r\nx-77-cache: HIT\r\nx-77-age: 2402247\r\nserver: CDN77-Turbo\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":9945,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", progressive, precision 8, 352x198, components 3","md5":"72f8a5d7e81717748321a8bfb5f0e80d","sha1":"00a58ec85ac92acc9b8d3584e5f3c02f10a33eb6","sha256":"9e8abe2aad019658d0e7865ee905ef1b6e00d72b4e88227ea4bd62352a268477","sha512":"97adac70d88cc1c5406fb8a6755e8a10d118375e1acc517a9885687e1af8f4acef0c2152fc48543fd7f95afe24f333bb3c5373e0b453a3b541f159169505f93e","ssdeep":"192:vfdUDWaVXWf1CS0qi+ExvHPvOxlvBx+KbBztfgcKYmaOBjqNSdo8H2:3dUDjBLvHO/vPdztfgcvnOBjcSrW","tlshash":"1a22af3a93702721cede7079526087b962863f1ac230ae62f49495248f3dddd3bf9169","first_seen":"2025-07-26T12:58:47.729757Z","last_seen":"2025-11-17T02:01:22.4236Z","times_seen":5,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s9631.chomikuj.pl/Thumbnail.aspx?e=MkuKgTvUyRu9YxDVl_desn9tri8p_ZHeJb6gxMX2KyC44TsC3kPeqlSW9TEdS-mcYHeer7Ax8Eq1zqWCn40x21Y4MXz4doOMwSQmOft25Po\u0026pv=2","fqdn":"s9631.chomikuj.pl","domain":"chomikuj.pl","tld":"pl"},"ip":{"addr":"95.211.227.195","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:56.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.chomikuj.pl","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Dec 2024 00:00:00 GMT","end":"Sat, 10 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6F:5B:B0:9D:FF:F4:B0:50:D0:C8:F6:93:5D:DB:D5:E9:D2:32:A2:E0","sha256":"C0:96:36:8C:66:CD:C3:4A:CD:23:73:40:05:3C:3C:DF:07:4C:34:8D:1F:EE:B7:0E:12:E3:48:4A:E8:90:C0:CE"}}},"request":{"raw":"GET /Thumbnail.aspx?e=MkuKgTvUyRu9YxDVl_desn9tri8p_ZHeJb6gxMX2KyC44TsC3kPeqlSW9TEdS-mcYHeer7Ax8Eq1zqWCn40x21Y4MXz4doOMwSQmOft25Po\u0026pv=2 HTTP/1.1\r\nHost: s9631.chomikuj.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://av4.vid4.uk/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncache-control: private\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://chomikuj.pl/Nothumbnail.aspx\r\nserver: Microsoft-IIS/10.0\r\naccess-control-allow-origin: https://chomikuj.pl\r\nx-aspnet-version: 4.0.30319\r\nx-powered-by: ASP.NET\r\ndate: Mon, 18 Aug 2025 05:27:59 GMT\r\ncontent-length: 153\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":156,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":4015,"timings":{"blocked":961,"dns":11,"connect":32,"send":0,"wait":54,"receive":0,"ssl":2934},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x4.static-chomikuj.pl/res/19ec4a8d2a.png","fqdn":"x4.static-chomikuj.pl","domain":"static-chomikuj.pl","tld":"pl"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:00.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-chomikuj.pl","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Jul 2025 18:29:14 GMT","end":"Sun, 26 Oct 2025 19:27:44 GMT"},"fingerprint":{"sha1":"C5:EC:42:AA:7B:05:E8:C1:39:A4:49:B4:F1:4F:57:D5:25:E1:67:ED","sha256":"B6:65:AC:FB:FE:D0:82:DE:33:57:6F:CD:A0:26:73:41:7A:78:CA:A2:3A:FA:35:C0:AA:60:48:DA:C6:60:82:E2"}}},"request":{"raw":"GET /res/19ec4a8d2a.png HTTP/1.1\r\nHost: x4.static-chomikuj.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://av4.vid4.uk/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:28:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 156\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 28 Jul 2010 15:14:14 GMT\r\netag: \"027e289672ecb1:0\"\r\nx-server: static318\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 2591893\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GzKntzdn9DBM%2BX2AIGQ9ua32CWobmzX3UineIlyP0RJ1MFani%2FNMTbfwqKnVzbfvekwY6%2FEL%2FaAf61Hk9iuae%2BuvABypGqBlz5qqvh4qMs763GI%3D\"}]}\r\ncf-ray: 970f01609fb356b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 120, 8-bit colormap, non-interlaced","md5":"19ec4a8d2a436041316158257dec52c0","sha1":"62af66c7ffb0ee75dcb7936b7d272ba7fa381374","sha256":"be566e0636aa21262e12bd91cc83693c33c8a060db13e454d4f795e20b858fcb","sha512":"590b2daf17a137e85aa1ea87182d441597a153ec7dc6eb45c201b2fdf0cb4bc1fa435fe756b956ba1888d696bab7e9014279eb36d4ba6c8a72149a26e460bcc4","ssdeep":"","tlshash":"33c02bc7fa504d64d60001732994d010d4a3815c0a0383518041842dbbf0b08d0d8383","first_seen":"2025-07-07T18:15:50.261406Z","last_seen":"2026-01-31T10:39:20.921188Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1928,"timings":{"blocked":991,"dns":4,"connect":24,"send":0,"wait":15,"receive":0,"ssl":864},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sorkab.com/wp-content/uploads/2022/05/0001661.jpg","fqdn":"sorkab.com","domain":"sorkab.com","tld":"com"},"ip":{"addr":"172.67.140.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sorkab.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Jul 2025 05:04:20 GMT","end":"Tue, 30 Sep 2025 06:02:59 GMT"},"fingerprint":{"sha1":"16:84:FD:F0:8B:34:EC:ED:34:DC:E3:85:84:D6:61:18:B4:5E:4B:EA","sha256":"86:34:DF:06:FE:6E:41:05:4E:3F:F6:C9:BA:1A:19:A9:C1:73:4C:60:96:57:81:73:EC:10:89:7B:FF:36:47:0B"}}},"request":{"raw":"GET /wp-content/uploads/2022/05/0001661.jpg HTTP/1.1\r\nHost: sorkab.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 35128\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 05 Aug 2026 22:46:04 GMT\r\nlast-modified: Wed, 22 Feb 2023 06:15:13 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: User-Agent,Accept-Encoding,Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: geolocation=(), midi=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), payment=(), fullscreen=(self)\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 548487\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wEh5ZUlMGRJGJn3WkZqKsy9ayUEpPT9RfPEefydPp7Hmi1kT3b3HESV2URZleztjI2vTwZ3cDQlW0sZoR5GTJuQaFDYjVThk\"}]}\r\ncf-ray: 970f01361aa5b4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":35128,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x360, components 3","md5":"1015806a6840deb00f90c39e9c444d6f","sha1":"8c2a5ddadf6c4b4df6db0acfbacad30c2a42eed4","sha256":"b34f479bcfc4be827bcd7b72ef4a52818fb27f4e0a6023d84c9b0c650770c692","sha512":"b5a30f351639540f2eca385a654ae31067397d670fbd68c779a6c99e013320df885ff09743540b446eaf728b317efc7d2d4f8c6e1ac7f33dce6642f1fe3a90a0","ssdeep":"768:VwxmpN3mSTWFHRmwGo0fAtxMA8TCwFg5Vd62pkMi:VwxmpN3XJ3lfAD1CrgXJM","tlshash":"65f2f1b4e8594829fc34d1b0d7fb5f3aae41ad538982d068173049544ef8edcf369a29","first_seen":"2024-08-20T00:26:21.171616Z","last_seen":"2025-09-09T18:47:24.489351Z","times_seen":20,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i1.wp.com/666529.xyz/images/2024/11/16/60c2c39840d96eeffaaa88ae28766ad0.jpg","fqdn":"i1.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 Aug 2025 19:44:50 GMT","end":"Tue, 04 Nov 2025 19:44:49 GMT"},"fingerprint":{"sha1":"E3:33:F6:CB:1D:54:80:51:6E:94:B6:72:D6:8D:22:88:EC:CF:5C:C2","sha256":"A2:6F:1C:4D:B8:5F:EC:D5:D1:31:F6:0A:A1:D3:C4:05:9B:6A:16:37:15:5E:C6:BE:AE:95:93:6E:79:6F:7D:8E"}}},"request":{"raw":"GET /666529.xyz/images/2024/11/16/60c2c39840d96eeffaaa88ae28766ad0.jpg HTTP/1.1\r\nHost: i1.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:59 GMT\r\ncontent-type: text/html\r\ncontent-length: 548\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 2\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":3413,"timings":{"blocked":1012,"dns":15,"connect":65,"send":0,"wait":9,"receive":0,"ssl":2290},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtgallery.net/favicon.ico","fqdn":"rtgallery.net","domain":"rtgallery.net","tld":"net"},"ip":{"addr":"5.63.144.84","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtgallery.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 07:06:55 GMT","end":"Mon, 20 Oct 2025 07:06:54 GMT"},"fingerprint":{"sha1":"FE:48:A0:70:A8:E4:6F:86:37:1B:38:AD:2B:76:29:45:09:3A:0B:05","sha256":"B9:B5:A1:EA:CE:3C:39:D6:3A:87:80:27:9A:0A:9A:C1:EF:44:C4:3C:E8:AA:2B:B4:61:7D:01:73:8B:B3:3B:1F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rtgallery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 18 Aug 2025 05:28:03 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 894\r\nLast-Modified: Sat, 03 Jun 2017 05:36:38 GMT\r\nConnection: keep-alive\r\nETag: \"59324ae6-37e\"\r\nCache-Control: private, max-age=600, must-revalidate\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":894,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 24 bits/pixel","md5":"ecfa03337847c3b30c7c0c5c4bbb5c5f","sha1":"55457dd13b92fd876c253e3a74d46aec83429441","sha256":"903d49ac2a65b3e7452534fc61790a686d1be8b936e8e6bcd9f49b1739a746f9","sha512":"e05def7385dec8c99241ec00e4bf6fcfa023c9d2d0ea8a26d35f83831df14f4075c6d6fc8121d63de1387869a354af6664b6fe33101342709d0e4a7dd8f25d15","ssdeep":"","tlshash":"0b112b4aa11538a1d4f55575261a0ff95491c30ecdbed7d0c4f8f4f6e922924c738328","first_seen":"2024-05-20T05:01:42Z","last_seen":"2026-05-24T13:00:54.435824Z","times_seen":411,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":91,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"karlikporno.com/favicon.ico","fqdn":"karlikporno.com","domain":"karlikporno.com","tld":"com"},"ip":{"addr":"51.83.228.93","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"karlikporno.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 23:57:53 GMT","end":"Wed, 22 Oct 2025 23:57:52 GMT"},"fingerprint":{"sha1":"1D:76:80:D4:59:D7:D0:47:67:0D:50:17:46:25:04:B4:AF:93:9A:D3","sha256":"07:36:AF:B4:3B:3D:3B:75:CA:F5:3B:EF:CA:FD:92:54:82:CC:7C:3D:99:D6:E9:8E:ED:6E:D2:E1:05:95:D3:5E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: karlikporno.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:28:02 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 1150\r\nlast-modified: Sun, 04 Jun 2023 16:18:44 GMT\r\netag: \"647cb964-47e\"\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"1fda38c4a28a100a646c42d77d4ae378","sha1":"041431aaf5f44c884c338a92ca6db4303f62dd13","sha256":"ddac11f49ad82549e83839faa2f10c0056db30188e74ddfe8e18a39c40809c82","sha512":"7fbe7553dbc28fbb971922dca46df52a277bd78701127b5210e3db7747c91c86da1b826fb6717fd3840c2565df53bc8f289ec0de5eebfba10120ea9562b9482f","ssdeep":"","tlshash":"1b211ac3a262c9c8ca9b1675ac0c5b8a1544cc0976f0591e60b4b346a83932c7efad6c","first_seen":"2025-03-10T03:32:23.734042Z","last_seen":"2025-08-18T05:29:08.742709Z","times_seen":3,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filmesporno.xxx/favicon.ico","fqdn":"filmesporno.xxx","domain":"filmesporno.xxx","tld":"xxx"},"ip":{"addr":"192.124.249.88","port":443,"asn":30148,"as":"SUCURI-SEC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filmesporno.xxx","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Wed, 30 Jul 2025 20:59:30 GMT","end":"Tue, 28 Oct 2025 20:59:30 GMT"},"fingerprint":{"sha1":"9F:0A:DC:2C:AE:A5:6F:0A:72:D8:E0:EC:8B:56:FA:63:9E:11:75:96","sha256":"BE:CE:C0:16:DD:13:2F:73:57:AF:80:58:AC:85:C4:5F:4A:E8:74:70:62:8B:CA:AE:99:DD:77:9D:5E:D2:40:16"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: filmesporno.xxx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Mon, 18 Aug 2025 05:25:10 GMT\r\ncontent-type: text/html\r\nx-sucuri-id: 19032\r\nx-sucuri-block: BLACK02\r\nserver: Sucuri/Cloudproxy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Sucuri","description":"Sucuri is a cybersecurity company that provides website security solutions and services.","website":"https://sucuri.net/","common_platform_enumeration":"","icon":"sucuri.svg","categories":["CDN","Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.kwai.com/favicon.ico","fqdn":"www.kwai.com","domain":"kwai.com","tld":"com"},"ip":{"addr":"95.101.11.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kwai.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 29 Jul 2025 08:23:35 GMT","end":"Sun, 30 Aug 2026 08:23:34 GMT"},"fingerprint":{"sha1":"4A:A1:45:2B:02:C8:86:65:84:02:D2:2B:EF:71:1F:70:E4:44:DF:B5","sha256":"CF:B9:73:AE:76:85:CD:63:FB:EE:A2:9A:2D:E7:B0:B4:2C:2B:CB:EB:4D:79:36:A4:4D:6C:98:85:76:5E:F4:DC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.kwai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/x-icon\r\ncontent-length: 2006\r\nlast-modified: Mon, 18 Aug 2025 03:07:15 GMT\r\netag: \"68a298e3-7d6\"\r\ncontent-security-policy-report-only: default-src 'self' 'unsafe-inline' 'unsafe-eval' *.mythad.com https://*.kwai-pro.com http://*.kwai-pro.com http://*.kwai.net https://*.kwai.net *.kwai.com *.snackvideo.in *.kwai.me *.kwai.app *.kwimgs.com *.yximgs.com *.cloudfront.net *.kuaishou.com https://*.gifshow.com http://*.gifshow.com https://log-sdk.ksapisrv.com https://www.googletagmanager.com https://gifshow-static.download.ks-cdn.com https://static3.avast.com https://translate.google.com https://www.gstatic.com https://fonts.gstatic.com https://connect.facebook.net www.google-analytics.com hm.baidu.com m.snackvideo.com http://*.ap4r.com https://*.ap4r.com https://*.typekit.net http://*.typekit.net ak-sgp-pic.snackvideo.in tx-sgp-pic.snackvideo.in ws-sgp-pic.snackvideo.in g-us-kampic.golden49.net g-us-kamcdn.golden49.net m.kwai.com sentry.kuaishou.com https://cdn.jsdelivr.net https://at.alicdn.com https://www.facebook.com https://snap.licdn.com https://px.ads.linkedin.com https://cdn.linkedin.oribi.io https://www.linkedin.com https://*.google.com https://*.google-analytics.com https://*.doubleclick.net asset: data: blob: android-webview-video-poster: ikwai: chrome-extension:;img-src http: https: asset: data: blob: android-webview-video-poster: ikwai: chrome-extension:;connect-src http: https: asset: data: blob: android-webview-video-poster: ikwai: chrome-extension:;report-uri https://csplog.kwai-pro.com/log/kwai/wwwkwai\r\naccept-ranges: bytes\r\ndate: Mon, 18 Aug 2025 05:28:04 GMT\r\nalt-svc: h3=\":443\"; ma=93600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2006,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"8598787bb964772e7c58335630cd2184","sha1":"43bba31482ccfacc5e94cb05f7174ccfb22e1917","sha256":"45526cf4f38253c14eec86886eabcff170c500d7bbe04cda7e24db1a003fe4f3","sha512":"9755e5fbb5248ee9d09f0c32ac0f620829f61bdaf7d74fc6a31a45c60292e07e1241d7c64996474aac54ac2b326963b8ee6adfa61ab942b78264741e5862168d","ssdeep":"","tlshash":"d641e8ae8e969c4fa5c060169238c384b9b51c87e1447de350026d8ee06be98771b1eb","first_seen":"2025-07-25T08:09:31.5089Z","last_seen":"2026-05-24T12:50:40.800322Z","times_seen":458,"resource_available":false,"data":null}},"time_used":1418,"timings":{"blocked":-1,"dns":35,"connect":27,"send":0,"wait":204,"receive":0,"ssl":1113},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sexmutant.com/preview/13-jahre-nacktes-m-dchen-ficken.jpg","fqdn":"www.sexmutant.com","domain":"sexmutant.com","tld":"com"},"ip":{"addr":"172.67.195.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sexmutant.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 11:11:27 GMT","end":"Thu, 25 Sep 2025 12:08:41 GMT"},"fingerprint":{"sha1":"71:D1:5C:7E:C4:20:97:59:7D:06:19:DF:82:61:AA:A7:C6:7A:FD:AC","sha256":"31:38:43:4B:F1:D7:31:D9:54:54:3B:8B:CA:DA:CC:DE:69:5C:86:FE:BD:FC:52:AB:9D:FC:D2:AC:87:D9:81:6E"}}},"request":{"raw":"GET /preview/13-jahre-nacktes-m-dchen-ficken.jpg HTTP/1.1\r\nHost: www.sexmutant.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25113\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 28 Aug 2025 21:37:20 GMT\r\nlast-modified: Thu, 13 May 2021 15:55:05 GMT\r\nx-response-time: 0.067978\r\nx-status: 0.000 HIT\r\nage: 997437\r\ncache-control: max-age=922166\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Rlp8cYp71Mzzpr6uKWhtkMHVQnq0KDekA8vwAZhbv4TryBDLXxtvt3gq7NXcBh9PeWkaSt77eIPzr8TrS2SNDg5VO59yhOn0x04I6WerA%3D%3D\"}]}\r\ncf-ray: 970f0136fb2b56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25113,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"\"13 Jahre Nacktes M Dchen Ficken\" saved from https://www.sexmutant.com\", baseline, precision 8, 564x317, components 3","md5":"2c28afd3ab7bfb7a17e17cd36707d8ed","sha1":"e131af29fd1e123beb17b98008c4d213952fb5c2","sha256":"2fabfdbfec9a24bb19daa2b6824190145e282fbef8304aa1440ac9af79db4af9","sha512":"4e07256cf9540437bf831d7b3398ff47f6f3671d196705db44f96ea01bedd094340ba4a6536d7e4eb2e61c1de12e9f53290a00515113b178ca1fd71ae8342aa2","ssdeep":"384:3ZKj90y01skhbuMI2d67fw7t6z8RU3MZuTqNpURutAu/MnnVYNSMsEU:3Zuyd1skBuMzdbt6D3MZu2vUY/MnVozU","tlshash":"58b2e1e2cb56ed347ed9857fa126c59926e0ba27c5ca326b006e8f177f1032d3505885","first_seen":"2025-03-10T03:32:23.668371Z","last_seen":"2026-04-12T19:29:51.659288Z","times_seen":46,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sorkab.com/wp-content/uploads/2022/01/0000466.jpg","fqdn":"sorkab.com","domain":"sorkab.com","tld":"com"},"ip":{"addr":"172.67.140.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sorkab.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Jul 2025 05:04:20 GMT","end":"Tue, 30 Sep 2025 06:02:59 GMT"},"fingerprint":{"sha1":"16:84:FD:F0:8B:34:EC:ED:34:DC:E3:85:84:D6:61:18:B4:5E:4B:EA","sha256":"86:34:DF:06:FE:6E:41:05:4E:3F:F6:C9:BA:1A:19:A9:C1:73:4C:60:96:57:81:73:EC:10:89:7B:FF:36:47:0B"}}},"request":{"raw":"GET /wp-content/uploads/2022/01/0000466.jpg HTTP/1.1\r\nHost: sorkab.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27757\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 29 Jul 2026 22:45:26 GMT\r\nlast-modified: Wed, 02 Mar 2022 05:56:29 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: User-Agent,Accept-Encoding,Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: geolocation=(), midi=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), payment=(), fullscreen=(self)\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1665506\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SXZp5FtacXfL8clf7N7y%2FgBa3o3VdZEs8bD2KrZ15Jyfqr6tznlQ0LcuLY%2Fx%2F%2Ffhp4onGuVAcrbu3YTQ901XQ1qxMOicXajV\"}]}\r\ncf-ray: 970f0139bdeab4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27757,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 640x360, components 3","md5":"3bfafe6ee84edf9f7d73ff1aa98f5362","sha1":"53335fade2053e26a9d56af9802eacc5339c3c71","sha256":"472e4a3c05bfdc31aeaf216ee9eab2ee3edb2e7f2dc83286da6fa3777790f340","sha512":"10e6b46a0bd8d8bafbee51c46725212e56b69b991fd1ab80e2cd91fd5596e9c298c5490efbdf92691a9849b4cbbeddeaf70bd1d66495244cc7a0bfe1f4f1eded","ssdeep":"768:53lAoMgsHrJtdW7qbJ+H2NyGg89s2SZ47iB627:5GJgWJtdzlNyETp27","tlshash":"7fc2e1c718639ec3d1729575d6a485732ebc5ffe6248d84b11640f382c20a9e187aefe","first_seen":"2024-05-28T23:54:18Z","last_seen":"2025-09-01T12:19:55.685037Z","times_seen":22,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images-z.embed-player.space/15/08/15/Zs25N02El2-007.jpg","fqdn":"images-z.embed-player.space","domain":"embed-player.space","tld":"space"},"ip":{"addr":"37.221.208.213","port":443,"asn":41075,"as":"ATW Internet Kft.","country":"Hungary","country_code":"HU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images-z.embed-player.space","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Jun 2025 21:23:08 GMT","end":"Thu, 11 Sep 2025 21:23:07 GMT"},"fingerprint":{"sha1":"36:44:B2:0E:4E:28:EB:FC:0D:CE:C3:45:01:68:34:9D:C9:0D:99:E6","sha256":"63:EC:4F:9A:C9:98:1D:17:17:A4:F3:A9:23:B9:BA:33:82:7E:F4:F9:7C:CF:FF:65:FB:6E:FB:28:04:AC:93:87"}}},"request":{"raw":"GET /15/08/15/Zs25N02El2-007.jpg HTTP/1.1\r\nHost: images-z.embed-player.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 18 Aug 2025 05:27:59 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 20608\r\nConnection: keep-alive\r\nLast-Modified: Thu, 13 Mar 2025 20:15:03 GMT\r\nETag: \"67d33cc7-5080\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20608,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc58.35.100\", baseline, precision 8, 640x360, components 3","md5":"4d37b76af87696216225765d7d264975","sha1":"4ae9a98726194f064d51da71e19b0db07c3d9b0b","sha256":"5a751fd6f4bf8e9b3c622294fcd5df8e998deabd6130b3b217a866820a1d3ca2","sha512":"cc9b14ba517e6b6752567f71ed94898caffbf38eb5bd2cf1f16e930cb173732855c945c8e2bde430f586dd0598e4d27e7be18cd3560c9bb5d676cef72d2a45ad","ssdeep":"384:I8iJS0yphV4I13aaikl5dCEdUMuehLEHdst4OlliR3iYrq:l0uhlqaPl5dCiNhLE9st4OlliRyQq","tlshash":"cb92c01f392f96357be4c82baa25c646b55cab40cc584b157d2d883dcd061f97aaca03","first_seen":"2025-06-05T17:56:20.444989Z","last_seen":"2026-01-01T01:22:41.310209Z","times_seen":7,"resource_available":false,"data":null}},"time_used":4133,"timings":{"blocked":1006,"dns":30,"connect":48,"send":0,"wait":172,"receive":1,"ssl":2846},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filmesporno.xxx/wp-content/uploads/2022/03/incesto-entre-hermana-y-hermano.jpg","fqdn":"filmesporno.xxx","domain":"filmesporno.xxx","tld":"xxx"},"ip":{"addr":"192.124.249.88","port":443,"asn":30148,"as":"SUCURI-SEC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:59.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filmesporno.xxx","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Wed, 30 Jul 2025 20:59:30 GMT","end":"Tue, 28 Oct 2025 20:59:30 GMT"},"fingerprint":{"sha1":"9F:0A:DC:2C:AE:A5:6F:0A:72:D8:E0:EC:8B:56:FA:63:9E:11:75:96","sha256":"BE:CE:C0:16:DD:13:2F:73:57:AF:80:58:AC:85:C4:5F:4A:E8:74:70:62:8B:CA:AE:99:DD:77:9D:5E:D2:40:16"}}},"request":{"raw":"GET /wp-content/uploads/2022/03/incesto-entre-hermana-y-hermano.jpg HTTP/1.1\r\nHost: filmesporno.xxx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Mon, 18 Aug 2025 05:25:07 GMT\r\ncontent-type: text/html\r\nx-sucuri-id: 19032\r\nx-sucuri-block: BLACK02\r\nserver: Sucuri/Cloudproxy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Sucuri","description":"Sucuri is a cybersecurity company that provides website security solutions and services.","website":"https://sucuri.net/","common_platform_enumeration":"","icon":"sucuri.svg","categories":["CDN","Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xvideosrei.com/favicon.ico","fqdn":"xvideosrei.com","domain":"xvideosrei.com","tld":"com"},"ip":{"addr":"194.102.104.213","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xvideosrei.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 12:24:51 GMT","end":"Tue, 28 Oct 2025 12:24:50 GMT"},"fingerprint":{"sha1":"A0:30:D4:FA:D2:DC:B3:94:F2:3B:8A:C2:5F:7C:B1:DA:5C:3D:4F:12","sha256":"04:44:9F:44:21:F8:A8:56:32:CF:41:4C:93:54:3A:6E:A7:A0:39:F9:96:6D:E7:DB:0B:82:E4:63:3F:7A:BF:19"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xvideosrei.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: openresty\r\ndate: Mon, 18 Aug 2025 05:28:02 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nversion: MS25061701\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-store, no-cache, must-revalidate\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sorkab.com/wp-content/uploads/2023/06/0003962.jpg","fqdn":"sorkab.com","domain":"sorkab.com","tld":"com"},"ip":{"addr":"172.67.140.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sorkab.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Jul 2025 05:04:20 GMT","end":"Tue, 30 Sep 2025 06:02:59 GMT"},"fingerprint":{"sha1":"16:84:FD:F0:8B:34:EC:ED:34:DC:E3:85:84:D6:61:18:B4:5E:4B:EA","sha256":"86:34:DF:06:FE:6E:41:05:4E:3F:F6:C9:BA:1A:19:A9:C1:73:4C:60:96:57:81:73:EC:10:89:7B:FF:36:47:0B"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/0003962.jpg HTTP/1.1\r\nHost: sorkab.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 34244\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 29 Jul 2026 22:45:14 GMT\r\nlast-modified: Sat, 01 Jul 2023 02:50:42 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: User-Agent,Accept-Encoding,Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: geolocation=(), midi=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), payment=(), fullscreen=(self)\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1665738\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jj8Cf1ivajN2yeUuFCUHmeelfUEBF%2BE28p2b16aUiQIR6Q5na8yVH1IQPfbInm6za4caw5HmCNyldcj92jGvCVrzviJtOFnQ\"}]}\r\ncf-ray: 970f01366aecb4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34244,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x360, components 3","md5":"a4db4bcd97499fcf5fc5fb29ef58d5a5","sha1":"719798cc5447c636e6abbfe792e40632793b480e","sha256":"911e0f0a47ec7e3f1d9dafc0f6124146fdfb97455de2f37bd42bb506bf5bdc74","sha512":"6dbeba8a2f9ceeea51e7627b564584f6c24e050be6e7b5c1ab2ceae3e00d7eaac09305a0b9f2ac34c92e1ea7780dfba0119cee3cc0a773296d5576e5e40d23d7","ssdeep":"768:LjBDUgiF9lvrRVXQ+/z5V5FVuwPtvJd4En4pbtdETCSx:vBDoRQ+b5vFIWtH4En4pgN","tlshash":"adf2f12cc9057f1108a0d839a7e5ae66731593bf5812fe9b9e76710ff9d60e1c048e9c","first_seen":"2024-05-09T19:42:20Z","last_seen":"2025-11-11T21:00:43.609205Z","times_seen":75,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/ext/pre_6603839535.jpg","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"169.150.247.40","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Jul 2025 06:11:45 GMT","end":"Sun, 12 Oct 2025 06:11:44 GMT"},"fingerprint":{"sha1":"D7:A2:44:26:5F:AE:CA:43:04:92:49:73:C4:48:A3:61:F6:F2:C8:A5","sha256":"A3:32:41:00:16:DA:A0:92:E3:0D:0F:F4:C9:0A:B8:B9:22:3B:50:DE:DF:7E:24:13:1B:65:07:8D:1B:E8:77:80"}}},"request":{"raw":"GET /ext/pre_6603839535.jpg HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13216\r\nserver: BunnyCDN-DE1-1075\r\ncdn-pullzone: 4336709\r\ncdn-uid: 0f7047b6-2b70-4588-b55a-df9b2a15bf91\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\netag: \"6668ea52-33a0\"\r\nlast-modified: Wed, 12 Jun 2024 00:22:42 GMT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/14/2025 09:12:27\r\ncdn-edgestorageid: 1075\r\ncdn-requestid: 57eb2fbe1ad4c5da4678f1d8c765aae8\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":13216,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"75fc694af7b679c93ae6a210896872a0","sha1":"1d13e808a925663273b31d9adf6d9353652dd3e8","sha256":"6bcb3d7cc697ad9c26d06fe476ca02f5370123f400858989e83dc2260aee7b3f","sha512":"3db34c7ace587ef2f1e22c3942a9a65b1392ff01c6e99e885b072b1e66ba4f7ac78dad1591b71c422d60ca2a5fc22a42e109f3b39636cc1d13d44d5a4c515ed3","ssdeep":"384:alcMSDCrzbhuiHQaYGWbQZwqzxNBlrg6brYJDt:agD2dtG/MZBTgz","tlshash":"8652b0e09f689d01dd9c857895a2a3bff472cfc0e153033a8840154a7b752eb8770c79","first_seen":"2024-12-08T19:40:55.553456Z","last_seen":"2026-04-03T22:52:06.86777Z","times_seen":98,"resource_available":false,"data":null}},"time_used":3004,"timings":{"blocked":1188,"dns":12,"connect":40,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornohub24.ru/favicon.ico","fqdn":"pornohub24.ru","domain":"pornohub24.ru","tld":"ru"},"ip":{"addr":"193.163.7.2","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:02.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pornohub24.ru","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 00:24:45 GMT","end":"Tue, 28 Oct 2025 00:24:44 GMT"},"fingerprint":{"sha1":"68:6C:DD:1D:8A:F3:B0:03:44:4D:D6:7E:F7:99:A4:DF:22:89:5C:2A","sha256":"17:0E:BB:C2:44:7B:CB:C3:34:E6:26:D2:69:F3:29:E4:53:0F:30:45:CC:CB:E3:19:52:4B:AC:0F:0F:9A:E9:8E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pornohub24.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx/1.24.0\r\ndate: Mon, 18 Aug 2025 05:28:02 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thumbs.dreamstime.com/b/two-lesbian-mothers-lying-their-daughter-couch-home-girls-talk-laugh-girl-lies-her-lap-167647164.jpg","fqdn":"thumbs.dreamstime.com","domain":"dreamstime.com","tld":"com"},"ip":{"addr":"151.101.1.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thumbs.dreamstime.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Jun 2025 11:18:52 GMT","end":"Sat, 27 Sep 2025 11:18:51 GMT"},"fingerprint":{"sha1":"40:3F:5B:DC:08:EF:CA:BC:2F:89:E5:D1:79:0A:7F:45:E2:96:6A:01","sha256":"FC:41:3B:91:88:4E:F1:D2:32:AD:71:AE:C5:57:A0:EF:33:2D:D2:9A:C8:65:39:44:49:20:F2:EF:AF:C4:A9:C0"}}},"request":{"raw":"GET /b/two-lesbian-mothers-lying-their-daughter-couch-home-girls-talk-laugh-girl-lies-her-lap-167647164.jpg HTTP/1.1\r\nHost: thumbs.dreamstime.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\netag: \"pCgTbXBBUcIh0FUHh4DV33uJV0PIapWy7xafS++foow\"\r\nfastly-io-served-by: vpop-kiad7010212\r\nfastly-stats: io=1\r\nserver: nginx\r\nstrict-transport-security: max-age=63072000\r\nvia: 1.1 varnish, 1.1 varnish\r\ncache-control: max-age=31536000, public\r\nvcl-version: 33\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Mon, 18 Aug 2025 05:27:54 GMT\r\nage: 2396838\r\nx-served-by: cache-iad-kcgs7200071-IAD, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 10679, 1\r\nx-timer: S1755494875.887789,VS0,VE1\r\nvary: Accept\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 20560\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":20560,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ccd39c20e53d982349d0d7c7599f974a","sha1":"249f39c0c3be602f64d3f1e8333597db6e8cb85c","sha256":"8b8036174abb72c79c42f27adcd1ed1883e956ed2f35b734e6fb81dd938c84f0","sha512":"1505d6d046424dcf01a19ba66c10c031e80bcbb60edb4aa211b2698f013dc6fb2264d9d8e93973baec4065ed295fc2d042760a0935d18b0872a7efce209e4c57","ssdeep":"384:i0NU/faR27ghrgnYbQffKBQv/DQPlvwdmdsfwB0fJ+4:i0NUnPYcYUfiav/ArdBuJd","tlshash":"5892f18831eb3fc2eb44dc7f1cf2119dbd8504a72a746889ae9f3a5390d900edd5b129","first_seen":"2025-06-09T22:01:32.693343Z","last_seen":"2025-12-02T18:54:01.117144Z","times_seen":12,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":8,"connect":17,"send":0,"wait":16,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lsbzytp.com:3519/upload/vod/20231016-1/18ec264cef175739ef1825f5a4a939e7.jpg","fqdn":"lsbzytp.com","domain":"lsbzytp.com","tld":"com"},"ip":{"addr":"173.249.235.62","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20231016-1/18ec264cef175739ef1825f5a4a939e7.jpg HTTP/1.1\r\nHost: lsbzytp.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 101575\r\nlast-modified: Wed, 22 Nov 2023 12:54:15 GMT\r\nvary: Accept-Encoding\r\netag: \"655df9f7-18cc7\"\r\nexpires: Thu, 11 Sep 2025 10:21:31 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":101575,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 720x1280, components 3","md5":"3822bd23692b35e0f927892954cdd999","sha1":"f797b2b711c7e9238e5e196171186bb970635a49","sha256":"b6e7ed7df61298f533c8b648a17495b24857b1ff78ade7f0c38a593de9c13c3c","sha512":"e115da8b48ab79cba871b8d0e47d74d142a79c8506ce26912ceb042b43b177167258263ff0470ea7d94ea508e2e517e142ebaceeff03c0eab7c63a3ea46cc936","ssdeep":"1536:7dHcCvgg2fYR8RSouqIHn6rS347Q5NC6mugNUuBMc4LHJkwR3Wq:7dHjvcARoSoAH6rEgQ5F+NUyP4rJ/","tlshash":"99a312d05efb0da5fb25576a62f6a3b83509f2cd044649e503421c9b7f88823239da9a","first_seen":"2025-08-18T05:29:08.751598Z","last_seen":"2026-04-03T22:52:06.942836Z","times_seen":79,"resource_available":false,"data":null}},"time_used":1903,"timings":{"blocked":992,"dns":9,"connect":157,"send":0,"wait":517,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.mds.yandex.net/get-vthumb/1623417/d39e4ef332ac4ed9d866dc769cc5012b/564x318_1","fqdn":"avatars.mds.yandex.net","domain":"yandex.net","tld":"net"},"ip":{"addr":"87.250.247.183","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:56.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.avatars.mds.yandex.net","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 03 Apr 2025 14:25:03 GMT","end":"Wed, 01 Oct 2025 20:59:59 GMT"},"fingerprint":{"sha1":"E6:CA:01:EF:27:C5:A7:B7:36:66:BC:E5:64:C2:63:12:FB:3C:8F:91","sha256":"F3:AE:1B:55:A4:70:1A:43:35:87:50:83:E5:F5:ED:99:44:E6:CE:26:D5:B1:CC:24:A7:21:CF:AC:A8:E3:2E:24"}}},"request":{"raw":"GET /get-vthumb/1623417/d39e4ef332ac4ed9d866dc769cc5012b/564x318_1 HTTP/1.1\r\nHost: avatars.mds.yandex.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 35360\r\nlast-modified: Tue, 28 Jan 2025 22:21:11 GMT\r\ncache-control: max-age=604800,immutable\r\nx-request-id: 25cab102d85c2629\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 600, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nreport-to: {\"group\": \"network-errors\", \"max_age\": 600, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/s3_nel?datacenter=KLG\"}]}\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35360,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 564x318, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e81fad81402820881e53c5d7b1b9ac87","sha1":"dc4f94153ac9164a1ad8e8ddaa5d89bde23f08d5","sha256":"ecc9d605ff5249d4ce0e135e18b974d9b0a7b17d514a2bdae517e977eddd81e6","sha512":"7438b24e5cef3be2b25ddcb16dd6a06fa2c38dfe5ef29f0261749a9faea870e94a9870173d088cc75835657a2340a6dd5610d2c826b40291958549ed38e523e8","ssdeep":"768:429vmwooZ2pDC23MW20yu0IHNDpGN95YEvGhkdVg9x+y5wyD:V9vIB80y4pjE+kd69r5bD","tlshash":"74f2f11a354632dfd4764964a9f33a43f3ac477cb1d2a859cdcac61fc878180a2365bc","first_seen":"2025-08-18T05:29:08.753545Z","last_seen":"2025-08-18T05:29:08.753545Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2463,"timings":{"blocked":2338,"dns":0,"connect":0,"send":0,"wait":97,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdne-pics.youjizz.com/2/2/a/5/e/22a5eb97d246605340faea59307e99f71732977966-94.jpg","fqdn":"cdne-pics.youjizz.com","domain":"youjizz.com","tld":"com"},"ip":{"addr":"64.210.135.113","port":443,"asn":30361,"as":"SWIFTWILL2","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:56.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.youjizz.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Dec 2024 00:00:00 GMT","end":"Tue, 06 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:A8:A8:35:DB:C2:7E:35:C3:7E:2A:75:C8:C8:D8:C6:09:86:45:D7","sha256":"B8:B2:2C:F3:DA:14:43:7C:79:64:F3:2C:36:B2:0A:52:EF:A7:AE:C8:FF:5D:57:E2:D1:26:9D:FD:B8:D7:77:B9"}}},"request":{"raw":"GET /2/2/a/5/e/22a5eb97d246605340faea59307e99f71732977966-94.jpg HTTP/1.1\r\nHost: cdne-pics.youjizz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17209\r\nlast-modified: Sun, 01 Dec 2024 01:02:02 GMT\r\netag: \"4339-6282afad96577\"\r\nexpires: Sat, 21 Jun 2025 02:30:26 GMT\r\ncache-control: max-age=10750019\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,OPTIONS\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\naccept-ranges: bytes\r\nx-cdn-diag: ams5-6249-1-4070668-h-0-0---;7619-19-1031166----0-0-1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17209,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 23407x23408, segment length 16, comment: \"Lavc58.106.100\", baseline, precision 8, 308x232, components 3","md5":"d6d56102fcc964603b1874471cf75bb2","sha1":"5c6787680555f2220777bad2724a6e75aa23a38a","sha256":"a0aa3d8d3745df5369f524fc4bab355b013b063c982eac0d91cbdd5d59c4a3c8","sha512":"d425bff64a628d2ae34e68f36c4b59c5ea088b22069a490672187753a7b8e77e4ddcf9bdc53b147de3e9dee78a14cb219e3f99ec901cb2fc0ed01b792b7d0401","ssdeep":"384:AA8fhhRvm+WptMHwP0LbeOaXHncLzEPacs3MejRpg4G84RygueC:A/s33MHIo/a3c/gCljTq14guF","tlshash":"3172c0a8046c9867c7186267cb588b400d888af8667d65df30434efb287cc5f9756fe4","first_seen":"2025-06-12T07:11:08.955168Z","last_seen":"2026-01-15T05:39:21.00725Z","times_seen":48,"resource_available":false,"data":null}},"time_used":4637,"timings":{"blocked":2274,"dns":5,"connect":17,"send":0,"wait":22,"receive":18,"ssl":2294},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20250710-1/0d4fd127713fb1a56787d553e8f29ac0.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.62","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20250710-1/0d4fd127713fb1a56787d553e8f29ac0.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 81049\r\nlast-modified: Thu, 10 Jul 2025 02:47:15 GMT\r\nvary: Accept-Encoding\r\netag: \"686f29b3-13c99\"\r\nexpires: Tue, 16 Sep 2025 16:53:43 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":81049,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 500x277, components 3","md5":"0010e580e5ddf3e2f920f627d9e7bc58","sha1":"34fe8f44bd43e8ba6956adfc5857a905f5f6a3f9","sha256":"d148dfc483c57f4ad3a89ee2cf58be274c85226849405b2c2d337d06d4c6deea","sha512":"fc84945bf628d076a5989c83f995b9b09ea1e2cb773a267a18a6797fd370709351825a1bf292c39439b8448e41337457e2754a8bd8da4376c30a13b99014acd3","ssdeep":"1536:RBzdyVDfAbzwf08dgrjikOUTHpJqyjAwd0yi653f07SPmK/Omvgunt+Mi:ZOIT8gHJNHO8A00yi653aSPp/ORunt9i","tlshash":"9b83028ac903fff4e98055be34e1ff99c1c7f5e2ead615b918513944d063ed50b22a84","first_seen":"2025-08-14T15:51:37.585213Z","last_seen":"2025-10-05T20:34:20.686759Z","times_seen":15,"resource_available":false,"data":null}},"time_used":2952,"timings":{"blocked":343,"dns":1,"connect":146,"send":0,"wait":155,"receive":7,"ssl":2285},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.com/upload/vod/20241010-10/74817bbf9fcf1e46f6d2e4bb4adfcfd1.png","fqdn":"www.9188porn.com","domain":"9188porn.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9188porn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 Aug 2025 03:09:41 GMT","end":"Tue, 04 Nov 2025 04:07:22 GMT"},"fingerprint":{"sha1":"EB:B8:01:44:FF:51:3D:14:69:83:0A:39:AA:EF:CC:38:7E:50:BE:11","sha256":"05:E5:3A:05:E1:05:99:09:0C:DA:48:BA:A6:C6:72:62:2B:A1:11:85:17:AA:84:E0:C6:E1:0F:2E:68:63:E2:BD"}}},"request":{"raw":"GET /upload/vod/20241010-10/74817bbf9fcf1e46f6d2e4bb4adfcfd1.png HTTP/1.1\r\nHost: www.9188porn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Mon, 18 Aug 2025 05:27:55 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FZasgYE4J5EFB0CXCvhDa6AemeXEMlLBBu8%2BAosL1meCi1O6QScK6iQI5Azkqpp71eOgF4l%2F2aC%2BynP083ep6DG%2FKMqCOdjYCt1WRL7E\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 970f0138cf940b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241010-11/ab97a51f53eec30416d347d20dc13716.png","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:59.908Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241010-11/ab97a51f53eec30416d347d20dc13716.png HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-18","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brasileiro.wtf/favicon.ico","fqdn":"brasileiro.wtf","domain":"brasileiro.wtf","tld":"wtf"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brasileiro.wtf","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 07:47:32 GMT","end":"Fri, 31 Oct 2025 08:44:42 GMT"},"fingerprint":{"sha1":"03:ED:31:3C:60:84:57:5C:65:7C:AD:51:B9:A7:2A:5F:2B:C7:AC:AD","sha256":"CD:43:4E:C3:33:61:78:07:EF:CB:0B:05:A8:57:14:7B:A3:49:66:AE:18:F9:0B:83:50:B2:09:60:52:9B:A4:51"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: brasileiro.wtf\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Mon, 18 Aug 2025 05:28:05 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k7PLvVk6CWTGhWkG%2B1YIfpIrA4GOwpUg0WsoLdvhx8TaFlIdBJH7T2A3H%2FU%2FsGZ%2B6cIZpDJOOrEPR0NrM7HpwXpmBR5KYMQK7NLiKg%3D%3D\"}]}\r\nage: 111\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: 970f0178192e56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":1749,"timings":{"blocked":100,"dns":24,"connect":47,"send":0,"wait":23,"receive":0,"ssl":1457},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/2X/d/d26af16118e898dc2f93f57ac2fc864824e1b601_2_572x1024.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 16:04:05 GMT","end":"Sun, 09 Nov 2025 16:04:04 GMT"},"fingerprint":{"sha1":"DF:EC:86:BA:09:B3:17:C2:2B:66:0A:BF:62:3E:3C:4D:90:D2:A4:33","sha256":"EF:3A:5A:BF:D7:FE:5F:99:1A:3F:CD:49:ED:AF:84:68:4F:09:27:DC:47:7B:D5:51:4C:E2:DB:A2:A1:6A:3C:FF"}}},"request":{"raw":"GET /uploads/default/optimized/2X/d/d26af16118e898dc2f93f57ac2fc864824e1b601_2_572x1024.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 84525\r\nlast-modified: Tue, 12 Aug 2025 05:19:29 GMT\r\nexpires: Tue, 18 Aug 2026 05:27:54 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84525,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 572x1024, components 3","md5":"5efe93a54b00317e0b466b625167378e","sha1":"496d82abd257ba7e4d48bfd7aa26d86435529a06","sha256":"421b0dd23d43277e75f9977f0f0b8635862fc0827d9c6e0e080ecb62c40876bd","sha512":"1ed04d09265dda55be1d9bafe01ef57a47b2ee8716fb72b23199a3824ab2a7236c0a4a9486ce3c6239e3f2474f8c6d5edf2631fed00b8fc4c0097929b9879edc","ssdeep":"1536:UvwSmtWnzEIuS4+ALi4bNeLoVNqt8w6ZtNYvi29AjEnpQtadz5p8QgRw:U4NWnh48LoGD6ZUvp9npOap8QgRw","tlshash":"0c830206294c907f33c7e33c1a70de5e3ee4440df91e2478cdab58ba4a7189a65b6237","first_seen":"2025-08-03T11:13:53.690251Z","last_seen":"2026-01-16T01:24:57.860328Z","times_seen":24,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-620120-3","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:56.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"A2:8A:24:AD:51:7D:A4:62:BB:34:6F:C9:21:A1:B9:E1:2D:A6:0E:C1","sha256":"9F:B9:94:8F:84:D3:44:71:A7:81:72:C8:80:4D:14:02:E3:E0:30:0C:F1:17:27:83:00:82:D9:C3:68:D3:B3:AF"}}},"request":{"raw":"GET /gtag/js?id=UA-620120-3 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\nexpires: Mon, 18 Aug 2025 05:27:58 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Mon, 18 Aug 2025 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1099:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1099:0\r\nreport-to: {\"group\":\"ascgcycc:1099:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1099:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 97204\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":273729,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2492)","md5":"16a1ae71a411950b1dd958ce1dcd2a3b","sha1":"b9acf30725463eb49facfebf110d132f99e3ff4c","sha256":"d3f1f44f55d8229329d35a70be1863da142e11949e559d5dad3e19a7ea967edf","sha512":"61e20341c3d806e96e342f9b775e58f74f38aaaa04265e0c12c07e91b4b864bf119e195458ca5a70793ba67f567926b282a916ea51ec6873c3da5548478e8b96","ssdeep":"3072:LP1g61JLwDPrA8B0Sg5D3Sb5qlUmxxgKX6ctaW/uSoTQtF021vDnIpdf7:xmLrAOtIx1wW/uSoTuFHvDI/","tlshash":"af44f9cc73d6b46243a36478503f014bb23b7992f84cd894e182d9d92e74aaa4277f7d","first_seen":"2025-08-18T05:29:08.760089Z","last_seen":"2025-08-18T05:29:08.760089Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2544,"timings":{"blocked":2,"dns":10,"connect":74,"send":0,"wait":77,"receive":59,"ssl":2285},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornohub24.ru/erosceny/screen/seks-priklyucheniya-podrostka-v-bordele-0.jpg","fqdn":"pornohub24.ru","domain":"pornohub24.ru","tld":"ru"},"ip":{"addr":"193.163.7.2","port":443,"asn":204601,"as":"Zomro B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pornohub24.ru","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 00:24:45 GMT","end":"Tue, 28 Oct 2025 00:24:44 GMT"},"fingerprint":{"sha1":"68:6C:DD:1D:8A:F3:B0:03:44:4D:D6:7E:F7:99:A4:DF:22:89:5C:2A","sha256":"17:0E:BB:C2:44:7B:CB:C3:34:E6:26:D2:69:F3:29:E4:53:0F:30:45:CC:CB:E3:19:52:4B:AC:0F:0F:9A:E9:8E"}}},"request":{"raw":"GET /erosceny/screen/seks-priklyucheniya-podrostka-v-bordele-0.jpg HTTP/1.1\r\nHost: pornohub24.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10981\r\nlast-modified: Sat, 06 Apr 2024 17:39:14 GMT\r\netag: \"661188c2-2ae5\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10981,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x240, components 3","md5":"de39240dfdfb694570f4b835f1ef066c","sha1":"706f6c74685bcfb23211cbf705bcba691d0526fa","sha256":"43f186545fd3fc2de1de26c11592894fdee63ef68f731382093da8ccfefac874","sha512":"16e95bbc4c040d729aedc1c937497c544ba9d4c6c1adca0aca0dac361804798ad3f878ffad59de2cea70c10bc264929f880da37b0df61c671733a871dd459a19","ssdeep":"192:W5WZrhiBtdcjPuxlKz8/pQe0aapCl9WePM7nj37ARnnY3m/ru+:COFIcjGxlSsZ0Aas6j37Injq+","tlshash":"bf32bf6b2b298d8f89620c389dd54bcef6c2e6144cbffaac8c74fd7345909c1891615b","first_seen":"2024-12-10T06:27:48.798297Z","last_seen":"2025-12-22T08:22:21.923651Z","times_seen":27,"resource_available":false,"data":null}},"time_used":3197,"timings":{"blocked":1046,"dns":3,"connect":16,"send":0,"wait":22,"receive":1,"ssl":2107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img2.russkoeporno.tv/ruxp/img/2/26374_r2.jpg","fqdn":"img2.russkoeporno.tv","domain":"russkoeporno.tv","tld":"tv"},"ip":{"addr":"104.21.91.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"russkoeporno.tv","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Jul 2025 14:24:16 GMT","end":"Mon, 13 Oct 2025 15:22:11 GMT"},"fingerprint":{"sha1":"EC:C0:11:51:EA:2D:45:21:A7:F4:9D:A0:ED:17:4C:1E:C1:41:57:28","sha256":"33:8A:19:D5:63:CE:CE:30:8A:5F:A4:50:91:56:E0:79:93:DD:0D:9C:9D:17:90:8D:7D:89:67:35:DB:04:62:D4"}}},"request":{"raw":"GET /ruxp/img/2/26374_r2.jpg HTTP/1.1\r\nHost: img2.russkoeporno.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16529\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Feb 2025 15:03:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67aa1557-4091\"\r\nexpires: Thu, 04 Sep 2025 01:43:52 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccept-ranges: bytes\r\nage: 1136644\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fcod%2FaP%2FHMXQqWnLysJV9JN2Rbaso%2BTskV3O0u0j5DYD3%2FS1iiiKUYcxhgxnlfmkSRRg9N4GpKThN9w2jddenoaBpWvZw7QUbbsgLgg%2FvWpK9w%3D%3D\"}]}\r\ncf-ray: 970f0143bf40b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16529,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x224, components 3","md5":"63da950f51452748479bae6b798dbd14","sha1":"46fcb046882fccce249b697aa4bbc16106dabce5","sha256":"a3e106cdc50006178494284f2ee1342e2b1b7f5ab1b01f7991b735ff7112812c","sha512":"13e5b068b759fa45c05ca7732a2aca06ff2bb20d6e7efbbfdbedf2b75d74a184c6c70308552d2dd2f8b4fde57a1cf59ca5247a24e40d0d0473fc52b2a35bcbc2","ssdeep":"384:jnoaiOYu/WmGOIHHXwnuw7l/VC1zARVJvjQ/bAh01kKSxIC2X:NiOxDGOxr7lNC1zAJLQ/bAKk1uZX","tlshash":"3572d0a732b9c310a123fbb4784716f7599e34e0fa64c30cf819cc6922789a55e6e090","first_seen":"2025-08-18T05:29:08.762111Z","last_seen":"2025-08-18T05:29:08.762111Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1850,"timings":{"blocked":-1,"dns":17,"connect":1,"send":0,"wait":28,"receive":1,"ssl":1780},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pics.pornsexyoung.com/thumb/192/901_ippa.jpg","fqdn":"pics.pornsexyoung.com","domain":"pornsexyoung.com","tld":"com"},"ip":{"addr":"104.21.2.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornsexyoung.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 31 Jul 2025 06:06:14 GMT","end":"Wed, 29 Oct 2025 07:01:03 GMT"},"fingerprint":{"sha1":"B3:1A:38:FB:A9:73:5C:CD:BB:24:DB:63:C9:40:9A:51:9A:F3:17:66","sha256":"CF:0C:57:8B:3E:AE:24:5A:21:0A:E3:F5:6B:1D:AC:35:D3:98:F4:B7:2F:FF:3D:FF:CB:99:A1:95:C2:5D:29:D9"}}},"request":{"raw":"GET /thumb/192/901_ippa.jpg HTTP/1.1\r\nHost: pics.pornsexyoung.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16522\r\nserver: cloudflare\r\nlast-modified: Sat, 04 Sep 2021 12:32:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6133674d-408a\"\r\nexpires: Thu, 21 Aug 2025 08:09:17 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 335921\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7fj26kzQFaY7OJl6BwhBVZ193eySSTJU0ewD4iDxYnSKe%2FsFF4yGvG4xVAK8JR1eIH9CI5H7MstkTuupUVNDPHNYkgd0ATitb7MHlQ4oacXUNhI%3D\"}]}\r\ncf-ray: 970f014f2f595696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16522,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 320x240, components 3","md5":"6d2431c9b0852bca1ffd10036525a1a6","sha1":"c42c6c6a042a207514b0d00662464d0bde6bfbaf","sha256":"0491e3d1010c6c5a3dee3381fd393827598425849a1b1d1d811c44f7ed40d93e","sha512":"436a8a59f33a6f4cb6aa08dfbeb0b575aa9cc82a5eef5c15e5ca814455f6b611459b82c7473786e9854abba0548a944bf016efe10ff62b29690d5ec9a7ab7310","ssdeep":"384:HDi2L3fNGIU/HkQVDmuSm7NzgvjqZ2OQw/LcAMoS9DPew:HDiwvN3HkmWhzgA7QISoSDGw","tlshash":"e972d0641466b1fb438ca0335f22e9c227fd26bb551b4c99f4321bed83d464dea60b63","first_seen":"2025-05-27T07:10:51.264762Z","last_seen":"2026-03-03T14:10:03.968385Z","times_seen":44,"resource_available":false,"data":null}},"time_used":3044,"timings":{"blocked":769,"dns":9,"connect":14,"send":0,"wait":17,"receive":1,"ssl":2189},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gettyimages.com/favicon.ico","fqdn":"www.gettyimages.com","domain":"gettyimages.com","tld":"com"},"ip":{"addr":"3.167.2.85","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.gettyimages.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Sat, 18 Jan 2025 00:00:00 GMT","end":"Sun, 15 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"88:CD:2C:2D:C4:66:05:DF:F9:4E:9D:DD:90:E4:82:97:74:80:D2:63","sha256":"7F:E3:88:5E:26:8F:F7:EA:BF:56:EE:C3:42:79:74:EF:02:0B:66:CC:D6:72:C7:D5:82:26:CD:CB:3B:32:F3:1D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.gettyimages.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-length: 0\r\nlocation: https://www.gettyimages.no/favicon.ico\r\ndate: Mon, 18 Aug 2025 05:28:03 GMT\r\nselected-fe: getty_frontend\r\ncache-control: no-cache\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 94fbdabfcc07b91a0e8ffbb741347df8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: BRdicVSsCZz3i_57FjMpEPdvLvFlDoxppurNc7RV-wF4dWTS-B3Nmg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":5430,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":124,"connect":18,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20250716-1/bcdaf76af0b25a99ebbaab51d278ea7e.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.62","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20250716-1/bcdaf76af0b25a99ebbaab51d278ea7e.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 71436\r\nlast-modified: Wed, 16 Jul 2025 02:09:09 GMT\r\nvary: Accept-Encoding\r\netag: \"687709c5-1170c\"\r\nexpires: Tue, 16 Sep 2025 16:53:50 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":71436,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2, software=www.meitu.com, datetime=2023:11:03 03:24:45], baseline, precision 8, 500x281, components 3","md5":"a0d5f2c14acafd0eb2ce8f1a0f72ac73","sha1":"07153f20836939c2605aa135a26afec78ce35fdb","sha256":"69678c8d2d6e6a458e6b303de962c48eb2f034d289719d978e31bb94c662e57b","sha512":"88a79ddcb4971c8fffde2755bce8621433858a386b2964c7901b074e1fcef3f93c31d774e8635e51ab49fd5e810288f1b211d3e38b1f343959788a1f72c961b0","ssdeep":"1536:MjU5yqc0uIZroEJqUi6Sd3csLg8Qi6cKHVNYClrCGMggtWl/C:YWPloU3u3cs7Z6vVNlrCGMg2WM","tlshash":"756302b98f1feae0f82927b502831f25d6cfba925494b50fd8a4dc9f05517c4343da88","first_seen":"2025-08-14T16:14:37.30574Z","last_seen":"2025-11-15T14:07:55.367007Z","times_seen":20,"resource_available":false,"data":null}},"time_used":1742,"timings":{"blocked":811,"dns":0,"connect":0,"send":0,"wait":614,"receive":317,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.webvisor.org/watch/48140495?wmode=7\u0026page-url=https%3A%2F%2Fav4.vid4.uk%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3Att8recolbbnnxv5tn59mnhq7484f%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2160%3Acn%3A1%3Adp%3A0%3Als%3A761377165203%3Ahid%3A42520701%3Az%3A0%3Ai%3A20250818052758%3Aet%3A1755494879%3Ac%3A1%3Arn%3A265906240%3Arqn%3A1%3Au%3A1755494879214245476%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C14%2C7%2C62%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1755494874042%3Afip%3A6bcdbfd73c55b43ce7c5ef41afc9ada5-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1755494880%3At%3AHot%20Videos%20%E4%BA%BA%E6%B0%97%E5%8B%95%E7%94%BB-%E5%8B%95%E7%94%BB%40AV4.us\u0026t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(42534404)fip(1)ti(1)","fqdn":"mc.webvisor.org","domain":"webvisor.org","tld":"org"},"ip":{"addr":"77.88.21.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:00.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.webvisor.com","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sun, 09 Mar 2025 21:02:24 GMT","end":"Sun, 31 Aug 2025 20:59:59 GMT"},"fingerprint":{"sha1":"4E:A6:D4:57:F5:B7:FB:C1:98:C0:40:D2:B8:FA:B4:10:43:09:41:94","sha256":"56:26:AF:5C:3E:39:FA:F7:0B:52:B0:C0:E7:E3:25:F7:B5:F7:59:2B:5F:DC:89:D5:7F:4D:D7:4A:6E:62:5F:80"}}},"request":{"raw":"GET /watch/48140495?wmode=7\u0026page-url=https%3A%2F%2Fav4.vid4.uk%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3Att8recolbbnnxv5tn59mnhq7484f%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2160%3Acn%3A1%3Adp%3A0%3Als%3A761377165203%3Ahid%3A42520701%3Az%3A0%3Ai%3A20250818052758%3Aet%3A1755494879%3Ac%3A1%3Arn%3A265906240%3Arqn%3A1%3Au%3A1755494879214245476%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C14%2C7%2C62%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1755494874042%3Afip%3A6bcdbfd73c55b43ce7c5ef41afc9ada5-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1755494880%3At%3AHot%20Videos%20%E4%BA%BA%E6%B0%97%E5%8B%95%E7%94%BB-%E5%8B%95%E7%94%BB%40AV4.us\u0026t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(42534404)fip(1)ti(1) HTTP/1.1\r\nHost: mc.webvisor.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://av4.vid4.uk/\r\nOrigin: https://av4.vid4.uk\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nlocation: /watch/48140495/1?wmode=7\u0026page-url=https%3A%2F%2Fav4.vid4.uk%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3Att8recolbbnnxv5tn59mnhq7484f%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2160%3Acn%3A1%3Adp%3A0%3Als%3A761377165203%3Ahid%3A42520701%3Az%3A0%3Ai%3A20250818052758%3Aet%3A1755494879%3Ac%3A1%3Arn%3A265906240%3Arqn%3A1%3Au%3A1755494879214245476%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C14%2C7%2C62%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1755494874042%3Afip%3A6bcdbfd73c55b43ce7c5ef41afc9ada5-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1755494880%3At%3AHot%20Videos%20%E4%BA%BA%E6%B0%97%E5%8B%95%E7%94%BB-%E5%8B%95%E7%94%BB%40AV4.us\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2842534404%29fip%281%29ti%281%29\u0026redirnss=1\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\naccess-control-allow-origin: https://av4.vid4.uk\r\npragma: no-cache\r\nexpires: Mon, 18-Aug-2025 05:28:01 GMT\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Mon, 18-Aug-2025 05:28:01 GMT\r\naccess-control-allow-credentials: true\r\nset-cookie: yabs-sid=401200401755494881; Path=/; SameSite=None; Secure\ni=7AYHdJtiMfsKd8ylgqU+Y9HTs0X5AX5UsA4xDRdEEq4lMUM/oWhs7fwMxMwMnVeqbpcXp0sx5WrXhhgsKBo/GrQuKvA=; Expires=Thu, 16-Aug-2035 05:27:45 GMT; Domain=.webvisor.org; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=2465275301755494881; Expires=Thu, 16-Aug-2035 05:27:45 GMT; Domain=.webvisor.org; Path=/; Secure; SameSite=None\nyuidss=2465275301755494881; Expires=Tue, 18-Aug-2026 05:28:01 GMT; Domain=.webvisor.org; Path=/; SameSite=None; Secure\nymex=1787030881.yrts.1755494881#1787030881.yrtsi.1755494881; Expires=Tue, 18-Aug-2026 05:28:01 GMT; Domain=.webvisor.org; Path=/; SameSite=None; Secure\nbh=YOHzisUGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.webvisor.org; Expires=Tue, 22 Sep 2026 05:28:01 GMT; SameSite=None; Secure\nbh=YOHzisUGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.webvisor.org; Expires=Tue, 22 Sep 2026 05:28:01 GMT; SameSite=None; Secure\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":635,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":2711,"timings":{"blocked":1348,"dns":14,"connect":79,"send":0,"wait":44,"receive":0,"ssl":1205},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/2X/7/7fdd307f4626930a2e9f19dfcd015627db5920c5_2_578x1024.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 16:04:05 GMT","end":"Sun, 09 Nov 2025 16:04:04 GMT"},"fingerprint":{"sha1":"DF:EC:86:BA:09:B3:17:C2:2B:66:0A:BF:62:3E:3C:4D:90:D2:A4:33","sha256":"EF:3A:5A:BF:D7:FE:5F:99:1A:3F:CD:49:ED:AF:84:68:4F:09:27:DC:47:7B:D5:51:4C:E2:DB:A2:A1:6A:3C:FF"}}},"request":{"raw":"GET /uploads/default/optimized/2X/7/7fdd307f4626930a2e9f19dfcd015627db5920c5_2_578x1024.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 58025\r\nlast-modified: Tue, 12 Aug 2025 05:13:25 GMT\r\nexpires: Tue, 18 Aug 2026 05:27:54 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58025,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 578x1024, components 3","md5":"95264ff05c9db4bc55c6642c4f70ee24","sha1":"b25cd0a26c1e6fbac238394659bac202198fc3cc","sha256":"933fd4ffc17ea734fb08a9e2eadc8b1f39bdd3239600c9c6707b0d8714f5ef6f","sha512":"3beb35fd90e4907788f4b2e07e5dccc0591116bd4a8463b5af71d2bea2fb2489e3ca10208fcae1fa1ec3fa2cc8d4c5156b951f370ab17ee6b2097afca1e5af8c","ssdeep":"1536:AnX3yzXHrB1WgOaIB/1O/BLgl+DVpUW9Hw9QMF82a/RT/q:syTtnWp8/BLLDVpUWwXU/q","tlshash":"624301a4b778b1daba0ce73bcd020f508b26b36195ec165d94dc8c537ee83e85486b61","first_seen":"2025-07-31T09:11:32.56169Z","last_seen":"2026-01-10T19:26:59.579928Z","times_seen":25,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tubetubetube.com/tubes/tokyohot/rena.yamamoto/n1025_rena_yamamoto_ss/19.jpg","fqdn":"www.tubetubetube.com","domain":"tubetubetube.com","tld":"com"},"ip":{"addr":"104.21.65.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tubetubetube.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Jul 2025 14:01:25 GMT","end":"Fri, 17 Oct 2025 14:58:47 GMT"},"fingerprint":{"sha1":"34:5B:F6:B3:C4:7A:C4:35:72:7A:6D:06:E8:FD:D1:00:4E:0C:2B:39","sha256":"A6:40:0B:69:B1:8C:B8:C4:D9:5E:0A:3D:6A:9A:E8:F8:D6:06:DB:54:23:2D:40:74:DB:93:13:FA:F4:76:48:17"}}},"request":{"raw":"GET /tubes/tokyohot/rena.yamamoto/n1025_rena_yamamoto_ss/19.jpg HTTP/1.1\r\nHost: www.tubetubetube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 18 Aug 2025 05:27:59 GMT\r\nlocation: https://tubetubetube.com/tubes/tokyohot/rena.yamamoto/n1025_rena_yamamoto_ss/19.jpg\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PrUO680z02IK1IK8cquJ6sxatQ2fEUgZwogh6CoYkBOinXewB9QsuhCt5GMdmUx%2FkT52SHYflhkLFW4PuU%2BxhyUYNxinXLBjKjj8DqieZh3cBA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 970f0153495d0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40847,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":3392,"timings":{"blocked":1036,"dns":4,"connect":17,"send":0,"wait":13,"receive":0,"ssl":2307},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.youtube.com/vi/PkGiiJCfwSo/0.jpg","fqdn":"img.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:06.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"GET /vi/PkGiiJCfwSo/0.jpg HTTP/1.1\r\nHost: img.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8684\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 18 Aug 2025 05:06:46 GMT\r\nexpires: Mon, 18 Aug 2025 07:06:46 GMT\r\ncache-control: public, max-age=7200\r\nage: 1280\r\netag: \"0\"\r\ncontent-type: image/jpeg\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8684,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3","md5":"984ac9680b846b52bb5dbbb7d6a4ee17","sha1":"15f2f66d0a378e36ad46282f417ff221662d172a","sha256":"243e5ec339a9d0a5776383fce03ccd9c3838ac0844511e541a612e6ec6f1d916","sha512":"fa0586bf0692a9e036e01c7ac7d1e5cafe388f2c052521e56ec28c78414613dcf8328f7f122ffcf095a3c39823ebb89ea7a794d016793b7c9513b7efe692fd42","ssdeep":"192:Ehkb22fX8hY4bdFtaIW8TpQj3GoiR96i5KkE6lwxXsF4vUR:EkCUMmA+InT82x9vEMF4vUR","tlshash":"6b02b08fdf7a42a5c18630faa1f208b2b8de14b56127da67674f511152478e83637e07","first_seen":"2025-08-18T05:29:08.765778Z","last_seen":"2025-08-18T05:29:08.765778Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1172,"timings":{"blocked":414,"dns":328,"connect":32,"send":0,"wait":15,"receive":2,"ssl":362},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ods.manyvids.com/1004385299/o1gtlj3qqh2f01oor50g123m182b12/screenshots/custom_1_360_643423ab5431c.jpg","fqdn":"ods.manyvids.com","domain":"manyvids.com","tld":"com"},"ip":{"addr":"3.167.2.99","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.manyvids.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sat, 09 Nov 2024 00:00:00 GMT","end":"Sun, 07 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"F1:5A:7E:E5:F8:D5:25:84:21:B9:33:C5:E1:B2:02:D2:D8:4A:56:F8","sha256":"F0:2C:5E:65:88:E8:30:9B:52:99:C5:59:A1:D3:11:ED:FE:E0:AB:D4:3A:B9:C6:22:E5:BD:9D:9C:AB:DF:FC:3E"}}},"request":{"raw":"GET /1004385299/o1gtlj3qqh2f01oor50g123m182b12/screenshots/custom_1_360_643423ab5431c.jpg HTTP/1.1\r\nHost: ods.manyvids.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 70976\r\ndate: Mon, 18 Aug 2025 03:10:50 GMT\r\nlast-modified: Mon, 10 Apr 2023 14:56:48 GMT\r\netag: \"a7081d5f810834e9fba1c959e856ae64\"\r\nx-amz-storage-class: REDUCED_REDUNDANCY\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 74cb6ad66f88e47ae011abd64e57e7cc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: nRJuPLCUZ8lbRqrT8j2zIgAnTOMgj4EXuQgdubgrowJME5Qe_Skflg==\r\nage: 8228\r\ncache-control: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":70976,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 720x406, components 3","md5":"a7081d5f810834e9fba1c959e856ae64","sha1":"4275cbd5e339ed524e9adf75b1946458be8dcef0","sha256":"810ef03e44d60086fa183754d5786ce8d583ee2a7246f63940777fb6668756fc","sha512":"5dfebe6c519dba92d1715a68f86aa4fae345db07ccc23c46a75e3fd51eaf40cb48923c1912cb7e5cee2dd2f41c0cca6c93583b6a09c73a0da6a2f3bd84d078d0","ssdeep":"1536:MhxaZKtkG15+Tvl+0skSl6P2JqUCzvHYlc9fVyMPaZPdE5DlASDn:CuG15+zQ0azqH4lc9fVyNdE5ySDn","tlshash":"0a630105921b52b32f97006760a6bc493369fee2f6ea3c1b42760d5d63ccdea650523c","first_seen":"2025-08-18T05:29:08.767255Z","last_seen":"2025-08-18T05:29:08.767255Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2954,"timings":{"blocked":795,"dns":2,"connect":1,"send":0,"wait":13,"receive":6,"ssl":2134},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.amcdn.pics/L5RnO.jpeg","fqdn":"c.amcdn.pics","domain":"amcdn.pics","tld":"pics"},"ip":{"addr":"172.67.139.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"de3ff173.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 Aug 2025 18:04:52 GMT","end":"Mon, 03 Nov 2025 19:04:49 GMT"},"fingerprint":{"sha1":"96:F2:87:9F:D6:94:F8:CD:BC:78:F1:12:9C:CF:EC:93:BD:65:C8:78","sha256":"49:A6:EB:B5:9A:97:4B:A1:CB:71:F4:0F:9E:0D:AB:6F:ED:90:6A:E5:7D:AF:E9:5B:02:D5:53:22:88:F9:E4:AB"}}},"request":{"raw":"GET /L5RnO.jpeg HTTP/1.1\r\nHost: c.amcdn.pics\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 77989\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=22DXvBrFlYuityalBjiux47mZ%2BovLoKgbVuj0iTDNLIJTf%2F0Wf0F%2Bbe2eaOZvY%2B%2BqpCKNjIoieZUZOwvjzaHy80%2BOXc2sxJfAkk%3D\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"2520a1f85f1cb145675ebe2bde753733\"\r\nlast-modified: Tue, 05 Aug 2025 19:13:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nage: 488112\r\ncache-control: max-age=604800\r\ncf-ray: 970f0143fb5656c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77989,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 2035x2033, segment length 16, baseline, precision 8, 1280x706, components 3","md5":"2520a1f85f1cb145675ebe2bde753733","sha1":"ff5a6573c8a902057cd7044a89bc09073391be67","sha256":"fecdb3e07c932d5f7ec8983f063f4669da3314a9e5667a6fee9f89c091f3157c","sha512":"09b1ed4ad29ee060132440e815550aedd1b3d2985e982de0d3910b557726a197b95eca96118d7ee7d5130e3f63574908b0200931759a8fac70e1b52e8a62c657","ssdeep":"1536:EGfZGy/lzlVH47KC8E/mdslZBeVI/16/XXDtP:VRfA/lu41OXZ","tlshash":"3b73022ed77064d7faf022354f1d8e562878cac0abc3a96527971dee05c723a3b56381","first_seen":"2025-05-11T13:08:12.793744Z","last_seen":"2025-08-19T17:55:12.606187Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1890,"timings":{"blocked":-1,"dns":17,"connect":1,"send":0,"wait":26,"receive":3,"ssl":1833},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidmo.pro/thumbs_320/2e/c6/2ec6a8c481d63e846b0d2e337b982008/11962485.jpg","fqdn":"vidmo.pro","domain":"vidmo.pro","tld":"pro"},"ip":{"addr":"89.248.193.244","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"en.vidmo.pro","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 20:44:46 GMT","end":"Wed, 22 Oct 2025 20:44:45 GMT"},"fingerprint":{"sha1":"74:46:04:C7:74:12:A2:65:84:34:3D:72:B8:ED:93:13:5A:09:2A:E0","sha256":"B8:96:1D:42:22:B9:F0:34:20:22:DA:FF:BB:BF:D0:89:2E:9E:C2:8D:4B:9A:26:32:9F:8C:EB:C6:3D:39:39:8B"}}},"request":{"raw":"GET /thumbs_320/2e/c6/2ec6a8c481d63e846b0d2e337b982008/11962485.jpg HTTP/1.1\r\nHost: vidmo.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27211\r\nlast-modified: Fri, 05 Jun 2020 14:11:38 GMT\r\nexpires: Wed, 17 Apr 2024 18:23:19 GMT\r\ncache-control: max-age=604800, public, no-transform\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27211,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 320x240, components 3","md5":"43cc16bd8b00918fc910021af665a04b","sha1":"3475e2e7d5353fe0301dbf562dfea89cc26869c9","sha256":"303cb92874350954d16582aedccc5c5d611853ef8607395e220a596732265848","sha512":"adc47ce9430265c390e0d739430ba6e632b04aada7eded8240a88d39515dd840a6e33f4672b584287a9b36c31b757f70b94b375f3371ccfbf1554eaee3959f25","ssdeep":"384:YiNL2wedBdBtslbckGtxlob5Fk75hL3rdgXbY6vOoH5xk58GDE1SS1Ypv4c5NvlP:Ya25PkFlGGb50LrEkuZUYsjpv4qjWUpP","tlshash":"69c2e063db65a2e6b13a50db4d43edec6e6a020bdf5a2af38440ce4bf8544c34463c5c","first_seen":"2024-05-07T21:21:18Z","last_seen":"2026-03-03T09:47:10.858841Z","times_seen":64,"resource_available":false,"data":null}},"time_used":3225,"timings":{"blocked":769,"dns":7,"connect":86,"send":0,"wait":72,"receive":7,"ssl":2249},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yaebus17.ru/uploads/posts/2024-05/1716853441_1.jpg","fqdn":"yaebus17.ru","domain":"yaebus17.ru","tld":"ru"},"ip":{"addr":"5.129.208.148","port":443,"asn":50923,"as":"Metroset","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yaebus17.ru","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 00:14:59 GMT","end":"Sun, 09 Nov 2025 00:14:58 GMT"},"fingerprint":{"sha1":"3B:2D:A6:ED:58:65:42:BD:4E:6F:49:5B:21:EF:A4:99:EA:0C:44:51","sha256":"8A:70:89:69:EE:5D:63:08:B9:B3:BE:BC:8D:0E:A1:7B:F9:3D:C2:1C:02:F2:F6:FB:B8:71:17:C9:12:2E:CB:4D"}}},"request":{"raw":"GET /uploads/posts/2024-05/1716853441_1.jpg HTTP/1.1\r\nHost: yaebus17.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13474\r\nlast-modified: Thu, 12 Jun 2025 21:51:06 GMT\r\netag: \"684b4bca-34a2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13474,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x174, components 3","md5":"d25456737881a9e514e29cdfcd90ddc1","sha1":"eeecab47adbb7641dd48a866c55dece17a09aba3","sha256":"6b779344f776c89719ad1d35d935d68177876c2ef82a9c08d93a25c98f36ad3d","sha512":"f4f2b69518eb995aadc87786b586caf410b5342f4bae563f0f7e72b21635244c823c8f4ba6c35a86f02e872fe28474bb2754cfdd9fcc3483e0687efa39f94c17","ssdeep":"384:MjDkcKjlPWQBDRA2zvB6PRCQY/mJ2V6fBfKIY4UKi3Vg:fZkuRHDB6ZImqWB69C","tlshash":"3852cf3a02a782c1fac8687653235fcc9deff015831f4417f3fda50b0a247995a47915","first_seen":"2025-08-06T23:42:25.50662Z","last_seen":"2025-11-08T15:57:55.955325Z","times_seen":22,"resource_available":false,"data":null}},"time_used":3111,"timings":{"blocked":715,"dns":11,"connect":54,"send":0,"wait":32,"receive":32,"ssl":2197},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmaza.co/wp-content/uploads/2024/10/icon-150x150.png","fqdn":"xmaza.co","domain":"xmaza.co","tld":"co"},"ip":{"addr":"104.21.44.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmaza.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:43:15 GMT","end":"Sun, 21 Sep 2025 09:41:38 GMT"},"fingerprint":{"sha1":"C2:26:7A:91:7F:53:BC:6C:8F:5E:01:94:13:E8:19:0B:5C:2A:B8:25","sha256":"80:79:77:D5:22:CE:CD:55:E0:FD:A0:C3:A8:A9:1F:2A:15:1A:7E:C6:59:D0:59:E4:11:7D:04:BD:07:68:2E:F7"}}},"request":{"raw":"GET /wp-content/uploads/2024/10/icon-150x150.png HTTP/1.1\r\nHost: xmaza.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 30 Jul 2025 03:45:07 GMT\r\netag: \"27a9-67221baa-d03f38;;;\"\r\nlast-modified: Wed, 30 Oct 2024 11:42:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 10153\r\naccept-ranges: bytes\r\ndate: Mon, 18 Aug 2025 05:28:03 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 435438\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c3hapjT2%2F%2B5FY1arGkAqq3jSUWnAB7il2EjN%2BwknD4SkJDTxR5sGcSvLBVIZ5AG%2BTZ071EcUQeFEEAc6%2Be5ytvwbZd5n%2FQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 970f016f3d5056b5-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10153,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"7164a51a21c84fac015a655b008ffeaf","sha1":"87dbf079c0eaa6b9af72d2056fd8c0d086926cac","sha256":"5c851888d793d8cff01771c695a20279b4366481e9f895d5f0c5951857ab87f7","sha512":"2a285eaf2b3afc07094e40886c797080740c27530dae4301da905f77c5d5d77c4dd0188a83541e53040be99400d253045c933525bd6343c1ca805defd67de717","ssdeep":"192:T+T+tMu6hcgybZhbVEKZWAFCl+TaW3YROXFx3HoJu5dKyh8Ef:8MMu6htyPVz3MQ23ROXFZoJuDKQVf","tlshash":"5b22bf2274bad5868713549e01622ee6118ed2647be131f0ab6cf4d37901a0d73ceb4f","first_seen":"2025-03-22T13:13:11.074061Z","last_seen":"2026-03-03T09:47:11.008441Z","times_seen":58,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":13,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.youtube.com/vi/-kkKjQOQ1-A/0.jpg","fqdn":"img.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:06.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"GET /vi/-kkKjQOQ1-A/0.jpg HTTP/1.1\r\nHost: img.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8941\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 18 Aug 2025 05:26:45 GMT\r\nexpires: Mon, 18 Aug 2025 07:26:45 GMT\r\ncache-control: public, max-age=7200\r\nage: 81\r\netag: \"0\"\r\ncontent-type: image/jpeg\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8941,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3","md5":"b1cd6b22fb822db9a521cf47b68b9771","sha1":"df8ae9a77f0556da668d0c96e29693f5b2168412","sha256":"e4c4fe8f4f9824dd93eb27fa6b8b31cf3b9b4d48146c0eb18c9b80e56f8b55bf","sha512":"e8290522d55eb4ba5d21f2fc172522a27369aac8a11bbdb8eca81c050f55be70cf271e6d79302c588270ead6fbba0e250a584eb02a6d238106004fcbd76da89e","ssdeep":"192:EhSvWYlRAV3A1BeDtfm+sDkoAWGNt7PDaWzQKq8N+MWlwuyfa:EAeKHzUm1koAWGNt7Pm8QG+MWl/Oa","tlshash":"5102b0816ab6a425e3251b312967e7aebe071035e218e14a63e5407fff643e54fc052d","first_seen":"2025-08-18T05:29:08.7721Z","last_seen":"2025-08-18T05:29:08.7721Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1401,"timings":{"blocked":405,"dns":571,"connect":24,"send":0,"wait":16,"receive":2,"ssl":370},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.youtube.com/vi/IF2YR_wMBfE/0.jpg","fqdn":"img.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:06.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"GET /vi/IF2YR_wMBfE/0.jpg HTTP/1.1\r\nHost: img.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8923\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 18 Aug 2025 03:36:44 GMT\r\nexpires: Mon, 18 Aug 2025 05:36:44 GMT\r\ncache-control: public, max-age=7200\r\nage: 6682\r\netag: \"0\"\r\ncontent-type: image/jpeg\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8923,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3","md5":"7cb7468502400fac82b5349ffdaa8301","sha1":"6c6a88e1e7f2d52eb0df49bb8f1d91ee7f9a91a5","sha256":"cf85cbe283acb672bdd5a1c6870f46b8a52faba836c0850ff773b89d53ba5585","sha512":"ea9ad604fedc812c8e06fe0f510f0f74e48683575b82c4d9eed621a0509e19064b53677a47ebc68034f18a991b2c91ac8136766f6498fc94374ffc213675459b","ssdeep":"192:36zyG+FYcnCN3NjdQDsFAiiLrEevzjGHDcbfGwo2CVhCl2lLkcy4pY:36n+FYQCN3bahBvzjGHDKHwlXY","tlshash":"f802af83c57d4202d4ec62365d9377483a1bfe7b1637d74b6c25a2a3593b8a3368054e","first_seen":"2025-08-18T05:29:08.773228Z","last_seen":"2025-08-18T05:29:08.773228Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1293,"timings":{"blocked":329,"dns":611,"connect":33,"send":0,"wait":19,"receive":1,"ssl":281},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/2X/1/14e20457f614497f2add654df6a96ae3e851d903_2_578x1024.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 16:04:05 GMT","end":"Sun, 09 Nov 2025 16:04:04 GMT"},"fingerprint":{"sha1":"DF:EC:86:BA:09:B3:17:C2:2B:66:0A:BF:62:3E:3C:4D:90:D2:A4:33","sha256":"EF:3A:5A:BF:D7:FE:5F:99:1A:3F:CD:49:ED:AF:84:68:4F:09:27:DC:47:7B:D5:51:4C:E2:DB:A2:A1:6A:3C:FF"}}},"request":{"raw":"GET /uploads/default/optimized/2X/1/14e20457f614497f2add654df6a96ae3e851d903_2_578x1024.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 70530\r\nlast-modified: Tue, 12 Aug 2025 05:18:52 GMT\r\nexpires: Tue, 18 Aug 2026 05:27:54 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70530,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 578x1024, components 3","md5":"4b89f4c39d65f057ff844beaa583d7d5","sha1":"5b12a8109cf0e199d115380b8eb7c32a1ad39170","sha256":"54db10ed1dce1b80cdeeba31c10beed01e16e225fc7e68f70846620e20ff7668","sha512":"49bbb3ed2547286b24f630e2449783fec034abd384d5d86e1c068a00376d6588766d5a120ac37edd17c134b85dafab42179073f0c3568c5f0e97a4a49c2504f4","ssdeep":"1536:Uc+YREATNj7HV7MxC7Sdxwi1A45PGrTc1ekKjFHatZ5dUh4r/m9IDJ:UZuHTB7HSTCi6fc1ElcrdK4zmc","tlshash":"7a630250cf1046cab1ed57722a3d6ff3f25db503c6a7806df6da2526f0a888483a4f49","first_seen":"2025-07-26T23:08:54.272467Z","last_seen":"2026-03-03T08:08:10.350634Z","times_seen":45,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/ext/pre_9288474976.jpg","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"169.150.247.40","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Jul 2025 06:11:45 GMT","end":"Sun, 12 Oct 2025 06:11:44 GMT"},"fingerprint":{"sha1":"D7:A2:44:26:5F:AE:CA:43:04:92:49:73:C4:48:A3:61:F6:F2:C8:A5","sha256":"A3:32:41:00:16:DA:A0:92:E3:0D:0F:F4:C9:0A:B8:B9:22:3B:50:DE:DF:7E:24:13:1B:65:07:8D:1B:E8:77:80"}}},"request":{"raw":"GET /ext/pre_9288474976.jpg HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9375\r\nserver: BunnyCDN-DE1-1075\r\ncdn-pullzone: 4336709\r\ncdn-uid: 0f7047b6-2b70-4588-b55a-df9b2a15bf91\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\netag: \"666878c5-249f\"\r\nlast-modified: Tue, 11 Jun 2024 16:18:13 GMT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/14/2025 09:16:29\r\ncdn-edgestorageid: 1048\r\ncdn-requestid: e893e4b85db68eb8339e8c8ab89816d9\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":9375,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"ef21790cf585663ae60fc6ef16bb01c4","sha1":"784b00bcc375bd1c2418835838dcba2f1ee2f429","sha256":"e3980b5d372e54e5c6a3a4f2f008aa1938396fb22d4f93de392a1e01db9b4717","sha512":"770c940a770a9f44de6072d3e946a2e8e934ca457bc623ef4b4c2e07c27160d8e797427eed9c37823a2fa8d3c116ab85818d9b7c89cc137c53167188758371d2","ssdeep":"192:KWGVdODgsxdPUTp+R3g/NcPSTiUwtPjHodZr5mLr5bGaeFZISurjS:tK8jqogWjHodN50xaF5","tlshash":"42128f467bcd5441ec1c0376fc2c66453a60ad48cfa4668771981babef3a5edbd841f0","first_seen":"2025-02-22T06:26:01.479441Z","last_seen":"2026-01-15T05:39:21.011774Z","times_seen":16,"resource_available":false,"data":null}},"time_used":892,"timings":{"blocked":843,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.clporn.com/favicon.ico","fqdn":"www.clporn.com","domain":"clporn.com","tld":"com"},"ip":{"addr":"172.67.222.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:02.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clporn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 02:56:44 GMT","end":"Sun, 09 Nov 2025 03:55:26 GMT"},"fingerprint":{"sha1":"5A:F6:F4:35:71:1B:E9:42:58:FC:26:5A:EE:F5:C9:12:AF:9A:61:26","sha256":"86:98:2B:3C:AC:C8:32:9D:CE:71:89:3D:D9:41:6E:2C:A0:12:61:C0:BA:6A:0B:56:5B:7C:A3:4B:57:C6:C7:30"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.clporn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 Aug 2025 05:28:02 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 1150\r\nserver: cloudflare\r\nlast-modified: Sun, 21 May 2023 03:45:32 GMT\r\netag: \"646993dc-47e\"\r\nexpires: Thu, 30 Jul 2026 03:53:25 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, no-transform\r\nage: 1647276\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Br%2FUQSc8iY%2BhqyazzS%2BHOGKHrMxiBKFdlogrsvjoGQjxoKnn9fzDnAFogWjGtlS2DI33HXC65pDyNWwsUiAXkgQeQjX%2BbChkn9RW3w%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 970f0168e9d256ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"7bce878d4d59681219dd7ee7b31d501f","sha1":"8078782a63dd8997b9537de46f1c19c0b60737ce","sha256":"19658bac1ca076be044dc8e1289ae869efd6847cc8d61405f1f6aeea11904dcf","sha512":"020763d535f44dfca6aa362c79c6f6a58bbaac6251264c36cb7277bdd3ef928122030d0f7ae12d5cc2b6b186ff8ad21d9d4019c9f51aed340720ce8a9a0802c3","ssdeep":"","tlshash":"ed217d82954145a8eda50f312233181893bfbf97fe74f30ead50b1705b372e400759a6","first_seen":"2024-05-18T21:25:43Z","last_seen":"2026-05-24T12:50:40.864498Z","times_seen":403,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asianpornxbb.sbs/wohesangenverdemenghuanshenghuo2gongzhudebaihuluolichunfeiyuanchushou/thumbnails_001.jpg","fqdn":"asianpornxbb.sbs","domain":"asianpornxbb.sbs","tld":"sbs"},"ip":{"addr":"104.21.23.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0b45ee2e.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 29 Jul 2025 11:04:12 GMT","end":"Mon, 27 Oct 2025 12:04:05 GMT"},"fingerprint":{"sha1":"9E:33:52:5F:4A:DE:5B:B0:7C:5D:C1:66:E4:50:65:4A:1B:B3:9C:42","sha256":"80:68:D6:B7:54:92:5A:F8:74:63:26:7D:33:1D:CE:E7:1F:48:FB:DA:C3:33:14:A8:8A:C8:55:B4:88:C0:74:4B"}}},"request":{"raw":"GET /wohesangenverdemenghuanshenghuo2gongzhudebaihuluolichunfeiyuanchushou/thumbnails_001.jpg HTTP/1.1\r\nHost: asianpornxbb.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 154984\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vlxlMb5TcJZZvViqVhpJrIyNw3fn%2B3nkyNeZx1deaF3%2FebHXTfu6X5El0M7Sg6IK7n4MEr%2FBlzWWZbFMNotx0qPu%2B1fAcO9HbpIaN%2FOa\"}]}\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\netag: \"29584384d5dad353cbd5727eaa99015b\"\r\nlast-modified: Wed, 01 May 2024 19:18:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nage: 1481221\r\ncache-control: max-age=31536000\r\ncf-ray: 970f01510f7d0b65-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":154984,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 2160x1920, components 3","md5":"29584384d5dad353cbd5727eaa99015b","sha1":"d39e61f120162c47a51eea7bf7a9f40ad6c3f179","sha256":"bdd3df6f17242b30e55ea8ec522c5a1ad23ba65dad5ac4a58bc5f4ee61b8e936","sha512":"6e0f34d9f2cc5c61af3b94319019635fc875e48e55e7a58013d9b1e31c277895ff2434aa6902aeca0a0e3209420985e2c8c3bab6372a41abc5adeb1f25d65275","ssdeep":"3072:WUJyOyPM3GGKXPXN0NIZFoqyvp7E/HBUx3DTvUrC2ZsQSRYPD1YNT:WUUJPkjkkI0qEp7EfBUx3/vUR1SA1Y1","tlshash":"54e3120726ebe420c42a537268bb03171d2f5aca23bf5549478db617c457bab6cce723","first_seen":"2024-05-05T17:02:34Z","last_seen":"2025-10-16T15:47:39.560433Z","times_seen":88,"resource_available":false,"data":null}},"time_used":3180,"timings":{"blocked":878,"dns":22,"connect":22,"send":0,"wait":11,"receive":5,"ssl":2198},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ch.hdsex.org/favicon.ico","fqdn":"ch.hdsex.org","domain":"hdsex.org","tld":"org"},"ip":{"addr":"190.2.144.111","port":443,"asn":49981,"as":"WorldStream B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdsex.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 Aug 2025 00:57:14 GMT","end":"Sat, 01 Nov 2025 00:57:13 GMT"},"fingerprint":{"sha1":"FB:53:86:1E:C6:2C:83:8C:32:38:7F:12:81:B6:FE:3F:4E:C0:9C:A3","sha256":"8C:2F:02:8B:4C:83:10:3F:55:5B:8E:23:5F:1D:3A:45:90:6B:9D:51:C1:19:1F:C9:4A:78:E2:4D:37:CE:AB:E6"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ch.hdsex.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 18 Aug 2025 05:28:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 51\r\nlocation: http://hdsex.org/favicon.ico\r\nserver-timing: mw.not-found;dur=0.003286,mw.redirects;dur=0.38894,mw.user-country;dur=0.001439,mw.language\r\nx-envoy-upstream-service-time: 2\r\nx-envoy-decorator-operation: itube-gw-web.master.svc.cluster.local:8282/*\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":1123,"timings":{"blocked":-1,"dns":57,"connect":61,"send":0,"wait":23,"receive":1,"ssl":866},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.embed-player.space/24/05/03/1113901-139.jpg","fqdn":"images.embed-player.space","domain":"embed-player.space","tld":"space"},"ip":{"addr":"51.77.85.40","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"images.embed-player.space","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Jul 2025 05:53:31 GMT","end":"Sat, 04 Oct 2025 05:53:30 GMT"},"fingerprint":{"sha1":"AB:0C:04:A5:9A:88:D6:DC:8F:81:56:10:E6:37:41:5D:60:BD:9F:1A","sha256":"2D:66:A7:57:12:2E:72:30:B6:E8:EB:FA:7B:90:F9:57:BC:DA:68:04:25:DB:EC:01:78:E0:B4:82:AB:2C:90:3A"}}},"request":{"raw":"GET /24/05/03/1113901-139.jpg HTTP/1.1\r\nHost: images.embed-player.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 18 Aug 2025 05:27:58 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 13290\r\nLast-Modified: Mon, 10 Mar 2025 19:19:22 GMT\r\nConnection: keep-alive\r\nETag: \"67cf3b3a-33ea\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13290,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 405x406, segment length 16, comment: \"Lavc58.35.100\", baseline, precision 8, 640x360, components 3","md5":"e7ba0168871436c97c574ef30ad7f07e","sha1":"75e7521cfbcc892a396c9c32787c5432b95e057b","sha256":"ac9bf757d300abc859eaf4ee84a51108aa64f23e7a0a94e1c582da59fb70b9d9","sha512":"16039595d45bbe538f204f3844735383e7dc837b07c7a847820f28a4813d9b0326ee063bc72747e8b460d787202a8d57da7ebf935d01fa6cb899923560f2d6e2","ssdeep":"384:m3qt2HWhCLrEX9yf47bhAR2LDJ1TyodBp1FCfLZ2LLr:mZHnPEM47bA2LvWW1F4N23r","tlshash":"b552c17e47e991f7fcdb40fe62712da2d1c91a10a906f1ec5d4985cf50e90906346e4b","first_seen":"2025-08-18T05:29:08.776536Z","last_seen":"2026-03-02T10:40:01.5378Z","times_seen":6,"resource_available":false,"data":null}},"time_used":2679,"timings":{"blocked":486,"dns":5,"connect":41,"send":0,"wait":44,"receive":1,"ssl":2083},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.youtube.com/vi/6lsOFuAkmAY/0.jpg","fqdn":"img.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:06.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"GET /vi/6lsOFuAkmAY/0.jpg HTTP/1.1\r\nHost: img.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18473\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 18 Aug 2025 05:03:36 GMT\r\nexpires: Mon, 18 Aug 2025 07:03:36 GMT\r\ncache-control: public, max-age=7200\r\nage: 1470\r\netag: \"1562593994\"\r\ncontent-type: image/jpeg\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18473,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3","md5":"5c2f7b2cc310e40e6e38dd5a0d204bb2","sha1":"f1e4eca7db2f1740436f67a274a478d545523534","sha256":"6669594aaa25ecb7c0c023fd6965a046b9db4ba91b2627f991c15ab5cb1e3cff","sha512":"d1961e1702efaa2c94cec2d7926c7072f7879a5d1c425a0ad116fc147f0238938633f49c595d10e955e1da5a86bf39f0ec4117605a93c9e63c5e51f1381fc6a7","ssdeep":"384:39KIoqtPZtSnfxQl47H0JcNWUytGW1oAkj1MhQ8cbPjvUKXPS:tKIrtPZtuzkM63Q1MNMbUaPS","tlshash":"ef82bf0321af81c7d05b11a28a5905e4f14daca8b0fa7d15e91faf1fd9cd35528a1ef2","first_seen":"2025-07-27T03:07:07.004823Z","last_seen":"2025-08-18T05:29:08.777587Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1042,"timings":{"blocked":212,"dns":596,"connect":33,"send":0,"wait":15,"receive":5,"ssl":165},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xvideosrei.com/wp-content/uploads/2021/06/novinha-se-masturbando.jpg","fqdn":"xvideosrei.com","domain":"xvideosrei.com","tld":"com"},"ip":{"addr":"194.102.104.213","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xvideosrei.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Jul 2025 12:24:51 GMT","end":"Tue, 28 Oct 2025 12:24:50 GMT"},"fingerprint":{"sha1":"A0:30:D4:FA:D2:DC:B3:94:F2:3B:8A:C2:5F:7C:B1:DA:5C:3D:4F:12","sha256":"04:44:9F:44:21:F8:A8:56:32:CF:41:4C:93:54:3A:6E:A7:A0:39:F9:96:6D:E7:DB:0B:82:E4:63:3F:7A:BF:19"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/novinha-se-masturbando.jpg HTTP/1.1\r\nHost: xvideosrei.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 18 Aug 2025 05:27:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 34325\r\nlast-modified: Thu, 10 Jun 2021 21:11:41 GMT\r\netag: \"60c2800d-8615\"\r\nversion: MS25061701\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=2592000, must-revalidate\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nx-served-by: xvideosrei.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34325,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", progressive, precision 8, 600x337, components 3","md5":"d1125d6dd0122f217320ab94738e12b5","sha1":"601c1a4d4c9ddba916333212880fab22ab722551","sha256":"2d1571d6f85e1186ac1cf8c9a7a4ed076238c99c70722b8e49886c56d7565d27","sha512":"19f88cb455665b108032e3ea7ee8f88c886cb5b088bf1babab5d6ec360f5fec589f0be6774800802f8a925f5d8162f94edbc2ac89cc66e667577d378754e7354","ssdeep":"768:uT/dHu8XI5G5lhFAGw46CjRyKNivb1Bfp8A4LHfE3ux:o/dj5VAn4HjRhwWvLKc","tlshash":"6ef2f1282f8a7ca3bc45b8f426269b16930ad0ac9edfb6153f5fc412a30c1317bd1755","first_seen":"2025-08-03T11:13:53.548971Z","last_seen":"2026-01-14T12:53:34.13097Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3831,"timings":{"blocked":1605,"dns":58,"connect":71,"send":0,"wait":242,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdne-pics.youjizz.com/6/e/d/6ed1655d866a027c738b1672b5adcd641497967548-768-432-269-h264.mp4-1.jpg","fqdn":"cdne-pics.youjizz.com","domain":"youjizz.com","tld":"com"},"ip":{"addr":"64.210.135.113","port":443,"asn":30361,"as":"SWIFTWILL2","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:56.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.youjizz.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Dec 2024 00:00:00 GMT","end":"Tue, 06 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:A8:A8:35:DB:C2:7E:35:C3:7E:2A:75:C8:C8:D8:C6:09:86:45:D7","sha256":"B8:B2:2C:F3:DA:14:43:7C:79:64:F3:2C:36:B2:0A:52:EF:A7:AE:C8:FF:5D:57:E2:D1:26:9D:FD:B8:D7:77:B9"}}},"request":{"raw":"GET /6/e/d/6ed1655d866a027c738b1672b5adcd641497967548-768-432-269-h264.mp4-1.jpg HTTP/1.1\r\nHost: cdne-pics.youjizz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9843\r\nlast-modified: Tue, 20 Jun 2017 14:47:11 GMT\r\netag: \"2673-5526553999c43\"\r\nexpires: Fri, 12 Sep 2025 15:19:18 GMT\r\ncache-control: max-age=10403517\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,OPTIONS\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\naccept-ranges: bytes\r\nx-cdn-diag: ams5-7619-2-3959395-h-0-0---;7619-22-1031166----0-0-0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9843,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: \"Lavc52.123.0\", baseline, precision 8, 308x232, components 3","md5":"f49baf955baf1ad4860b9fa7169a38fe","sha1":"10581c3935bc377d032e7285d97dd25afed11987","sha256":"8d55fb82dad4a5d9db3194b0655ad03a83f6ba2229a0a0c33e5ede2a1320aef8","sha512":"5e1e2950ff8979ec981931f713865d9e00c3d2892115ae29a728e565ddbc58edb4d865dd4de0e221590c451864ed8c7f0e870b4346c9e12df7b56a3f1830b9e7","ssdeep":"192:EFpl4x+QUBvc8Ygr3UP/kOFIzWASnZS8FKf5DeF9PtOO/y0M4ZmSX:EL6kBfYfP/kaKWASZSCJFfGwn","tlshash":"ab12ae4b3c4e6894befa3bb526327605ea9905250c97839c8e6837e4dac1c68f452f90","first_seen":"2024-05-03T23:00:34Z","last_seen":"2025-11-15T14:07:55.480474Z","times_seen":29,"resource_available":false,"data":null}},"time_used":3861,"timings":{"blocked":924,"dns":15,"connect":24,"send":0,"wait":22,"receive":1,"ssl":2859},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.jwplatform.com/favicon.ico","fqdn":"content.jwplatform.com","domain":"jwplatform.com","tld":"com"},"ip":{"addr":"3.167.2.118","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwplayer.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Wed, 25 Sep 2024 00:00:00 GMT","end":"Thu, 23 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"4C:E0:FA:4F:1C:F1:21:A8:0C:37:01:61:F5:1E:8E:A5:44:8B:32:6D","sha256":"AD:70:48:06:72:6A:2D:8A:64:57:6E:0F:E7:FA:4F:8D:8C:CE:C7:24:A9:8D:C7:F8:A0:68:9D:B4:10:0F:49:C5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: content.jwplatform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html\r\ncontent-length: 150\r\ndate: Mon, 18 Aug 2025 05:28:03 GMT\r\nserver: openresty\r\nx-cache: Error from cloudfront\r\nvia: 1.1 53019ee090f087ca6c6fa860098bcd80.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: WVXLcJoNteNzVW-N29wIMDTRb5pLFW_P4SZO9tLF16Ct79V7fBcm3Q==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":434,"timings":{"blocked":-1,"dns":13,"connect":31,"send":0,"wait":421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-18T05:27:54.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vid4.uk","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 18:12:24 GMT","end":"Sat, 18 Oct 2025 19:10:08 GMT"},"fingerprint":{"sha1":"65:09:DC:B4:32:F7:3B:45:30:19:8A:93:8A:6F:F3:C4:48:98:7E:94","sha256":"3A:88:25:C0:A0:93:E0:93:CC:F4:6A:17:74:CE:56:C1:76:37:ED:10:77:32:2C:5B:48:CC:2A:DF:42:18:01:9C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: av4.vid4.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npdojs-line8: host-av4.vid4.uk4.194.8.20-myhost-av4.vid4.uk38.220.248/\r\nphost: av4.vid4.uk\r\npdojs-line355: notjp--myhost-av4.vid4.uk-filteron-\r\npdojs-line963: notjp--myhost-av4.vid4.uk-filteron-/\r\nline1283: URI-/-myhost-av4.vid4.uk-filteron-\r\nline1420: \r\nline1455: -\r\nline14663280uuuuuuuuu: counted\r\npdojs-line1520: ibig--chname--filteron--txtlang--shows-2264\r\ncache-control: public, max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QLpFm4dSxME%2BnmkBSA2s6oG31ul2evKLgqK16z05fAkq%2BH7xCbep31xpUe3EDLFmjFOoENua%2BVuO4QQA%2BDQycaQwtjmapIvAeQ%3D%3D\"}]}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\nx-proxy-cache-192g-la: HIT\r\nxkey-192la: av4.vid4.uk/--av4.vid4.uk-av4.vid4.uk-myzone---yes\r\nx-proxy-cache-gjp: MISS\r\nxkey-g-jp: av4.vid4.uk/--av4.vid4.uk--my_zone\r\nage: 49\r\ncf-cache-status: HIT\r\nlast-modified: Mon, 18 Aug 2025 05:27:04 GMT\r\ncontent-encoding: br\r\ncf-ray: 970f01332c657131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":183483,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (310), with CRLF line terminators","md5":"70dc2de8e55a67a75316794365a86cea","sha1":"7f210b67cf0b04c4c39354b9228467236a848b4c","sha256":"6860506a92f05b6ae6e55b328f297fdf9c38441b4b8006a1b2dfbdfe64a72c55","sha512":"f637ff8c103f4d6e7aeffad5bfbc1734e63d703c747de993e9afacffe4bfe5183713a2a01c7191738a93294b3d3332130a742653262d16d94213ebcff51ce2eb","ssdeep":"","tlshash":"2f11a2975849bc0713b1e5849cffb22e80a22456e2dd4c46b8c704ef7480addad0f15d","first_seen":"2025-06-23T16:04:28.501145Z","last_seen":"2025-09-11T07:55:57.14627Z","times_seen":10,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdntube.b-cdn.net/thumbnails/f3a448e3f96e651ccbb6166d3e5c83c20c88605b.jpg","fqdn":"cdntube.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Nov 2024 00:00:00 GMT","end":"Tue, 11 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BD:3C:C1:59:4F:6B:71:11:98:74:F8:91:CF:28:05:2B:25:3D:C1:21","sha256":"56:9E:B9:49:86:BF:15:5D:A7:49:0E:16:84:E6:D2:EE:80:5D:1B:C8:36:BC:1E:07:E0:92:75:6A:86:8B:0C:81"}}},"request":{"raw":"GET /thumbnails/f3a448e3f96e651ccbb6166d3e5c83c20c88605b.jpg HTTP/1.1\r\nHost: cdntube.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2450\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 114851\r\ncdn-uid: 610bc618-7bcd-4e37-a18e-2efa3a8e9c35\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31919000\r\nlast-modified: Sun, 29 Jun 2025 00:19:35 GMT\r\ncdn-storageserver: DE-1134\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 1102\r\nperma-cache: HIT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 08/09/2025 14:30:28\r\ncdn-edgestorageid: 830\r\ncdn-requestid: e39f05ed1461ae0c3002d1f5a4cd0ab0\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2450,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x225, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"851669ea716d319838f2db48a1c3aac0","sha1":"b806c6a8f71026b7f9012584e25c4ae8b9e8fc5e","sha256":"e105a28321d51580ec1299e501450c0f4a9231c5c3c393b5ef9b36e3c22a48d7","sha512":"607c3dcfb648cad0868058181dcc7750a090419a323055e5ff89cdee7ff85393ca170cae8bf1150d3152cf6ed06bdb12c3febc7981e3607cf9f722d8be3c90a0","ssdeep":"","tlshash":"64513a704234e518cd57ccc68158a8c672aa8fcd0bd69a7a2c9e21edab219f0cc14986","first_seen":"2025-05-23T07:10:10.232012Z","last_seen":"2025-11-15T05:45:33.556422Z","times_seen":76,"resource_available":false,"data":null}},"time_used":2570,"timings":{"blocked":278,"dns":10,"connect":9,"send":0,"wait":6,"receive":0,"ssl":2235},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241010-10/4966f192048e081e666be97afe347c94.png","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:59.890Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241010-10/4966f192048e081e666be97afe347c94.png HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-18","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pornogids.cc/contents/videos_screenshots/10000/10805/preview.jpg","fqdn":"pornogids.cc","domain":"pornogids.cc","tld":"cc"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornogids.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Jul 2025 14:47:11 GMT","end":"Mon, 13 Oct 2025 15:44:35 GMT"},"fingerprint":{"sha1":"19:DD:62:75:7E:64:FF:84:35:8D:3F:A3:86:D0:6C:90:E0:25:6F:29","sha256":"16:2A:73:65:E6:88:9B:E7:7F:C2:87:44:29:5E:7B:D7:8D:3D:DA:A2:2D:74:34:62:D0:BC:66:67:20:5E:42:32"}}},"request":{"raw":"GET /contents/videos_screenshots/10000/10805/preview.jpg HTTP/1.1\r\nHost: pornogids.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 39838\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Mar 2025 16:24:09 GMT\r\netag: \"67cb1da9-9b9e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1566342\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nI2utdKIvSV8wQVd0NZ2SRSTl403sYiKyK21hIHImSkJhTh4qF86l8obI1xvZLvf2Jog%2FBXVwa1KhT8RDCYXZpxh0YkQmZ8D%2B0U%3D\"}]}\r\ncf-ray: 970f014e5809568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39838,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 640x639, segment length 16, comment: \"Lavc60.31.102\", baseline, precision 8, 852x480, components 3","md5":"832b5465f1ebd65be7cd95e2bf7536e7","sha1":"505cf6f02c48640823a19198c6fd891e3ac3f61e","sha256":"924826763968c65717fe3ed2dd620b1ac1ffb95a9a91c1957c7752df183779c6","sha512":"1d4e98dc847c63934b22d44d9f0450b533ea2d4dd40ac3086708e76a88189d02b5b24fe11f359b353283fd4c84384480cf0937677adb48b218dd34c4854b614b","ssdeep":"768:93X9pepeUdJhn6CqjgnUBWcSzSr9WI5w/E3nhlMns:ltpe/dPnsjeUBWqlwM3DMs","tlshash":"2303f193a55688f9ddbdc9f22f70b274ac849390b35c36973991d66930e30294b740df","first_seen":"2025-07-07T18:15:50.292781Z","last_seen":"2025-11-12T01:19:32.001528Z","times_seen":23,"resource_available":false,"data":null}},"time_used":2863,"timings":{"blocked":717,"dns":12,"connect":11,"send":0,"wait":12,"receive":2,"ssl":2092},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chomikuj.pl/Nothumbnail.aspx","fqdn":"chomikuj.pl","domain":"chomikuj.pl","tld":"pl"},"ip":{"addr":"104.20.20.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:00.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chomikuj.pl","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Jul 2025 02:24:17 GMT","end":"Fri, 10 Oct 2025 03:24:13 GMT"},"fingerprint":{"sha1":"ED:AF:6A:5A:23:58:8F:75:8C:69:F2:59:EE:AB:E5:CB:88:6C:9D:BD","sha256":"5C:2C:69:A1:6C:E0:FC:F2:B1:BD:86:16:70:4D:CE:13:0D:A5:66:8B:3A:4C:DD:AB:30:6A:0E:53:A1:A5:F4:3F"}}},"request":{"raw":"GET /Nothumbnail.aspx HTTP/1.1\r\nHost: chomikuj.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://av4.vid4.uk/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 18 Aug 2025 05:28:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 159\r\ncf-ray: 970f0159a9dc56a5-OSL\r\ncache-control: private\r\nlocation: //x4.static-chomikuj.pl/res/19ec4a8d2a.png\r\nset-cookie: rcid=9; expires=Tue, 18-Aug-2026 05:28:00 GMT; path=/; SameSite=Lax\r\nx-server: m52\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sexsex61.com/favicon.ico","fqdn":"sexsex61.com","domain":"sexsex61.com","tld":"com"},"ip":{"addr":"118.107.32.199","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sex83.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 08:23:53 GMT","end":"Sun, 14 Sep 2025 08:23:52 GMT"},"fingerprint":{"sha1":"0B:7E:0A:8A:80:38:2E:69:4B:02:F6:A7:72:1D:5B:21:2E:80:7E:07","sha256":"04:D2:80:6C:EF:4F:FD:E0:06:E2:E3:E5:DA:05:F3:E7:26:2E:BB:73:FB:62:DF:F6:50:61:94:FB:9E:42:AD:61"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sexsex61.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/x-icon\r\ndate: Sun, 17 Aug 2025 23:10:49 GMT\r\netag: \"645b773c-10be\"\r\nlast-modified: Mon, 18 Aug 2025 05:00:25 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, memory\r\ncontent-length: 4286\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"da00228045bbdc9fc485eee15ae466f7","sha1":"51acd57ef4439a7e622281388e2aa83d53b3fe33","sha256":"18a2fc0c936b1782fb1f1dec65e9ea9dfff00e1a081594c8c3049a5b435c1d2d","sha512":"b7ba13392ab3c6d8c1077989d482399892c1c094599e798b69dc3c6720b5d26dd6186d414f46cacf8ed48061e091d23978248b63cace28ebc601e41348ce608a","ssdeep":"48:uTOtJTTH7TTS/LY64wSKd2sci/6aq3EDP+3yk:uOH73wSKdEv/3v3yk","tlshash":"e2912fa8edf928bfd22403785f0697f8c8338e1f6ce4593308227c9b272ed51848611d","first_seen":"2023-05-17T22:14:46Z","last_seen":"2026-06-04T23:04:17.902241Z","times_seen":565,"resource_available":false,"data":null}},"time_used":2030,"timings":{"blocked":-1,"dns":4,"connect":287,"send":0,"wait":299,"receive":14,"ssl":1355},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidmo.org/favicon.ico","fqdn":"vidmo.org","domain":"vidmo.org","tld":"org"},"ip":{"addr":"89.248.193.244","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"vidmo.org","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 07 Jul 2025 00:00:00 GMT","end":"Sun, 05 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3E:7A:0A:9A:4C:6E:5B:D4:A1:C7:2A:33:CA:0A:32:CC:26:1D:4E:3B","sha256":"D9:EB:41:75:C5:D0:AD:53:90:A5:BA:C5:2B:7C:04:1C:30:8A:12:4E:B5:38:EC:03:91:5E:D7:E7:6E:C0:52:7A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: vidmo.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:28:05 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 5430\r\nlast-modified: Sun, 14 Oct 2012 21:41:38 GMT\r\netag: \"507b3192-1536\"\r\ncache-control: public, no-transform\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5430,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"6b6734885d5e4ff9dbb7d82ba6023598","sha1":"3c454d68a346b375ed7b59a131699061e7393b1f","sha256":"0f8e5edd4348eaa11881bf6150baf7b3182b1c3e29c6378e0e921afce7d91819","sha512":"e3d4562da250a2096981bd9a211efa643400ebe18a2d0765e750454b4cf75cb31e9594d8fccfa61a4c86e1c08bbf130dbc635c2974996838444cef029bf3eb50","ssdeep":"96:12lbcmeAscXXZCGv56cOtAe8CKfMibd+tLMiWMyuFa:0muCQpBQ6d+ti","tlshash":"a9b173c151c1e587e0274f38e237d750b1fa2c13bab0ea85156b7a555a731898317b1e","first_seen":"2023-05-05T08:02:57Z","last_seen":"2026-05-24T12:50:40.724286Z","times_seen":692,"resource_available":false,"data":null}},"time_used":2019,"timings":{"blocked":120,"dns":24,"connect":91,"send":0,"wait":133,"receive":1,"ssl":1546},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241010-10/ee672bcb67c96594fb98ac2013991a99.png","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.820Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241010-10/ee672bcb67c96594fb98ac2013991a99.png HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-18","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"en.chezcathy.com/favicon.ico","fqdn":"en.chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"138.199.36.8","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"en.chezcathy.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Jul 2025 06:11:38 GMT","end":"Sun, 12 Oct 2025 06:11:37 GMT"},"fingerprint":{"sha1":"B4:A5:B1:F8:A2:5D:C7:30:99:D8:DD:31:98:46:A9:E0:E9:EB:38:10","sha256":"67:FF:B5:47:0A:59:5F:5D:83:44:66:E2:65:5C:7E:94:6F:9E:DB:6F:47:3F:06:6A:39:EF:25:38:43:6A:9C:D9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: en.chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:28:04 GMT\r\ncontent-length: 1406\r\nserver: BunnyCDN-DE1-1048\r\ncdn-pullzone: 4336722\r\ncdn-uid: 0f7047b6-2b70-4588-b55a-df9b2a15bf91\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\ncache-control: public, max-age=2592000\r\netag: W/\"1406-1744916363745\"\r\nlast-modified: Thu, 17 Apr 2025 18:59:23 GMT\r\nx-powered-by: Express\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/14/2025 09:15:07\r\ncdn-edgestorageid: 1054\r\ncdn-requestid: a1a90441ff52d474c4f45eb09c375374\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel","md5":"8851a1b28ebe567b927c9ae6600a8fc6","sha1":"113da6a02dff45d4b9c0d3c9ae531445a8c7b687","sha256":"b545a5091485f5dd485f0e9d2abcd55a06b22f9359c6da8955b8da7b1d3c9212","sha512":"f438008028a354d1600c8af6a136e3991dcbaa188759f20c22a6c76a3170390c14578561d886272741f029f6f161b3711afb959385bbf49166ccf170e3edf95d","ssdeep":"","tlshash":"2121e1213397e353db451ef532244b944243d32906f79b9411e80685aa4f3301fbc373","first_seen":"2025-05-02T17:12:40.010154Z","last_seen":"2026-05-24T12:50:40.566223Z","times_seen":635,"resource_available":false,"data":null}},"time_used":1463,"timings":{"blocked":-1,"dns":122,"connect":59,"send":0,"wait":50,"receive":0,"ssl":1171},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yaebus17.ru/favicon.ico","fqdn":"yaebus17.ru","domain":"yaebus17.ru","tld":"ru"},"ip":{"addr":"5.129.208.148","port":443,"asn":50923,"as":"Metroset","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:04.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yaebus17.ru","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 00:14:59 GMT","end":"Sun, 09 Nov 2025 00:14:58 GMT"},"fingerprint":{"sha1":"3B:2D:A6:ED:58:65:42:BD:4E:6F:49:5B:21:EF:A4:99:EA:0C:44:51","sha256":"8A:70:89:69:EE:5D:63:08:B9:B3:BE:BC:8D:0E:A1:7B:F9:3D:C2:1C:02:F2:F6:FB:B8:71:17:C9:12:2E:CB:4D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: yaebus17.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:28:04 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 610\r\nlast-modified: Thu, 12 Jun 2025 21:38:06 GMT\r\netag: \"684b48be-262\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":610,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"82d129eca98a23d7b462fe0b87f4dd8b","sha1":"963962a8d1111a1a6e84c5132a18efa7ef1c934f","sha256":"09f127c6e5f375775b768353e01a5d973640f8cb827f9d7535faf9b2fc5acf11","sha512":"480f25d0ce99106275134146656037cd713cb6342f5397e00166820ebfb6112af888ee3ab4e7bcf2008a8028db0b4b5257d1fde5d3a43973a0a384573d8507ce","ssdeep":"","tlshash":"11f0625195192ab98c46a1269f58ae80d93f011876e15d60634970a5a4ea91b1aea800","first_seen":"2025-06-11T07:13:33.871574Z","last_seen":"2025-11-17T02:01:22.224616Z","times_seen":124,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn77-pic.xvideos-cdn.com/videos/thumbs169ll/49/9a/7e/499a7e6fb886ea8e53fbc5dc468617a4/499a7e6fb886ea8e53fbc5dc468617a4.22.jpg","fqdn":"cdn77-pic.xvideos-cdn.com","domain":"xvideos-cdn.com","tld":"com"},"ip":{"addr":"185.76.9.7","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xvideos.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 03 Oct 2024 00:00:00 GMT","end":"Mon, 03 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"27:E9:05:C0:A5:FC:40:B1:D6:44:DC:D3:39:EE:11:78:2C:E2:F0:78","sha256":"5F:C0:7A:63:35:DB:CB:28:20:1B:40:83:91:40:36:2B:7A:97:63:77:7A:67:2A:45:FF:4E:80:15:A3:03:3C:4A"}}},"request":{"raw":"GET /videos/thumbs169ll/49/9a/7e/499a7e6fb886ea8e53fbc5dc468617a4/499a7e6fb886ea8e53fbc5dc468617a4.22.jpg HTTP/1.1\r\nHost: cdn77-pic.xvideos-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10644\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Sun, 17 Nov 2024 02:04:35 GMT\r\ncache-control: max-age=10368000, public\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBuUwJBgH3uUkrAAwBJRPCPQH3gBJCAAgBj/Q62AGB\r\nx-77-nzt-ray: 5451992da7b8403cdab9a268f0d20628\r\nx-accel-expires: @1763025184\r\nx-77-cache: HIT\r\nx-accel-date: 1752657953\r\nx-accel-date-max: 1731921181\r\nx-77-age: 2836921\r\nserver: CDN77-Turbo\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":10644,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", progressive, precision 8, 352x198, components 3","md5":"249a128dd771ca86f2d0547b15e953c2","sha1":"f129fc0f078341525da9f7b373967452f551d3a6","sha256":"76b10ca47129047f201d762c7fcaf34fcf4626b1fdce7ce55ae6b419046245c5","sha512":"190f0fb7d3e4509b684d0b8c2a217f9a4067afddaed3c8a91807b3d3bd324f5f34915ca5508bffdac5a732c795cb282edadb64517de4e34301a4cab3fd8990cc","ssdeep":"192:vW2xoB9Iv0WfpVk1Q7PM+Wn8PKUU3vjXRBFKcFv6JGkw+Ew7mTST8Nt/4jvNFR:GCvvf3k1Q7fWOU3LfFLJPb+1muYQFFR","tlshash":"aa22bfebfa0b0dc6e51315f835a4e40ae72cc426e92b70617570a1cb729e2657e91f3c","first_seen":"2025-08-18T05:29:08.782497Z","last_seen":"2025-08-18T05:29:08.782497Z","times_seen":1,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":21,"connect":16,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241010-10/4966f192048e081e666be97afe347c94.png","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.412Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241010-10/4966f192048e081e666be97afe347c94.png HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-18","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/yandex-metrica-watch/watch.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:56.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/yandex-metrica-watch/watch.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 87488\r\ncf-ray: 970f014cfb9a56a4-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.395.0\r\nx-jsd-version-type: version\r\netag: W/\"36260-HLLsx6K8U4T/kxrxLSlGyF2f0RU\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230153-FRA, cache-lga21991-LGA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 37902\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hzROs9hztEFh3XUUpF6zXEEFXhXlkX1uZj04aLA2PGsJLgjwKqN8Jd3LeG9y5rXCjACZ2b0NsxVuza%2B%2BJWFFM86OY88AeFmyXb%2Bcxd5br5629ZcvJXPVu4RkNGUZ%2BhcENZ8%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":221792,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (675)","md5":"a05c7e05d346fbefce649220d1661355","sha1":"8f48ab21bc78edcf0c6c7bf534637e31615d235c","sha256":"eb4f0d58fe9d3d1ef0899348cd0535e42f815474aaaccb9456b60a558f00af1a","sha512":"5c24ce3b45cd940cdce666d9de04a29c7dc05a85867b24a2e2cb35556e851d02e88d29a48a26f5dac9ee322e20e422c480a94d7879a07f88aca441827d7c3405","ssdeep":"3072:J9XPTcXV4c3ZeEGCHE18Ua3OTpa/0m0hal6IugZ6rkZQRIWqDZ1sc:J9fTcGd7aE1rTAh0hZg0rkNWqcc","tlshash":"3b24d8d936927466937334b4a02f410f72be78a6f1088958f185e9d93e78dac5237f2c","first_seen":"2025-08-15T16:30:03.150891Z","last_seen":"2025-08-19T17:42:12.75921Z","times_seen":20,"resource_available":true,"data":null}},"time_used":2060,"timings":{"blocked":2,"dns":10,"connect":23,"send":0,"wait":22,"receive":3,"ssl":1986},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i1.wp.com/fmtu.sltututu.com/upload/vod/20240507-1/496d34ab19a8057cadfe7eb544d12457.jpg","fqdn":"i1.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 Aug 2025 19:44:50 GMT","end":"Tue, 04 Nov 2025 19:44:49 GMT"},"fingerprint":{"sha1":"E3:33:F6:CB:1D:54:80:51:6E:94:B6:72:D6:8D:22:88:EC:CF:5C:C2","sha256":"A2:6F:1C:4D:B8:5F:EC:D5:D1:31:F6:0A:A1:D3:C4:05:9B:6A:16:37:15:5E:C6:BE:AE:95:93:6E:79:6F:7D:8E"}}},"request":{"raw":"GET /fmtu.sltututu.com/upload/vod/20240507-1/496d34ab19a8057cadfe7eb544d12457.jpg HTTP/1.1\r\nHost: i1.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6132\r\nlast-modified: Thu, 22 May 2025 17:30:31 GMT\r\nexpires: Sun, 23 May 2027 05:30:31 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://fmtu.sltututu.com/upload/vod/20240507-1/496d34ab19a8057cadfe7eb544d12457.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"04792861103791f6\"\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 2\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6132,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x320, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"161f98daadac16c6e710cc19d4af5fb4","sha1":"f0aeb011ca77c1488f7f1c3a50a05ae55a7507ea","sha256":"0aea46cb3629457d752bd27743912b38366cf02a4a2c7cde3e6a6afaad0e2d90","sha512":"9f4194561a0a99941c140b447b98b17bd75820b78e0a38be002f3ed833d705ae8999162ca84e5344cf24151230240c3fb404b37039d4e1106af488665dc3363d","ssdeep":"96:Db2xtif2xv7LsKy8pqdmeWz7bOAO+b2tK/4G9WlcqLvX5OiNzBfaDZlQ:ws2ZLzkkeUOAL2IR9INLvnBiDTQ","tlshash":"d9c1ae80c99d18bb9004b76b4b1d8721905efbc79724a5b484a584fe6e23277fdbca30","first_seen":"2025-06-06T07:13:00.590488Z","last_seen":"2026-02-25T10:38:27.021004Z","times_seen":95,"resource_available":false,"data":null}},"time_used":3029,"timings":{"blocked":866,"dns":3,"connect":7,"send":0,"wait":10,"receive":1,"ssl":2140},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidmo.pro/thumbs_320/ec/74/ec74a59634ecee11a57dac86a6c1a07b/11994898.jpg","fqdn":"vidmo.pro","domain":"vidmo.pro","tld":"pro"},"ip":{"addr":"89.248.193.244","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"en.vidmo.pro","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 20:44:46 GMT","end":"Wed, 22 Oct 2025 20:44:45 GMT"},"fingerprint":{"sha1":"74:46:04:C7:74:12:A2:65:84:34:3D:72:B8:ED:93:13:5A:09:2A:E0","sha256":"B8:96:1D:42:22:B9:F0:34:20:22:DA:FF:BB:BF:D0:89:2E:9E:C2:8D:4B:9A:26:32:9F:8C:EB:C6:3D:39:39:8B"}}},"request":{"raw":"GET /thumbs_320/ec/74/ec74a59634ecee11a57dac86a6c1a07b/11994898.jpg HTTP/1.1\r\nHost: vidmo.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 32593\r\nlast-modified: Sat, 13 Jun 2020 04:41:13 GMT\r\nexpires: Fri, 03 May 2024 00:41:08 GMT\r\ncache-control: max-age=604800, public, no-transform\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32593,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", baseline, precision 8, 320x240, components 3","md5":"b8e9f9b6124e4453632aa85f7630ece2","sha1":"f407f81dc628b52b5cc8594b18f5af3298c5e9b3","sha256":"98224172ab6e369649c10bd26f443e9022d543f0de4340f69a756e85b14b274a","sha512":"188cb5e612da4cf50c90cfb05da6a14625c9214da728f4a22f6eb031d41c23967779d6c555d5c86bc212fbe7c71a3b03724dab92a728109be5b7ab54b38ad33b","ssdeep":"768:/v9AY2AR50cbUavY7/8jzw9aXLASXiO+dsej/D:/viURWcb+9dSXj87","tlshash":"d9e2f1252b37eb195cab2ec0f25788a3791743695828878cd364df33fda025f59089dd","first_seen":"2025-07-23T04:06:22.113073Z","last_seen":"2025-08-18T05:29:08.784444Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2532,"timings":{"blocked":-1,"dns":11,"connect":55,"send":0,"wait":79,"receive":46,"ssl":2331},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"weav.xyz/favicon.ico","fqdn":"weav.xyz","domain":"weav.xyz","tld":"xyz"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"weav.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Jul 2025 12:07:12 GMT","end":"Fri, 24 Oct 2025 11:03:08 GMT"},"fingerprint":{"sha1":"8F:C5:59:D8:36:9A:B0:92:87:33:0E:4D:16:3F:92:90:AA:7F:95:BF","sha256":"91:3F:7F:73:99:85:F6:AD:3D:12:5D:6E:FF:C6:3F:BB:3C:58:52:D3:17:06:27:CC:F5:DB:67:D3:3D:7A:19:11"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: weav.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Mon, 18 Aug 2025 05:28:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 42149\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FhI0xEGLIw4y3OXNGTkcAxvZQ6x7JNBY1VtYwvVpaZgaGZ6yi7vrTG01RexniH7zkvWuiMkT1RAcyB35TWpswpXPjEPLEA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 970f0170d8885699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":1002,"timings":{"blocked":-1,"dns":49,"connect":23,"send":0,"wait":32,"receive":0,"ssl":854},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.redwap-cdn.com/183/183694/183694_320x180.jpg","fqdn":"img.redwap-cdn.com","domain":"redwap-cdn.com","tld":"com"},"ip":{"addr":"172.67.128.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redwap-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Jul 2025 05:20:53 GMT","end":"Tue, 14 Oct 2025 06:19:25 GMT"},"fingerprint":{"sha1":"E7:F7:FA:2A:5D:A6:BA:D2:E0:AF:E3:96:4A:78:DD:D8:E9:E5:B9:7D","sha256":"E1:0F:7D:F1:E3:A9:AF:DB:97:00:1E:02:8C:23:56:BB:78:55:7C:E5:89:02:1C:51:3A:E3:DF:04:09:BE:44:09"}}},"request":{"raw":"GET /183/183694/183694_320x180.jpg HTTP/1.1\r\nHost: img.redwap-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10619\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-object-meta-mtime: 1460221042\r\netag: ceda16b98f81b5c444cc24e9a0e9646b\r\nlast-modified: Wed, 03 Apr 2019 08:16:24 GMT\r\nx-timestamp: 1554279383.50593\r\nx-trans-id: txea50ea8aabf142c8a662f-0063c99d8b\r\nx-openstack-request-id: txea50ea8aabf142c8a662f-0063c99d8b\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\ncache-control: max-age=31536000\r\nexpires: Tue, 19 Aug 2025 04:22:11 GMT\r\nx-cdn-host-id: ds9225\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nage: 90347\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w2P9s12uZOiazbe529kaV7JGnr9klb9F4uu6HGBxBNLZRbqL4WONcTYELVcEVbR033KZXffNFMJWUoDanTZOZ2Bev%2FDqBSHDaWl4SXxCpN4%3D\"}]}\r\ncf-ray: 970f01523daf56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10619,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 320x180, components 3","md5":"ceda16b98f81b5c444cc24e9a0e9646b","sha1":"bc1477fc46c02babf3aeca9278b68fd4bc0658f2","sha256":"3767bd308185274f03390b5d217676bb86373f8eb2956229df56371e31c4b03d","sha512":"978efe5a6b78a1ae3a1abc75eddbd7617ffdbda463597b0a4adf54ef9e44379e481cae07b245c42984d8cab702492b1ec820b704e75a1ebc249e288467cdf2de","ssdeep":"192:2fqLLfeyykxefaRMuohElsigoklzRQ+nvht/f/5xHnYoNa9yllHuq1MpI:2ZfauLEmigoUQmnbhlH91kI","tlshash":"b722bf91b9dc94d1fe1aac3bca2cbe0e88db61240d7168e563f16c4c5ecf1149d85a4c","first_seen":"2024-05-04T17:04:26Z","last_seen":"2026-04-03T21:47:16.544917Z","times_seen":70,"resource_available":false,"data":null}},"time_used":3413,"timings":{"blocked":994,"dns":8,"connect":51,"send":0,"wait":46,"receive":1,"ssl":2273},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.itsmyfetish.com/favicon.ico","fqdn":"m.itsmyfetish.com","domain":"itsmyfetish.com","tld":"com"},"ip":{"addr":"172.67.149.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:04.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"itsmyfetish.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 23:58:45 GMT","end":"Mon, 29 Sep 2025 00:56:04 GMT"},"fingerprint":{"sha1":"DD:1A:02:29:63:49:03:7D:D7:74:A8:C7:9F:0B:E7:CE:F2:0B:35:41","sha256":"28:DC:40:7A:89:0D:A6:C9:41:3C:6C:1A:59:38:F1:8D:F2:C4:88:1F:D7:9F:E2:E0:14:DF:92:31:D5:AC:32:EB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: m.itsmyfetish.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Mon, 18 Aug 2025 05:28:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: DENY\r\nvary: Cookie, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lpIbI9f0Oqe%2BD3yFyGkIq3rb7Lvdzh%2Bf4rLddVOnuoWSSl7loQnz4HdwZg87HisOa7qiVo8Qpblb37RjACHawBAEjLB4Bm%2FWXkrP%2Fbzbrg%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nset-cookie: s_user=a606602e-2ebf-43f8-9555-f24278b3f0f6; Path=/; Domain=m.itsmyfetish.com; Expires=Sat, 14 Feb 2026 05:28:04 GMT\r\ncf-ray: 970f0176daab569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realincest.me/thumbs/31/7786039698555886031_0.jpg","fqdn":"realincest.me","domain":"realincest.me","tld":"me"},"ip":{"addr":"172.67.168.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"realincest.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Jul 2025 01:42:23 GMT","end":"Tue, 14 Oct 2025 02:39:58 GMT"},"fingerprint":{"sha1":"BD:B9:1E:8A:7F:99:07:F9:C0:F6:BA:A2:3D:B2:46:07:FC:82:AD:51","sha256":"8A:C6:14:58:B4:C1:7A:69:3E:49:45:DF:71:53:0D:FD:6A:AD:0D:9F:61:51:35:CB:0A:5C:C8:3B:E5:56:0F:C0"}}},"request":{"raw":"GET /thumbs/31/7786039698555886031_0.jpg HTTP/1.1\r\nHost: realincest.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5291\r\nserver: cloudflare\r\nlast-modified: Sat, 19 Feb 2022 18:20:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"621134fe-14ab\"\r\nexpires: Wed, 20 Aug 2025 03:00:36 GMT\r\ncache-control: max-age=259200\r\naccept-ranges: bytes\r\nage: 95240\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9ShX9gIg6EdltxNdSB8wOUGKOcehfCX6DAUVq9wEHo8691sNsArpY%2Fu7VkixPc162c8JZOMYfJ%2FPAJflhZ6vbt%2BWvn2KOLHDijCP\"}]}\r\ncf-ray: 970f014959840b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5291,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 240x180, components 3","md5":"a62232dfed7bbbc928c03d0ae2e057d6","sha1":"2390bb15c645cb92eb8651d09a02e6915ded7b94","sha256":"7a5b322d2dc762613273b5710cd46a153f1537a86f7fe9c34e5d51165ebf24e2","sha512":"5209625850fe78062bfd60f0a6f728b2a773075d1df27ad46cec875552632ce712754c5ab0633f58a5b4fc14f5c41d0346c1632d5a7000929899adcb77673156","ssdeep":"96:rRf/hDx/jC6oZe5H0n+uDEAfw4vF+H/eM2kkMsbxkJ5HLCXB:rdZx/m6ocH0n94E+HGMObxkJg","tlshash":"79b17e15ba607630e754dbb21f7a1710f3679f504593fbae241ee2c461b40284f9bd29","first_seen":"2025-02-08T03:33:08.389119Z","last_seen":"2026-01-24T11:08:05.502651Z","times_seen":31,"resource_available":false,"data":null}},"time_used":2512,"timings":{"blocked":171,"dns":5,"connect":4,"send":0,"wait":15,"receive":0,"ssl":2300},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.com/upload/vod/20241010-10/77836b3af04b16aae84a86fd4da28dce.png","fqdn":"www.9188porn.com","domain":"9188porn.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9188porn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 Aug 2025 03:09:41 GMT","end":"Tue, 04 Nov 2025 04:07:22 GMT"},"fingerprint":{"sha1":"EB:B8:01:44:FF:51:3D:14:69:83:0A:39:AA:EF:CC:38:7E:50:BE:11","sha256":"05:E5:3A:05:E1:05:99:09:0C:DA:48:BA:A6:C6:72:62:2B:A1:11:85:17:AA:84:E0:C6:E1:0F:2E:68:63:E2:BD"}}},"request":{"raw":"GET /upload/vod/20241010-10/77836b3af04b16aae84a86fd4da28dce.png HTTP/1.1\r\nHost: www.9188porn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Mon, 18 Aug 2025 05:27:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CpQuxzFHXEcaOIPKACNp9a09sg4IUlshMCLnezb3gGAvkbdoTXjz11Q9Ze5kEFEK5ssrS8lb9nZh4ngEMlU4DM47BzZ1g2m84p81Nxr%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 970f01379e410b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornoperso.com/wp-content/uploads/2022/02/polly-fans.jpg","fqdn":"pornoperso.com","domain":"pornoperso.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornoperso.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Jun 2025 10:31:44 GMT","end":"Thu, 18 Sep 2025 11:30:11 GMT"},"fingerprint":{"sha1":"DB:55:F8:33:AA:13:56:2E:55:12:14:F2:6B:C2:7E:C8:8C:1E:32:53","sha256":"9B:70:D9:A9:BB:50:01:07:B8:70:9B:EF:08:46:8F:DF:AF:FB:1A:72:FF:EF:60:7F:E1:4C:02:F1:8A:6C:FA:4F"}}},"request":{"raw":"GET /wp-content/uploads/2022/02/polly-fans.jpg HTTP/1.1\r\nHost: pornoperso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 30087\r\nlast-modified: Sat, 12 Feb 2022 07:45:27 GMT\r\netag: \"62076597-7587\"\r\nversion: MS25061701\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=2592000, must-revalidate\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1761513\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D5PKqwaf9E0I3XV30fD3gd6LPEvQ5IJ9D0bhrfiOBCj03grFlONO2K8lIwFpAccinMNW7EcznKE5MymyiFZniXamj314fg1cbd9BGw%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 970f014348720b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30087,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x337, components 3","md5":"7f17d5b89b50a4f51afb79f1fd357286","sha1":"91e5fbce4ec83cb969be6abcbe33cb1ba19b0900","sha256":"24d84763c8b532c1565a10aaa2b358df65941cbdda5a179175c5f4431164118a","sha512":"672b8cfc87bdaac9c6c49a504f1196a71a2fff477aac529a645907a0d3992c4482192e25b61b591437a471bb6f01ffc2282c18c53777cb58bf77c674c0af5a49","ssdeep":"768:7Wg9RPiMuwnnAuR/SKEzW0lSkkhJYFQQ8A/yG4oo/giFxu:7vRainAI6RzW0lKYFQ8Ehxu","tlshash":"f8d2e16642b774786d0bde5d8f86a2ee90d4881e3e7363b0db463536e7010cade4c4e9","first_seen":"2025-03-21T10:58:41.201357Z","last_seen":"2025-11-26T07:53:44.449731Z","times_seen":18,"resource_available":false,"data":null}},"time_used":3122,"timings":{"blocked":1277,"dns":9,"connect":14,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20241116-1/8de5e714d69f786721bf73ce6690146c.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.62","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20241116-1/8de5e714d69f786721bf73ce6690146c.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 42083\r\nlast-modified: Sat, 16 Nov 2024 03:12:05 GMT\r\nvary: Accept-Encoding\r\netag: \"67380d85-a463\"\r\nexpires: Tue, 02 Sep 2025 17:04:34 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42083,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Macintosh), datetime=2021:10:26 16:32:11], baseline, precision 8, 718x404, components 3","md5":"c77756e346f38de7e3fcbe17cc510ba9","sha1":"6840fba8b83962081c9a41cfcde9971b409afb9c","sha256":"31bbf2a3063492e25e142fcc1d248e6ad2bbdc8df05f7bb348e32c8d1a779c92","sha512":"249dd131826b4c39f584cb791813987335f9ce5eb1c3c6e67301c8fd5b965380bc9604ba2fb5925ef7b88156e88c8fe8ee7f346fe0589ce732c0885750cca9b3","ssdeep":"768:6EXPIcYGEEuS+oukBXxVGpLRHfMZkQ8GbQS9hFZQNcwp3CJUy:6a8xS+ou0XTw5r4j9hVwkJUy","tlshash":"17137c297d658d52f4c53abc94ecd582c3f75ee06e63514e3bcc99022f709999ce8283","first_seen":"2023-08-24T23:11:31Z","last_seen":"2026-05-24T12:50:40.70433Z","times_seen":40,"resource_available":false,"data":null}},"time_used":1829,"timings":{"blocked":1105,"dns":0,"connect":0,"send":0,"wait":613,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241010-11/a48bdba019a1ccf05f8e48c34e8964fc.png","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.046Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241010-11/a48bdba019a1ccf05f8e48c34e8964fc.png HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-18","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mubi.com/favicon.ico","fqdn":"mubi.com","domain":"mubi.com","tld":"com"},"ip":{"addr":"34.232.132.213","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mubi.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"63:C0:94:E6:32:9C:FF:8B:07:F0:FC:1B:0C:54:7A:C2:C1:8F:AB:AE","sha256":"E8:44:1F:FA:E2:61:A4:93:58:25:3C:10:3E:2A:1D:61:C3:2E:07:C0:D3:1C:E5:71:47:3B:CC:ED:87:E7:8C:86"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: mubi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:28:05 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 5430\r\nserver: openresty\r\nlast-modified: Wed, 13 Aug 2025 14:38:40 GMT\r\netag: \"689ca370-1536\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-max-age: 7200\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5430,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"9c3f3d012b3397a28d4fc6afba1a30d3","sha1":"62a5ded1cf2ab769de860606ab4685950d591f7f","sha256":"b06da2084d8b86b46c3b35b614a588ef7ee24a1c4196344dfc10a847e1484a60","sha512":"860425527af0c348b356d7847be089540e6d121bd7f1efb799ae46ce83f8e4b74799d602191645dfed1e985d9cf71edb8e4ade2a2a23ef2af8e307bbc6a2fe50","ssdeep":"48:CIkXWOIWo4nAWQRjsWFU9/AynMBKOD7UqTV+Z+fRYBxBcS1:CIpsnArxsWFUlPMBfVk+fRYBcS1","tlshash":"0ab16815915b7a2ffcb5a271124b054a77607be070a7c3dc2602bc342c2371362b7ae2","first_seen":"2023-08-18T20:28:04Z","last_seen":"2026-03-01T22:32:14.067018Z","times_seen":104,"resource_available":false,"data":null}},"time_used":2010,"timings":{"blocked":91,"dns":43,"connect":113,"send":0,"wait":106,"receive":0,"ssl":1548},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av4.vid4.uk/v/s/aporntv.com/video/sister-riding-me-real-incest-claim-29493.html","fqdn":"av4.vid4.uk","domain":"vid4.uk","tld":"uk"},"ip":{"addr":"172.67.165.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-18T05:27:54.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vid4.uk","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 18:12:24 GMT","end":"Sat, 18 Oct 2025 19:10:08 GMT"},"fingerprint":{"sha1":"65:09:DC:B4:32:F7:3B:45:30:19:8A:93:8A:6F:F3:C4:48:98:7E:94","sha256":"3A:88:25:C0:A0:93:E0:93:CC:F4:6A:17:74:CE:56:C1:76:37:ED:10:77:32:2C:5B:48:CC:2A:DF:42:18:01:9C"}}},"request":{"raw":"GET /v/s/aporntv.com/video/sister-riding-me-real-incest-claim-29493.html HTTP/1.1\r\nHost: av4.vid4.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Mon, 18 Aug 2025 05:27:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npdojs-line8: host-av4.vid4.uk4.194.8.20-myhost-av4.vid4.uk38.220.248/v/s/aporntv.com/video/sister-riding-me-real-incest-claim-29493.html\r\nphost: av4.vid4.uk\r\npdojs-line355: notjp--myhost-av4.vid4.uk-filteron-\r\npdojs-line963: notjp--myhost-av4.vid4.uk-filteron-/v/s/aporntv.com/video/sister-riding-me-real-incest-claim-29493.html\r\npdo120: feedvid-, cachefileb-cacpdo3/ef/94/be, lfm-16-72350, lmd-1755494341, lud-1755494341, xfvlen-0, fsize-340900, played-\r\npdo396: feedvid-, cachefileb-cacpdo3/ef/94/be, lfm-16-72350, lmd-1755494341, lud-1755494341, xfvlen-0, fsize-340900, played-\r\npdophp-line429: -; cachetime- 86989.311357283; ctime- 19700101090000; lmd- 19700101090000\r\npdo-line556: host-av4.vid4.uk4.194.8.20-myhost-av4.vid4.uk38.220.248/v/s/aporntv.com/video/sister-riding-me-real-incest-claim-29493.html\r\ncache-control: public, max-age=360001\r\nlocation: /\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tlVZUa%2FDFvHK%2FlBKVTkWk1pnurX3oaVBXhMdSMUGLynMu6FZDKeaR46S7RIkwSEQqqI%2FFCre59H07WIVAbFj6PU6K9kmQPOYqA%3D%3D\"}]}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\nx-proxy-cache-192g-la: MISS\r\nxkey-192la: av4.vid4.uk/v/s/aporntv.com/video/sister-riding-me-real-incest-claim-29493.html--av4.vid4.uk-av4.vid4.uk-cacpdo2---yes\r\nx-proxy-cache-gjp: MISS\r\nxkey-g-jp: av4.vid4.uk/v/s/aporntv.com/video/sister-riding-me-real-incest-claim-29493.html--av4.vid4.uk--my_zone\r\nage: 50\r\ncf-cache-status: HIT\r\ncf-ray: 970f01330c447131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":183483,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":18,"dns":1,"connect":1,"send":0,"wait":15,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.com/","fqdn":"www.9188porn.com","domain":"9188porn.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9188porn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 Aug 2025 03:09:41 GMT","end":"Tue, 04 Nov 2025 04:07:22 GMT"},"fingerprint":{"sha1":"EB:B8:01:44:FF:51:3D:14:69:83:0A:39:AA:EF:CC:38:7E:50:BE:11","sha256":"05:E5:3A:05:E1:05:99:09:0C:DA:48:BA:A6:C6:72:62:2B:A1:11:85:17:AA:84:E0:C6:E1:0F:2E:68:63:E2:BD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.9188porn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Mon, 18 Aug 2025 05:27:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vKoHKYqx9DgD4kHSfxyzwGUgA8O7IcyiZlL9SANqniP%2BnfiKYPozfJPicY3GKqDl6rqkiq9v6RDfniUx9jXlFZ%2FDHwCSifvzVb%2B5h1PG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 970f01365d1f0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":5,"connect":2,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/ext/pre_6653274099.jpg","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"169.150.247.40","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Jul 2025 06:11:45 GMT","end":"Sun, 12 Oct 2025 06:11:44 GMT"},"fingerprint":{"sha1":"D7:A2:44:26:5F:AE:CA:43:04:92:49:73:C4:48:A3:61:F6:F2:C8:A5","sha256":"A3:32:41:00:16:DA:A0:92:E3:0D:0F:F4:C9:0A:B8:B9:22:3B:50:DE:DF:7E:24:13:1B:65:07:8D:1B:E8:77:80"}}},"request":{"raw":"GET /ext/pre_6653274099.jpg HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18077\r\nserver: BunnyCDN-DE1-1075\r\ncdn-pullzone: 4336709\r\ncdn-uid: 0f7047b6-2b70-4588-b55a-df9b2a15bf91\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\netag: \"6668eadd-469d\"\r\nlast-modified: Wed, 12 Jun 2024 00:25:01 GMT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/14/2025 09:14:51\r\ncdn-edgestorageid: 874\r\ncdn-requestid: b9723a9c05a9167405d74f7b7d758e56\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":18077,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"9dbb358687849ad72a28e3a9d1e6d49c","sha1":"7975578f21a27f9282c7f2273a3aef6ebe28c02d","sha256":"61ae0e8cd0cf6bdda3edfa3d0354b5c985f567e92322d275011fa183c5e89621","sha512":"bef94cda751cd9ade00094cfe3217e578e3004ae76d22af8a829e28c2b8490c541a4f4ddaf2ab5bfaf8b4d2bee0b10c4cd301c3c37384d305d6daa7306e90dcd","ssdeep":"384:K4FJ5o9b6EXKpkbGeSZhH8vk/d1zNlyZhSvXdRCEE0TjDnargMV:K4P5gfXKpkbGegF6Zhs+EE0f7i9","tlshash":"5782d14d5e8bae1fa03d8237d98ebf6f5da4eaa4294f640120b5749cc36d0cc6e41d93","first_seen":"2025-07-25T18:18:10.381163Z","last_seen":"2026-01-20T15:34:37.889Z","times_seen":32,"resource_available":false,"data":null}},"time_used":2502,"timings":{"blocked":235,"dns":2,"connect":22,"send":0,"wait":36,"receive":1,"ssl":2195},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asianpornxbb.sbs/zhenshimama14/thumbnails_001.jpg","fqdn":"asianpornxbb.sbs","domain":"asianpornxbb.sbs","tld":"sbs"},"ip":{"addr":"104.21.23.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0b45ee2e.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 29 Jul 2025 11:04:12 GMT","end":"Mon, 27 Oct 2025 12:04:05 GMT"},"fingerprint":{"sha1":"9E:33:52:5F:4A:DE:5B:B0:7C:5D:C1:66:E4:50:65:4A:1B:B3:9C:42","sha256":"80:68:D6:B7:54:92:5A:F8:74:63:26:7D:33:1D:CE:E7:1F:48:FB:DA:C3:33:14:A8:8A:C8:55:B4:88:C0:74:4B"}}},"request":{"raw":"GET /zhenshimama14/thumbnails_001.jpg HTTP/1.1\r\nHost: asianpornxbb.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 77141\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B5yW%2FtbVG2F%2FpSwuVz4z9y9J%2BMIN708yMP6ic7RYyULUAikNz2%2FLpZQi292l5tyHOPmtlgAWFtjWxkHuJmJLlVDClYHi4uVy0Iac5tCO\"}]}\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\netag: \"ec61eabb4dead1712aacf9a61a4eb88d\"\r\nlast-modified: Thu, 02 May 2024 03:38:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nage: 190570\r\ncache-control: max-age=31536000\r\ncf-ray: 970f01479d120b65-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77141,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1218x1440, components 3","md5":"ec61eabb4dead1712aacf9a61a4eb88d","sha1":"1dff2cc9dd990fe9113dcf9a5b623050d70eedfc","sha256":"d70162a9e6d20894cab8eeeb91711f65e8d63083dd6ec8aad0ce1a578be2f815","sha512":"31805ca5bf88bab7deb8dd1424ac6c99125dbff711eb1f86498746f91c697506af98e6e36a13d2a4b12bf504b7a3ca6b269a7dbfe757465d87364dd229937fa3","ssdeep":"1536:ZM5ZYFB8aWeuJyNLeI/ELzX2jHC97ZXKZdL9n8hRDt/h0hvq:ZM5uFKaLuAteI/+GraNXcr8t70c","tlshash":"6a73015a08fa63cc40af72bf18f36754328e5868e9f5795a7d40643968f3ce309382e5","first_seen":"2025-06-15T23:04:57.72902Z","last_seen":"2026-01-08T04:21:04.4872Z","times_seen":14,"resource_available":false,"data":null}},"time_used":3954,"timings":{"blocked":1711,"dns":12,"connect":2,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/original/1X/56736c9de186b80ecd93feffbd659b48364489f6.png","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 16:04:05 GMT","end":"Sun, 09 Nov 2025 16:04:04 GMT"},"fingerprint":{"sha1":"DF:EC:86:BA:09:B3:17:C2:2B:66:0A:BF:62:3E:3C:4D:90:D2:A4:33","sha256":"EF:3A:5A:BF:D7:FE:5F:99:1A:3F:CD:49:ED:AF:84:68:4F:09:27:DC:47:7B:D5:51:4C:E2:DB:A2:A1:6A:3C:FF"}}},"request":{"raw":"GET /uploads/default/original/1X/56736c9de186b80ecd93feffbd659b48364489f6.png HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 79826\r\nlast-modified: Thu, 17 Apr 2025 02:14:15 GMT\r\nexpires: Tue, 18 Aug 2026 05:27:54 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":79826,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 180, 8-bit/color RGB, non-interlaced","md5":"13ec4a7f8074f0407ea5059c59af2df2","sha1":"56736c9de186b80ecd93feffbd659b48364489f6","sha256":"a21b64febebb389b6c6c4fa1e6d4bd2b11ab4459e6c813450b90ab8985ef5836","sha512":"5beab2cc0e517c2783d2674b6dc0a4ec9008756fbc4bd9b1f9204dc92f7f90414b10b22d18c7510502ca5dc292ddd1f0c86bd882631f41962ee0388494720536","ssdeep":"1536:AL7Djez6Q5MHTq97ipHlGAOE22ToxZ/GO/GtERBLAi6wDhDiVXAjXW:AL7K6Q2HE4HlGAO2wZu4DBLAXwDhKXSW","tlshash":"77731235cbd0d52eb12787a6637cabbd49031d17499208bcce7074f12bfe63ea125a46","first_seen":"2025-07-22T04:45:31.677447Z","last_seen":"2026-01-08T04:21:04.551294Z","times_seen":12,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20250719-1/72efd9f4c86159e600e83a8e04555be8.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.62","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20250719-1/72efd9f4c86159e600e83a8e04555be8.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 151008\r\nlast-modified: Sat, 19 Jul 2025 03:46:19 GMT\r\nvary: Accept-Encoding\r\netag: \"687b150b-24de0\"\r\nexpires: Tue, 02 Sep 2025 17:04:14 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":151008,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x360, components 3","md5":"7a3def8e138975fbc85c941b7e325396","sha1":"f0e18847e2022444329ba605e473d6cefd1c0b9d","sha256":"ed79dfc407d01fc459f24bf2ab6996e98830bbc0146e9ca3e23e251ae2217104","sha512":"7675ba1b475d92f877ef90861fa8ff8d990ef93c44a8862e0fc9dca46c9d923c52781708b9899954e1606b871e01d6c925f78601f372f0b312d6618986f07a69","ssdeep":"3072:ErhwRTqgrNimBV1va5Gedf/atPEuDlVgA36UO7AiSQziMl:+wBqSLBVCGelSt8klrlOvUMl","tlshash":"97e3122c4e028fb2fdc0a2b2566fac4775cccac97bee612458e5a564c74136d8c2ed53","first_seen":"2025-07-29T16:40:28.9511Z","last_seen":"2026-02-06T15:51:51.626757Z","times_seen":186,"resource_available":false,"data":null}},"time_used":1945,"timings":{"blocked":952,"dns":0,"connect":0,"send":0,"wait":613,"receive":380,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornolomka3.com/uploads/posts/2021-05/1621767642_00-08-51.jpg","fqdn":"pornolomka3.com","domain":"pornolomka3.com","tld":"com"},"ip":{"addr":"91.194.110.16","port":443,"asn":213166,"as":"UA-Hosting SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pornolomka3.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 22:39:10 GMT","end":"Mon, 20 Oct 2025 22:39:09 GMT"},"fingerprint":{"sha1":"00:66:91:FF:F1:AB:08:C2:3C:C2:43:F6:5B:52:C0:60:B5:9D:2F:31","sha256":"8A:31:22:A6:3B:27:CA:3C:35:FD:9F:FF:9A:CB:F7:DB:6F:4B:5F:4F:3A:64:D3:AC:77:C6:EB:CE:57:2E:18:9D"}}},"request":{"raw":"GET /uploads/posts/2021-05/1621767642_00-08-51.jpg HTTP/1.1\r\nHost: pornolomka3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.10.3\r\ndate: Mon, 18 Aug 2025 05:25:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16269\r\nlast-modified: Sun, 23 May 2021 10:59:09 GMT\r\netag: \"60aa357d-3f8d\"\r\nexpires: Mon, 25 Aug 2025 05:25:50 GMT\r\ncache-control: max-age=604800\r\nstrict-transport-security: max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16269,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 320x240, components 3","md5":"a08a8c7d0195ac7c7d657ecf6abc9a88","sha1":"76de59d7311fb982e8f25ca30c90e910bfd4a5af","sha256":"6cfb805726cb8641849e873509e3fb3e5e0a0c6a50b4256116e68e90e5473ab7","sha512":"427e3adf82ceb2b8862f826637306d4a69c2b70fc095c61125abf82300a234beb39c4846cc9f34107832762a3ac522dda746576da01a3981f11b9f6022cfee81","ssdeep":"384:FzSu7nsiRA9UJ092BbQb2UrmS8XLhAvB9PY8:F2u7T0EBbE2amj6vB9PX","tlshash":"4e72e106f34987f7f42d1a9e117b3e08f2d0af913f00b1e366e3644da7686c95666454","first_seen":"2025-05-23T07:10:10.3006Z","last_seen":"2025-09-16T14:18:17.194838Z","times_seen":24,"resource_available":false,"data":null}},"time_used":3750,"timings":{"blocked":-1,"dns":16,"connect":28,"send":0,"wait":832,"receive":695,"ssl":2171},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-images.realgfporn.com/media/thumbs/5/c/f/3/6/794645cec3a61dffb5.mp4/794645cec3a61dffb5.mp4-1.jpg","fqdn":"cdn-images.realgfporn.com","domain":"realgfporn.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1483467946.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Jun 2025 10:29:05 GMT","end":"Tue, 16 Sep 2025 10:29:04 GMT"},"fingerprint":{"sha1":"BF:F3:08:5B:78:39:EF:8F:11:22:8A:2F:D1:0D:05:56:50:23:35:4C","sha256":"05:A7:9E:1D:66:14:7F:9D:81:E6:7E:B8:7B:D8:6D:D1:16:BE:40:B2:1B:42:7A:F6:8C:DD:70:8F:A0:2F:A6:4F"}}},"request":{"raw":"GET /media/thumbs/5/c/f/3/6/794645cec3a61dffb5.mp4/794645cec3a61dffb5.mp4-1.jpg HTTP/1.1\r\nHost: cdn-images.realgfporn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23516\r\nlast-modified: Sun, 02 Jun 2019 05:57:17 GMT\r\netag: \"5bdc-58a50eb895f1e\"\r\ncache-control: max-age=31536000\r\nexpires: Wed, 12 Feb 2025 19:41:14 GMT\r\nvary: User-Agent\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQHX2r/1AAwBuUwKDAH3/AsAAAwB1GY4EQG36lC5AQ\r\nx-77-nzt-ray: 2a494a15b8894f5802baa268ed4ccf2c\r\nx-77-cache: HIT\r\nx-77-age: 16105434\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":23516,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 427x320, segment length 16, comment: \"Lavc57.89.100\", baseline, precision 8, 400x300, components 3","md5":"cb03a8873c2406312376418288cd0919","sha1":"98130506bcd2acf6df2ec3823ffd79e86b51c5fa","sha256":"65c341fc94485dad07370b4fd362dd84714fd52b137bc8def17321d5d03cbc1d","sha512":"f02386ed144773820a8a5bbc2485450e0d96b0faec9b2bb9d5e3672625979b54289a7989e94da3c50cd4a30cbe6e70fe21f3a352aeebfc74f1a0c4929d1fe3fa","ssdeep":"384:oIA6VBq+3r7inhaH1N8VD3jqhRTnpaYH+hObJgKSji+hDOuZkp3+fP:7B3GhS1NY3ehRTpaYehOVhSjie23+3","tlshash":"60b2e19cc6b7b01a119b09d752b953d4156bea0e3ca81eb02792e839d0b3ff4a21c52c","first_seen":"2024-08-19T23:47:48.78623Z","last_seen":"2026-03-02T16:55:39.756437Z","times_seen":24,"resource_available":false,"data":null}},"time_used":2348,"timings":{"blocked":40,"dns":2,"connect":4,"send":0,"wait":12,"receive":1,"ssl":2288},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yaebus15.ru/uploads/posts/2024-04/1714154016_1.jpg","fqdn":"yaebus15.ru","domain":"yaebus15.ru","tld":"ru"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yaebus15.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Jul 2025 22:57:58 GMT","end":"Sun, 12 Oct 2025 23:55:37 GMT"},"fingerprint":{"sha1":"47:21:50:88:E2:F7:91:88:E0:37:69:42:3B:20:70:B4:D0:75:9C:83","sha256":"C6:55:57:8B:70:B5:55:F1:F9:26:B9:14:1E:0A:7B:33:D8:32:70:6C:7C:83:95:7F:F1:78:05:D6:73:53:41:16"}}},"request":{"raw":"GET /uploads/posts/2024-04/1714154016_1.jpg HTTP/1.1\r\nHost: yaebus15.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Mon, 18 Aug 2025 05:27:57 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nlocation: https://yaebus17.ru/uploads/posts/2024-04/1714154016_1.jpg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 71\r\ncache-control: max-age=172800\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yh6%2FbKfdsldPy6Nw%2Fts7KfmnZvyvdBBgdPvk2w8EMP6MzUyi1mTuz3SdmZ%2Fqn7pD8wP79QwHJWIa6c7K5JtNRVJTBmAgWkcz%2BQ%3D%3D\"}]}\r\ncf-ray: 970f01478e6f7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21435,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":3945,"timings":{"blocked":1701,"dns":12,"connect":3,"send":0,"wait":23,"receive":0,"ssl":2188},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cav105.com/favicon.ico","fqdn":"cav105.com","domain":"cav105.com","tld":"com"},"ip":{"addr":"45.145.72.132","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cav102.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 15:24:03 GMT","end":"Fri, 17 Oct 2025 15:24:02 GMT"},"fingerprint":{"sha1":"4C:E6:D2:27:03:49:C7:8C:A1:8B:DF:24:7C:A6:C4:E5:3D:A6:C5:F5","sha256":"02:AE:EA:91:A7:2B:29:79:58:2E:C8:D0:32:14:9C:37:11:B8:20:1A:63:46:73:26:EF:73:0C:F8:CB:B2:C5:1D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cav105.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:28:03 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Mon, 25 Jul 2022 15:38:39 GMT\r\netag: \"62deb8ff-10be\"\r\nstrict-transport-security: max-age=31536000\r\ncache-control: no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"79ca959796fd758988aa0acfb9952640","sha1":"8a8e7fa57c016b5cbc943faefc7c651e8959b0ce","sha256":"01d4884a0070a4804680dc80361b4695aa48ca7b37eb6768127b17d9763464cb","sha512":"93862024062645f7a461f4d8b7fac1304642d17c8017d03643a9a20a069437950f2716ec736198b7e201fef0d0d0e3e420e564790e6f8337c8579b87ed530e0f","ssdeep":"24:sueJWJ6kDtRzPzXsComfXGUDe6WSCWn6/+GXG7oJ32n:YkDtRz7XsCn/he9SZU+s2n","tlshash":"899155bbaa7ff1cdec74fe32629006024f2f5d3c46e661838716bd948630c106d8e10a","first_seen":"2024-02-24T21:02:43Z","last_seen":"2026-06-04T11:10:24.28737Z","times_seen":304,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/1X/5dded565861552ec592f0e8c5c4faa0f356ec81d_2_704x1024.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 16:04:05 GMT","end":"Sun, 09 Nov 2025 16:04:04 GMT"},"fingerprint":{"sha1":"DF:EC:86:BA:09:B3:17:C2:2B:66:0A:BF:62:3E:3C:4D:90:D2:A4:33","sha256":"EF:3A:5A:BF:D7:FE:5F:99:1A:3F:CD:49:ED:AF:84:68:4F:09:27:DC:47:7B:D5:51:4C:E2:DB:A2:A1:6A:3C:FF"}}},"request":{"raw":"GET /uploads/default/optimized/1X/5dded565861552ec592f0e8c5c4faa0f356ec81d_2_704x1024.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 62021\r\nlast-modified: Tue, 12 Aug 2025 05:14:15 GMT\r\nexpires: Tue, 18 Aug 2026 05:27:54 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62021,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 704x1024, components 3","md5":"de96358ce7019791c5d9425d9f08eeb4","sha1":"9b27295b7e138f9363cb46d2735d2936cf670773","sha256":"98e76ec0661d472e131db6a264e5f8b72b9ddc542964adfef7db7275e0dd17ea","sha512":"6d4ff588552d985d526c6610f6a0161b1d73e0eb7cf0e43725d9e857db77cb3d39586b39a8feede4964752d0344312b22824f8f14ea9be64b559ea56f0f901f4","ssdeep":"1536:SlCLTGdZG4V8nj+j7dkD4yVIHN5ck2jWKQ:SlCm/fJd+fWN5cZQ","tlshash":"1953f22edb430ba4ead9514743c3bb3fa4f3a420a6dc1d673d42042d1f42b7ba86510b","first_seen":"2025-07-25T10:57:14.637792Z","last_seen":"2025-11-25T01:16:46.1168Z","times_seen":10,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bad.news/images/dm/c760d5628ab03e53460bc2e9fd8a5c3b.jpg?secure=FbEfYZztm0BS3vgy-RnlDg==,1702608694","fqdn":"static.bad.news","domain":"bad.news","tld":"news"},"ip":{"addr":"104.26.12.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"323e0cdf.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 29 Jul 2025 11:16:14 GMT","end":"Mon, 27 Oct 2025 12:16:07 GMT"},"fingerprint":{"sha1":"11:F8:F3:D9:C3:57:49:A9:A0:72:0C:C7:B7:20:D2:58:9B:B7:FA:95","sha256":"00:65:12:12:EA:77:8F:F2:2C:CB:5D:72:DD:45:E5:2F:B5:6F:D2:EF:4B:61:5C:C9:7E:F9:CA:89:A2:64:CB:58"}}},"request":{"raw":"GET /images/dm/c760d5628ab03e53460bc2e9fd8a5c3b.jpg?secure=FbEfYZztm0BS3vgy-RnlDg==,1702608694 HTTP/1.1\r\nHost: static.bad.news\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 35353\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kFhuCByHCplAUSKYhH2jNblK5KCRt3I37Jchr0i%2B4iJtHUjIUh%2FU7YkXakb9ef6%2BvG5Vn0VJZkIn8EyRX72u3O%2FKVUUNmzImJAjCyw%3D%3D\"}]}\r\nage: 4342\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: origSize=36095\r\netag: \"4c318b490ba47460692dbdf985c4c34d\"\r\nlast-modified: Fri, 13 Dec 2024 23:26:56 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\ncf-ray: 970f014affac5690-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35353,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], progressive, precision 8, 640x360, components 3","md5":"214eaaa6278c3dc12fe3db25c240973f","sha1":"3c2dc0220b3641f6beeeeeb89abed6a27454aa9f","sha256":"cb054880d43e175fa2360457f948d1a5cb58765f8f4ced33f62af56d4cf25e02","sha512":"25957996847d6602a5f6e0e16d9d593f7da5fdac81c8d21c0854328d9123948a715977aaf6a56012a5c6aa267f2c51443ba373042c7a20c8bef5e66c0c27f495","ssdeep":"768:wpEmYy7GDg17ehi9/u+/fsw9fsDV2DBVaT7bWgrPALHLffLJzf1PZ:wpEmT17ii9/F/d9fsDoDPafbWWsrftjj","tlshash":"82f2e015ebf3b120ffa335b93ba9c2583a345f612aa452ef9280168218b55d0dd4b61b","first_seen":"2025-05-26T16:44:39.307473Z","last_seen":"2026-01-21T08:47:17.608884Z","times_seen":56,"resource_available":false,"data":null}},"time_used":2549,"timings":{"blocked":366,"dns":3,"connect":1,"send":0,"wait":16,"receive":2,"ssl":2159},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"media.crazyshit.com/content/2017/11/40ca2746.jpg","fqdn":"media.crazyshit.com","domain":"crazyshit.com","tld":"com"},"ip":{"addr":"45.133.44.4","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"media.crazyshit.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 02:33:04 GMT","end":"Mon, 27 Oct 2025 02:33:03 GMT"},"fingerprint":{"sha1":"4B:C8:F7:57:68:32:B3:B5:70:31:3E:8C:32:BC:34:57:81:3A:54:C9","sha256":"8D:21:A3:34:ED:E8:B1:2C:20:3B:4F:FA:BD:47:8E:F6:08:39:62:2A:98:BF:7C:15:9D:CE:8E:4A:6F:44:6E:7D"}}},"request":{"raw":"GET /content/2017/11/40ca2746.jpg HTTP/1.1\r\nHost: media.crazyshit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 345889\r\nserver: nginx/1.24.0\r\nx-object-meta-mtime: 1511336583.601\r\netag: 28f56d49b58dfa3b951112445753afa2\r\nlast-modified: Mon, 05 Apr 2021 12:31:21 GMT\r\nx-timestamp: 1617625880.65577\r\nx-trans-id: tx438b8721ded0472f81fa7-0065ccdd08\r\nx-openstack-request-id: tx438b8721ded0472f81fa7-0065ccdd08\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\nexpires: Wed, 20 Aug 2025 05:27:58 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: ah0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":345889,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 720x540, components 3","md5":"28f56d49b58dfa3b951112445753afa2","sha1":"f18beb369ac0b4e5c1aa01fa856c5425a801f04a","sha256":"e815f99e9a19196f80014da3d804ed2bc76b76e36e988e85678aebb8a9ffce2e","sha512":"5898c79c328fd75dbbabe83c6b4733af4afaf34fb7770dda7455024b4d991fa0540279676266f19966a162fc702f28d5b29fcf2f92611fdec39aaafe7c6e556e","ssdeep":"6144:dzlaCcTFLT5wHi2fB0GWXBEEp+dOdxAhAgtnWI9ajMLi3BJKAoTwHdrpS4tIVlgp:J7yLTSC2fB0GIBDp+0dGZWIoYL6X5oMR","tlshash":"167423b4b45b1919cae70e32e9d05062edb379f0f2be8b9a10ef0c91d05a95d2c9c57c","first_seen":"2025-02-14T15:16:15.967377Z","last_seen":"2026-01-11T04:19:56.234158Z","times_seen":14,"resource_available":false,"data":null}},"time_used":3263,"timings":{"blocked":739,"dns":38,"connect":24,"send":0,"wait":30,"receive":174,"ssl":2219},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"videosnudes.com/favicon.ico","fqdn":"videosnudes.com","domain":"videosnudes.com","tld":"com"},"ip":{"addr":"38.180.16.130","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"videosnudes.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 18:39:08 GMT","end":"Thu, 02 Oct 2025 18:39:07 GMT"},"fingerprint":{"sha1":"68:C2:01:CE:A3:6E:76:41:21:77:53:35:37:69:37:4F:5E:C6:A4:E9","sha256":"73:AA:DB:02:62:61:38:A4:A1:6C:E7:2E:75:C6:E8:2F:F2:A2:A4:77:B6:5B:CF:B0:FB:99:65:D3:E6:0D:92:B0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: videosnudes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 25 Aug 2025 05:28:04 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Tue, 27 Dec 2022 04:11:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 0\r\ndate: Mon, 18 Aug 2025 05:28:04 GMT\r\nx-powered-by: NovaNAX (c) Next Generation Datacenters\r\nserver: X2 Network Enterprise Hosting\r\nstrict-transport-security: max-age=31536000\r\nx2n-balancing-cluster: #05 (Server: #20 | Backend: cluster05_litespeed)\r\nx2n-cache-backend: MISS\r\nx2n-cache-backend-hits: 0\r\nx2n-cache-backend-ttl: 604800.000 seconds\r\nx2n-cache-backend-age: 0.000 seconds\r\nx2n-cache-cdn: MISS\r\nx2n-cache-cdn-hits: 0\r\nx2n-cache-cdn-ttl: 604800.000 seconds\r\nx2n-cache-cdn-age: 0.000 seconds\r\nx2n-load-balancer-endpoint: cdn06.load-balancer.x2.network\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ods.manyvids.com/1000045578/326cc251cf423e1d2888cf0b23efcc90/screenshots/custom_1_360_5cf04e49b045d.jpg","fqdn":"ods.manyvids.com","domain":"manyvids.com","tld":"com"},"ip":{"addr":"3.167.2.99","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.manyvids.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sat, 09 Nov 2024 00:00:00 GMT","end":"Sun, 07 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"F1:5A:7E:E5:F8:D5:25:84:21:B9:33:C5:E1:B2:02:D2:D8:4A:56:F8","sha256":"F0:2C:5E:65:88:E8:30:9B:52:99:C5:59:A1:D3:11:ED:FE:E0:AB:D4:3A:B9:C6:22:E5:BD:9D:9C:AB:DF:FC:3E"}}},"request":{"raw":"GET /1000045578/326cc251cf423e1d2888cf0b23efcc90/screenshots/custom_1_360_5cf04e49b045d.jpg HTTP/1.1\r\nHost: ods.manyvids.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 64403\r\nlast-modified: Thu, 30 May 2019 21:43:12 GMT\r\nx-amz-storage-class: REDUCED_REDUNDANCY\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 18 Aug 2025 04:57:31 GMT\r\netag: \"91bab2679debd79b876e446fb2e02d3e\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 74cb6ad66f88e47ae011abd64e57e7cc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: PXItMaW5xAkUVvm2nyRalmKDY3wTZ6_QqueaeL70lMuHdqm-nzqpEQ==\r\nage: 2559\r\ncache-control: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":64403,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 720x406, components 3","md5":"91bab2679debd79b876e446fb2e02d3e","sha1":"abeec447fc3c8b72a70bacc13edb6716613ab77c","sha256":"0940cd6bcf885570c42259e0bd695d165caae1d9a8feb21e4ec7f92677d99359","sha512":"bca196525a7ec218a42f941db8a9c7b0a2a83affc800d5745f9d9d687d3ecc61a8dc468f6ef7473677064b2c4f6456ec82668135e282fa838a5b3696734f02cd","ssdeep":"1536:MoZSsy8e07t3iK6+9JNTi9y0CuJLQeQff7FGuFbuk:UsfzZ16GzzukbhFyk","tlshash":"74530263c69aacc8b95391a7a8149f7011c493b3b105fdca6af64a36c950bd0d1fc1ef","first_seen":"2025-06-13T21:09:49.611017Z","last_seen":"2025-11-17T02:57:03.523823Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2909,"timings":{"blocked":742,"dns":2,"connect":1,"send":0,"wait":7,"receive":2,"ssl":2143},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yaebus14.ru/favicon.ico","fqdn":"yaebus14.ru","domain":"yaebus14.ru","tld":"ru"},"ip":{"addr":"172.67.197.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yaebus14.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Jul 2025 17:54:08 GMT","end":"Mon, 13 Oct 2025 18:52:27 GMT"},"fingerprint":{"sha1":"F8:45:FF:69:82:D6:34:AE:E9:20:41:FB:76:EE:EE:BE:AC:07:06:F7","sha256":"03:E7:49:65:FD:31:EF:57:72:39:A0:14:AF:F2:C7:DF:49:C9:0C:02:56:2C:38:2A:C3:48:00:BE:35:31:64:54"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: yaebus14.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Mon, 18 Aug 2025 05:28:04 GMT\r\ncontent-type: text/html\r\nlocation: https://yaebus17.ru/favicon.ico\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 387\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dCEanCpYRpGpFzIHfWGSYHpALgObHcPUk0NW3EcM%2BHjXnxaEK3%2FUFZrL8ScYZri1RymWq%2FBLZ1Ql6VkIhS5aEgSueZ5bWU5O5A%3D%3D\"}]}\r\ncf-ray: 970f0175088f5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":610,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":1318,"timings":{"blocked":37,"dns":35,"connect":49,"send":0,"wait":26,"receive":0,"ssl":1123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timg216.top/videos/aedc548dbf8234878b09a638d8486d90e8958d0f/cover/5_505_259?ih=1","fqdn":"timg216.top","domain":"timg216.top","tld":"top"},"ip":{"addr":"104.20.25.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timg216.top","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 04:37:13 GMT","end":"Sun, 02 Nov 2025 05:13:46 GMT"},"fingerprint":{"sha1":"09:98:82:E6:F6:CE:3A:0B:34:CA:7C:64:95:7C:21:B9:C3:D6:F3:7F","sha256":"2C:38:55:11:E8:93:E4:92:AF:46:8F:B3:8C:65:8E:0B:7C:53:7B:05:49:81:6B:17:A8:A7:13:D1:FA:7A:43:7E"}}},"request":{"raw":"GET /videos/aedc548dbf8234878b09a638d8486d90e8958d0f/cover/5_505_259?ih=1 HTTP/1.1\r\nHost: timg216.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:57 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 66303\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Mar 2025 10:11:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"67c6d1c9-102ff\"\r\nexpires: Tue, 10 Jun 2025 13:53:42 GMT\r\ncache-control: public, max-age=31536000, stale-if-error=7200\r\nt-cache: LHIT\r\naccept-ranges: bytes\r\nage: 1144152\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BDtn%2BCiqBnMxXOlZkQaqgccz4HoTAVXrupv0vJ7sIM9A5BwCawIW9KVRpFYu99L28sH5DD6kc8QU61v9Z21FZA9aNSFNMqYm0A%3D%3D\"}]}\r\ncf-ray: 970f01497e8ab4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66303,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.107.100\", baseline, precision 8, 505x259, components 3","md5":"5f7c8d8e1310f4021b831f593d561c7c","sha1":"e3fb0ecf8572d1fdb0ae1193ea5771752358bc50","sha256":"8f5887f4a66dcc4ddb520e039e8f5a6b4ed707ef8426f3508ece9e97c989f5d8","sha512":"7c8c9c02c61c927fb9103b623614f5d4dea59377bb4b5e0443a9aad4a09f8e014b4b3c2eafc042079d5eeb11a460814adcd0e67a28d8bee5247ea6b30077bff5","ssdeep":"1536:eKuQfMxvjfinSXjMj3Enk23pBokeBCvEwUBbG0NCR1CL:vuQQrPH533B8aEK0NC+L","tlshash":"5e5302c559be73de2c14eabcbf20044b28bf064577509dc6c7a2e956f324c126aaf54c","first_seen":"2025-04-11T22:57:41.447379Z","last_seen":"2026-01-13T12:03:11.482157Z","times_seen":42,"resource_available":false,"data":null}},"time_used":2429,"timings":{"blocked":93,"dns":4,"connect":7,"send":0,"wait":10,"receive":4,"ssl":2305},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/ext/pre_3160237771.jpg","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"169.150.247.40","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Jul 2025 06:11:45 GMT","end":"Sun, 12 Oct 2025 06:11:44 GMT"},"fingerprint":{"sha1":"D7:A2:44:26:5F:AE:CA:43:04:92:49:73:C4:48:A3:61:F6:F2:C8:A5","sha256":"A3:32:41:00:16:DA:A0:92:E3:0D:0F:F4:C9:0A:B8:B9:22:3B:50:DE:DF:7E:24:13:1B:65:07:8D:1B:E8:77:80"}}},"request":{"raw":"GET /ext/pre_3160237771.jpg HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18270\r\nserver: BunnyCDN-DE1-1075\r\ncdn-pullzone: 4336709\r\ncdn-uid: 0f7047b6-2b70-4588-b55a-df9b2a15bf91\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\netag: \"66eb27c4-475e\"\r\nlast-modified: Wed, 18 Sep 2024 19:19:32 GMT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/14/2025 09:18:05\r\ncdn-edgestorageid: 1075\r\ncdn-requestid: 66182b1fd4d290c32e34e6fbc46c8e50\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":18270,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"c256053388ea925c9a1770cae7f5b96c","sha1":"0fd0b68639c551c0cadcee721204d70bc8b19a45","sha256":"b78aab49502075c124b0cb8a4cabd68fd7cc1f7b1c7a921fe2a4b75edf324706","sha512":"ddfe4f18acf7222a67ad780608626bcbc2e3e9348303c1dc5750b65a0e44f4508215af0a6752e87ae99c1c9ec1107dae61acbd111e29e9f2bec813f96f68046e","ssdeep":"384:KDwrGO6aip7flk0LXiXg2/aG+3MdBGLVmnw3HGqF8tdtvHidc1:KDaG1Dvc/aGPNw3GM8tdV0c1","tlshash":"6b82e104753d5f49ea8d897885db4abb12344ea3797107234a6c58ff8b38c3b8049f7a","first_seen":"2024-12-07T02:21:28.209618Z","last_seen":"2026-01-12T00:58:51.619618Z","times_seen":14,"resource_available":false,"data":null}},"time_used":2579,"timings":{"blocked":316,"dns":1,"connect":23,"send":0,"wait":32,"receive":1,"ssl":2191},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidmo.pro/favicon.ico","fqdn":"vidmo.pro","domain":"vidmo.pro","tld":"pro"},"ip":{"addr":"89.248.193.244","port":443,"asn":49505,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:02.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"en.vidmo.pro","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 20:44:46 GMT","end":"Wed, 22 Oct 2025 20:44:45 GMT"},"fingerprint":{"sha1":"74:46:04:C7:74:12:A2:65:84:34:3D:72:B8:ED:93:13:5A:09:2A:E0","sha256":"B8:96:1D:42:22:B9:F0:34:20:22:DA:FF:BB:BF:D0:89:2E:9E:C2:8D:4B:9A:26:32:9F:8C:EB:C6:3D:39:39:8B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: vidmo.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:28:02 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 5430\r\nlast-modified: Sun, 14 Oct 2012 21:41:38 GMT\r\netag: \"507b3192-1536\"\r\ncache-control: public, no-transform\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5430,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"6b6734885d5e4ff9dbb7d82ba6023598","sha1":"3c454d68a346b375ed7b59a131699061e7393b1f","sha256":"0f8e5edd4348eaa11881bf6150baf7b3182b1c3e29c6378e0e921afce7d91819","sha512":"e3d4562da250a2096981bd9a211efa643400ebe18a2d0765e750454b4cf75cb31e9594d8fccfa61a4c86e1c08bbf130dbc635c2974996838444cef029bf3eb50","ssdeep":"96:12lbcmeAscXXZCGv56cOtAe8CKfMibd+tLMiWMyuFa:0muCQpBQ6d+ti","tlshash":"a9b173c151c1e587e0274f38e237d750b1fa2c13bab0ea85156b7a555a731898317b1e","first_seen":"2023-05-05T08:02:57Z","last_seen":"2026-05-24T12:50:40.724286Z","times_seen":692,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241010-11/50465685c3a388851eb330e5de689d06.png","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:59.833Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241010-11/50465685c3a388851eb330e5de689d06.png HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-18","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn5-thumbs.motherlessmedia.com/thumbs/E9D7D88.jpg","fqdn":"cdn5-thumbs.motherlessmedia.com","domain":"motherlessmedia.com","tld":"com"},"ip":{"addr":"185.107.92.224","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.motherlessmedia.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Mon, 04 Nov 2024 00:00:00 GMT","end":"Fri, 05 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"57:B3:92:20:5F:2C:FA:27:4E:CD:E5:6F:BC:3E:04:43:42:3A:93:E8","sha256":"10:A9:10:0A:05:AC:3F:09:47:9C:0E:EF:B9:5A:60:87:2B:F1:D5:35:A8:E6:3B:67:04:9B:7C:A8:AA:53:B7:FE"}}},"request":{"raw":"GET /thumbs/E9D7D88.jpg HTTP/1.1\r\nHost: cdn5-thumbs.motherlessmedia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty/1.21.4.1\r\ndate: Mon, 18 Aug 2025 05:27:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 36436\r\nvary: x-s-token\r\nlast-modified: Sun, 07 Oct 2018 17:43:00 GMT\r\netag: \"8e54-577a709251de7\"\r\nx-cache: HIT\r\nx-whom: cdn02\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36436,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 8000x8001, segment length 16, baseline, precision 8, 640x480, components 3","md5":"99eb8d6812828a2b58cdd82c72295b1f","sha1":"6944ceb4b68b93f108964e426a2b37a85ddd3fd9","sha256":"e2491a29232a2895c951b620fea7d66e739fa7c7370272c822255b5fb600f1e2","sha512":"126f6b8fd992ed414b8b1c2d8d860c6c0fedd86ec8f464f1ef5a613e8b0f4f99daafac92077465c0ba1472ffbbf91b90a7a9ff3207e0f6a0e149317fc195789c","ssdeep":"768:EN3zzqLCOO3nxXpZhlRq3oikaF2LsIDMIQqxNjgwMTuA0HU:Q3zzqLCxXpZp01LFAsIoS8wQ","tlshash":"1df2e169f618724181b3047c681057c7bb6870b076367a9eadcf32f63170d3fa689868","first_seen":"2025-06-16T22:45:57.481793Z","last_seen":"2026-01-12T00:58:51.613011Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1543,"timings":{"blocked":1498,"dns":0,"connect":0,"send":0,"wait":26,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ekkofilm.dk/media/dyn/film/still/generated/2237_1200x630.jpg","fqdn":"www.ekkofilm.dk","domain":"ekkofilm.dk","tld":"dk"},"ip":{"addr":"65.109.19.181","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ekkofilm.dk","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Jul 2025 18:00:35 GMT","end":"Sun, 26 Oct 2025 18:00:34 GMT"},"fingerprint":{"sha1":"B2:D7:07:D3:9A:24:34:8D:AA:5E:3E:FC:9A:E3:E5:95:B5:B0:B6:88","sha256":"51:41:38:29:A7:0C:98:A7:2B:43:0A:B6:0E:01:A5:C4:D6:4C:BA:9C:3E:ED:C7:58:0A:98:87:5B:D0:0B:C3:31"}}},"request":{"raw":"GET /media/dyn/film/still/generated/2237_1200x630.jpg HTTP/1.1\r\nHost: www.ekkofilm.dk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0\r\nDate: Mon, 18 Aug 2025 05:27:57 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 106006\r\nLast-Modified: Mon, 04 Jan 2021 11:02:02 GMT\r\nConnection: keep-alive\r\nETag: \"5ff2f5aa-19e16\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":106006,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x630, components 3","md5":"6bfe5e4d32fc5435dd9e887de175c3db","sha1":"2fe286c1a9568ec1625459a65df3184df189793b","sha256":"8373dbdef33360054c97fc18a00535590e78a5506097e3770e7f36f445ccf80a","sha512":"d511f0ac3f52d24f97c78adcd72c7927a65dedb0a764c693cbecd244878d369c0c1d56a2d3849a99f8f0d9e6e39949f2da00393ab07ae71bc0999ec9ea88cb17","ssdeep":"3072:S6DH/ELKPHAm7HBWBQ6gvH8cGdPmu8V7SGi:BfEGvZ7HBWB3gH8xde3ni","tlshash":"6ba313119e891af3e38192f76a16ef8d81262ab250c407fe8dd77371e44be09c5e41dd","first_seen":"2024-04-21T12:30:55Z","last_seen":"2026-01-13T22:45:00.954002Z","times_seen":12,"resource_available":false,"data":null}},"time_used":3154,"timings":{"blocked":853,"dns":2,"connect":28,"send":0,"wait":47,"receive":56,"ssl":2154},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.com/","fqdn":"www.9188porn.com","domain":"9188porn.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:59.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9188porn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 Aug 2025 03:09:41 GMT","end":"Tue, 04 Nov 2025 04:07:22 GMT"},"fingerprint":{"sha1":"EB:B8:01:44:FF:51:3D:14:69:83:0A:39:AA:EF:CC:38:7E:50:BE:11","sha256":"05:E5:3A:05:E1:05:99:09:0C:DA:48:BA:A6:C6:72:62:2B:A1:11:85:17:AA:84:E0:C6:E1:0F:2E:68:63:E2:BD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.9188porn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 18 Aug 2025 05:27:59 GMT\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=42G4LlM0mAM50xkOmfwGsx9Ga3vjAP5hfTNmmgu8ufL39FoYxIT3i7Z6EdyrVYuoFP1P21ya7PHY9rhwkqy2pVCFZUgiuiFI9EqtlKDg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 970f01558ecb56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornvideoq.com/thumbs/vzt-rtp.kivqrbf-pqa.pbz/ivqrbf/guhzof169yy/55/3n/2r/553n2rpq1o23q6qs5091po4sr979s781-1/553n2rpq1o23q6qs5091po4sr979s781.9.wct.jpg","fqdn":"pornvideoq.com","domain":"pornvideoq.com","tld":"com"},"ip":{"addr":"104.21.235.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornvideoq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Jul 2025 15:49:50 GMT","end":"Fri, 10 Oct 2025 16:48:13 GMT"},"fingerprint":{"sha1":"AF:A5:B0:1F:7C:8B:E8:3F:29:77:63:18:FC:EE:C1:12:BC:B3:45:59","sha256":"7C:5C:4B:C6:1C:0A:9C:60:D0:96:CF:84:35:0C:D6:81:7F:18:48:20:7A:85:17:25:76:DB:7C:87:25:EA:8C:46"}}},"request":{"raw":"GET /thumbs/vzt-rtp.kivqrbf-pqa.pbz/ivqrbf/guhzof169yy/55/3n/2r/553n2rpq1o23q6qs5091po4sr979s781-1/553n2rpq1o23q6qs5091po4sr979s781.9.wct.jpg HTTP/1.1\r\nHost: pornvideoq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4988\r\nx-litespeed-cache-control: no-cache\r\ncache-control: public, max-age=2073600\r\nexpires: Sun, 17 Aug 2025 06:33:03 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 10 Aug 2025 06:33:03 GMT\r\nage: 273394\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aGN1zcEC8lBzbchKOdcSQmYO2Jnnbi2m3pdoQKghJOXiYsBLauE6q5NYwHQblz7JBZ4YTtDzUQcsOth6s3f2hMwWV9JLoImC9UKIkvbG\"}]}\r\ncf-ray: 970f01501e891382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4988,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 352x198, components 3","md5":"5c05eb1bb964d670540ea3bf6641e63e","sha1":"e8ca4df73c4bde650e08aa97a8971daf35958f3f","sha256":"751f27a43f99f5be45d91fcf0820b6d44e2f1da8ed005782dc5510de74d23ed6","sha512":"eb76a79799da2e98675795bc6ec07a779deb1fab12c4b45b5e22d3c22e4720a0993ae286035208449c4ae82f81e719376b302747dc0ec561dc42bea7ec8fef64","ssdeep":"96:GahHESWGefB+dxgoJ97B+h7Vlmrp8eDVthZibStPobj2rKl33JX2M:GQH1gMz9LIVlmeavSSPKbmM","tlshash":"3ca17d07ce1e83961b195aeabd23091193061ad694c2b37c1d771ddc9f11d758c4a12f","first_seen":"2025-08-18T05:29:08.796993Z","last_seen":"2025-11-08T13:15:11.219308Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3078,"timings":{"blocked":733,"dns":41,"connect":18,"send":0,"wait":19,"receive":0,"ssl":2238},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn5-thumbs.motherlessmedia.com/thumbs/A454310.jpg","fqdn":"cdn5-thumbs.motherlessmedia.com","domain":"motherlessmedia.com","tld":"com"},"ip":{"addr":"185.107.92.224","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.motherlessmedia.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Mon, 04 Nov 2024 00:00:00 GMT","end":"Fri, 05 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"57:B3:92:20:5F:2C:FA:27:4E:CD:E5:6F:BC:3E:04:43:42:3A:93:E8","sha256":"10:A9:10:0A:05:AC:3F:09:47:9C:0E:EF:B9:5A:60:87:2B:F1:D5:35:A8:E6:3B:67:04:9B:7C:A8:AA:53:B7:FE"}}},"request":{"raw":"GET /thumbs/A454310.jpg HTTP/1.1\r\nHost: cdn5-thumbs.motherlessmedia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty/1.21.4.1\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21835\r\nvary: x-s-token\r\nlast-modified: Fri, 05 Oct 2018 15:37:26 GMT\r\netag: \"554b-5777d0c667741\"\r\nx-cache: HIT\r\nx-whom: cdn08\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21835,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 2000x2001, segment length 16, baseline, precision 8, 640x480, components 3","md5":"03ec3f92c5d9f5e08499c54edd9b2486","sha1":"440fb5427549e3ebdf8a5626c54cff7587990c8c","sha256":"f713a51ebd876a8eee68b053c3a6a22f8c4d4856170cf24133e53d6015b26608","sha512":"55b316dcc683db600553f56e10dbc9178e769b3942fe62e77bc7f00ba0342a08e4a48ce4925090a8a0de9e54c28f368eaa74d5b4d0ceee4995ac062567102592","ssdeep":"384:EzjAt1+IXRQfIgElRtWYuot9/c9DtpDoCOdujiDsx8KILTYipwyt:EvAHQfIPlTnuot9GpDoLdujBmKIXNpwy","tlshash":"aaa2f1d33752e467c42aef364a100da974b90115b322e90d1e1f36a6d47f617f3db642","first_seen":"2025-07-02T22:51:17.75156Z","last_seen":"2026-01-11T02:58:14.07775Z","times_seen":15,"resource_available":false,"data":null}},"time_used":3167,"timings":{"blocked":1055,"dns":2,"connect":21,"send":0,"wait":29,"receive":9,"ssl":2048},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"momsonporn.cc/thumbs/494/2079904258292092494_0.jpg","fqdn":"momsonporn.cc","domain":"momsonporn.cc","tld":"cc"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"momsonporn.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Jul 2025 18:22:31 GMT","end":"Thu, 09 Oct 2025 19:21:12 GMT"},"fingerprint":{"sha1":"C8:4D:68:D9:4C:01:0A:97:79:0C:62:A2:DE:90:00:FC:4D:32:B8:DA","sha256":"15:D9:32:87:43:6B:F8:A7:A2:F8:F2:8F:19:02:A6:1F:F8:5A:91:43:B5:A5:37:7F:0C:AC:40:41:50:BC:24:BE"}}},"request":{"raw":"GET /thumbs/494/2079904258292092494_0.jpg HTTP/1.1\r\nHost: momsonporn.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5661\r\nserver: cloudflare\r\nlast-modified: Sat, 19 Feb 2022 17:17:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"62112646-161d\"\r\nexpires: Wed, 03 Sep 2025 12:32:53 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 1184104\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xvLJ7POh9ewi5nWUHVB5vzki3oAtbBHLXwZT9p7FkoqDpF7ChHjOFdqLvlVdyjdcaoClUpocfZS3T91bxCW5VjqvIcSS99Mw9Zr%2B\"}]}\r\ncf-ray: 970f014e3f2f568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5661,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 240x180, components 3","md5":"9f4808d1cf955b1bc929d15944f36d0e","sha1":"32e3b653bc1ebe9555c3e23b515f41b20ac5df56","sha256":"12a397e4ef711d40d82f0b85280875ac814d268f525d7b5edd586675c480a877","sha512":"f58ac544ed5293048649ca45c9a1a2c701c81814375566bf9fb23891dc237d9aad0386e1a02b77213ad975a5a67c4ba98ba81b5493f7d0df186a0100ae595d0f","ssdeep":"96:33Uu9qs5oILvCuquvDRlWmgqZT8O1WsebFEa5hVrExvfyZqxuIS:1q4pLvX7Rs8ZT8O8JBEO0vf1uIS","tlshash":"1cc17d193c0677eced12ed7335e35104e355f5913f22a33f56821c6088a96a7ee0ad0e","first_seen":"2024-12-13T01:11:03.566982Z","last_seen":"2026-04-28T09:00:52.375886Z","times_seen":8,"resource_available":false,"data":null}},"time_used":2840,"timings":{"blocked":719,"dns":11,"connect":10,"send":0,"wait":13,"receive":0,"ssl":2079},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"timg216.top/videos/14b21afdd584bcc8c0ff2527dbd39cb8703a4fde/cover/5_505_259?ih=1","fqdn":"timg216.top","domain":"timg216.top","tld":"top"},"ip":{"addr":"104.20.25.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"timg216.top","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 04:37:13 GMT","end":"Sun, 02 Nov 2025 05:13:46 GMT"},"fingerprint":{"sha1":"09:98:82:E6:F6:CE:3A:0B:34:CA:7C:64:95:7C:21:B9:C3:D6:F3:7F","sha256":"2C:38:55:11:E8:93:E4:92:AF:46:8F:B3:8C:65:8E:0B:7C:53:7B:05:49:81:6B:17:A8:A7:13:D1:FA:7A:43:7E"}}},"request":{"raw":"GET /videos/14b21afdd584bcc8c0ff2527dbd39cb8703a4fde/cover/5_505_259?ih=1 HTTP/1.1\r\nHost: timg216.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:59 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 47812\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Mar 2025 09:31:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"67c6c879-bac4\"\r\nexpires: Sat, 23 Aug 2025 01:18:58 GMT\r\ncache-control: public, max-age=31536000, stale-if-error=7200\r\nt-cache: LHIT\r\naccept-ranges: bytes\r\nage: 1162653\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zGLb8kMt%2Fti5ayjSYcCxBDbtP6UzdP8JscbmubTx%2B9Og%2BgvpiEjyj7cU0tjT%2B4nWRtpF7eThg8UuXbDoXEcfALhRoCn4E990VA%3D%3D\"}]}\r\ncf-ray: 970f0151deffb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47812,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.107.100\", baseline, precision 8, 505x259, components 3","md5":"daf51adc8e1f5874a5cac9051bd7a869","sha1":"6a22eac240449458ddc154613c12580e34099081","sha256":"0c233099a68625b6ee404e69f21a7b6767ad71dc6512c3bc1b7384a757a3ae81","sha512":"58bb586a952884ff85fde0a49fa3f788169dcd8c349af0fe2241fa8a892d8708c8e2c1be42efa32fc02f3de1bd9349978f8e85cd33ec735351b3e4d5fad677e3","ssdeep":"768:eEtqnfZ9Z3LsR3EbRluGytYhrSWUph7kykZGFNvUYnshjhKiyTFW1WEG7pPhM9sf:eE4nfZ9Z3LskRluMhrSpphkyvFRUQsyF","tlshash":"6423025dc8e4c877a43576b01d3838a910ae315cfbf067fb564a7787f8e38e661a6102","first_seen":"2024-12-28T23:16:57.203985Z","last_seen":"2026-01-24T20:27:52.860176Z","times_seen":47,"resource_available":false,"data":null}},"time_used":3334,"timings":{"blocked":947,"dns":23,"connect":18,"send":0,"wait":22,"receive":2,"ssl":2242},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdne-pics.youjizz.com/f/1/2/f1256e3a3319eed70b80ff7d32e6e87e1679935567-1920-1080-2614-h264.mp4-9.jpg","fqdn":"cdne-pics.youjizz.com","domain":"youjizz.com","tld":"com"},"ip":{"addr":"64.210.135.113","port":443,"asn":30361,"as":"SWIFTWILL2","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:56.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.youjizz.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 20 Dec 2024 00:00:00 GMT","end":"Tue, 06 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:A8:A8:35:DB:C2:7E:35:C3:7E:2A:75:C8:C8:D8:C6:09:86:45:D7","sha256":"B8:B2:2C:F3:DA:14:43:7C:79:64:F3:2C:36:B2:0A:52:EF:A7:AE:C8:FF:5D:57:E2:D1:26:9D:FD:B8:D7:77:B9"}}},"request":{"raw":"GET /f/1/2/f1256e3a3319eed70b80ff7d32e6e87e1679935567-1920-1080-2614-h264.mp4-9.jpg HTTP/1.1\r\nHost: cdne-pics.youjizz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:28:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16419\r\nlast-modified: Mon, 27 Mar 2023 16:51:47 GMT\r\netag: \"4023-5f7e48f07959f\"\r\nexpires: Thu, 28 Aug 2025 23:30:58 GMT\r\ncache-control: max-age=10694514\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,OPTIONS\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\naccept-ranges: bytes\r\nx-cdn-diag: ams5-8657-1-309249-h-0-0---;7619-19-1031166----0-0-0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16419,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", baseline, precision 8, 308x232, components 3","md5":"578a30ec31eb900727765635e3840817","sha1":"4fcbcda0b96ed38c274f4f565e921da5040d168c","sha256":"178e0c7d232e0ae06bcdef50c42d51569271f558b64a4b3ca473af6ceea6e17d","sha512":"6faa1391dafad78dd19dcfaf190f525950078ef9e552b1691b2051779ae3c60ca9b084c5d67ad10bbd8290ef23edd8b66a5b6f05898f159eeeee28752d7f62f6","ssdeep":"384:HY/3risFxxD3jWyH0pEhbt+KzyIL/F9f0UPrk25zcn2Xpd:HYfBJWnKH95pPrk2K2r","tlshash":"6172cfccb71426b9e5bcfd7976488ae52400164acd0a768d5fd03bdec4adf214bc4364","first_seen":"2025-02-02T18:13:52.508254Z","last_seen":"2026-01-21T05:47:16.524602Z","times_seen":58,"resource_available":false,"data":null}},"time_used":3976,"timings":{"blocked":960,"dns":11,"connect":32,"send":0,"wait":27,"receive":1,"ssl":2922},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hentaifreak.org/favicon.ico","fqdn":"hentaifreak.org","domain":"hentaifreak.org","tld":"org"},"ip":{"addr":"172.67.156.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hentaifreak.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 16:01:54 GMT","end":"Tue, 28 Oct 2025 16:57:11 GMT"},"fingerprint":{"sha1":"50:01:BD:1D:9D:52:F2:7E:0D:75:56:86:42:99:8D:1A:E1:42:C2:D5","sha256":"75:0B:14:2E:47:46:E1:9E:A4:F3:58:F4:C8:42:68:4D:30:4A:1F:9A:2E:D6:6F:78:25:D3:74:31:AB:32:41:A5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: hentaifreak.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 18 Aug 2025 05:28:03 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://media.hentaifreak.org/2016/10/cropped-favicon-1-32x32.png\r\nserver: cloudflare\r\nx-powered-by: PHP/8.1.25\r\nlink: \u003chttps://hentaifreak.org/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-redirect-by: WordPress\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IxneYsMWjkkou7a2iy78a6kT%2BLBDKIUk%2BQW6bV8gbfMXjPt9E2GM9rqkGPmM9rUTdESZPjmyfvsst7FpwFYtBrkBnqQvjPT%2BUJ5aFpo%3D\"}]}\r\ncf-ray: 970f016e7db456b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:8.1.25","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":994,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":1101,"timings":{"blocked":-1,"dns":19,"connect":13,"send":0,"wait":306,"receive":0,"ssl":732},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"turboporno.info/favicon.ico","fqdn":"turboporno.info","domain":"turboporno.info","tld":"info"},"ip":{"addr":"62.60.230.53","port":443,"asn":51396,"as":"Pfcloud UG","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"turboporno.info","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Jul 2025 10:37:25 GMT","end":"Tue, 14 Oct 2025 10:37:24 GMT"},"fingerprint":{"sha1":"DF:F5:01:92:36:38:AC:CE:35:8D:44:AA:35:20:43:AA:AA:1E:CB:DC","sha256":"EC:2A:8B:F7:A1:AC:6A:CF:81:48:F4:35:12:D0:E7:23:99:A9:84:52:03:FE:BD:8A:25:1E:6F:75:F1:A4:D7:24"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: turboporno.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Mon, 18 Aug 2025 05:28:02 GMT\r\nLocation: https://turboporno.info/template2/img/4.png\r\nSet-Cookie: XSRF-TOKEN=eyJpdiI6IldCb0VhSWhjRHluVFJ1NDJlTndEcXc9PSIsInZhbHVlIjoic1NtZU5JNlVaSlRCY1RDcGpuaTY1cStVRjV6Q2treUM1VFkrOFZjZTY3QVJ3S3pudzZCTUs0Qmd0U0JYaWhVU1FiU1VHTUlzMXdLMVhDY3NmeWhjM2FqR2hldHlpU0JpVXZVdm5GaTluZ3owTnFvWDhMQnlOcGVlbys0TW82bnoiLCJtYWMiOiI2ZTUxNjg4ZWU1ZmY1NTk5OTY1NmFjMjVkZjgwMTYyNTE4M2NjNjlhMGI4ZGZmMDgxNTQ5MzVkNDY4ZTQwNmRjIiwidGFnIjoiIn0%3D; expires=Mon, 25 Aug 2025 05:28:02 GMT; Max-Age=604800; path=/; secure; samesite=lax\nlaravel_session=eyJpdiI6Ijg1cUphaUVRb0sxK0c0WmNCVmgyRVE9PSIsInZhbHVlIjoiR0hRNElXY2ttYmdXUUNFMmRWdGJuTGZyOWt3U3ZmZXhtZXBLcS9peFhoWGxYdlhiM3hzRTgxaGdDbXhWM0lwdTlwM2VxQWxIYkRPaGFpeWs1ajZmRk9FWS96Sy9NbHA0MGltaEdySkovWXl0a3lYL0hkbHBGVDV2K0lWYUFyN1MiLCJtYWMiOiI2NDViM2FiM2U5NGMwNzEwZmNiYzFlYzE4Nzk3ZjYyZWYyMmFiOWRmZWZiYjk0MGUwMTY2ZmJkZGEzYjRhZDE2IiwidGFnIjoiIn0%3D; expires=Mon, 25 Aug 2025 05:28:02 GMT; Max-Age=604800; path=/; secure; httponly; samesite=lax\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4890,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coolvintageporn.com/favicon.ico","fqdn":"www.coolvintageporn.com","domain":"coolvintageporn.com","tld":"com"},"ip":{"addr":"46.229.163.229","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coolvintageporn.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 01 Aug 2025 00:00:00 GMT","end":"Thu, 30 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"7F:7A:72:B9:58:EC:07:3F:01:E5:2B:12:90:54:A6:A1:04:83:63:3D","sha256":"E8:2A:BB:AA:C2:95:32:E9:0D:FE:8C:E0:67:D3:2B:B7:CD:F8:01:30:13:FF:2B:9C:24:43:2E:22:42:FA:D7:1B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.coolvintageporn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: openresty\r\ndate: Mon, 18 Aug 2025 05:28:05 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":1903,"timings":{"blocked":105,"dns":24,"connect":173,"send":0,"wait":96,"receive":0,"ssl":1478},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xmaza.co/wp-content/uploads/2024/06/Muslim-Father-Fucking-his-daughter-in-front-of-mom.jpg","fqdn":"xmaza.co","domain":"xmaza.co","tld":"co"},"ip":{"addr":"104.21.44.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xmaza.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:43:15 GMT","end":"Sun, 21 Sep 2025 09:41:38 GMT"},"fingerprint":{"sha1":"C2:26:7A:91:7F:53:BC:6C:8F:5E:01:94:13:E8:19:0B:5C:2A:B8:25","sha256":"80:79:77:D5:22:CE:CD:55:E0:FD:A0:C3:A8:A9:1F:2A:15:1A:7E:C6:59:D0:59:E4:11:7D:04:BD:07:68:2E:F7"}}},"request":{"raw":"GET /wp-content/uploads/2024/06/Muslim-Father-Fucking-his-daughter-in-front-of-mom.jpg HTTP/1.1\r\nHost: xmaza.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18746\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 30 Jul 2025 03:43:38 GMT\r\netag: \"493a-667c4355-d01b09;;;\"\r\nlast-modified: Wed, 26 Jun 2024 16:35:33 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 427791\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vRjRBp5H3mVLFpBaSkP1cWgtblDoSUb4nXvkUFXqULTqhy%2FnLo8RZo6HhZJ6fDyO0hwhpsRNx89A6swozOYXMQeSXUlbSA%3D%3D\"}]}\r\ncf-ray: 970f014baa9256c7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18746,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x303, components 3","md5":"babc3306131c34ee4e6627ffeab19f2d","sha1":"70087e47d35b57826e3514eaa8f9df860aa2ba3e","sha256":"1d6219a60973a50233aeabcc4d2266b5f8424d6ff3d6bb72dadf364ee76aac53","sha512":"c5b190caa264454c2234e9d1853a3d970f2d5bd07cda8851038c9eac28cc07fb60731f9b34c41386ad8316cca425e1d7b4c27e0fccd5e0a166a1c586a16427a6","ssdeep":"384:0wR97wKXQZYjA2POAKFjCsI67NFqqyA5VlkLkNOxM2P+7JVOJaZhsa:xf7wKXPjA+00qyGVmLkA67JVOJabsa","tlshash":"c882c04f5f11c519ef04eff1a6b8b4d2b924999a9d3f1d310f450c58ec45a48ae0eb1b","first_seen":"2025-03-25T21:53:49.911673Z","last_seen":"2026-03-03T09:47:10.792103Z","times_seen":23,"resource_available":false,"data":null}},"time_used":3087,"timings":{"blocked":975,"dns":4,"connect":1,"send":0,"wait":8,"receive":1,"ssl":2084},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241010-10/ee672bcb67c96594fb98ac2013991a99.png","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:59.925Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241010-10/ee672bcb67c96594fb98ac2013991a99.png HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-18","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rtgallery.net/tb/naked-teenbreasts.jpg","fqdn":"rtgallery.net","domain":"rtgallery.net","tld":"net"},"ip":{"addr":"5.63.144.84","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtgallery.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 07:06:55 GMT","end":"Mon, 20 Oct 2025 07:06:54 GMT"},"fingerprint":{"sha1":"FE:48:A0:70:A8:E4:6F:86:37:1B:38:AD:2B:76:29:45:09:3A:0B:05","sha256":"B9:B5:A1:EA:CE:3C:39:D6:3A:87:80:27:9A:0A:9A:C1:EF:44:C4:3C:E8:AA:2B:B4:61:7D:01:73:8B:B3:3B:1F"}}},"request":{"raw":"GET /tb/naked-teenbreasts.jpg HTTP/1.1\r\nHost: rtgallery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 18 Aug 2025 05:27:56 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 22017\r\nLast-Modified: Fri, 02 Jun 2017 16:13:25 GMT\r\nConnection: keep-alive\r\nETag: \"59318ea5-5601\"\r\nCache-Control: private, max-age=600, must-revalidate\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22017,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: \"Created with GIMP\", progressive, precision 8, 320x240, components 3","md5":"84ff1cf15da082801da61bc917146f83","sha1":"004af9747679ad225020a2526e690d25f10d6c07","sha256":"fc92a846514bca0452d6bf31026eff7fb216a520ae57b88a3b38a766dfb6c4f2","sha512":"48b17b7f90d2b780b440964160bba665eba39bd818386c1cd9e68e23a1cf44e01a202738f9d513ff2163ae7678e3c0d386bde5a88f7d663313e97021cc752093","ssdeep":"384:UHJTxhRghMhpqqImOhKwmxRL5StDh3rlZ+FT0OJGjiPygc/VjzHKTykeGpK:UHJWTkOs/mtDh3rlZmT0nji7sPcJpK","tlshash":"7fa2d049ab1502d0f5a75af2c9be6d16ffdf76b41b7ad844788fa31c8110701aa3068d","first_seen":"2025-07-19T18:39:22.556971Z","last_seen":"2026-01-10T18:51:40.957216Z","times_seen":19,"resource_available":false,"data":null}},"time_used":962,"timings":{"blocked":892,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/2X/6/626f13e741868d4f049ec027cf864c0e0444dee8_2_1024x573.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:59.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 16:04:05 GMT","end":"Sun, 09 Nov 2025 16:04:04 GMT"},"fingerprint":{"sha1":"DF:EC:86:BA:09:B3:17:C2:2B:66:0A:BF:62:3E:3C:4D:90:D2:A4:33","sha256":"EF:3A:5A:BF:D7:FE:5F:99:1A:3F:CD:49:ED:AF:84:68:4F:09:27:DC:47:7B:D5:51:4C:E2:DB:A2:A1:6A:3C:FF"}}},"request":{"raw":"GET /uploads/default/optimized/2X/6/626f13e741868d4f049ec027cf864c0e0444dee8_2_1024x573.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:59 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.webvisor.org/watch/48140495/1?wmode=7\u0026page-url=https%3A%2F%2Fav4.vid4.uk%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3Att8recolbbnnxv5tn59mnhq7484f%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2160%3Acn%3A1%3Adp%3A0%3Als%3A761377165203%3Ahid%3A42520701%3Az%3A0%3Ai%3A20250818052758%3Aet%3A1755494879%3Ac%3A1%3Arn%3A265906240%3Arqn%3A1%3Au%3A1755494879214245476%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C14%2C7%2C62%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1755494874042%3Afip%3A6bcdbfd73c55b43ce7c5ef41afc9ada5-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1755494880%3At%3AHot%20Videos%20%E4%BA%BA%E6%B0%97%E5%8B%95%E7%94%BB-%E5%8B%95%E7%94%BB%40AV4.us\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2842534404%29fip%281%29ti%281%29\u0026redirnss=1","fqdn":"mc.webvisor.org","domain":"webvisor.org","tld":"org"},"ip":{"addr":"77.88.21.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.webvisor.com","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sun, 09 Mar 2025 21:02:24 GMT","end":"Sun, 31 Aug 2025 20:59:59 GMT"},"fingerprint":{"sha1":"4E:A6:D4:57:F5:B7:FB:C1:98:C0:40:D2:B8:FA:B4:10:43:09:41:94","sha256":"56:26:AF:5C:3E:39:FA:F7:0B:52:B0:C0:E7:E3:25:F7:B5:F7:59:2B:5F:DC:89:D5:7F:4D:D7:4A:6E:62:5F:80"}}},"request":{"raw":"GET /watch/48140495/1?wmode=7\u0026page-url=https%3A%2F%2Fav4.vid4.uk%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3Att8recolbbnnxv5tn59mnhq7484f%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2160%3Acn%3A1%3Adp%3A0%3Als%3A761377165203%3Ahid%3A42520701%3Az%3A0%3Ai%3A20250818052758%3Aet%3A1755494879%3Ac%3A1%3Arn%3A265906240%3Arqn%3A1%3Au%3A1755494879214245476%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C14%2C7%2C62%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1755494874042%3Afip%3A6bcdbfd73c55b43ce7c5ef41afc9ada5-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1755494880%3At%3AHot%20Videos%20%E4%BA%BA%E6%B0%97%E5%8B%95%E7%94%BB-%E5%8B%95%E7%94%BB%40AV4.us\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2842534404%29fip%281%29ti%281%29\u0026redirnss=1 HTTP/1.1\r\nHost: mc.webvisor.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://av4.vid4.uk\r\nReferer: https://av4.vid4.uk/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yabs-sid=401200401755494881; i=7AYHdJtiMfsKd8ylgqU+Y9HTs0X5AX5UsA4xDRdEEq4lMUM/oWhs7fwMxMwMnVeqbpcXp0sx5WrXhhgsKBo/GrQuKvA=; yandexuid=2465275301755494881; yuidss=2465275301755494881; ymex=1787030881.yrts.1755494881#1787030881.yrtsi.1755494881; bh=YOHzisUGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 635\r\nstrict-transport-security: max-age=31536000\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Mon, 18-Aug-2025 05:28:03 GMT\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nx-content-type-options: nosniff\r\nexpires: Mon, 18-Aug-2025 05:28:03 GMT\r\naccess-control-allow-credentials: true\r\ncontent-type: application/json; charset=utf-8\r\npragma: no-cache\r\naccess-control-allow-origin: https://av4.vid4.uk\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":635,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0aeff7d149dc640b2591a4ad37613685","sha1":"dc4c2c5a8b44cb889d823ea77159f0ca1766ed06","sha256":"28d0614d40f7dafd6f4c1ab7c450a6bb5f089f5212371ae20790665bf2def8d8","sha512":"2edcf0dfb45a60a5884a66cdacca7567899617c0fb0696f352a798f3c44e9c9112d8463668ce1bb35a156730e2ecf7ddda7589d805fa97c5f36351ebd87555bd","ssdeep":"","tlshash":"30f008c4dd1c4f774ddb9f4442e03546a9493840ee8169f119524b56458ef31fb093e2","first_seen":"2025-08-18T05:29:08.801633Z","last_seen":"2025-08-18T05:29:08.801633Z","times_seen":1,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20240611-1/291e9b4a00177c60de2ca7efd249e305.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.62","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20240611-1/291e9b4a00177c60de2ca7efd249e305.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 95324\r\nlast-modified: Tue, 11 Jun 2024 04:00:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6667cbea-1745c\"\r\nexpires: Tue, 09 Sep 2025 16:44:28 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":95324,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 718 x 404, 8-bit colormap, non-interlaced","md5":"6f9c5a81387ae6ba51f0351bfdda5d19","sha1":"a9aa6dd16b0b88b94b2086413fcd48bda27a5b1f","sha256":"f453158abeffeffca6e36691b9cf0f31ca629b59e6e87091a798d57c16aaf84a","sha512":"8b57d4706234c13a8ece351f0c004b850d09c24ff211bebaf8cd511454984945b48b3e823f2e403bc9840f35758a61901bf34e9b76fc1e9dec17c98a11ab823a","ssdeep":"1536:WHTOTcm/Lc0WWfElHv9+crEM+cx2TAXyrdXVi5YtWsVsmvXAVGvu9W5jbqylz:WzdmjIx9+cHFx2TkCk5YtbXZ2qWaz","tlshash":"069312b75940e9628d88b12fb77b19d1fcca61b989f970d2ff2b480e22c61c4985b117","first_seen":"2025-02-14T10:18:08.770636Z","last_seen":"2025-12-02T20:32:07.54703Z","times_seen":36,"resource_available":false,"data":null}},"time_used":3008,"timings":{"blocked":414,"dns":1,"connect":147,"send":0,"wait":146,"receive":19,"ssl":2273},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.pornoreino.com/contents/videos_screenshots/56000/56925/preview.jpg","fqdn":"images.pornoreino.com","domain":"pornoreino.com","tld":"com"},"ip":{"addr":"79.127.216.112","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.pornoreino.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 Aug 2025 22:11:16 GMT","end":"Sat, 08 Nov 2025 22:11:15 GMT"},"fingerprint":{"sha1":"99:BD:7E:40:F6:6C:92:EC:BE:D8:70:8C:44:3A:00:58:19:2E:A6:2D","sha256":"37:52:87:4F:7A:69:87:1E:8D:52:BD:79:F7:AD:27:A5:67:8A:E9:C2:D2:40:04:14:5F:68:A8:26:AD:60:09:1A"}}},"request":{"raw":"GET /contents/videos_screenshots/56000/56925/preview.jpg HTTP/1.1\r\nHost: images.pornoreino.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 51033\r\nserver: BunnyCDN-DE1-755\r\ncdn-pullzone: 3789657\r\ncdn-uid: 47d12ef8-6de6-4eb6-b25e-b069dad1caad\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, must-revalidate, proxy-revalidate, max-age=2592000, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\netag: \"5e0f96b5-c759\"\r\nexpires: Fri, 13 Jun 2025 21:47:28 GMT\r\nlast-modified: Fri, 03 Jan 2020 19:32:05 GMT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 93fd981ebe78e7b2-FRA\r\nx-powered-by: Reino\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=d3rjA%2FG2oWP25f5rFow8LvDKfJ3I1SiSGYuoiA87KPreIM%2F9Ncq0yKDDV83Hu6seVKjYLwpKNk5qj57R417BTsOz%2FzFXvOhyDd9WMWxJclib4yPERNqYM0GPF74ampjbFER89Vs%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=776\u0026min_rtt=660\u0026rtt_var=39\u0026sent=163\u0026recv=79\u0026lost=0\u0026retrans=0\u0026sent_bytes=211640\u0026recv_bytes=10575\u0026delivery_rate=55576763\u0026cwnd=252\u0026unsent_bytes=0\u0026cid=bfcb574dc2143ee4\u0026ts=278056\u0026x=0\"\r\ncdn-proxyver: 1.27\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/14/2025 21:47:28\r\ncdn-edgestorageid: 752\r\nlink: \u003chttps://www.pornoreino.com/contents/videos_screenshots/56000/56925/preview.jpg\u003e; rel=\"canonical\"\r\ncdn-requestid: 807dd1ff0b3ded2c75ad3301100441f0\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51033,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 851x480, components 3","md5":"c26d9035a3a2ab00acd3268a48076d6e","sha1":"55bb6c399d8e662c2bad976dc7f89c62098db9e5","sha256":"8d75b80d93d2919277427b145b7f2d97db187b4dfdd3b5d073f2ec9e4385c676","sha512":"39f224e087c1f9c45ac1c67474c3cf0a78cab7862d13a1f7016749f33ad8a49a8e85821c7979f3a035fbc302695f348b604e9007ea5e8b25ba7b5f375b9fa480","ssdeep":"1536:itxjK6JFGWTjIeSJth4ZlrbWCLouG1Y56hi41s:QB3GWTjlrVGnid","tlshash":"b83302ef7155c50cdaf80bb58fe1224bee54ad8bd669d098524cd0cc819e984326fcb3","first_seen":"2025-08-18T05:29:08.803154Z","last_seen":"2025-08-18T05:29:08.803154Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2837,"timings":{"blocked":628,"dns":3,"connect":23,"send":0,"wait":28,"receive":41,"ssl":2111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/original/1X/f578ebacc976b47ff860e2eb8e65d19202eeb2c9.png","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 16:04:05 GMT","end":"Sun, 09 Nov 2025 16:04:04 GMT"},"fingerprint":{"sha1":"DF:EC:86:BA:09:B3:17:C2:2B:66:0A:BF:62:3E:3C:4D:90:D2:A4:33","sha256":"EF:3A:5A:BF:D7:FE:5F:99:1A:3F:CD:49:ED:AF:84:68:4F:09:27:DC:47:7B:D5:51:4C:E2:DB:A2:A1:6A:3C:FF"}}},"request":{"raw":"GET /uploads/default/original/1X/f578ebacc976b47ff860e2eb8e65d19202eeb2c9.png HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 73669\r\nlast-modified: Sat, 19 Apr 2025 04:20:19 GMT\r\nexpires: Tue, 18 Aug 2026 05:27:54 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73669,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 180, 8-bit/color RGB, non-interlaced","md5":"effac98a7d872922250baf21d3a0cad1","sha1":"f578ebacc976b47ff860e2eb8e65d19202eeb2c9","sha256":"ae74f413d429cdd544b29e511efccaaadc2d874f010104fc669c81fb96ee35cb","sha512":"644b41ded17c8a93b14c8e3725e8dfdbab5f232acfedd10401b191b5f0bae398c343e8770d5b2036734a042d477f43511b63528115a47c86fa0d6187ae924668","ssdeep":"1536:5b7Xnnp1OvXfvGJ6mgQ75FFp/Y5wbRdlJqZ51CzU/kjPbGF:5np1qlmgQ7D4CbRdlJ07X/kj6","tlshash":"ce7302c9837a0288f97136f8d2786d0fa5f21fe51cd80825151bdad365edc3245876eb","first_seen":"2025-07-17T17:38:44.661054Z","last_seen":"2026-03-01T19:27:35.685407Z","times_seen":31,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":3,"connect":33,"send":0,"wait":53,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241010-11/5d5a030b5cb99bac68111cfce4b0a62e.png","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.070Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241010-11/5d5a030b5cb99bac68111cfce4b0a62e.png HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-18","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rtgallery.net/tb/young-nimf.jpg","fqdn":"rtgallery.net","domain":"rtgallery.net","tld":"net"},"ip":{"addr":"5.63.144.84","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rtgallery.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Jul 2025 07:06:55 GMT","end":"Mon, 20 Oct 2025 07:06:54 GMT"},"fingerprint":{"sha1":"FE:48:A0:70:A8:E4:6F:86:37:1B:38:AD:2B:76:29:45:09:3A:0B:05","sha256":"B9:B5:A1:EA:CE:3C:39:D6:3A:87:80:27:9A:0A:9A:C1:EF:44:C4:3C:E8:AA:2B:B4:61:7D:01:73:8B:B3:3B:1F"}}},"request":{"raw":"GET /tb/young-nimf.jpg HTTP/1.1\r\nHost: rtgallery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Mon, 18 Aug 2025 05:27:55 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 35407\r\nLast-Modified: Mon, 07 Oct 2019 13:59:52 GMT\r\nConnection: keep-alive\r\nETag: \"5d9b44d8-8a4f\"\r\nCache-Control: private, max-age=600, must-revalidate\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35407,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, comment: \"Created with GIMP\", progressive, precision 8, 480x360, components 3","md5":"09c1d78b174699770a5334dc3d5ff2a2","sha1":"2eca379ba057b2088d82a127326670e169b713d7","sha256":"27b22a4872d32a56f9ca8d31e168cb9b4ad1f7980aadcce9a078f9e28658f14f","sha512":"5be00548ea477b053bd0b6ecf42e4df394f38a9409a6418df04030a4ba4fab54f236a1b07546c3fc3e6d98ef2754a4afc349f186ae4655af04e2cc2248a8c697","ssdeep":"768:U43xJkP9Bm6dCvYXRQFnRHvaiC0Wralu8PToncqCo+aVu:UC769SyReRvVC0Y9WUcqCZp","tlshash":"59f2f1b306755ee4f08e717182542b3caaf814b640ef206176f6fe5fe9478e70989528","first_seen":"2024-08-20T03:06:45.83182Z","last_seen":"2025-12-21T16:29:59.822546Z","times_seen":31,"resource_available":false,"data":null}},"time_used":1379,"timings":{"blocked":539,"dns":21,"connect":34,"send":0,"wait":37,"receive":1,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornfamily.org/thumbs/316/3824942637268360316_0.jpg","fqdn":"pornfamily.org","domain":"pornfamily.org","tld":"org"},"ip":{"addr":"104.21.43.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornfamily.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Jul 2025 10:10:14 GMT","end":"Fri, 10 Oct 2025 11:08:48 GMT"},"fingerprint":{"sha1":"F9:30:22:A1:84:68:9A:4B:88:DB:E6:A6:62:A1:6B:8C:92:34:FF:C3","sha256":"11:0E:3A:64:6B:E4:E0:0A:71:7D:AC:6A:DE:FD:18:65:E4:61:EA:B1:7D:31:F3:6B:DE:FC:28:3F:22:FD:6E:BF"}}},"request":{"raw":"GET /thumbs/316/3824942637268360316_0.jpg HTTP/1.1\r\nHost: pornfamily.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6804\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Mar 2020 01:42:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"5e61aa80-1a94\"\r\nexpires: Tue, 16 Sep 2025 01:37:56 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 100197\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6eUwTdVYOwLmzb4vq4rnjELWxqOuhyOf8bOaYAzNrwYvORYLBp3OZZGd0mZNBPJiN6CF7tnA6q%2Bq5ld0eQXzrZrtfYHThWaj3qQtNg%3D%3D\"}]}\r\ncf-ray: 970f01367a12b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6804,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 240x180, components 3","md5":"a63cced14aaeea9edfbd03b6a2ace110","sha1":"20fa85d83164ea57ecb9d8d39ddcfe42a99aa874","sha256":"2c4eb8aa2a46702ea5b3c838f35d6adb54e9b9a634b931d29be0415596e31970","sha512":"7bc675e97895621954827d6223625acf6239f5195674e4f5bb9d297505542a3c64158c12d32a88bb406f7a15190f46cc192d7708e024ecdbe407480e76f0e78d","ssdeep":"192:m9b8ms85qRtcLwdHYZeQlbJKXrV4ICV5Calp:HptJdMe/XrVDCV5Tlp","tlshash":"9ce1afb1e89ce7b6cb7c49f1d72d38cdbf289e932411caa90cd340459b5ec558a405ed","first_seen":"2024-01-27T03:05:05Z","last_seen":"2026-06-04T19:34:54.051379Z","times_seen":49,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":5,"connect":10,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"videosnudes.com/wp-content/uploads/2016/11/thumb-video-38.jpg","fqdn":"videosnudes.com","domain":"videosnudes.com","tld":"com"},"ip":{"addr":"38.180.16.130","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"videosnudes.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Jul 2025 18:39:08 GMT","end":"Thu, 02 Oct 2025 18:39:07 GMT"},"fingerprint":{"sha1":"68:C2:01:CE:A3:6E:76:41:21:77:53:35:37:69:37:4F:5E:C6:A4:E9","sha256":"73:AA:DB:02:62:61:38:A4:A1:6C:E7:2E:75:C6:E8:2F:F2:A2:A4:77:B6:5B:CF:B0:FB:99:65:D3:E6:0D:92:B0"}}},"request":{"raw":"GET /wp-content/uploads/2016/11/thumb-video-38.jpg HTTP/1.1\r\nHost: videosnudes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Jun 2025 22:58:56 GMT\r\netag: W/\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 17 Jun 2017 13:10:28 GMT\r\nx-powered-by: NovaNAX (c) Next Generation Datacenters\r\nserver: X2 Network Enterprise Hosting\r\nstrict-transport-security: max-age=31536000\r\nx2n-balancing-cluster: #05 (Server: #1 | Backend: cluster05_litespeed)\r\nx2n-cache-backend: HIT\r\nx2n-cache-backend-hits: 7096\r\nx2n-cache-backend-ttl: 27646170.651 seconds\r\nx2n-cache-backend-age: 3889829.349 seconds\r\ncache-control: public, max-age=31536000, immutable\r\nx2n-multihoming-network: dlt_shrd01-gyn_router01_02\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nx2n-cache-cdn: HIT\r\nx2n-cache-cdn-hits: 728105\r\nx2n-cache-cdn-ttl: 30304886.484 seconds\r\nx2n-cache-cdn-age: 1231113.516 seconds\r\nx2n-load-balancer-endpoint: cdn06.load-balancer.x2.network\r\ncontent-length: 19911\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19911,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 575x416, components 3","md5":"30fad0d1264f5c244c0843e0705b65bb","sha1":"51ecf44861e6c320ddc03aa5776e6f05a4b0fd88","sha256":"fb2961a9cefd6c9bdab6dd21b182763adc4fcf2fb3122e3fb544ee377d45722c","sha512":"a84a1079baaa6273286166db343a96235be35acfc7247fbfb749b05f707aa584b5de2a2822e71be3fd81ca457ed47e1839db7b61dbae51321101c569924f123a","ssdeep":"384:6Gt1cfwIhOPFYoWi0qn853vjtfYdmJQ8xKhGq/bclS01zw5wMlfpsyEm0NPdib4Y:bTPaol9853vjCSpsGqkS01zw5ZlfpsyP","tlshash":"6792d0d17b30ed37def0c2a984b324177a16561f4a73d4e2b12c3a521b660fe5800673","first_seen":"2025-07-23T06:01:00.469596Z","last_seen":"2025-08-29T11:33:39.450507Z","times_seen":6,"resource_available":false,"data":null}},"time_used":3526,"timings":{"blocked":514,"dns":4,"connect":222,"send":0,"wait":223,"receive":269,"ssl":2281},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sex18.photos/favicon.ico","fqdn":"sex18.photos","domain":"sex18.photos","tld":"photos"},"ip":{"addr":"31.10.5.97","port":443,"asn":207728,"as":"EUROHOSTER Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sex18.photos","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Tue, 08 Oct 2024 00:00:00 GMT","end":"Wed, 08 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"8A:51:2C:C8:73:D4:66:F0:E3:B8:91:AB:69:F1:FF:E5:D7:2A:E5:AE","sha256":"23:8A:9F:42:87:0E:BA:9A:6D:13:97:9A:FB:D5:F0:12:2D:EA:C5:89:B8:FC:8B:E7:89:93:5A:74:AE:C2:F9:0D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sex18.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Mon, 18 Aug 2025 05:28:03 GMT\r\nContent-Type: text/html; charset=WINDOWS-1251\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=WINDOWS-1251","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":955,"timings":{"blocked":-1,"dns":8,"connect":49,"send":0,"wait":37,"receive":0,"ssl":850},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241010-10/6ad3de7da51b66351c8f8f854593bc9e.png","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.916Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241010-10/6ad3de7da51b66351c8f8f854593bc9e.png HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-18","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn5-thumbs.motherlessmedia.com/thumbs/78809B7.jpg","fqdn":"cdn5-thumbs.motherlessmedia.com","domain":"motherlessmedia.com","tld":"com"},"ip":{"addr":"185.107.92.224","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.motherlessmedia.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Mon, 04 Nov 2024 00:00:00 GMT","end":"Fri, 05 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"57:B3:92:20:5F:2C:FA:27:4E:CD:E5:6F:BC:3E:04:43:42:3A:93:E8","sha256":"10:A9:10:0A:05:AC:3F:09:47:9C:0E:EF:B9:5A:60:87:2B:F1:D5:35:A8:E6:3B:67:04:9B:7C:A8:AA:53:B7:FE"}}},"request":{"raw":"GET /thumbs/78809B7.jpg HTTP/1.1\r\nHost: cdn5-thumbs.motherlessmedia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty/1.21.4.1\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 35415\r\nvary: x-s-token\r\nlast-modified: Thu, 04 Oct 2018 15:52:29 GMT\r\netag: \"8a57-5776924660b9f\"\r\nx-cache: HIT\r\nx-whom: cdn04\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35415,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 32x27, segment length 16, baseline, precision 8, 640x480, components 3","md5":"db39a964428188179041b18767fd74a0","sha1":"8aab520f0e66d78a67b770252e6ae0b651ff48d8","sha256":"8823551f5f0bb928c914355387b722a6345433e43163a849f25a77b2fc598a34","sha512":"8d6608b677fcc0061a5856bee9bf7782603b46497d5fa3ce603a4be310592bf60fcae0ed2192a48007f9c506e246f25ad91131e1876f5e91e86b7455a22db950","ssdeep":"768:VJjI4mDfPYVW8e9F7X5gHtgMeY32JRTDkEYh12KySMMlsw:7jI4mDXp8g9X5gHtgRY3aTo7hn/Mysw","tlshash":"12f2e0276c1fc8b37d5ec5b8168039d57003a94682f7534d3fa82bbbfa3f125994a912","first_seen":"2025-08-18T05:29:08.807157Z","last_seen":"2025-08-18T05:29:08.807157Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2731,"timings":{"blocked":603,"dns":4,"connect":17,"send":0,"wait":35,"receive":1,"ssl":2069},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241010-11/57e546a5581574b5cfe949e84bc0d69c.png","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:59.802Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241010-11/57e546a5581574b5cfe949e84bc0d69c.png HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-18","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/favicon.ico","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.034Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-18","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.xvideos.com/favicon.ico","fqdn":"www.xvideos.com","domain":"xvideos.com","tld":"com"},"ip":{"addr":"185.88.181.8","port":443,"asn":46652,"as":"SERVERSTACK-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:02.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xvideos.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 30 Dec 2024 00:00:00 GMT","end":"Fri, 30 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:99:1B:79:BF:20:90:58:BE:23:F3:B2:15:CA:58:D1:87:C9:8F:0E","sha256":"30:46:58:19:E9:1C:C9:B3:05:E7:D0:33:39:C8:4A:8C:C3:27:BC:55:FD:4A:19:FD:DE:C4:50:B0:FF:69:5F:04"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.xvideos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:28:03 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 15086\r\nlast-modified: Mon, 09 Oct 2023 14:43:32 GMT\r\netag: \"65241194-3aee\"\r\nexpires: Mon, 25 Aug 2025 05:28:03 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nserver: nginx\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"d6baf7b631c1e482b6e2f770f9e67057","sha1":"73eb49e766e5954e1ad9538cc35038b9f14494b9","sha256":"fa1ee8d05ad6dfa0731ee0d37badfd019cc3315e6d3b9ca1ae161cee4749481b","sha512":"3e1060de4568d23e10a9e8de1a27e5a965ab9e7e377004badb5f82f6018b46239542efd7378fff55a332b2e04a6211e53031b26a8044f28f3e9507760214e184","ssdeep":"96:jxUVxTXzZJEubLaOmLXa8zyyyyByyyyKzEdgCUPOuQqyyyytyyyuEX:jxUVxTFO722d7NX","tlshash":"ac62a8c7e5054da1dda887b04073998b156bfd6b09632c1a20c63f98d9b3eebf474b01","first_seen":"2023-05-07T23:40:39Z","last_seen":"2026-05-24T12:50:40.582478Z","times_seen":750,"resource_available":false,"data":null}},"time_used":1516,"timings":{"blocked":647,"dns":2,"connect":31,"send":0,"wait":43,"receive":1,"ssl":755},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jsjs.4jpg.top/index.php?js=very","fqdn":"jsjs.4jpg.top","domain":"4jpg.top","tld":"top"},"ip":{"addr":"104.21.77.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4jpg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Jun 2025 21:09:44 GMT","end":"Sat, 20 Sep 2025 22:08:25 GMT"},"fingerprint":{"sha1":"87:CB:34:CD:A8:80:20:88:6C:00:A6:45:55:4F:1A:BE:9C:F4:54:06","sha256":"01:9F:A5:58:0B:57:D0:CB:4F:B0:62:86:96:36:B0:C9:2A:66:FF:E0:4E:6E:7C:CD:B2:EA:D6:B8:E3:23:28:8A"}}},"request":{"raw":"GET /index.php?js=very HTTP/1.1\r\nHost: jsjs.4jpg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nimghost: 1729614248-h-jsjs4jpgtopmh--NO-rm162158222117/index.php?js=very\r\n56nloadrate: 0.3359375\r\ncache-control: max-age=360000, private\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QCWpvrR1EMuyG53uRfSceTGSVp%2BGOdZniroGx%2BKKRIY4Bxxt7AA3pPFKXo823%2F80KqbtiHkBL4%2BFOjeYTKYhd2DPTlnKM1kufb42\"}]}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 970f01359e1f56a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":406,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdig.com/media/videos/tmb/000/005/833/1.jpg","fqdn":"fapdig.com","domain":"fapdig.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:54.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdig.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Jul 2025 16:30:06 GMT","end":"Mon, 13 Oct 2025 17:27:49 GMT"},"fingerprint":{"sha1":"76:C7:CB:0F:48:7A:EF:2F:4D:47:B6:D3:91:60:42:CE:BC:A3:43:24","sha256":"2E:29:05:76:4F:50:CA:97:93:6D:CB:42:4C:D5:8B:AE:B9:59:EE:02:3E:8B:84:66:40:89:F9:FC:2E:8D:04:6E"}}},"request":{"raw":"GET /media/videos/tmb/000/005/833/1.jpg HTTP/1.1\r\nHost: fapdig.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15395\r\nserver: cloudflare\r\nlast-modified: Sat, 12 Mar 2016 18:44:52 GMT\r\netag: \"56e463a4-3c23\"\r\naccept-ranges: bytes\r\nage: 2468\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fl1j69vZ4UWws%2BdGTj3yYjmVIe0LbcxVpd48MdyghVeeHfHIPWUs%2BENiHD4M87bfBRMjZIq1w2Za97otbb6y%2BfbMW6rukQoX\"}]}\r\ncf-ray: 970f01365b53b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15395,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1845x1292, segment length 16, comment: \"Lavc56.58.100\", baseline, precision 8, 320x240, components 3","md5":"e5f49b27889b62ebb3d2c5b22ce6c445","sha1":"4bff781cfa777604c655f526eb73384a6084a4e1","sha256":"ae297d6e6a6fa87f4a75feec37c79d155c2dab36e1f8766861e3331fa8a0d582","sha512":"0f3ee47e46d269d36050b3db2bb9adafefbbffd47598626d590586cd7e0726caab702a8ec0319b216d7ef2a84a44b2bdda3aa8aff8afb6f565b794b72f81f7cf","ssdeep":"384:HQTVOmTasESnRVRuSjJIT7Qt69qRqZ9Z57Jkh:HQTgmTpnR7k0aOcDl4","tlshash":"fb62d0eee693674edc06872daa51a9d67db7870100600ac6fe76c65a4329d32fd6300e","first_seen":"2025-08-18T05:29:08.808666Z","last_seen":"2026-01-16T18:59:05.786075Z","times_seen":3,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":5,"connect":3,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241010-11/17d6c4e3abbed6e8e2b3f2aa6d5d582d.png","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:59.741Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241010-11/17d6c4e3abbed6e8e2b3f2aa6d5d582d.png HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-18","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"media.hentaifreak.org/seisai-episode-1.jpg","fqdn":"media.hentaifreak.org","domain":"hentaifreak.org","tld":"org"},"ip":{"addr":"144.178.205.175","port":443,"asn":39686,"as":"Eurofiber Nederland BV","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"hentaifreak.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 15:35:11 GMT","end":"Mon, 10 Nov 2025 15:35:10 GMT"},"fingerprint":{"sha1":"BC:D9:30:C2:63:6B:EE:83:9C:DB:11:25:BC:0E:DE:BA:46:69:07:E5","sha256":"79:64:27:EB:91:92:13:4E:84:93:51:20:7B:65:9B:F3:13:7D:06:7F:4D:E2:F6:F4:82:E2:A1:70:16:9E:FC:B8"}}},"request":{"raw":"GET /seisai-episode-1.jpg HTTP/1.1\r\nHost: media.hentaifreak.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:57 GMT\r\nx-amz-request-id: 322447110\r\naccept-ranges: bytes\r\ncontent-length: 37201\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 24 Mar 2023 20:31:09 GMT\r\netag: \"bcd89aaf8052a2406d4af93fbafd985b\"\r\nx-amz-version-id: Njk5ODEzMDAwLnYxLjIuMTY3OTY4OTg2OS4u\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-max-age: 604800\r\ncache-control: public, max-age=604800\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":37201,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 640x360, components 3","md5":"bcd89aaf8052a2406d4af93fbafd985b","sha1":"8cc4a2ab9e9f2e3f3f9c50918f62715c463b289b","sha256":"5ecc80deeca128c5fcf6af5306336d7738da37445e642b7f37868104073e5663","sha512":"4ff7c042baf72b5ec488de36acd3ec3de1cf215389c7fe68aa95f015a859033a750c689ba07b76c96dab0cd6b38d66c61988baaf6c67ca4fe7340ef5a5a9bde5","ssdeep":"768:os9swVoT/8pHQt6eSzMr2v+KHmlqHdVqWwenp8eOHyJL4zEDuZVDKQXEiv+:osGpTb0z3mlqHdVqWwHyqzEmLXEj","tlshash":"e3f2d007ab955f438b1092b9fe132f9d62dab94c47457bfb01360af76b902820cdc669","first_seen":"2025-05-24T07:11:47.917803Z","last_seen":"2025-08-18T05:29:08.809752Z","times_seen":6,"resource_available":false,"data":null}},"time_used":2731,"timings":{"blocked":312,"dns":5,"connect":33,"send":0,"wait":25,"receive":27,"ssl":2323},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20250714-1/a862251dfa17e41074add9df13b9a630.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"173.249.235.62","port":3519,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sbzytpimg2.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:08:44 GMT","end":"Mon, 19 Jan 2026 14:08:44 GMT"},"fingerprint":{"sha1":"E0:5A:30:EE:A9:EE:48:CA:04:0C:D5:AC:96:9B:6C:3D:39:FA:07:5F","sha256":"E3:46:AC:2A:8B:CE:10:19:17:F4:14:B7:8B:83:93:E5:64:E6:F4:1A:30:40:DB:D5:53:62:E4:86:34:A7:42:52"}}},"request":{"raw":"GET /upload/vod/20250714-1/a862251dfa17e41074add9df13b9a630.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 59914\r\nlast-modified: Mon, 14 Jul 2025 02:30:52 GMT\r\nvary: Accept-Encoding\r\netag: \"68746bdc-ea0a\"\r\nexpires: Tue, 02 Sep 2025 17:04:17 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59914,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 500x281, components 3","md5":"55236c4b3ada846c42bcfb6377e06853","sha1":"cb79338c5c1c425392169b48c9936cc86d5ead61","sha256":"781efc03b914dc214f86eab043a623d03961da09d7b5f63cee95bb5f8aae741f","sha512":"c5db62a39781c5c8b4a342b27bb53ba81aab511d399130c2b5fa99121afa0756633f0e2a032ac2e0aaa8bfe022986b9a0e966742d448d92b3bc8b5ea088ab71a","ssdeep":"1536:6PeEAgJCvrFh0FQiDZtxo1L+Bt8w59zHdLZF9vr9w3o:FKUgQiDZoZ+BywX5NF9vAo","tlshash":"3543f14c3db38a8337cdae59d912297d45169627f223e6e8a9cbb369411e340dc7f092","first_seen":"2025-07-29T16:40:28.965042Z","last_seen":"2025-12-18T23:51:27.912081Z","times_seen":80,"resource_available":false,"data":null}},"time_used":1199,"timings":{"blocked":804,"dns":0,"connect":0,"send":0,"wait":195,"receive":200,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/original/1X/b24abf3ed45a3ca0dc736069f2bcaf1b589f38d5.png","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 16:04:05 GMT","end":"Sun, 09 Nov 2025 16:04:04 GMT"},"fingerprint":{"sha1":"DF:EC:86:BA:09:B3:17:C2:2B:66:0A:BF:62:3E:3C:4D:90:D2:A4:33","sha256":"EF:3A:5A:BF:D7:FE:5F:99:1A:3F:CD:49:ED:AF:84:68:4F:09:27:DC:47:7B:D5:51:4C:E2:DB:A2:A1:6A:3C:FF"}}},"request":{"raw":"GET /uploads/default/original/1X/b24abf3ed45a3ca0dc736069f2bcaf1b589f38d5.png HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 27507\r\nlast-modified: Sun, 27 Apr 2025 04:59:26 GMT\r\nexpires: Tue, 18 Aug 2026 05:27:55 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27507,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 180, 8-bit colormap, non-interlaced","md5":"c5720c5df3abf19f1cf46ca0a2a89742","sha1":"b24abf3ed45a3ca0dc736069f2bcaf1b589f38d5","sha256":"11abc828c5f24c878b9c966f121283c804c11b27b4c98c5be13281a95cf8f302","sha512":"d5b6a1677a9996d877a9553cc597565295cb7f7332b61126887cfaf6831dd020dcb5e96a8047a294fa710e9002283a0768c0119851fa5dc20e08b9c964fd3abe","ssdeep":"768:ahrVVcPQ6xiP/tqDgZG9j6IEFAi2hYrg9Rm5aMD:nzLgZG9zEQo2E5aQ","tlshash":"1ac2e033a2c4ceedf47b11323ba2b650bbc5e8fe9d42130bd27e4b565406124696acd5","first_seen":"2025-08-02T18:10:49.339669Z","last_seen":"2025-12-18T08:25:22.251697Z","times_seen":29,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cowanimalsex.fun/tmbs/167/863_getting.jpg","fqdn":"cowanimalsex.fun","domain":"cowanimalsex.fun","tld":"fun"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cowanimalsex.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Jul 2025 21:28:11 GMT","end":"Sun, 12 Oct 2025 22:20:24 GMT"},"fingerprint":{"sha1":"0C:BB:20:E6:8D:B9:30:A5:A0:FF:E9:DA:68:BB:93:50:D5:13:B9:92","sha256":"9E:35:38:E3:C2:6C:DB:4D:E5:0F:9B:98:44:1D:39:EE:9C:DF:69:D1:B2:05:5D:6D:05:C6:DB:55:11:2A:F9:17"}}},"request":{"raw":"GET /tmbs/167/863_getting.jpg HTTP/1.1\r\nHost: cowanimalsex.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13574\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 12 Feb 2022 01:10:21 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QGUHXLYzCe%2FtG%2BQo%2BltU7aI98L%2B1oEvzJ6973Oxz08dedWDc8pbXCCm5biwEDNvWMi4VLIs8QQ57%2FBzg6dR6c%2Bw7obwu9Hi8xq559j1n\"}]}\r\netag: \"620708fd-3506\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-request-id: d7c1c4dc527c67b6b2af645dc4040d0a\r\naccept-ranges: bytes\r\nage: 3813347\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 970f014eecd456c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13574,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x230, components 3","md5":"7a2396c4048a98c5331751f8dca1e447","sha1":"3b5bdc79a9cfb80f3edf089916323de27afa9b1a","sha256":"a5733fb77e077468b957002c045f4afd9d79e9b54a1750ae90f2397efe19cab0","sha512":"8bbddb9a57cf5580416b91ab117313d906c0e8d0885b476d894f6e622049ed518539a2b29fc930aac8fd89c92423bfc2c2f8877afc87b3c16bb4f882e846584d","ssdeep":"384:wEtEoWk5a3qj8kDP4lOPlecZFtbSiblX8hl9tRbqaLw:wE6j3qokDY+eYP+xbbU","tlshash":"cd52d0f087b1817f892e3d357b8273089e0558086264a21fc5c9ee887b999c1f3e53b0","first_seen":"2025-06-07T18:11:44.784016Z","last_seen":"2025-12-18T12:53:13.022223Z","times_seen":8,"resource_available":false,"data":null}},"time_used":3017,"timings":{"blocked":772,"dns":7,"connect":13,"send":0,"wait":26,"receive":1,"ssl":2181},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241010-11/a48bdba019a1ccf05f8e48c34e8964fc.png","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:59.800Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241010-11/a48bdba019a1ccf05f8e48c34e8964fc.png HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-18","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"volosnya.com/favicon.ico","fqdn":"volosnya.com","domain":"volosnya.com","tld":"com"},"ip":{"addr":"31.10.5.4","port":443,"asn":207728,"as":"EUROHOSTER Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"volosnya.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Jul 2025 10:46:36 GMT","end":"Wed, 08 Oct 2025 10:46:35 GMT"},"fingerprint":{"sha1":"7C:ED:BB:CA:C1:D6:65:AF:A0:CF:AD:15:00:2C:A3:D6:10:2F:76:8F","sha256":"CC:31:15:7B:4A:EC:64:B8:6F:D6:78:63:9C:95:2E:9D:E8:F0:19:EB:A6:B7:58:2E:2A:14:56:B9:CA:B3:91:E0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: volosnya.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 18 Aug 2025 05:28:02 GMT\r\nContent-Type: image/vnd.microsoft.icon\r\nContent-Length: 1780\r\nConnection: keep-alive\r\nLast-Modified: Wed, 03 Apr 2019 09:34:19 GMT\r\nETag: \"6f4-5859cf53c0102\"\r\nAccept-Ranges: bytes\r\nStrict-Transport-Security: max-age=31536000;\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1780,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 32x32, components 3","md5":"df2b5e1dc05d67f645b59f58380945a8","sha1":"70b3d8b1efb0c4fa752d0d295949a2e3e77cf975","sha256":"17ee733316765ee9546a3024f60bce4a21f75813207cc6d2914f43372e47b16e","sha512":"03811eeff3ec8d271fad53926b43db13e2a1b08d0ea8f9a0dd94241a6b43af293d72e870a610cba282964a8e9031c2c496bdfd0250d9bea1d838abb990fdb411","ssdeep":"","tlshash":"9431eaff0e164a105407c07f4d06e140e2ce26c9707963617ed2d7e6c6f2d94589c91e","first_seen":"2025-07-19T00:56:29.87902Z","last_seen":"2026-04-03T21:47:16.495399Z","times_seen":21,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/2X/c/c6d45068e90c0118ccfa3869963200381d932505_2_580x1024.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 16:04:05 GMT","end":"Sun, 09 Nov 2025 16:04:04 GMT"},"fingerprint":{"sha1":"DF:EC:86:BA:09:B3:17:C2:2B:66:0A:BF:62:3E:3C:4D:90:D2:A4:33","sha256":"EF:3A:5A:BF:D7:FE:5F:99:1A:3F:CD:49:ED:AF:84:68:4F:09:27:DC:47:7B:D5:51:4C:E2:DB:A2:A1:6A:3C:FF"}}},"request":{"raw":"GET /uploads/default/optimized/2X/c/c6d45068e90c0118ccfa3869963200381d932505_2_580x1024.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:55 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yaebus17.ru/favicon.ico","fqdn":"yaebus17.ru","domain":"yaebus17.ru","tld":"ru"},"ip":{"addr":"5.129.208.148","port":443,"asn":50923,"as":"Metroset","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:04.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yaebus17.ru","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 00:14:59 GMT","end":"Sun, 09 Nov 2025 00:14:58 GMT"},"fingerprint":{"sha1":"3B:2D:A6:ED:58:65:42:BD:4E:6F:49:5B:21:EF:A4:99:EA:0C:44:51","sha256":"8A:70:89:69:EE:5D:63:08:B9:B3:BE:BC:8D:0E:A1:7B:F9:3D:C2:1C:02:F2:F6:FB:B8:71:17:C9:12:2E:CB:4D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: yaebus17.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:28:04 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 610\r\nlast-modified: Thu, 12 Jun 2025 21:38:06 GMT\r\netag: \"684b48be-262\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":610,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"82d129eca98a23d7b462fe0b87f4dd8b","sha1":"963962a8d1111a1a6e84c5132a18efa7ef1c934f","sha256":"09f127c6e5f375775b768353e01a5d973640f8cb827f9d7535faf9b2fc5acf11","sha512":"480f25d0ce99106275134146656037cd713cb6342f5397e00166820ebfb6112af888ee3ab4e7bcf2008a8028db0b4b5257d1fde5d3a43973a0a384573d8507ce","ssdeep":"","tlshash":"11f0625195192ab98c46a1269f58ae80d93f011876e15d60634970a5a4ea91b1aea800","first_seen":"2025-06-11T07:13:33.871574Z","last_seen":"2025-11-17T02:01:22.224616Z","times_seen":124,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/ext/pre_1455409138.jpg","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"169.150.247.40","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Jul 2025 06:11:45 GMT","end":"Sun, 12 Oct 2025 06:11:44 GMT"},"fingerprint":{"sha1":"D7:A2:44:26:5F:AE:CA:43:04:92:49:73:C4:48:A3:61:F6:F2:C8:A5","sha256":"A3:32:41:00:16:DA:A0:92:E3:0D:0F:F4:C9:0A:B8:B9:22:3B:50:DE:DF:7E:24:13:1B:65:07:8D:1B:E8:77:80"}}},"request":{"raw":"GET /ext/pre_1455409138.jpg HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13477\r\nserver: BunnyCDN-DE1-1075\r\ncdn-pullzone: 4336709\r\ncdn-uid: 0f7047b6-2b70-4588-b55a-df9b2a15bf91\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\netag: \"66682e81-34a5\"\r\nlast-modified: Tue, 11 Jun 2024 11:01:21 GMT\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/14/2025 09:21:16\r\ncdn-edgestorageid: 1049\r\ncdn-requestid: 89f8eabfd3cb0ac088ab6a2c392249b5\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":13477,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 71x80, segment length 16, progressive, precision 8, 300x226, components 3","md5":"b385294f08ac016bc259d21af763d585","sha1":"3f27695c655ad05769f7c1b76693819b3a104551","sha256":"0b64c1bd2031bbc0b31898d486b93fdd18958c87bc341e9e524c32697d56398e","sha512":"707ab931997fa3c3d16ff6845718a489f6d3641f448bfc96b7532810ed588dbab202a5a9f898f4b979df430759bbc17cfc425c66eef304f8b24731c2ff6a9ccd","ssdeep":"384:32UIhAnDzYOWNDS3E6Be7TmvMkUBnaa1rlF/yDX2R:32lAnDgNyE6I731nR1rlF/yDX0","tlshash":"0852c075d5e55960e7cf12f4db19be703be8c79e53215d29fd8b6ecc0226822aa003e1","first_seen":"2025-03-10T03:32:23.76326Z","last_seen":"2026-01-02T09:22:28.157438Z","times_seen":6,"resource_available":false,"data":null}},"time_used":2673,"timings":{"blocked":405,"dns":2,"connect":22,"send":0,"wait":28,"receive":10,"ssl":2199},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/2X/a/aace52cdcfab1c3657f18cb32f76f5cb479acefd_2_563x1024.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"91.234.199.87","port":443,"asn":43641,"as":"SOLLUTIUM EU Sp z.o.o.","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 16:04:05 GMT","end":"Sun, 09 Nov 2025 16:04:04 GMT"},"fingerprint":{"sha1":"DF:EC:86:BA:09:B3:17:C2:2B:66:0A:BF:62:3E:3C:4D:90:D2:A4:33","sha256":"EF:3A:5A:BF:D7:FE:5F:99:1A:3F:CD:49:ED:AF:84:68:4F:09:27:DC:47:7B:D5:51:4C:E2:DB:A2:A1:6A:3C:FF"}}},"request":{"raw":"GET /uploads/default/optimized/2X/a/aace52cdcfab1c3657f18cb32f76f5cb479acefd_2_563x1024.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 65005\r\nlast-modified: Tue, 12 Aug 2025 05:13:28 GMT\r\nexpires: Tue, 18 Aug 2026 05:27:54 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65005,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 563x1024, components 3","md5":"2b1666fa2e0b4c089f3784966f3235f3","sha1":"2e8d82fe77b9a736891204ad6f16107fcb9efc4f","sha256":"eb525963a556b758fdc697a6bbe7d59f7346ddcc2911402ec8f49f53b4c01f81","sha512":"15afa2cf8181b047f6797a3566b777fc39738da44fe095ca7196f9862221f9d38c796d1b5cf0b8fb8b3877fc7c5db6c1440fefd42912ed08b53f51efc1803d33","ssdeep":"1536:Ev4MS/bEXZn9XHxXZ9idLCDl+hcgtDVGmRcROqH6JdG8K5:6O/4XZVRSdIZqDVWodG8K5","tlshash":"3f530207aca79ac9f29c1cfb675def4e6e777288a34297f396c8817060185af0d5050d","first_seen":"2025-08-06T16:36:49.072965Z","last_seen":"2026-01-21T08:47:17.575943Z","times_seen":29,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"awjqxiaokeai.buzz/favicon.ico","fqdn":"awjqxiaokeai.buzz","domain":"awjqxiaokeai.buzz","tld":"buzz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.214Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: awjqxiaokeai.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-18","alert":"Sinkholed","trigger":"awjqxiaokeai.buzz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"media.hentaifreak.org/2016/10/cropped-favicon-1-32x32.png","fqdn":"media.hentaifreak.org","domain":"hentaifreak.org","tld":"org"},"ip":{"addr":"144.178.205.175","port":443,"asn":39686,"as":"Eurofiber Nederland BV","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:04.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"hentaifreak.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 15:35:11 GMT","end":"Mon, 10 Nov 2025 15:35:10 GMT"},"fingerprint":{"sha1":"BC:D9:30:C2:63:6B:EE:83:9C:DB:11:25:BC:0E:DE:BA:46:69:07:E5","sha256":"79:64:27:EB:91:92:13:4E:84:93:51:20:7B:65:9B:F3:13:7D:06:7F:4D:E2:F6:F4:82:E2:A1:70:16:9E:FC:B8"}}},"request":{"raw":"GET /2016/10/cropped-favicon-1-32x32.png HTTP/1.1\r\nHost: media.hentaifreak.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:28:04 GMT\r\nx-amz-request-id: 3981985790\r\naccept-ranges: bytes\r\ncontent-length: 994\r\ncontent-type: image/png\r\nlast-modified: Sat, 25 Mar 2023 07:51:35 GMT\r\netag: \"6c2d442e6007e371f2d7f20c3ed296d8\"\r\nx-amz-version-id: MTU3OTY4MDAwLnYxLjIuMTY3OTczMDY5NS4u\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-max-age: 604800\r\ncache-control: public, max-age=604800\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":994,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"6c2d442e6007e371f2d7f20c3ed296d8","sha1":"dd374d033cbe2d71795a3c376e1bb56f9a0559dd","sha256":"32288903ae09d2b0b16c0360d63ef2b2b75e15d99754695e4df212b169d3d62a","sha512":"3fcbdaf322b6a72de54ade24fbf2b1c9a30c944825405d59026ded6a83a59d326243a705c62b1536bbef9dcfad8fadd07200fe95f71bfee1f81bfb87141a4b0b","ssdeep":"","tlshash":"a611c8c38dfdb883bb0cff54950a7444491387e0360ae50161cb9e2a1e7306d50c47b2","first_seen":"2023-07-23T01:50:57Z","last_seen":"2026-05-09T04:27:14.770382Z","times_seen":101,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tabooporn.tv/contents/videos_screenshots/4000/4606/preview.mp4.jpg","fqdn":"www.tabooporn.tv","domain":"tabooporn.tv","tld":"tv"},"ip":{"addr":"167.114.1.130","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tabooporn.tv","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Jul 2025 07:12:44 GMT","end":"Tue, 07 Oct 2025 07:12:43 GMT"},"fingerprint":{"sha1":"A2:2A:AC:99:E2:E2:6C:25:9D:77:F0:77:71:17:28:86:3A:62:ED:B2","sha256":"C1:CD:6B:E9:7A:B2:AC:62:AC:52:99:5B:41:B7:C3:D4:0D:05:B3:01:A1:11:71:6A:65:A2:B3:0B:5B:F9:9C:38"}}},"request":{"raw":"GET /contents/videos_screenshots/4000/4606/preview.mp4.jpg HTTP/1.1\r\nHost: www.tabooporn.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 18 Aug 2025 05:27:59 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 31084\r\nLast-Modified: Tue, 16 Feb 2021 00:41:37 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nETag: \"602b14c1-796c\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nCache-Control: max-age=315360000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31084,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.64.101\", baseline, precision 8, 640x480, components 3","md5":"5161a3d6a2062c34b523c7e18d0c94bb","sha1":"2adddcf7a4da9f2710cca9af8217fff459684fc7","sha256":"7736eb9607824d995eb55b4088958491f474b51a8cd9b9a8333fd10c9b10d20b","sha512":"a619e1a508f958d8b1b1a7f5aa3914d8d871a42dfcc224f4ca44f1a2ee42d9b8a0ae0167429314f91caa65d0cede6a5da4503894a1fc2250a105969b3804399c","ssdeep":"768:or5S/GhlM3Md3H7alAWcTGDFUWJDo3EKiIf9SI4qrgb:y5oGnyMJH7al2TfQDo3EoSBIgb","tlshash":"42d2f12679ed8778098de772672ca8092d6470f450ef16adc636228c3398bab825d477","first_seen":"2025-03-25T21:53:49.890867Z","last_seen":"2025-11-09T11:07:29.764056Z","times_seen":34,"resource_available":false,"data":null}},"time_used":4383,"timings":{"blocked":1051,"dns":16,"connect":118,"send":0,"wait":199,"receive":1,"ssl":2966},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tabooporn.tv/favicon.ico","fqdn":"www.tabooporn.tv","domain":"tabooporn.tv","tld":"tv"},"ip":{"addr":"167.114.1.130","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tabooporn.tv","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Jul 2025 07:12:44 GMT","end":"Tue, 07 Oct 2025 07:12:43 GMT"},"fingerprint":{"sha1":"A2:2A:AC:99:E2:E2:6C:25:9D:77:F0:77:71:17:28:86:3A:62:ED:B2","sha256":"C1:CD:6B:E9:7A:B2:AC:62:AC:52:99:5B:41:B7:C3:D4:0D:05:B3:01:A1:11:71:6A:65:A2:B3:0B:5B:F9:9C:38"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.tabooporn.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 18 Aug 2025 05:28:03 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 1150\r\nLast-Modified: Thu, 04 Mar 2021 14:27:47 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=60\r\nETag: \"6040ee63-47e\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nCache-Control: max-age=315360000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"74f572c0d09c1c5fa0e055fbbe3a3bab","sha1":"a452cdd30d9263f3061e59a4d3d11c29cdd02a5a","sha256":"0a7cda5dcaea7a0086744a84ec463075e0d7915469c4bbfca655dc2c59c70516","sha512":"9ce9dde089e066e5240aee2a3ef9492f4c3bc293d673051f7e2a74c71fa0c536ba36f6e3233fcf46c697ca22ea7412f8c7e45d2d863ec4e8d60a9d4e634fe265","ssdeep":"","tlshash":"6f2124ae300e5515c19665300806f6b2a388cecafa99ae0111e67f777e411032db951c","first_seen":"2023-11-24T20:27:27Z","last_seen":"2025-11-14T16:06:11.701167Z","times_seen":45,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.com/upload/vod/20241010-10/74817bbf9fcf1e46f6d2e4bb4adfcfd1.png","fqdn":"www.9188porn.com","domain":"9188porn.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:59.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9188porn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 Aug 2025 03:09:41 GMT","end":"Tue, 04 Nov 2025 04:07:22 GMT"},"fingerprint":{"sha1":"EB:B8:01:44:FF:51:3D:14:69:83:0A:39:AA:EF:CC:38:7E:50:BE:11","sha256":"05:E5:3A:05:E1:05:99:09:0C:DA:48:BA:A6:C6:72:62:2B:A1:11:85:17:AA:84:E0:C6:E1:0F:2E:68:63:E2:BD"}}},"request":{"raw":"GET /upload/vod/20241010-10/74817bbf9fcf1e46f6d2e4bb4adfcfd1.png HTTP/1.1\r\nHost: www.9188porn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 18 Aug 2025 05:27:59 GMT\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fa0O0wlkLXaGbHG4eb0k98k8%2Be72eZ9w9TQsk5uJsDE02CHXwSqqxJIOKhvLFzQhzuKQ%2FYoZvOJWCZl04pv%2FZ5Ghc98FmKF3nN6XTYDl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 970f01571edb56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tvzvezda.ru/favicon.ico","fqdn":"tvzvezda.ru","domain":"tvzvezda.ru","tld":"ru"},"ip":{"addr":"95.129.232.3","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:03.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tvzvezda.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 19 May 2025 13:20:37 GMT","end":"Sat, 20 Jun 2026 13:20:36 GMT"},"fingerprint":{"sha1":"B4:45:CA:59:A9:2D:C2:DB:F5:FF:EC:31:DB:12:20:9E:C1:26:37:7D","sha256":"85:40:74:3B:64:53:52:C5:9E:13:A9:A5:77:29:7A:3F:9D:51:0F:01:97:3F:57:02:77:30:28:30:3C:C5:E8:67"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: tvzvezda.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ciH6WlArbffETGro; Domain=.tvzvezda.ru; Path=/; Expires=Mon, 18-Aug-2025 05:48:02 GMT\n__ddg10_=1755494882; Domain=.tvzvezda.ru; Path=/; Expires=Mon, 18-Aug-2025 05:48:02 GMT\n__ddg9_=91.90.42.154; Domain=.tvzvezda.ru; Path=/; Expires=Mon, 18-Aug-2025 05:48:02 GMT\n__ddg1_=Gs3bslSOWbxzL2rcI4TI; Domain=.tvzvezda.ru; HttpOnly; Path=/; Expires=Tue, 18-Aug-2026 05:28:02 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 10 Aug 2025 09:31:28 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-length: 15086\r\nlast-modified: Wed, 12 Dec 2018 10:50:12 GMT\r\naccept-ranges: bytes\r\nddg-cache-status: HIT,HIT\r\netag: \"5c10e7e4-3aee\"\r\nage: 676594\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"a021930e6a2d7abe07ed8e76d7647cce","sha1":"56fef1801273d6aa3f50100c0a79e71cab4f2de3","sha256":"e4e03850c7778d0da9bb3623f2090afbab04cf23367442404de71021609d808c","sha512":"5772b7f803ddbaf4c8607e5ccf4b25152129996811c260426eaac313dd6b1add03e3fad2ed72221c41fdc2cce2f37810ef37a64d438887dd2726671b25af98e4","ssdeep":"192:jSFUNOrZimjQGhIII4jiiiiiiimiiiiiiiIoIVZPT:jSmNOrZfjKII2iiiiiiimiiiiiiigVZr","tlshash":"0b621fb1e220fb46c39ccc74e819a7fa2a888ce255f78177355a3ecfa735721185654c","first_seen":"2025-06-03T07:12:33.225923Z","last_seen":"2026-01-19T21:59:47.968859Z","times_seen":54,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":7,"connect":32,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.mds.yandex.net/get-vthumb/4023116/f174555372f95c99a7c716bfb2b6ac0c/564x318_1","fqdn":"avatars.mds.yandex.net","domain":"yandex.net","tld":"net"},"ip":{"addr":"87.250.247.183","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:56.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.avatars.mds.yandex.net","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 03 Apr 2025 14:25:03 GMT","end":"Wed, 01 Oct 2025 20:59:59 GMT"},"fingerprint":{"sha1":"E6:CA:01:EF:27:C5:A7:B7:36:66:BC:E5:64:C2:63:12:FB:3C:8F:91","sha256":"F3:AE:1B:55:A4:70:1A:43:35:87:50:83:E5:F5:ED:99:44:E6:CE:26:D5:B1:CC:24:A7:21:CF:AC:A8:E3:2E:24"}}},"request":{"raw":"GET /get-vthumb/4023116/f174555372f95c99a7c716bfb2b6ac0c/564x318_1 HTTP/1.1\r\nHost: avatars.mds.yandex.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7652\r\nlast-modified: Wed, 12 Feb 2025 06:37:35 GMT\r\ncache-control: max-age=604800,immutable\r\nx-request-id: 83cbc0a462ccdd40\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 600, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nreport-to: {\"group\": \"network-errors\", \"max_age\": 600, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/s3_nel?datacenter=KLG\"}]}\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7652,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x226, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6707ef9f74f8908b7aaf0f9b93b6fef6","sha1":"4a999a44df9d0a6046a5382b0bb4d98284c2b4be","sha256":"8eeee4bc33fde5187564aafc782010b3fb50672d3978d5b6add3c5b8af981168","sha512":"9f35db680a06fe7cc0006e23067c49aa4d885bf05e9ffe6fa6925cd8f78320c9e7c2d4bee2cdc714a272334158d030cbabdf1e0757e9520d95cc177bd31ecc39","ssdeep":"192:sKTfM+N4pHghRVriv1xSzSMOobAVHAS2hgA:Jf8gWSzSdgS8D","tlshash":"e2f18e6f052c10ffa2edadd282b8e9a6d6532baf483ec9eec4d30258278d941d724451","first_seen":"2025-08-18T05:29:08.817271Z","last_seen":"2025-08-18T22:15:36.310878Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4686,"timings":{"blocked":2291,"dns":4,"connect":48,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.mds.yandex.net/get-vthumb/917292/47ffe84ca617fcb413723859f2a501a1/564x318_1","fqdn":"avatars.mds.yandex.net","domain":"yandex.net","tld":"net"},"ip":{"addr":"87.250.247.183","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:56.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.avatars.mds.yandex.net","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 03 Apr 2025 14:25:03 GMT","end":"Wed, 01 Oct 2025 20:59:59 GMT"},"fingerprint":{"sha1":"E6:CA:01:EF:27:C5:A7:B7:36:66:BC:E5:64:C2:63:12:FB:3C:8F:91","sha256":"F3:AE:1B:55:A4:70:1A:43:35:87:50:83:E5:F5:ED:99:44:E6:CE:26:D5:B1:CC:24:A7:21:CF:AC:A8:E3:2E:24"}}},"request":{"raw":"GET /get-vthumb/917292/47ffe84ca617fcb413723859f2a501a1/564x318_1 HTTP/1.1\r\nHost: avatars.mds.yandex.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:28:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20820\r\nlast-modified: Sat, 04 Jan 2025 18:51:18 GMT\r\ncache-control: max-age=604800,immutable\r\nx-request-id: 1a4b63771e8b9a08\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 600, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nreport-to: {\"group\": \"network-errors\", \"max_age\": 600, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/s3_nel?datacenter=KLG\"}]}\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20820,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 477x268, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8e733bd605bcea990a9e42cfc34e748c","sha1":"0c4f95660d74bc95c0ae0a139e25e719249b9066","sha256":"aaedcafa486557834de90325ecca49a5fdf2e3b721238d80b96c6b19695bdfa9","sha512":"6198879d8ca62f2518d6075fcef0aa6971ab1a02fbeac488f23543a63061a25578c0d514e3c8e32425997a7c9c967410bc1c6fc8a6c63c36989ec86d441be54d","ssdeep":"384:9f0jDx2XeHWb8mvfOviqboF8FhfMSGI+nqDuxH/bo4S6FY17ApWAHb5/7D6:MtxXviqkOHfvGI+nYG/MGFY17ApWeblG","tlshash":"1a92d14f6338d737e522c56fbf761a40f38100792ceb0e5a6568766d175269110c94fe","first_seen":"2025-06-06T07:13:00.656515Z","last_seen":"2025-09-19T04:19:40.25949Z","times_seen":38,"resource_available":false,"data":null}},"time_used":4131,"timings":{"blocked":1023,"dns":8,"connect":86,"send":0,"wait":56,"receive":3,"ssl":2920},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"twitter.yandex.com.tr/favicon.ico","fqdn":"twitter.yandex.com.tr","domain":"yandex.com.tr","tld":"com.tr"},"ip":{"addr":"87.250.255.11","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:28:06.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xn--d1acpjx3f.xn--p1ai","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 16 Apr 2025 08:08:59 GMT","end":"Tue, 14 Oct 2025 20:59:59 GMT"},"fingerprint":{"sha1":"95:27:21:57:03:ED:BF:A6:49:D1:C2:E6:6E:55:14:3C:75:7D:9B:37","sha256":"22:67:BE:61:3E:D1:95:F0:25:91:53:A6:08:1A:9E:D5:71:68:63:D4:A7:2A:5C:E4:3F:DB:75:C1:C9:98:41:D2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: twitter.yandex.com.tr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 12211\r\nx-xss-protection: 1; mode=block\r\nset-cookie: is_gdpr_b=CO7JQBCo0gIYASgB; Path=/; Domain=.yandex.com.tr; Expires=Wed, 18 Aug 2027 05:28:07 GMT; SameSite=None; Secure\n_yasc=nBRg8sBlj03XsapO7qKfVaduPgzL5Hh2nrVXS8BUFHlQd61Q186GnNUmH6AN1jPoHeM=; Path=/; Domain=.yandex.com.tr; Expires=Wed, 18 Aug 2027 05:28:07 GMT; Secure\nis_gdpr=1; Path=/; Domain=.yandex.com.tr; Expires=Wed, 18 Aug 2027 05:28:07 GMT; SameSite=None; Secure\nis_gdpr_b=CO7JQBCo0gIYAQ==; Path=/; Domain=.yandex.com.tr; Expires=Wed, 18 Aug 2027 05:28:07 GMT; SameSite=None; Secure\n_yasc=D9NusslUYAaLUtcrZgFmk25cE6LoXyjHl682QZme86vyncAzlWf+CG7QLmNtc93I7uI=; domain=.yandex.com.tr; path=/; expires=Thu, 16 Aug 2035 05:28:07 GMT; secure\ni=/LoyqU408l9w1LsBitcx8YLH3dR6V7CfRwxjs9b8q8EWuWXODD/ieT6juqaWGaUs5JGQP4HZRh/15d7+nG1el/LQ5dk=; Expires=Wed, 18-Aug-2027 05:28:07 GMT; Domain=.yandex.com.tr; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=5252011281755494887; Expires=Wed, 18-Aug-2027 05:28:07 GMT; Domain=.yandex.com.tr; Path=/; Secure; SameSite=None\nyashr=9427869061755494887; Path=/; Domain=.yandex.com.tr; Expires=Tue, 18 Aug 2026 05:28:07 GMT; SameSite=None; Secure; HttpOnly\nbh=YOfzisUGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com.tr; Expires=Tue, 22 Sep 2026 05:28:07 GMT; SameSite=None; Secure\r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-Viewport-Width, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT, Width, Sec-Ch-Viewport-Height\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 100, \"endpoints\": [{\"url\": \"https://dr.yandex.net/nel\", \"priority\": 1}, {\"url\": \"https://dr2.yandex.net/nel\", \"priority\": 2}]}\r\ncontent-security-policy: img-src 'self' yastatic.net data: yandex.com.tr favicon.yandex.net avatars.mds.yandex.net yabs.yandex.ru mc.admetrica.ru mc.yandex.com *.mc.yandex.ru adstat.yandex.ru mc.yandex.com.tr mc.yandex.ru;default-src 'none';script-src yastatic.net yandex.com.tr mc.yandex.ru *.mc.yandex.ru adstat.yandex.ru mc.yandex.com.tr 'nonce-Clv08V+GWGJW+dpAYxIqGA==';style-src yastatic.net 'unsafe-inline';connect-src yandex.com.tr yabs.yandex.ru mc.yandex.ru *.mc.yandex.ru adstat.yandex.ru mc.admetrica.ru mc.yandex.md mc.yandex.com.tr;child-src mc.yandex.ru mc.yandex.md mc.yandex.com.tr;report-uri https://csp.yandex.net/csp?project=morda\u0026from=morda.error404.com.tr\u0026showid=1755494887034539-11043582011525201128-balancer-l7leveler-kubr-yp-klg-9-BAL\u0026h=home-any-stable-backend-22.vla.yp-c.yandex.net\u0026yandexuid=5252011281755494887\u0026version=2025-08-11-162\r\nx-yandex-req-id: 1755494887034539-11043582011525201128-balancer-l7leveler-kubr-yp-klg-9-BAL\r\ndate: Mon, 18 Aug 2025 05:28:07 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 100, \"success_fraction\": 0.001, \"failure_fraction\": 0.1}\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":703,"timings":{"blocked":-1,"dns":1,"connect":55,"send":0,"wait":90,"receive":1,"ssl":544},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filmesporno.xxx/wp-content/uploads/2022/03/incesto-entre-hermana-y-hermano.jpg","fqdn":"filmesporno.xxx","domain":"filmesporno.xxx","tld":"xxx"},"ip":{"addr":"192.124.249.88","port":443,"asn":30148,"as":"SUCURI-SEC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filmesporno.xxx","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Wed, 30 Jul 2025 20:59:30 GMT","end":"Tue, 28 Oct 2025 20:59:30 GMT"},"fingerprint":{"sha1":"9F:0A:DC:2C:AE:A5:6F:0A:72:D8:E0:EC:8B:56:FA:63:9E:11:75:96","sha256":"BE:CE:C0:16:DD:13:2F:73:57:AF:80:58:AC:85:C4:5F:4A:E8:74:70:62:8B:CA:AE:99:DD:77:9D:5E:D2:40:16"}}},"request":{"raw":"GET /wp-content/uploads/2022/03/incesto-entre-hermana-y-hermano.jpg HTTP/1.1\r\nHost: filmesporno.xxx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Mon, 18 Aug 2025 05:25:05 GMT\r\ncontent-type: text/html\r\nx-sucuri-id: 19032\r\nx-sucuri-block: BLACK02\r\nserver: Sucuri/Cloudproxy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Sucuri","description":"Sucuri is a cybersecurity company that provides website security solutions and services.","website":"https://sucuri.net/","common_platform_enumeration":"","icon":"sucuri.svg","categories":["CDN","Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":5131,"timings":{"blocked":2275,"dns":23,"connect":51,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloudflare-br-pic.kwai.net/upic/2023/02/15/08/BMjAyMzAyMTUwODU4MzdfMTUwMDAxMzM3Mzk3MzU4XzE1MDEwMjE1NzAzNzUyNV8yXzM=_oscn2_B751a388d301f549478f1daba1bc96127.webp","fqdn":"cloudflare-br-pic.kwai.net","domain":"kwai.net","tld":"net"},"ip":{"addr":"54.240.174.55","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kwai.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 11 Nov 2024 00:00:00 GMT","end":"Thu, 11 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"CD:0B:C7:F0:0E:3D:EB:FE:26:15:85:4D:E4:6B:CD:BB:C1:A1:34:08","sha256":"82:C1:1A:19:E3:7F:5B:F5:64:5A:98:C7:E5:48:DA:CE:13:71:55:24:22:C9:2E:12:95:F4:6C:D7:79:09:1A:58"}}},"request":{"raw":"GET /upic/2023/02/15/08/BMjAyMzAyMTUwODU4MzdfMTUwMDAxMzM3Mzk3MzU4XzE1MDEwMjE1NzAzNzUyNV8yXzM=_oscn2_B751a388d301f549478f1daba1bc96127.webp HTTP/1.1\r\nHost: cloudflare-br-pic.kwai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 9394\r\ndate: Thu, 17 Jul 2025 01:34:48 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\netag: \"E79CABDCFF929A2E7766248D43261E33\"\r\nx-bs-hash-crc64ecma: 17977269564006167660\r\nx-bs-object-status: 0\r\nlast-modified: Wed, 15 Feb 2023 00:59:51 GMT\r\nx-nws-log-uuid: 8252612471385519735\r\nexpires: Fri, 17 Jul 2026 01:34:48 GMT\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: kEyiEgWdIDzTumTeLM4hqSMhvJgcqw4iPaMaLH-0Alu3ZgjMTawzAw==\r\nage: 2778791\r\ntiming-allow-origin: *\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":9394,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 480x848, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e79cabdcff929a2e7766248d43261e33","sha1":"e52f04b1ee0e37bfb47ddac3f1e6bade24de377b","sha256":"0d1d5a2ae318c75305bab30f05319bd12bd0bfa9695ece334e7473f8b0028489","sha512":"eb8be05bc4601bc798d2d8dcce3806ab0a59f6d4066e768275cccfbbb5b2d8a580bcd7fc346aaf739f80b7f9285cb582a7111e3f65b40727a5fb87f6d96e7e2d","ssdeep":"192:oxJ1AEjgoUNsQHA3i2oNqn+3+iK1w2KNMXrARtRm3n1Fru3Po:oLWEczHA3i+IMR4qAR7mWo","tlshash":"9912bfe41acefc9ec6147e54765842b3c29bb8f68e467d18ecc4e50168728e2cd484ba","first_seen":"2025-03-12T03:12:27.36356Z","last_seen":"2026-02-06T15:51:51.862284Z","times_seen":79,"resource_available":false,"data":null}},"time_used":3431,"timings":{"blocked":1020,"dns":9,"connect":37,"send":0,"wait":14,"receive":1,"ssl":2272},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"css.4jpg.top/mycss/av4.css?33","fqdn":"css.4jpg.top","domain":"4jpg.top","tld":"top"},"ip":{"addr":"104.21.77.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:56.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4jpg.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Jun 2025 21:09:44 GMT","end":"Sat, 20 Sep 2025 22:08:25 GMT"},"fingerprint":{"sha1":"87:CB:34:CD:A8:80:20:88:6C:00:A6:45:55:4F:1A:BE:9C:F4:54:06","sha256":"01:9F:A5:58:0B:57:D0:CB:4F:B0:62:86:96:36:B0:C9:2A:66:FF:E0:4E:6E:7C:CD:B2:EA:D6:B8:E3:23:28:8A"}}},"request":{"raw":"GET /mycss/av4.css?33 HTTP/1.1\r\nHost: css.4jpg.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 05:27:56 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\ncache-control: public, max-age=360000\r\nx-proxy-cache-192g-la: HIT\r\nxkey-192la: jcss./mycss/av4.css?33-A-css.4jpg.top--myzone---no\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8EwOLLZUP%2FGCFjfRTDOY7o6PEk9gQMvnKGVA2hUXbewUarxVls4bVolwShjlPnMXCIA0KCX3DbobjglAjbDiwKGbEQizja2V8YU%3D\"}]}\r\nage: 75694\r\ncf-cache-status: HIT\r\netag: W/\"103e-62edbddabc000\"\r\ncontent-encoding: br\r\ncf-ray: 970f0140787156a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4158,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"e05d356eb3c9cb0366e5491f098c5b66","sha1":"9c82f99795bf55512147a0bd629e9775446291bf","sha256":"7c7a5f32e5c6a2e6e1f3e71112f35691714019685cc4c7d567e158cb32d1579c","sha512":"94dd9b84614bae349bcaa9dafea12a08589b4b899cf59c1228cf9bf70d657a715b49cfc18748b2d174dac63a6df076828bfa8da9b25c686d74bc742ddbe9283c","ssdeep":"96:Uq6qw2a3Alqiqq7rShmo3NxlIAFrQH+42+F2fFB:+eYXih/SMoHlIAFkHL2+F2fFB","tlshash":"ca813f729b550141b51b92946f62b79123369013d907cf79bafa217ccf891ec21e2f4e","first_seen":"2025-04-08T05:19:22.565686Z","last_seen":"2026-02-10T20:33:51.228745Z","times_seen":840,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":4,"dns":11,"connect":24,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.xyz/upload/vod/20241010-10/35e7629ebe40b78ee620fcddd66b8633.png","fqdn":"www.9188porn.xyz","domain":"9188porn.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:59.917Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241010-10/35e7629ebe40b78ee620fcddd66b8633.png HTTP/1.1\r\nHost: www.9188porn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-18","alert":"Sinkholed","trigger":"www.9188porn.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gcore-pic.xvideos-cdn.com/videos/thumbs169ll/e5/81/11/e5811153fdb30ab18db422a50b98ce17/e5811153fdb30ab18db422a50b98ce17.25.jpg","fqdn":"gcore-pic.xvideos-cdn.com","domain":"xvideos-cdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xvideos.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 03 Oct 2024 00:00:00 GMT","end":"Mon, 03 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"27:E9:05:C0:A5:FC:40:B1:D6:44:DC:D3:39:EE:11:78:2C:E2:F0:78","sha256":"5F:C0:7A:63:35:DB:CB:28:20:1B:40:83:91:40:36:2B:7A:97:63:77:7A:67:2A:45:FF:4E:80:15:A3:03:3C:4A"}}},"request":{"raw":"GET /videos/thumbs169ll/e5/81/11/e5811153fdb30ab18db422a50b98ce17/e5811153fdb30ab18db422a50b98ce17.25.jpg HTTP/1.1\r\nHost: gcore-pic.xvideos-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 Aug 2025 05:27:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13762\r\ntraceparent: 00-932badc3f970733849e9f4dfa3c0d40b-b919b31d4d58ad9b-01\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Fri, 06 Sep 2024 15:34:07 GMT\r\nexpires: Mon, 24 Mar 2025 15:39:39 GMT\r\ncache-control: max-age=10368000, public\r\naccess-control-allow-origin: *\r\nx-id-shield: am3-hw-edge-gc68\r\nage: 2296090\r\nx-id: osix-hw-edge-gc4\r\ncache: HIT\r\nx-cached-since: 2025-08-11T03:33:25+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13762,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", progressive, precision 8, 352x198, components 3","md5":"526df8ff4dc59529d3f018efa31cc577","sha1":"58bfa52ae2139e124f4336fc43a51abf10995f2e","sha256":"f51c79cb5f0d4d89dd7e328d7fee3c46e4aac48895d687a8edb7fe2de5375193","sha512":"f39dea283f5d57a50f4c4a07459f0af6ddaa3a0ced733074405992dc94f8f898200b52f877537117338c923e67857306e896ec7046a1bf1bc776c5d96b80ff23","ssdeep":"384:Jrl5C4cyfrHuchdKnRkbN7q7QZjF8GbM2+yis:Jr24cir1ERMFqSJpM7yb","tlshash":"8c52df5d4f9a74d4f1527ff806079951e30be821aa81b1f9089743d90ec76a3f6ddb04","first_seen":"2025-06-26T17:45:10.393627Z","last_seen":"2026-01-10T18:51:40.921695Z","times_seen":32,"resource_available":false,"data":null}},"time_used":2492,"timings":{"blocked":213,"dns":3,"connect":10,"send":0,"wait":6,"receive":1,"ssl":2240},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"im2.mediacont.net/xxxzooporn/thumbs/13/117-on.jpg","fqdn":"im2.mediacont.net","domain":"mediacont.net","tld":"net"},"ip":{"addr":"104.160.9.33","port":443,"asn":63119,"as":"Angelnet Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://av4.vid4.uk/","date":"2025-08-18T05:27:55.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mediacont.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 03:04:20 GMT","end":"Sun, 05 Oct 2025 03:04:19 GMT"},"fingerprint":{"sha1":"DD:41:7F:B5:0C:40:69:16:BD:6C:DD:5B:AC:3D:31:57:F9:E4:BA:3F","sha256":"2C:FF:CF:50:97:D7:E5:33:1F:0C:18:46:2E:45:75:D5:52:CB:85:1E:36:40:7F:29:9C:56:2D:6B:A1:42:98:C5"}}},"request":{"raw":"GET /xxxzooporn/thumbs/13/117-on.jpg HTTP/1.1\r\nHost: im2.mediacont.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://av4.vid4.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 18 Aug 2025 05:27:57 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 12305\r\nLast-Modified: Thu, 03 Nov 2022 16:49:08 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=30\r\nETag: \"6363f104-3011\"\r\nExpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nCache-Control: max-age=315360000\r\nX-Request-ID: 1106d12bf74dba02ffab66598b962a26\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12305,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x175, components 3","md5":"e2b94f208d695df098726f5777865ebe","sha1":"87ef0e31aaed2dfaacd1e349bb3403b892aba57e","sha256":"455273d060d09841de8b4393cb45b41d4519c510f2adfa47b8954f305fe842d4","sha512":"3131c1b3bcf8ef21f8e9233cf8a1ae498532e48327be94e3d2f6f5047b9f3fb3702ecc0bc0c1744f86bb29c70df875a5f31f68b5348c43a44ae6e1d8c388937e","ssdeep":"384:jF7s5WKHjuRclVPummwEPRctrYHOBSe0YbXi:SVDHlVPump8qKu/0Y2","tlshash":"8142c03d6d98d51e6b7f3c32331c522161cde432e31135ad8baa798853be78553c909b","first_seen":"2025-06-29T13:38:06.909395Z","last_seen":"2026-01-20T03:25:23.311089Z","times_seen":42,"resource_available":false,"data":null}},"time_used":2287,"timings":{"blocked":-1,"dns":17,"connect":56,"send":0,"wait":84,"receive":0,"ssl":2114},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}