{"report_id":"268be243-a66f-4ab1-8679-38741e6beb1a","version":0,"status":"done","tags":[],"date":"2026-10-11T21:26:47Z","url":{"schema":"http","addr":"en.4us.asia","fqdn":"en.4us.asia","domain":"4us.asia","tld":"asia"},"ip":{"addr":"104.21.69.114","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"en.4us.asia/","fqdn":"en.4us.asia","domain":"4us.asia","tld":"asia"},"title":"Hot Videos 人気動画--VIDEOS@AV4.us","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"en.4us.asia","fqdn":"en.4us.asia","domain":"4us.asia","tld":"asia"},"ip":{"addr":"104.21.69.114","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-15T21:26:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":29}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"youtup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"fqjpg3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"ero-sceny.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"xjimg.cdn-xj.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"da.da15525716.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"sattking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"ag7692.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jpgjingpinx1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jpxjpg5.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"www.effedupmovies.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"pic.dd2pic.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"un.shayu260522.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-11","alert":"Content Category / Application Block","trigger":"incofoods.com","verdict":"suspicious","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"clariontoday.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"img.cdn202608.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"fqjpg10.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lb260401.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"oedy9.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"diorcatm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"sl260908.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"bornagainmormon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"fh260908.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"www.jkuntubrwjbe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"media.porkytube.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"karsing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"porkytube.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"ic.155250214.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"liangthd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"deanesmachines.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"image","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-03-21T10:26:27.242471Z","last_seen":"2026-10-02T13:01:52.103415Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":1030,"comment":"","tags":null,"fingerprints":null},{"fqdn":"a.pornohlam.com","ip":{"addr":"91.194.110.9","port":443,"asn":213166,"as":"UA-Hosting SIA","country":"The Netherlands","country_code":"NL"},"domain_registered":"2017-08-30","domain_rank":0,"first_seen":"2025-09-23T21:07:08.978558Z","last_seen":"2026-08-19T12:52:55.057829Z","alert_count":0,"request_count":2,"received_data":211037,"sent_data":1154,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.mymediaing.my","ip":{"addr":"104.21.71.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-10-07T20:07:31.091044Z","last_seen":"2026-10-02T13:01:44.301962Z","alert_count":0,"request_count":1,"received_data":53540,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pornoperso.com","ip":{"addr":"172.67.166.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2000-06-06","domain_rank":25644,"first_seen":"2017-06-17T23:41:58Z","last_seen":"2026-10-02T13:02:10.502192Z","alert_count":0,"request_count":5,"received_data":3323,"sent_data":2808,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"img1.souavzyw.vip","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-12-15","domain_rank":0,"first_seen":"2025-12-20T08:05:50.248249Z","last_seen":"2026-10-03T08:56:01.503784Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":585,"comment":"","tags":null,"fingerprints":null},{"fqdn":"av6k.com","ip":{"addr":"172.67.172.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-07-07","domain_rank":254993,"first_seen":"2025-11-01T23:48:18.081687Z","last_seen":"2026-09-15T22:08:06.839728Z","alert_count":0,"request_count":2,"received_data":33303,"sent_data":1122,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"eroshorts.site","ip":{"addr":"89.105.223.48","port":443,"asn":24875,"as":"NovoServe B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-03-02","domain_rank":0,"first_seen":"2026-06-13T07:16:41.680101Z","last_seen":"2026-09-15T22:08:08.594622Z","alert_count":0,"request_count":3,"received_data":56052,"sent_data":1778,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"lb260401.top","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-04-01","domain_rank":0,"first_seen":"2026-04-12T16:32:12.954501Z","last_seen":"2026-10-04T00:36:35.913747Z","alert_count":2,"request_count":2,"received_data":0,"sent_data":1160,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img.tphsck.com","ip":{"addr":"104.21.24.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-10","domain_rank":0,"first_seen":"2025-04-16T19:26:22.415715Z","last_seen":"2026-10-02T13:02:13.52799Z","alert_count":0,"request_count":2,"received_data":1517562,"sent_data":1164,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"la.lashayu.com","ip":{"addr":"192.198.185.34","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2025-05-31","domain_rank":3641502,"first_seen":"2025-06-14T15:54:25.098652Z","last_seen":"2026-10-08T22:19:16.659902Z","alert_count":0,"request_count":2,"received_data":275507,"sent_data":1129,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"jipinvipimage.com","ip":{"addr":"172.67.177.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-13","domain_rank":0,"first_seen":"2026-06-14T05:36:57.822851Z","last_seen":"2026-10-09T22:41:22.579469Z","alert_count":0,"request_count":1,"received_data":9068,"sent_data":553,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn1.hotmoza.tv","ip":{"addr":"104.21.70.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-17","domain_rank":3967188,"first_seen":"2018-01-22T21:57:29Z","last_seen":"2026-09-15T22:07:42.271553Z","alert_count":0,"request_count":2,"received_data":4351,"sent_data":1152,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"minaeast.net","ip":{"addr":"104.21.22.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-01-17","domain_rank":0,"first_seen":"2026-08-04T20:52:49.79035Z","last_seen":"2026-10-02T13:02:10.051757Z","alert_count":0,"request_count":2,"received_data":35842,"sent_data":1035,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.effedupmovies.com","ip":{"addr":"185.8.237.6","port":443,"asn":0,"as":"","country":"Czechia","country_code":"CZ"},"domain_registered":"2017-08-24","domain_rank":121897,"first_seen":"2018-01-06T11:19:22Z","last_seen":"2026-10-02T13:01:50.809846Z","alert_count":4,"request_count":4,"received_data":15984,"sent_data":2227,"comment":"","tags":null,"fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP:8.5.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"css.jpg4.quest","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-03-20","domain_rank":0,"first_seen":"2026-03-29T10:32:42.184057Z","last_seen":"2026-10-02T13:01:56.999528Z","alert_count":0,"request_count":5,"received_data":4876,"sent_data":2349,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"picc.sex8sex855.com","ip":{"addr":"172.96.39.74","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2025-02-25","domain_rank":0,"first_seen":"2026-04-03T19:16:57.558931Z","last_seen":"2026-10-09T22:41:22.526576Z","alert_count":0,"request_count":1,"received_data":150658,"sent_data":552,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"assets-jpcust.jwpsrv.com","ip":{"addr":"151.101.194.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-10-04","domain_rank":29082,"first_seen":"2015-04-20T18:43:00Z","last_seen":"2026-10-09T09:26:45.848415Z","alert_count":0,"request_count":1,"received_data":46423,"sent_data":529,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"images.lourmel.nl","ip":{"addr":"104.21.10.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-06-16","domain_rank":0,"first_seen":"2023-09-14T09:04:29Z","last_seen":"2026-09-08T05:19:14.751374Z","alert_count":0,"request_count":1,"received_data":19161,"sent_data":543,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fqjpg10.top","ip":{"addr":"23.134.76.191","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-06-17","domain_rank":0,"first_seen":"2026-08-05T19:49:31.548161Z","last_seen":"2026-10-02T13:01:43.81988Z","alert_count":7,"request_count":7,"received_data":1283406,"sent_data":4053,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.ptt.sex","ip":{"addr":"172.67.219.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-09-20","domain_rank":329698,"first_seen":"2022-06-23T18:06:45Z","last_seen":"2026-10-02T13:01:50.909523Z","alert_count":0,"request_count":1,"received_data":772,"sent_data":532,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.missvid.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-10-18","domain_rank":4538635,"first_seen":"2023-10-06T12:15:54Z","last_seen":"2026-10-02T13:01:53.350514Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":536,"comment":"","tags":null,"fingerprints":null},{"fqdn":"hotmoza.tv","ip":{"addr":"104.21.70.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-17","domain_rank":80170,"first_seen":"2018-01-17T19:02:10Z","last_seen":"2026-09-15T22:07:54.063642Z","alert_count":0,"request_count":1,"received_data":2169,"sent_data":531,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.jkuntp.com","ip":{"addr":"156.246.16.44","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"United States","country_code":"US"},"domain_registered":"2023-02-23","domain_rank":3345365,"first_seen":"2023-03-12T07:09:25Z","last_seen":"2026-10-02T13:01:52.624145Z","alert_count":0,"request_count":3,"received_data":136510,"sent_data":1746,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"baraag.net","ip":{"addr":"167.104.221.188","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2017-04-25","domain_rank":80004,"first_seen":"2018-12-04T19:32:27Z","last_seen":"2026-10-02T13:01:43.778079Z","alert_count":0,"request_count":3,"received_data":3952,"sent_data":1599,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Mastodon","description":"Mastodon is a free and open-source self-hosted social networking service.","website":"https://joinmastodon.org","common_platform_enumeration":"","icon":"Mastodon.svg","categories":["Message boards"]}]},{"fqdn":"de.chezcathy.com","ip":{"addr":"141.227.152.51","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"domain_registered":"2007-03-03","domain_rank":5293391,"first_seen":"2024-10-07T10:54:04Z","last_seen":"2026-10-02T13:02:07.109511Z","alert_count":0,"request_count":2,"received_data":4058,"sent_data":1043,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"domain.expiring-soon.xyz","ip":{"addr":"103.224.182.213","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"domain_registered":"2025-06-16","domain_rank":0,"first_seen":"2025-08-03T03:52:42.488467Z","last_seen":"2026-09-10T01:11:51.231561Z","alert_count":0,"request_count":4,"received_data":304,"sent_data":2340,"comment":"","tags":null,"fingerprints":null},{"fqdn":"images.fuckmovs.pro","ip":{"addr":"104.21.67.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-02-22","domain_rank":0,"first_seen":"2019-04-12T21:35:55Z","last_seen":"2026-09-10T13:06:45.883683Z","alert_count":0,"request_count":1,"received_data":9647,"sent_data":552,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pornolomka.com","ip":{"addr":"91.194.110.16","port":443,"asn":213166,"as":"UA-Hosting SIA","country":"The Netherlands","country_code":"NL"},"domain_registered":"2016-03-19","domain_rank":243943,"first_seen":"2016-04-02T10:35:30Z","last_seen":"2026-10-02T13:01:53.601515Z","alert_count":0,"request_count":6,"received_data":430596,"sent_data":3343,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-10-05T08:57:44.698487Z","alert_count":0,"request_count":3,"received_data":175802,"sent_data":1448,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.jxjav.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-04-09","domain_rank":5580760,"first_seen":"2024-04-16T18:34:09Z","last_seen":"2026-09-14T00:57:35.06857Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":1037,"comment":"","tags":null,"fingerprints":null},{"fqdn":"daimgnai.imgdanaizi12-aaa.com","ip":{"addr":"23.140.204.13","port":61129,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-08-17","domain_rank":0,"first_seen":"2026-08-29T17:50:58.832422Z","last_seen":"2026-10-09T22:41:23.868294Z","alert_count":0,"request_count":2,"received_data":100375,"sent_data":1196,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"lsbzytp.com","ip":{"addr":"23.140.236.1","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-04-09","domain_rank":243364,"first_seen":"2023-05-07T13:36:46Z","last_seen":"2026-10-02T13:02:07.72357Z","alert_count":0,"request_count":1,"received_data":19168,"sent_data":584,"comment":"","tags":null,"fingerprints":null},{"fqdn":"stpubs.com","ip":{"addr":"172.67.191.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-16","domain_rank":0,"first_seen":"2026-09-08T05:19:25.977691Z","last_seen":"2026-10-02T13:01:55.989979Z","alert_count":0,"request_count":1,"received_data":17928,"sent_data":499,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"pornodrochka.org","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2019-09-09","domain_rank":235403,"first_seen":"2019-09-10T10:42:36Z","last_seen":"2026-10-02T13:01:51.947968Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":537,"comment":"","tags":null,"fingerprints":null},{"fqdn":"gujarconnect.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-02-27","domain_rank":0,"first_seen":"2026-04-23T22:24:44.740325Z","last_seen":"2026-09-15T22:08:04.384882Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":537,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.91rb.com","ip":{"addr":"23.225.104.238","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"domain_registered":"2004-04-02","domain_rank":892466,"first_seen":"2012-12-08T07:11:58Z","last_seen":"2026-09-15T22:08:06.88397Z","alert_count":0,"request_count":1,"received_data":10179,"sent_data":502,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fh260908.top","ip":{"addr":"172.67.184.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-08","domain_rank":0,"first_seen":"2026-09-12T22:17:14.110924Z","last_seen":"2026-10-01T15:06:42.77112Z","alert_count":3,"request_count":3,"received_data":62848,"sent_data":1657,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"zeenite.com","ip":{"addr":"141.95.145.234","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"2020-01-13","domain_rank":75979,"first_seen":"2015-01-10T19:47:39Z","last_seen":"2026-10-08T16:49:28.473108Z","alert_count":0,"request_count":1,"received_data":15680,"sent_data":501,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"xxxzooporn.net","ip":{"addr":"104.21.31.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-04-22","domain_rank":197474,"first_seen":"2022-04-22T18:13:36Z","last_seen":"2026-10-02T13:02:14.009277Z","alert_count":0,"request_count":1,"received_data":8138,"sent_data":535,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"p.sl1121.top","ip":{"addr":"104.21.46.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-22","domain_rank":0,"first_seen":"2025-12-01T08:27:31.752276Z","last_seen":"2026-08-20T08:55:24.89148Z","alert_count":0,"request_count":1,"received_data":31504,"sent_data":580,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fuckmovs.pro","ip":{"addr":"162.254.190.69","port":443,"asn":32338,"as":"HOSTISERVER","country":"United States","country_code":"US"},"domain_registered":"2019-02-22","domain_rank":421047,"first_seen":"2019-04-01T11:29:02Z","last_seen":"2026-09-10T13:06:50.4953Z","alert_count":0,"request_count":1,"received_data":1527,"sent_data":533,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"incofoods.com","ip":{"addr":"104.21.66.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-08","domain_rank":0,"first_seen":"2025-09-11T22:23:55.801282Z","last_seen":"2026-10-01T16:11:42.998677Z","alert_count":1,"request_count":1,"received_data":17940,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"images.mubicdn.net","ip":{"addr":"151.101.2.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2015-02-24","domain_rank":1401804,"first_seen":"2020-02-26T10:06:48Z","last_seen":"2026-09-15T22:07:55.710204Z","alert_count":0,"request_count":1,"received_data":88807,"sent_data":584,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fm.sl25914.com","ip":{"addr":"104.21.74.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-15","domain_rank":0,"first_seen":"2025-11-23T09:22:03.198801Z","last_seen":"2026-10-02T13:01:52.05048Z","alert_count":0,"request_count":1,"received_data":9089,"sent_data":582,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pornodrochka.club","ip":{"addr":"91.194.110.9","port":443,"asn":213166,"as":"UA-Hosting SIA","country":"The Netherlands","country_code":"NL"},"domain_registered":"2021-09-21","domain_rank":202390,"first_seen":"2021-09-21T22:17:20Z","last_seen":"2026-10-02T13:01:51.988694Z","alert_count":0,"request_count":1,"received_data":87288,"sent_data":579,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"filmesporno.xxx","ip":{"addr":"31.43.191.59","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"domain_registered":"2018-07-24","domain_rank":10355,"first_seen":"2019-03-31T05:29:58Z","last_seen":"2026-10-02T13:02:03.5108Z","alert_count":0,"request_count":9,"received_data":265340,"sent_data":5087,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"da.da15525716.com","ip":{"addr":"103.224.182.214","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"domain_registered":"2025-07-17","domain_rank":5801341,"first_seen":"2025-08-03T13:57:15.219117Z","last_seen":"2026-09-15T22:07:55.643104Z","alert_count":6,"request_count":6,"received_data":456,"sent_data":3338,"comment":"","tags":null,"fingerprints":null},{"fqdn":"oporno.net","ip":{"addr":"95.85.6.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"domain_registered":"2018-01-01","domain_rank":715168,"first_seen":"2015-06-25T15:42:53Z","last_seen":"2026-09-08T05:32:26.237162Z","alert_count":0,"request_count":2,"received_data":78575,"sent_data":1134,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"en.4us.asia","ip":{"addr":"172.67.207.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-08","domain_rank":0,"first_seen":"2026-09-08T05:32:20.865776Z","last_seen":"2026-09-15T22:07:42.171257Z","alert_count":0,"request_count":5,"received_data":225992,"sent_data":3723,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.clips4sale.com","ip":{"addr":"104.18.24.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2003-07-22","domain_rank":104001,"first_seen":"2012-05-26T00:51:37Z","last_seen":"2026-10-03T01:08:55.72981Z","alert_count":0,"request_count":1,"received_data":42613,"sent_data":539,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"st.peeinghub.com","ip":{"addr":"167.235.2.93","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2019-10-11","domain_rank":0,"first_seen":"2019-12-20T23:36:59Z","last_seen":"2026-09-21T16:12:20.293529Z","alert_count":0,"request_count":1,"received_data":8077,"sent_data":577,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"page.phic4.top","ip":{"addr":"172.239.194.103","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-03-07","domain_rank":4536559,"first_seen":"2024-03-28T08:56:57Z","last_seen":"2026-10-02T13:01:43.849761Z","alert_count":0,"request_count":2,"received_data":1790,"sent_data":898,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.jwplayer.com","ip":{"addr":"13.249.8.19","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2007-09-17","domain_rank":18072,"first_seen":"2017-09-15T13:17:43Z","last_seen":"2026-10-08T08:59:03.687268Z","alert_count":0,"request_count":1,"received_data":651,"sent_data":532,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"gunicorn","description":"","website":"https://gunicorn.org","common_platform_enumeration":"","icon":"gunicorn.png","categories":["Web servers"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}]},{"fqdn":"pic32.havzy1.com","ip":{"addr":"172.67.181.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-07-21","domain_rank":0,"first_seen":"2025-05-08T21:41:10.553251Z","last_seen":"2026-08-22T17:43:16.538457Z","alert_count":0,"request_count":2,"received_data":1348,"sent_data":1154,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"xvideosporno.blog.br","ip":{"addr":"104.26.11.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-03-05","domain_rank":12837,"first_seen":"2015-03-27T17:38:45Z","last_seen":"2026-09-18T20:05:16.748876Z","alert_count":0,"request_count":3,"received_data":177342,"sent_data":1730,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish:6.6","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"mygentledog.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-09-16","domain_rank":0,"first_seen":"2026-08-04T21:33:52.150494Z","last_seen":"2026-09-08T05:19:24.992908Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":536,"comment":"","tags":null,"fingerprints":null},{"fqdn":"beastiality.tv","ip":{"addr":"172.67.186.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-10-15","domain_rank":11115,"first_seen":"2013-11-04T21:16:10Z","last_seen":"2026-09-08T05:32:21.968106Z","alert_count":0,"request_count":1,"received_data":15829,"sent_data":535,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pornohlam.com","ip":{"addr":"91.194.110.9","port":443,"asn":213166,"as":"UA-Hosting SIA","country":"The Netherlands","country_code":"NL"},"domain_registered":"2017-08-30","domain_rank":938662,"first_seen":"2019-03-28T09:07:12Z","last_seen":"2026-08-19T12:52:56.161334Z","alert_count":0,"request_count":1,"received_data":140,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"b.pornodrochka.club","ip":{"addr":"91.194.110.9","port":443,"asn":213166,"as":"UA-Hosting SIA","country":"The Netherlands","country_code":"NL"},"domain_registered":"2021-09-21","domain_rank":0,"first_seen":"2025-11-21T22:45:32.595892Z","last_seen":"2026-10-02T13:01:48.813301Z","alert_count":0,"request_count":2,"received_data":187972,"sent_data":1162,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pornochika.net","ip":{"addr":"31.10.5.4","port":443,"asn":207728,"as":"EUROHOSTER Ltd.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2020-06-25","domain_rank":1406632,"first_seen":"2020-06-25T11:15:46Z","last_seen":"2026-09-10T01:11:56.223169Z","alert_count":0,"request_count":2,"received_data":22271,"sent_data":1108,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-10-04T23:38:02.393941Z","alert_count":0,"request_count":2,"received_data":10687,"sent_data":992,"comment":"","tags":null,"fingerprints":null},{"fqdn":"stickamvids.net","ip":{"addr":"80.209.253.45","port":443,"asn":204196,"as":"Abelohost BV","country":"The Netherlands","country_code":"NL"},"domain_registered":"2011-03-02","domain_rank":222913,"first_seen":"2014-10-12T04:57:06Z","last_seen":"2026-10-02T13:02:04.077555Z","alert_count":0,"request_count":5,"received_data":41086,"sent_data":2756,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"imgdanaizi3.com","ip":{"addr":"23.140.204.17","port":8660,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-01-07","domain_rank":0,"first_seen":"2026-06-11T05:40:03.362534Z","last_seen":"2026-10-09T22:41:23.925889Z","alert_count":0,"request_count":1,"received_data":51453,"sent_data":583,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"lourmel.nl","ip":{"addr":"104.21.10.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-06-16","domain_rank":250591,"first_seen":"2023-06-16T19:19:01Z","last_seen":"2026-09-08T05:19:26.75111Z","alert_count":0,"request_count":1,"received_data":16458,"sent_data":531,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"amateuranimalporn.art","ip":{"addr":"104.21.58.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-05-07","domain_rank":1972178,"first_seen":"2021-05-07T15:29:01Z","last_seen":"2026-09-18T20:05:24.596547Z","alert_count":0,"request_count":2,"received_data":15786,"sent_data":1108,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"porn112.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2020-11-16","domain_rank":163173,"first_seen":"2015-09-03T07:26:26Z","last_seen":"2026-09-08T05:32:18.371681Z","alert_count":0,"request_count":3,"received_data":0,"sent_data":1596,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fqjpg3.top","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-03-27","domain_rank":154688,"first_seen":"2025-04-08T05:11:12.012576Z","last_seen":"2026-10-02T13:01:47.61044Z","alert_count":10,"request_count":10,"received_data":0,"sent_data":5780,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fixedjs.av4me.xyz","ip":{"addr":"104.21.58.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-02","domain_rank":0,"first_seen":"2026-03-29T10:32:43.546066Z","last_seen":"2026-10-02T13:02:10.269397Z","alert_count":0,"request_count":6,"received_data":88060,"sent_data":3110,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}]},{"fqdn":"jpxjpg5.top","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-03-27","domain_rank":0,"first_seen":"2026-04-01T23:18:30.142992Z","last_seen":"2026-10-01T15:06:42.474776Z","alert_count":7,"request_count":7,"received_data":0,"sent_data":4053,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pic.dd2pic.cc","ip":{"addr":"134.195.196.199","port":443,"asn":62563,"as":"AS-GLOBALTELEHOST","country":"Canada","country_code":"CA"},"domain_registered":"2025-08-01","domain_rank":0,"first_seen":"2025-12-21T12:57:22.686663Z","last_seen":"2026-09-12T10:26:37.640408Z","alert_count":1,"request_count":1,"received_data":35033,"sent_data":581,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pdocac.av4me.xyz","ip":{"addr":"104.21.58.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-02","domain_rank":0,"first_seen":"2026-03-21T19:12:34.328009Z","last_seen":"2026-10-02T13:02:04.177131Z","alert_count":0,"request_count":1,"received_data":3351,"sent_data":537,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"thumbs.dreamstime.com","ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2000-06-11","domain_rank":190133,"first_seen":"2012-05-30T02:38:19Z","last_seen":"2026-10-07T03:20:11.08762Z","alert_count":0,"request_count":1,"received_data":34612,"sent_data":629,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"youtup.net","ip":{"addr":"172.67.218.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-28","domain_rank":0,"first_seen":"2026-04-05T11:38:53.509055Z","last_seen":"2026-09-15T22:07:47.093672Z","alert_count":1,"request_count":1,"received_data":17930,"sent_data":531,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ansuko.net","ip":{"addr":"172.67.138.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-07-04","domain_rank":87799,"first_seen":"2023-07-04T08:10:56Z","last_seen":"2026-09-27T16:25:24.00348Z","alert_count":0,"request_count":6,"received_data":643205,"sent_data":3355,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.tubetubetube.com","ip":{"addr":"172.67.146.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2006-11-09","domain_rank":6178130,"first_seen":"2012-10-08T02:05:54Z","last_seen":"2026-08-26T11:12:52.884544Z","alert_count":0,"request_count":1,"received_data":607,"sent_data":573,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.redporn.video","ip":{"addr":"104.21.23.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-12-31","domain_rank":110473,"first_seen":"2021-01-09T01:01:35Z","last_seen":"2026-09-13T02:44:26.678088Z","alert_count":0,"request_count":2,"received_data":31218,"sent_data":1083,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.9188porn.com","ip":{"addr":"104.21.17.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-06-18","domain_rank":3479355,"first_seen":"2025-02-07T09:21:52Z","last_seen":"2026-10-02T13:01:43.63697Z","alert_count":0,"request_count":3,"received_data":2245,"sent_data":1589,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"abfrkjesk.com","ip":{"addr":"64.112.78.42","port":443,"asn":6939,"as":"HURRICANE","country":"United States","country_code":"US"},"domain_registered":"2024-11-16","domain_rank":1614852,"first_seen":"2025-03-17T15:25:36.765569Z","last_seen":"2026-10-06T10:27:45.589941Z","alert_count":0,"request_count":2,"received_data":11853,"sent_data":1092,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.twi-dl.net","ip":{"addr":"172.67.152.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-05-15","domain_rank":124394,"first_seen":"2024-09-09T09:24:24Z","last_seen":"2026-10-09T11:15:12.44914Z","alert_count":0,"request_count":2,"received_data":1500,"sent_data":1038,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"missvid.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-10-18","domain_rank":151886,"first_seen":"2025-06-15T23:41:05.496964Z","last_seen":"2026-08-13T08:23:02.746188Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":1033,"comment":"","tags":null,"fingerprints":null},{"fqdn":"images.the-moms.com","ip":{"addr":"104.21.58.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2006-03-06","domain_rank":0,"first_seen":"2025-05-25T07:14:04.298835Z","last_seen":"2026-08-26T12:03:47.496318Z","alert_count":0,"request_count":1,"received_data":9860,"sent_data":567,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.jkuntubrwjbe.com","ip":{"addr":"64.112.76.43","port":443,"asn":6939,"as":"HURRICANE","country":"United States","country_code":"US"},"domain_registered":"2026-08-02","domain_rank":0,"first_seen":"2026-08-08T02:38:39.440674Z","last_seen":"2026-10-02T13:01:59.824443Z","alert_count":2,"request_count":2,"received_data":52966,"sent_data":1177,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.twi-videos.net","ip":{"addr":"104.21.75.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-05","domain_rank":3757802,"first_seen":"2021-11-10T10:36:55Z","last_seen":"2026-08-19T12:52:54.004613Z","alert_count":0,"request_count":1,"received_data":573,"sent_data":539,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"porkytube.com","ip":{"addr":"172.67.193.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-01-05","domain_rank":174297,"first_seen":"2012-11-20T23:45:03Z","last_seen":"2026-09-15T22:08:02.53741Z","alert_count":1,"request_count":1,"received_data":1986,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"chezcathy.com","ip":{"addr":"141.227.152.51","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"domain_registered":"2007-03-03","domain_rank":55670,"first_seen":"2012-05-29T12:07:35Z","last_seen":"2026-10-02T13:02:07.214968Z","alert_count":0,"request_count":21,"received_data":246748,"sent_data":11391,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"ero-sceny.site","ip":{"addr":"89.105.223.48","port":443,"asn":24875,"as":"NovoServe B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-01-26","domain_rank":0,"first_seen":"2026-04-12T19:29:13.640453Z","last_seen":"2026-09-15T22:07:59.38647Z","alert_count":1,"request_count":1,"received_data":160,"sent_data":503,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sattking.com","ip":{"addr":"172.67.222.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-28","domain_rank":0,"first_seen":"2026-04-02T06:37:19.286507Z","last_seen":"2026-10-02T13:02:08.873008Z","alert_count":1,"request_count":1,"received_data":17942,"sent_data":533,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"clariontoday.com","ip":{"addr":"104.21.4.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-31","domain_rank":0,"first_seen":"2026-06-07T14:55:47.987614Z","last_seen":"2026-10-02T13:02:11.241832Z","alert_count":2,"request_count":2,"received_data":35862,"sent_data":1043,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bfjkuncdn.com","ip":{"addr":"23.226.76.18","port":443,"asn":53755,"as":"IOFLOOD","country":"United States","country_code":"US"},"domain_registered":"2024-03-14","domain_rank":1717934,"first_seen":"2025-03-18T01:12:27.007074Z","last_seen":"2025-12-20T22:10:06.251389Z","alert_count":0,"request_count":3,"received_data":773446,"sent_data":1316,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"allxxxmovieclips.com","ip":{"addr":"172.67.141.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-10","domain_rank":0,"first_seen":"2026-10-02T13:02:08.221917Z","last_seen":"2026-10-02T13:02:08.221917Z","alert_count":0,"request_count":1,"received_data":17930,"sent_data":541,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sbzytpimg4.com","ip":{"addr":"23.140.236.1","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-04-24","domain_rank":0,"first_seen":"2026-01-09T01:30:30.561069Z","last_seen":"2026-10-02T13:01:46.334136Z","alert_count":0,"request_count":2,"received_data":189880,"sent_data":1174,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xjimg.cdn-xj.cc","ip":{"addr":"138.199.37.232","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"domain_registered":"2026-03-31","domain_rank":0,"first_seen":"2026-04-22T17:26:14.945271Z","last_seen":"2026-10-01T15:06:45.034178Z","alert_count":6,"request_count":6,"received_data":329279,"sent_data":3408,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"dogsanimalxxx.club","ip":{"addr":"172.67.160.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-05-07","domain_rank":428835,"first_seen":"2021-05-07T15:28:49Z","last_seen":"2026-08-22T17:43:20.168778Z","alert_count":0,"request_count":2,"received_data":19819,"sent_data":1087,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"q.da251109.top","ip":{"addr":"172.67.131.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-10","domain_rank":0,"first_seen":"2025-11-15T11:03:36.304493Z","last_seen":"2026-10-01T16:11:44.796868Z","alert_count":0,"request_count":1,"received_data":9535,"sent_data":562,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sex8sex811.com","ip":{"addr":"192.198.185.50","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2025-02-25","domain_rank":660237,"first_seen":"2025-06-25T17:42:29.557339Z","last_seen":"2026-10-04T13:01:59.954969Z","alert_count":0,"request_count":1,"received_data":7589,"sent_data":547,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ic.155250214.top","ip":{"addr":"104.26.14.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-14","domain_rank":0,"first_seen":"2026-04-06T11:32:57.169685Z","last_seen":"2026-10-02T13:02:15.483631Z","alert_count":1,"request_count":1,"received_data":31048,"sent_data":549,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"deanesmachines.com","ip":{"addr":"104.21.94.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-04-05","domain_rank":5051540,"first_seen":"2017-06-26T05:40:30Z","last_seen":"2026-10-02T13:01:45.644147Z","alert_count":1,"request_count":1,"received_data":17926,"sent_data":539,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"the-moms.com","ip":{"addr":"162.254.188.22","port":443,"asn":32338,"as":"HOSTISERVER","country":"United States","country_code":"US"},"domain_registered":"2006-03-06","domain_rank":507761,"first_seen":"2025-05-25T07:14:04.3383Z","last_seen":"2026-08-04T20:52:53.767841Z","alert_count":0,"request_count":1,"received_data":1494,"sent_data":533,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"jh.lb260522.top","ip":{"addr":"172.67.216.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-22","domain_rank":0,"first_seen":"2026-05-23T20:46:16.974036Z","last_seen":"2026-10-02T13:02:14.134296Z","alert_count":0,"request_count":1,"received_data":53623,"sent_data":583,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"imgdanaizi11-bbb.com","ip":{"addr":"23.140.236.1","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-08-17","domain_rank":0,"first_seen":"2026-08-19T15:40:35.597653Z","last_seen":"2026-10-02T13:01:51.731075Z","alert_count":0,"request_count":1,"received_data":40821,"sent_data":583,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"xlecx.one","ip":{"addr":"104.21.25.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-12-28","domain_rank":27632,"first_seen":"2021-12-28T23:04:54Z","last_seen":"2026-04-29T17:08:29.063443Z","alert_count":0,"request_count":3,"received_data":17850,"sent_data":1658,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"zooporner.com","ip":{"addr":"104.21.72.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-10","domain_rank":230956,"first_seen":"2019-01-27T22:55:50Z","last_seen":"2026-09-08T05:19:01.428728Z","alert_count":0,"request_count":4,"received_data":18658,"sent_data":2257,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"japanesebeauties.one","ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-03-02","domain_rank":27357,"first_seen":"2022-03-05T05:02:08Z","last_seen":"2026-09-08T05:18:59.299937Z","alert_count":0,"request_count":1,"received_data":2041,"sent_data":541,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"d2xb.com","ip":{"addr":"104.21.94.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-06-16","domain_rank":771151,"first_seen":"2025-06-21T20:50:56.035192Z","last_seen":"2026-10-02T13:01:47.873005Z","alert_count":0,"request_count":1,"received_data":17938,"sent_data":529,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.jkuntupiaxxzz.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-01-21","domain_rank":0,"first_seen":"2026-01-28T07:38:35.46468Z","last_seen":"2026-10-08T12:08:20.962009Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":1180,"comment":"","tags":null,"fingerprints":null},{"fqdn":"im3.mediacont.net","ip":{"addr":"93.113.203.4","port":443,"asn":208949,"as":"Hbing Limited","country":"Romania","country_code":"RO"},"domain_registered":"2024-01-13","domain_rank":1853160,"first_seen":"2024-03-16T04:12:01Z","last_seen":"2026-10-01T11:14:55.251621Z","alert_count":0,"request_count":1,"received_data":17710,"sent_data":558,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sbzytpimg1.com","ip":{"addr":"23.140.236.1","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-04-24","domain_rank":160397,"first_seen":"2024-07-25T07:47:58Z","last_seen":"2026-10-02T13:02:00.014151Z","alert_count":0,"request_count":4,"received_data":454735,"sent_data":2348,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sbzytpimg5.com","ip":{"addr":"23.140.236.1","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-04-24","domain_rank":0,"first_seen":"2026-04-03T09:15:17.821599Z","last_seen":"2026-10-02T13:02:01.292021Z","alert_count":0,"request_count":4,"received_data":816164,"sent_data":2348,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img.cdn2026.cc","ip":{"addr":"104.21.3.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-28","domain_rank":0,"first_seen":"2026-07-04T06:10:55.756971Z","last_seen":"2026-10-02T13:02:03.209695Z","alert_count":0,"request_count":1,"received_data":20734,"sent_data":554,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"guzwiayz.com","ip":{"addr":"209.142.69.38","port":443,"asn":6939,"as":"HURRICANE","country":"United States","country_code":"US"},"domain_registered":"2024-09-17","domain_rank":365124,"first_seen":"2024-09-20T04:15:55Z","last_seen":"2026-10-01T15:06:42.551056Z","alert_count":0,"request_count":2,"received_data":31859,"sent_data":1116,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sl260908.top","ip":{"addr":"172.67.185.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-08","domain_rank":0,"first_seen":"2026-09-19T13:18:39.968296Z","last_seen":"2026-10-03T01:34:51.313104Z","alert_count":1,"request_count":1,"received_data":28501,"sent_data":581,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.mtd4u.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-09-26","domain_rank":0,"first_seen":"2026-09-15T22:07:59.745299Z","last_seen":"2026-09-15T22:07:59.745299Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":534,"comment":"","tags":null,"fingerprints":null},{"fqdn":"googlemar.com","ip":{"addr":"172.67.181.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-16","domain_rank":0,"first_seen":"2026-06-26T15:26:20.246454Z","last_seen":"2026-10-02T13:02:06.950697Z","alert_count":0,"request_count":2,"received_data":35846,"sent_data":1037,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"mtd4u.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-09-26","domain_rank":0,"first_seen":"2026-03-23T13:20:50.001236Z","last_seen":"2026-10-02T13:01:59.467058Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":530,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fm.fhpicpic.com","ip":{"addr":"172.67.160.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-09-08","domain_rank":0,"first_seen":"2024-09-13T02:35:41Z","last_seen":"2026-10-02T13:01:44.366862Z","alert_count":0,"request_count":4,"received_data":1786,"sent_data":2262,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"homedopo.com","ip":{"addr":"172.67.188.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-12","domain_rank":0,"first_seen":"2026-08-18T23:20:27.568539Z","last_seen":"2026-10-02T13:01:52.463533Z","alert_count":0,"request_count":1,"received_data":17932,"sent_data":533,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"imagecdn.clips4sale.com","ip":{"addr":"64.210.135.148","port":443,"asn":30361,"as":"SWIFTWILL2","country":"United States","country_code":"US"},"domain_registered":"2003-07-22","domain_rank":655874,"first_seen":"2012-10-25T13:47:32Z","last_seen":"2026-10-02T13:02:00.711734Z","alert_count":0,"request_count":3,"received_data":106238,"sent_data":1752,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.getvr.us","ip":{"addr":"104.21.61.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-03-28","domain_rank":0,"first_seen":"2023-04-15T05:10:39Z","last_seen":"2026-09-11T23:53:34.073092Z","alert_count":0,"request_count":2,"received_data":9917,"sent_data":1132,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bad.news","ip":{"addr":"172.67.73.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-08-28","domain_rank":9405,"first_seen":"2019-04-11T17:17:58Z","last_seen":"2026-09-15T22:07:45.609625Z","alert_count":0,"request_count":1,"received_data":16118,"sent_data":529,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-10-04T23:23:27.025218Z","alert_count":0,"request_count":2,"received_data":230727,"sent_data":943,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"johndalysoccercamp.com","ip":{"addr":"104.21.16.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":17950,"sent_data":543,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.dreamstime.com","ip":{"addr":"158.176.70.101","port":443,"asn":36351,"as":"SOFTLAYER","country":"Germany","country_code":"DE"},"domain_registered":"2000-06-11","domain_rank":94629,"first_seen":"2012-06-21T10:47:12Z","last_seen":"2026-08-21T15:03:05.304938Z","alert_count":0,"request_count":1,"received_data":1536,"sent_data":539,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"pic10.anzise.com","ip":{"addr":"172.67.222.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-07-18","domain_rank":0,"first_seen":"2025-05-09T02:41:08.654103Z","last_seen":"2026-09-18T06:59:40.390475Z","alert_count":0,"request_count":1,"received_data":20494,"sent_data":577,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.w3schools.com","ip":{"addr":"95.101.10.17","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2000-03-21","domain_rank":2135,"first_seen":"2014-02-05T20:15:46Z","last_seen":"2026-10-08T06:01:51.610534Z","alert_count":0,"request_count":2,"received_data":48462,"sent_data":943,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"f.lbp2025.com","ip":{"addr":"104.21.63.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-19","domain_rank":0,"first_seen":"2025-04-12T23:05:42.772034Z","last_seen":"2026-09-20T06:41:41.455161Z","alert_count":0,"request_count":1,"received_data":8755,"sent_data":546,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.peeinghub.com","ip":{"addr":"185.197.160.111","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2019-10-11","domain_rank":0,"first_seen":"2019-12-20T22:36:59Z","last_seen":"2026-09-21T16:12:27.904738Z","alert_count":0,"request_count":1,"received_data":231,"sent_data":538,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pic.dipic.cc","ip":{"addr":"134.195.196.199","port":443,"asn":62563,"as":"AS-GLOBALTELEHOST","country":"Canada","country_code":"CA"},"domain_registered":"2026-05-05","domain_rank":0,"first_seen":"2026-06-13T18:37:51.657281Z","last_seen":"2026-10-02T13:01:58.655919Z","alert_count":0,"request_count":1,"received_data":18925,"sent_data":580,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"mubi.com","ip":{"addr":"184.194.70.148","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2002-08-06","domain_rank":18060,"first_seen":"2012-08-25T08:36:31Z","last_seen":"2026-09-15T22:08:07.679842Z","alert_count":0,"request_count":1,"received_data":5861,"sent_data":529,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"l.clips4sale.com","ip":{"addr":"104.18.24.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2003-07-22","domain_rank":105433,"first_seen":"2022-05-10T16:59:52Z","last_seen":"2026-10-02T13:01:59.764852Z","alert_count":0,"request_count":1,"received_data":42424,"sent_data":537,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"fapmove.com","ip":{"addr":"185.73.220.217","port":443,"asn":32338,"as":"HOSTISERVER","country":"The Netherlands","country_code":"NL"},"domain_registered":"2018-09-13","domain_rank":261826,"first_seen":"2015-08-15T18:53:29Z","last_seen":"2026-10-02T13:02:17.554329Z","alert_count":0,"request_count":1,"received_data":159,"sent_data":532,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.sc.gl","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2014-09-25","domain_rank":1377843,"first_seen":"2014-12-05T18:00:01Z","last_seen":"2026-10-02T13:02:06.776271Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":931,"comment":"","tags":null,"fingerprints":null},{"fqdn":"toxicstream.com","ip":{"addr":"104.21.55.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-10-17","domain_rank":830163,"first_seen":"2025-10-20T02:56:00.163014Z","last_seen":"2026-10-02T13:02:11.515647Z","alert_count":0,"request_count":2,"received_data":239166,"sent_data":1096,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"slaman.sakura.ne.jp","ip":{"addr":"49.212.180.77","port":443,"asn":9371,"as":"SAKURA Internet Inc.","country":"Japan","country_code":"JP"},"domain_registered":"2017-07-21","domain_rank":0,"first_seen":"2018-01-25T14:12:21Z","last_seen":"2026-09-21T16:12:28.275572Z","alert_count":0,"request_count":2,"received_data":1255144,"sent_data":1137,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.hubetubex.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2015-04-28","domain_rank":976128,"first_seen":"2015-07-29T11:12:51Z","last_seen":"2026-09-11T23:53:34.093883Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":507,"comment":"","tags":null,"fingerprints":null},{"fqdn":"erota2.com","ip":{"addr":"104.26.5.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-05-31","domain_rank":439658,"first_seen":"2019-04-02T11:04:19Z","last_seen":"2026-10-02T13:02:03.60852Z","alert_count":0,"request_count":2,"received_data":15922,"sent_data":1000,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn-1.ggjav.com","ip":{"addr":"51.161.116.102","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"domain_registered":"2019-04-27","domain_rank":4655696,"first_seen":"2019-05-24T01:14:40Z","last_seen":"2026-06-27T06:26:52.281412Z","alert_count":0,"request_count":1,"received_data":56129,"sent_data":553,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"tubetubetube.com","ip":{"addr":"104.21.65.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2006-11-09","domain_rank":69859,"first_seen":"2013-12-23T09:04:30Z","last_seen":"2026-08-26T11:13:01.02946Z","alert_count":0,"request_count":1,"received_data":660,"sent_data":537,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.mydesii.com","ip":{"addr":"104.21.32.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-05-27","domain_rank":975942,"first_seen":"2025-02-21T07:37:32.204645Z","last_seen":"2026-10-02T13:02:10.86519Z","alert_count":0,"request_count":3,"received_data":33524,"sent_data":1654,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"aniru.org","ip":{"addr":"172.67.135.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-02-20","domain_rank":402964,"first_seen":"2020-02-24T10:10:22Z","last_seen":"2026-09-21T16:12:29.065583Z","alert_count":0,"request_count":2,"received_data":5663,"sent_data":1030,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"img.xxibaocdn.com","ip":{"addr":"162.209.190.196","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"domain_registered":"2024-11-12","domain_rank":5860016,"first_seen":"2025-05-21T06:20:47.102914Z","last_seen":"2026-10-02T13:01:41.364917Z","alert_count":0,"request_count":6,"received_data":787362,"sent_data":3708,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"huttonsrv.com","ip":{"addr":"104.21.37.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-03","domain_rank":0,"first_seen":"2026-06-13T07:16:33.887644Z","last_seen":"2026-10-02T13:01:54.714331Z","alert_count":0,"request_count":2,"received_data":35872,"sent_data":1037,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"le.lefhao20250923.top","ip":{"addr":"172.66.145.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-23","domain_rank":0,"first_seen":"2025-10-11T09:35:54.698313Z","last_seen":"2026-10-02T13:02:15.759493Z","alert_count":0,"request_count":1,"received_data":202278,"sent_data":589,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"karsing.com","ip":{"addr":"172.67.167.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-08-05","domain_rank":0,"first_seen":"2021-01-30T10:56:20Z","last_seen":"2026-05-27T23:57:25.43976Z","alert_count":2,"request_count":2,"received_data":35886,"sent_data":1033,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"liangthd.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-06-27","domain_rank":0,"first_seen":"2026-07-31T05:53:01.68644Z","last_seen":"2026-10-02T13:01:55.999215Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":533,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pizdauz.cc","ip":{"addr":"194.146.127.68","port":443,"asn":207728,"as":"EUROHOSTER Ltd.","country":"Bulgaria","country_code":"BG"},"domain_registered":"2019-11-26","domain_rank":285428,"first_seen":"2019-12-21T16:37:52Z","last_seen":"2026-10-02T13:01:59.730676Z","alert_count":0,"request_count":2,"received_data":15563,"sent_data":1097,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"igav.net","ip":{"addr":"104.21.81.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-30","domain_rank":0,"first_seen":"2025-12-03T12:22:56.524086Z","last_seen":"2026-09-15T22:07:44.519629Z","alert_count":0,"request_count":1,"received_data":519,"sent_data":529,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"xvideosrei.com","ip":{"addr":"31.43.191.59","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"domain_registered":"2017-09-21","domain_rank":80835,"first_seen":"2018-01-03T10:28:29Z","last_seen":"2026-10-02T13:02:08.221114Z","alert_count":0,"request_count":2,"received_data":24865,"sent_data":1106,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"media.porkytube.com","ip":{"addr":"172.67.193.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-01-05","domain_rank":0,"first_seen":"2012-11-20T23:45:09Z","last_seen":"2026-09-15T22:07:59.775803Z","alert_count":1,"request_count":1,"received_data":67216,"sent_data":677,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sexsex10.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-04-17","domain_rank":688235,"first_seen":"2025-07-08T05:40:36.488095Z","last_seen":"2026-09-08T05:19:32.099537Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":1035,"comment":"","tags":null,"fingerprints":null},{"fqdn":"images.fapmove.com","ip":{"addr":"172.67.129.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-09-13","domain_rank":0,"first_seen":"2022-06-18T12:52:41Z","last_seen":"2026-10-02T13:01:58.334323Z","alert_count":0,"request_count":1,"received_data":17572,"sent_data":550,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"un.shayu260522.top","ip":{"addr":"104.21.46.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-22","domain_rank":0,"first_seen":"2026-05-25T14:43:51.993521Z","last_seen":"2026-10-09T22:41:22.521986Z","alert_count":6,"request_count":6,"received_data":374173,"sent_data":3477,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"en.chezcathy.com","ip":{"addr":"141.227.152.51","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"domain_registered":"2007-03-03","domain_rank":899677,"first_seen":"2024-05-28T09:30:18Z","last_seen":"2026-10-02T13:02:11.584316Z","alert_count":0,"request_count":1,"received_data":178,"sent_data":537,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fm.lbtup2025.com","ip":{"addr":"172.67.152.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-21","domain_rank":6907887,"first_seen":"2025-02-26T15:01:49.87034Z","last_seen":"2026-10-02T13:02:12.321212Z","alert_count":0,"request_count":4,"received_data":39874,"sent_data":2320,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"biu37.xyz","ip":{"addr":"46.8.9.226","port":443,"asn":60592,"as":"Gransy s.r.o.","country":"Czechia","country_code":"CZ"},"domain_registered":"2024-11-27","domain_rank":921823,"first_seen":"2025-01-03T22:40:20.197198Z","last_seen":"2026-10-02T13:02:12.002011Z","alert_count":0,"request_count":2,"received_data":182,"sent_data":1142,"comment":"","tags":null,"fingerprints":null},{"fqdn":"jsjs.jpg4.quest","ip":{"addr":"172.67.182.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-20","domain_rank":0,"first_seen":"2026-03-29T10:32:43.006849Z","last_seen":"2026-10-02T13:02:02.143054Z","alert_count":0,"request_count":4,"received_data":393521,"sent_data":1924,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"vjs.zencdn.net","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2011-12-27","domain_rank":43797,"first_seen":"2012-05-21T08:26:59Z","last_seen":"2026-10-05T04:53:29.406391Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":943,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.sexsex61.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-04-17","domain_rank":3526336,"first_seen":"2025-03-12T03:12:00.175026Z","last_seen":"2026-10-02T13:01:47.184518Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":1043,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pic.havzy1.com","ip":{"addr":"172.67.181.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-07-21","domain_rank":0,"first_seen":"2023-07-26T23:20:39Z","last_seen":"2026-09-15T22:07:42.259213Z","alert_count":0,"request_count":1,"received_data":19485,"sent_data":575,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"rottweilerchat.com","ip":{"addr":"104.21.31.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-06-28","domain_rank":2246533,"first_seen":"2026-06-25T11:16:38.542077Z","last_seen":"2026-08-24T11:03:02.293915Z","alert_count":0,"request_count":1,"received_data":17946,"sent_data":539,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fapdig.com","ip":{"addr":"104.21.6.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-03-03","domain_rank":199248,"first_seen":"2017-08-25T19:59:36Z","last_seen":"2026-10-02T13:02:02.873578Z","alert_count":0,"request_count":5,"received_data":45945,"sent_data":2799,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pfbike.com","ip":{"addr":"104.21.87.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":17923,"sent_data":500,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.video01.org","ip":{"addr":"104.21.94.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-20","domain_rank":331865,"first_seen":"2022-06-15T10:29:39Z","last_seen":"2026-09-21T16:12:27.678367Z","alert_count":0,"request_count":1,"received_data":780,"sent_data":536,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"img.cdn202608.com","ip":{"addr":"206.82.6.214","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2026-08-22","domain_rank":0,"first_seen":"2026-09-05T04:44:02.908808Z","last_seen":"2026-09-17T08:30:52.333041Z","alert_count":1,"request_count":1,"received_data":30890,"sent_data":579,"comment":"","tags":null,"fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.porn100.tv","ip":{"addr":"104.21.37.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-03-04","domain_rank":126842,"first_seen":"2023-03-11T17:36:20Z","last_seen":"2026-09-15T22:07:41.888483Z","alert_count":0,"request_count":3,"received_data":2310,"sent_data":1637,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"youtute.net","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-02-14","domain_rank":0,"first_seen":"2026-05-08T22:39:58.571042Z","last_seen":"2026-10-02T13:01:51.630971Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":532,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sichuanganxi.com","ip":{"addr":"172.67.170.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-08","domain_rank":0,"first_seen":"2025-06-14T08:13:04.985294Z","last_seen":"2026-10-06T10:27:43.829271Z","alert_count":0,"request_count":2,"received_data":35874,"sent_data":1043,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pdocac.jpg4.quest","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-03-20","domain_rank":0,"first_seen":"2026-03-29T10:32:42.175489Z","last_seen":"2026-10-02T13:02:10.708231Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":1051,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ohsex.pro","ip":{"addr":"185.73.221.135","port":443,"asn":32338,"as":"HOSTISERVER","country":"The Netherlands","country_code":"NL"},"domain_registered":"2019-02-22","domain_rank":212285,"first_seen":"2019-03-30T13:37:43Z","last_seen":"2026-08-18T23:20:31.203074Z","alert_count":0,"request_count":1,"received_data":1753,"sent_data":530,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-10-04T22:47:33.985443Z","alert_count":0,"request_count":1,"received_data":368646,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"im4.mediacont.net","ip":{"addr":"93.113.203.4","port":443,"asn":208949,"as":"Hbing Limited","country":"Romania","country_code":"RO"},"domain_registered":"2024-01-13","domain_rank":2140888,"first_seen":"2024-01-23T00:26:56Z","last_seen":"2026-10-03T01:01:30.178374Z","alert_count":0,"request_count":2,"received_data":24942,"sent_data":1125,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"diorcatm.com","ip":{"addr":"172.67.216.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-16","domain_rank":2077310,"first_seen":"2026-05-13T16:59:59.261061Z","last_seen":"2026-10-02T13:02:10.475099Z","alert_count":2,"request_count":2,"received_data":35852,"sent_data":1035,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bornagainmormon.com","ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":2,"received_data":35898,"sent_data":1049,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"imgsiwa.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-04-06","domain_rank":349363,"first_seen":"2025-04-13T16:30:52.78454Z","last_seen":"2026-09-14T00:57:33.061373Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":1088,"comment":"","tags":null,"fingerprints":null},{"fqdn":"asiananimalxxx.top","ip":{"addr":"172.67.156.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-05-07","domain_rank":623823,"first_seen":"2021-05-07T15:28:48Z","last_seen":"2026-09-08T05:19:07.043927Z","alert_count":0,"request_count":2,"received_data":14113,"sent_data":1104,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.luolix9.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-04-11","domain_rank":0,"first_seen":"2026-04-27T21:09:56.697884Z","last_seen":"2026-10-02T13:01:56.080502Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":1041,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pornohub24.ru","ip":{"addr":"89.105.223.48","port":443,"asn":24875,"as":"NovoServe B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2015-12-18","domain_rank":222572,"first_seen":"2016-02-13T06:11:04Z","last_seen":"2026-09-15T22:07:56.386356Z","alert_count":0,"request_count":1,"received_data":251,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"filtradas.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-04-09","domain_rank":184383,"first_seen":"2025-06-15T07:12:29.914989Z","last_seen":"2026-09-29T13:46:49.63188Z","alert_count":0,"request_count":8,"received_data":264,"sent_data":4660,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pub-97b3682e3af64300bc04b2cd7f162f85.r2.dev","ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-23","domain_rank":0,"first_seen":"2026-05-03T16:59:26.448611Z","last_seen":"2026-08-04T21:33:58.892518Z","alert_count":0,"request_count":2,"received_data":846,"sent_data":1158,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"zoosex.cc","ip":{"addr":"104.21.18.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-08-04","domain_rank":74680,"first_seen":"2015-08-11T06:36:23Z","last_seen":"2026-10-02T13:01:59.620108Z","alert_count":0,"request_count":1,"received_data":15822,"sent_data":530,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pic.msn01.com","ip":{"addr":"104.21.14.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-13","domain_rank":0,"first_seen":"2026-04-15T12:34:50.319386Z","last_seen":"2026-10-03T07:55:22.821089Z","alert_count":0,"request_count":1,"received_data":21079,"sent_data":574,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-10-05T09:41:11.254255Z","alert_count":0,"request_count":2,"received_data":40287,"sent_data":948,"comment":"","tags":null,"fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"oedy9.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-10-27","domain_rank":150266,"first_seen":"2023-10-27T10:41:23Z","last_seen":"2026-10-11T20:33:16.692656Z","alert_count":2,"request_count":2,"received_data":0,"sent_data":1029,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mydesii.com","ip":{"addr":"104.21.32.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-05-27","domain_rank":169957,"first_seen":"2024-07-25T10:11:01Z","last_seen":"2026-10-02T13:01:49.45968Z","alert_count":0,"request_count":1,"received_data":602,"sent_data":572,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"jpgjingpinx1.top","ip":{"addr":"157.90.33.71","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2025-03-13","domain_rank":172398,"first_seen":"2025-04-02T05:04:02.716789Z","last_seen":"2026-10-01T16:11:43.062988Z","alert_count":6,"request_count":6,"received_data":1488,"sent_data":3504,"comment":"","tags":null,"fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}]},{"fqdn":"spartakchess.com","ip":{"addr":"104.21.32.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-24","domain_rank":0,"first_seen":"2026-08-04T20:52:47.894735Z","last_seen":"2026-08-15T18:35:50.356887Z","alert_count":0,"request_count":1,"received_data":17912,"sent_data":537,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sha.lashayu.com","ip":{"addr":"104.20.18.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-31","domain_rank":3364230,"first_seen":"2025-06-03T10:13:53.102819Z","last_seen":"2026-10-02T13:01:42.01484Z","alert_count":0,"request_count":1,"received_data":75125,"sent_data":548,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"content.jwplatform.com","ip":{"addr":"13.249.8.19","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2010-04-13","domain_rank":42202,"first_seen":"2017-09-15T13:11:36Z","last_seen":"2026-10-07T11:45:21.356169Z","alert_count":0,"request_count":1,"received_data":299,"sent_data":543,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"v.qq.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"1995-05-04","domain_rank":1738,"first_seen":"2012-07-03T09:23:45Z","last_seen":"2026-10-09T04:04:51.021306Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":498,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.javwind.com","ip":{"addr":"172.67.199.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-06-22","domain_rank":0,"first_seen":"2022-09-12T00:19:01Z","last_seen":"2026-09-10T13:06:50.397703Z","alert_count":0,"request_count":1,"received_data":17908,"sent_data":536,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"hxsav.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-04-11","domain_rank":0,"first_seen":"2026-04-27T21:09:56.707375Z","last_seen":"2026-09-21T16:12:25.082514Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":530,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ag7692.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-03-11","domain_rank":1685212,"first_seen":"2026-07-20T21:39:15.972042Z","last_seen":"2026-08-04T20:52:51.617289Z","alert_count":2,"request_count":2,"received_data":0,"sent_data":1031,"comment":"","tags":null,"fingerprints":null},{"fqdn":"g.uuu.cam","ip":{"addr":"172.67.193.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-04-10","domain_rank":4415821,"first_seen":"2025-01-11T12:08:34Z","last_seen":"2026-09-08T05:19:29.168337Z","alert_count":0,"request_count":1,"received_data":55732,"sent_data":530,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.pornlulu.com","ip":{"addr":"104.21.34.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-05-17","domain_rank":33047,"first_seen":"2021-07-12T18:20:26Z","last_seen":"2026-10-02T13:02:09.259951Z","alert_count":0,"request_count":1,"received_data":770,"sent_data":537,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"xgx.mobi","ip":{"addr":"104.21.25.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-09-17","domain_rank":25814,"first_seen":"2017-09-13T02:28:38Z","last_seen":"2026-09-15T22:07:40.155749Z","alert_count":0,"request_count":2,"received_data":33348,"sent_data":1080,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"images.ohsex.pro","ip":{"addr":"172.67.140.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-02-22","domain_rank":6110950,"first_seen":"2019-04-17T17:20:12Z","last_seen":"2026-08-18T23:20:26.72088Z","alert_count":0,"request_count":1,"received_data":12004,"sent_data":564,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"p3-tt.byteimg.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2018-10-28","domain_rank":3082383,"first_seen":"2019-05-09T07:30:36Z","last_seen":"2026-10-02T08:49:24.038779Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":583,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img.pornoperso.com","ip":{"addr":"94.23.76.64","port":443,"asn":16276,"as":"OVH SAS","country":"Portugal","country_code":"PT"},"domain_registered":"2000-06-06","domain_rank":0,"first_seen":"2026-06-13T07:16:31.072572Z","last_seen":"2026-10-02T13:02:15.365704Z","alert_count":0,"request_count":4,"received_data":95418,"sent_data":2161,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"en.4us.asia/","fqdn":"en.4us.asia","domain":"4us.asia","tld":"asia"},"ip":{"addr":"172.67.207.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"4e6c0172a771f019ab0cbba839362159","sha1":"6530486a6acdbe9157fa0606b15dbb1d83e53143","sha256":"dc7653984ca5d7157c02f3f8aa7d8edefaba5ae2592ee6a6c0a6d150a6160787","sha512":"2b5bddc08cd16fea8f7717782d337de1d22a512a2a8f7006da7cefa3a4080c707e6b544d2ce0cddaeaa2ff048c1e1b754948510450d401a2363ae758aa593297","ssdeep":"","tlshash":"36a0223f823000322a800202a08f0b0c0022300b88b08338b80230f2b0808aa2030322","size":68,"data":"","first_seen":"2026-03-29T10:32:52.142092Z","last_seen":"2026-10-11T21:28:40.213417Z","times_seen":93,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","fqdn":"en.4us.asia","domain":"4us.asia","tld":"asia"},"ip":{"addr":"172.67.207.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"4e6c0172a771f019ab0cbba839362159","sha1":"6530486a6acdbe9157fa0606b15dbb1d83e53143","sha256":"dc7653984ca5d7157c02f3f8aa7d8edefaba5ae2592ee6a6c0a6d150a6160787","sha512":"2b5bddc08cd16fea8f7717782d337de1d22a512a2a8f7006da7cefa3a4080c707e6b544d2ce0cddaeaa2ff048c1e1b754948510450d401a2363ae758aa593297","ssdeep":"","tlshash":"36a0223f823000322a800202a08f0b0c0022300b88b08338b80230f2b0808aa2030322","size":68,"data":"","first_seen":"2026-03-29T10:32:52.142092Z","last_seen":"2026-10-11T21:28:40.213417Z","times_seen":93,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.4us.asia/","fqdn":"en.4us.asia","domain":"4us.asia","tld":"asia"},"ip":{"addr":"172.67.207.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"f5d293b496f5a767717c3d85b556c241","sha1":"75e7dd7f7ac1bd863d35d0074134febe2981a741","sha256":"88c0c2fd532a27813f833afc83ee8017eb37abfbfa51c4b48390c8aaceafc660","sha512":"d990cc9711f7c6b8cde7a0a40004b8552092dba1445ddb7a27154c5b2f54a069dc35e41ec34fd300f07fb2e77682a9eb6e578ca90d61362de6c317291c1a4d6c","ssdeep":"","tlshash":"e390047fdc1434c315c551455547755c453d310cf7f04715ddd3304575c10355175105","size":52,"data":"","first_seen":"2026-03-29T10:32:52.145155Z","last_seen":"2026-10-11T21:28:40.215316Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mymediaing.my/sdk/p/?zid=9801","fqdn":"cdn.mymediaing.my","domain":"mymediaing.my","tld":"my"},"ip":{"addr":"104.21.71.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1fdb72c35052f7d1c43f60170c4961e","sha1":"473f9ac28bcd62020aec4466db7b2dced25a361d","sha256":"0c621f03bd9e783620d914e5fbef0baa70217f6d94824af6ee8c3cf3c4a54f5a","sha512":"448eb60a4a4ab3c5a1d3e6bd6d7470a423d47f998a71fa3ae44582bf563dcfb650845414bee6a62ddb5d40591df7f7a1b3bf1fba157355c183225e3d80a684e3","ssdeep":"1536:nFiJtBRiqSJQUUBU1wpIbS0UboLxCSMzHUgNvFf:nDqSJQUUBU1wpIbS0UboLxCSMzHHH","tlshash":"1a3392982fd0b94053dbab7b772fb4e5f4571c2f6a81484fe225bc20359071beaa5930","size":52892,"data":"","first_seen":"2026-10-11T21:28:40.004155Z","last_seen":"2026-10-11T21:28:40.004155Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.4us.asia/","fqdn":"en.4us.asia","domain":"4us.asia","tld":"asia"},"ip":{"addr":"172.67.207.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"78c23afc9d8ffe8b84dffccec65a992d","sha1":"3760122ab2712e8299f7bfa398fa638937771029","sha256":"8373d7da1a809adf4a562ca63fd947f0d5bef3b5e906e289d3eb851f0c02ba49","sha512":"d52b03ead6c16abfa9f7544e1aba67ada28771c548a2f8619777730c4986898a56b31394879a89ee4f2689e2fc7dd9ea35b3584fa37c54d1236a2bed9acce6f5","ssdeep":"","tlshash":"c4500030003f00030cc00c0000c0c000c000003c000303f00c030000000003030cc00c","size":11,"data":"","first_seen":"2026-06-13T07:07:52.866923Z","last_seen":"2026-10-11T21:28:40.21652Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.4us.asia/","fqdn":"en.4us.asia","domain":"4us.asia","tld":"asia"},"ip":{"addr":"172.67.207.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e984a16d0268d5eee145161eab542bd","sha1":"2a6d9a1949824f2203e981aa18701802f46786ae","sha256":"033e7b9146d812ca31571c1d86ca9eab8d9db5471278caf8d0e9b522b32e4fc5","sha512":"79b7ca91fad3bbd53ad15580981b7afb95b4556943c79667a2793036c2b38289283d4150298e9e370fa0c6967984f228c8d77e1ff7c3992a22968f2babd51e27","ssdeep":"","tlshash":"24e0c031742d014103160260ac361a6a743dab351fc060b0d23825787584cba70196fd","size":352,"data":"","first_seen":"2026-09-11T03:42:20.091215Z","last_seen":"2026-10-11T21:28:40.217935Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.4us.asia/","fqdn":"en.4us.asia","domain":"4us.asia","tld":"asia"},"ip":{"addr":"172.67.207.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"003f277fb755614d59c2bad58017d2b9","sha1":"8922875e8bca06a11218f8720a89650eb12d3852","sha256":"e1b95126b226e1bdb2623e4ce6fa72d080282a0322d79d2f4270e7becd069657","sha512":"6c008743ee9bc2245742b2294367d502af5011ac31dbc794297fcacb5f3d889eedf7c7c6c536e341dcfe2da1e69eab5085b56018cfd345db3a331d15c7c41d91","ssdeep":"","tlshash":"f28000e0e28020ba00f0820ca0002020082ac2280e83e3808c00a08800008a288eb200","size":27,"data":"","first_seen":"2026-06-18T17:53:31.565897Z","last_seen":"2026-10-11T21:28:40.21884Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.4us.asia/","fqdn":"en.4us.asia","domain":"4us.asia","tld":"asia"},"ip":{"addr":"172.67.207.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"13b29d7aeaa1d827a9a3feeb39148a43","sha1":"da2040ef13a2d1ce62b0eef9c6ced0fe14f66b28","sha256":"d2d18329527d4d7d4acda028f92281274ac2a08bd840af1c0480620582f98338","sha512":"86dc2b9ccd6cda65753b62b83dda93aabd9272931c1cd9bae1a56ccb607d7de074a8b9873c3a91b69479abf9fb911a4e10b47e0ae7f9cd242d638ce732869c53","ssdeep":"","tlshash":"466000003333000030c00c03c0000c00cf0c00cc000030003c030c00303000030c33c3","size":14,"data":"","first_seen":"2023-03-07T12:07:12Z","last_seen":"2026-10-11T21:28:40.21959Z","times_seen":1852,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.4us.asia/","fqdn":"en.4us.asia","domain":"4us.asia","tld":"asia"},"ip":{"addr":"172.67.207.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"031272e79a9911f16d484b354be88c9d","sha1":"7d875792a099de314c9ddffbe10de67a443a96f5","sha256":"4562dba0f875615fa36535736a46725e70e63715a6ddcf54aa661fd653ca3db3","sha512":"abb30f2699a3c36dd5511949b2d74ffae557f269e6544cd36a28741a22561f1c6f2508bb0c16d53e9f9ec6c35fc7893d2b28bca2345d0102204045862a408249","ssdeep":"","tlshash":"54d022e88228a52826a522c9d10fe3d09ca5a38b708339f0dc7e082d02489491436462","size":202,"data":"","first_seen":"2025-03-12T03:12:27.527113Z","last_seen":"2026-10-11T21:28:40.220312Z","times_seen":439,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/yandex-metrica-watch/watch.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc5609ba804dd8e3954b1b0602f42a28","sha1":"633777e92f6a417c5fd5840f17e26e77600dac06","sha256":"a73c7e7935af2259021c125b542780c68aeb887651cc70d0603bc451e1020fe5","sha512":"6edbab0a607f19bdb4af707afa47cfe705d7d54763e06aef7df04fc359f0a6bbc95ea7931274745ba8967afe8fb40ffb4e76ad08c795f00ef5d79d693855f2db","ssdeep":"6144:mPYNBbuH7KXTakStdQ8O5ZctVmMwxZ/np8y:7u7K+Q8O5ut+J8y","tlshash":"3e24d7d976927072937334b4902f010f72bea8a6f14cc954f18ad9d93e789a89137f6c","size":229945,"data":"","first_seen":"2026-08-14T22:06:37.35977Z","last_seen":"2026-10-11T21:28:40.187344Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","fqdn":"en.4us.asia","domain":"4us.asia","tld":"asia"},"ip":{"addr":"172.67.207.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"a57152b06a259d44d68ed7bca5713220","sha1":"9e2da37836dd54a48ca9d1427b22407c8100b81e","sha256":"01b11179be37589fc67de3d7e419eec20dc566869de4175df5a4c5793a8dee78","sha512":"f2d79d01dcc9bcd209d8b69139d4a2be40a4918ec37d4eff6265a5a067f54bd8649dfebf7a1cb884dd2f91be15835aa4f008f2c2703e4bd8dcee3325041ab2d0","ssdeep":"","tlshash":"bf110000c802022202030b3a2008280020000200c082028000a000000080820002280c","size":929,"data":"","first_seen":"2025-03-21T10:58:41.403796Z","last_seen":"2026-10-11T21:28:40.221214Z","times_seen":251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js?1","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-10-11T23:18:22.985666Z","times_seen":147525,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jsjs.jpg4.quest/index.php?js=very","fqdn":"jsjs.jpg4.quest","domain":"jpg4.quest","tld":"quest"},"ip":{"addr":"172.67.182.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b233f841a00264f453c84a0133d40b73","sha1":"113b10d80e4239e059e0664e6a65c585d9d6f0a9","sha256":"5fc97199ad041b9b414b04b05ac5da6a028a0d38ab23e2e3df651fad33e484b8","sha512":"e9ed36b3674f82b79936412f2b94d85ea669a0e3ec1a55ab482cdc0c3430952cad6d6907d9379c7bbd50be8bd1b60ea6bcf47060bf1c1f386bda8055df015df3","ssdeep":"","tlshash":"66b01200f025cc3d7088152840d0485502c9b2c801c20f024780272648266c6a102070","size":87,"data":"","first_seen":"2025-12-21T09:21:39.060054Z","last_seen":"2026-10-11T21:28:40.079287Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vjs.zencdn.net/7.8.2/video.js","fqdn":"vjs.zencdn.net","domain":"zencdn.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"52c53a33bb2cd149f293eb14fb22505d","sha1":"ab93f823ff6c7fe51d78b6efa2daf0a77f8a9114","sha256":"c8b0876dbf1fe7fff19cc79b46ab00e9c1f980c3a0ad1be123bcfcd41eb9d3e1","sha512":"567c9cc0a8c19851efd7cb8f170025edbbaeaaf086465a459a09cd6e1e2fbdac1e9fa2d6942f8ad44e9711d3b9a9da981ccdbd6ec86a079c0ca75cf793ce5008","ssdeep":"49152:n/DxVn5iX3YTC7TA9G0epwH7OS7od64H0o/wX/w1z1B:YZ","tlshash":"3985b64a6ef612a2445370794b9f6184f338c02f2519d954bc4ea7a41f85f3887fafe8","size":1863992,"data":"","first_seen":"2023-03-07T12:56:49Z","last_seen":"2026-10-11T21:28:40.22483Z","times_seen":326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-620120-3","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9885ff30515350984a25baa93d76bbcb","sha1":"2de95fb509e4e3a1379f141863f781967a2c7207","sha256":"02b9992571fb4ef4e972818dae7dd31ee7e335bf7ec36323e3db5dc4e1926907","sha512":"8227766cc17ca0a615292b164349fe158918f646f4b4189a2a455fb2aebe181eba7589c995241993b3592edb240636ed37902903f93e15c2a074a338bd401fd3","ssdeep":"6144:VsfCyDnGI9amdFcfIb/EfD3ceVijGupYp:mR9NjGu8","tlshash":"8c7408ccb3d6b42683a3b574503f018bb27a69d2a84cd889f146ece42d3469a5177f7c","size":368042,"data":"","first_seen":"2026-10-11T09:53:13.349514Z","last_seen":"2026-10-11T21:28:39.923318Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/nosleep/0.11.0/NoSleep.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea77f824de2ef57acb12e7cb6596365e","sha1":"10bad0dbdf30a0471c2c786b349daeb1dd19180e","sha256":"2b19d92ce83bf3b498f73103ba1240f09c84798b1f92aedf1491ccf0aa6f5e4c","sha512":"cf69dd76334b7318c829868da8a7e9c2097ef261555388132fc69f95d42e91420e2988056c3d93c830b20059422ae5a82e1109e3dce9127ccb0e23cc5ca27591","ssdeep":"192:N0rZbTPe+fl9SKRGyFgkw+wi+FrZJqbzr+5rA7wbUCzebIkm:N09voK7gzi+FrZJqbzrarAyUX5m","tlshash":"7a22f8b33133fd9f8fba085ac61d61045c7dbc6f4aa94091bb0884e86af4558ead5d34","size":10687,"data":"","first_seen":"2023-03-07T12:02:01Z","last_seen":"2026-10-11T21:28:39.96172Z","times_seen":2417,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","fqdn":"jsjs.jpg4.quest","domain":"jpg4.quest","tld":"quest"},"ip":{"addr":"172.67.182.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b0037759d7ed4dae5ae5ca50baf4eb4","sha1":"21b5652c8be97f546cad3cceb5d37e5fb00aa1be","sha256":"b960d59ef41396e3c9dcd27dba070a2c0e62a18a69a5d47fa9acb089e3467925","sha512":"2a6304b6e2a52dfe9d108c8a5c2468805d4c2a9057228874110d2f70f7a4f8ba42ea561b456e5269b6ccd55aab3f6f5025281b77ce36abfc414e0a11a3944377","ssdeep":"3072:qhxyQprTgcm7U/RV/rIuvd14EOtsCtJNSI1z8A0djQNi:OxyQpAcm7U/Rquvq98A0djQNi","tlshash":"0114d7f73608502951f302a79a758688f833a02b99816884f91c6d751f78e7f197affc","size":194959,"data":"","first_seen":"2026-10-11T21:28:39.814917Z","last_seen":"2026-10-11T21:28:39.814917Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","fqdn":"en.4us.asia","domain":"4us.asia","tld":"asia"},"ip":{"addr":"172.67.207.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b3de584a8b1925e80bc1639a44f7a5d8","sha1":"8659c6c5121affb0dc15ff73ef5e3aef69449adc","sha256":"7c9e067a632fde2995c3aba2846c73013c21cad3ab658981027f29735d174879","sha512":"5e2a931d75b8dc0e48a2d305f8b16cab34dffc619175dd24d997382ae73bdf842efa48f5969261a84ebcd345d1624c569a1d299ace5198ab1ab02099ce3cf3e9","ssdeep":"","tlshash":"4d50000c0c00c3030030000c0c00c3000300003c0000000000030cc000003000000003","size":9,"data":"","first_seen":"2026-10-11T21:28:40.225645Z","last_seen":"2026-10-11T21:28:40.225645Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","fqdn":"en.4us.asia","domain":"4us.asia","tld":"asia"},"ip":{"addr":"172.67.207.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"78c23afc9d8ffe8b84dffccec65a992d","sha1":"3760122ab2712e8299f7bfa398fa638937771029","sha256":"8373d7da1a809adf4a562ca63fd947f0d5bef3b5e906e289d3eb851f0c02ba49","sha512":"d52b03ead6c16abfa9f7544e1aba67ada28771c548a2f8619777730c4986898a56b31394879a89ee4f2689e2fc7dd9ea35b3584fa37c54d1236a2bed9acce6f5","ssdeep":"","tlshash":"c4500030003f00030cc00c0000c0c000c000003c000303f00c030000000003030cc00c","size":11,"data":"","first_seen":"2026-06-13T07:07:52.866923Z","last_seen":"2026-10-11T21:28:40.21652Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","fqdn":"en.4us.asia","domain":"4us.asia","tld":"asia"},"ip":{"addr":"172.67.207.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e984a16d0268d5eee145161eab542bd","sha1":"2a6d9a1949824f2203e981aa18701802f46786ae","sha256":"033e7b9146d812ca31571c1d86ca9eab8d9db5471278caf8d0e9b522b32e4fc5","sha512":"79b7ca91fad3bbd53ad15580981b7afb95b4556943c79667a2793036c2b38289283d4150298e9e370fa0c6967984f228c8d77e1ff7c3992a22968f2babd51e27","ssdeep":"","tlshash":"24e0c031742d014103160260ac361a6a743dab351fc060b0d23825787584cba70196fd","size":352,"data":"","first_seen":"2026-09-11T03:42:20.091215Z","last_seen":"2026-10-11T21:28:40.217935Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","fqdn":"en.4us.asia","domain":"4us.asia","tld":"asia"},"ip":{"addr":"172.67.207.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2f27071b4c83c1d196973751ed80c395","sha1":"3e94be3c31c0313245443dd54c5cb8e4c3b81fa7","sha256":"5fe41e6ddedd65f964997706a0e5c910703e28e6318d9680019597e43a6dad88","sha512":"8e55d4db2bd8aade156c1b57a2e42be1c71c7c6964a271e0bd6ff8420c6202bf0c2070a414642b06df4b696f7be1bf4518a48fc7034a0e820b36e9bbc0fb341a","ssdeep":"","tlshash":"e76000cc000c000000000ccc0c0003f33000c0300c03c0c00c03000c0c000003c03000","size":14,"data":"","first_seen":"2023-03-07T12:56:48Z","last_seen":"2026-10-11T21:28:40.227508Z","times_seen":190,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","fqdn":"en.4us.asia","domain":"4us.asia","tld":"asia"},"ip":{"addr":"172.67.207.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"769b2b38451bbe0b0844019d3a3867f9","sha1":"47b664c7f029962785e7a0569d7f9b00f86629fe","sha256":"be6f7ec6c02220326c1ce29dbd41615774511f137ce80ade8de42a08b3d6792b","sha512":"d4c87cc4ac0b88521616f8d4fcd777da4fac132cce68997d4e1dc5639141e6b6678f7ed211d73d50e8364bca132d6684d97f739a6ba1d87020bd4d4ea6d9422d","ssdeep":"","tlshash":"9bc08c62c5c0a6646f9641cd457add50623b413a48e143c0f5506288620506be43e8ae","size":161,"data":"","first_seen":"2026-10-11T21:28:40.231314Z","last_seen":"2026-10-11T21:28:40.231314Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","fqdn":"en.4us.asia","domain":"4us.asia","tld":"asia"},"ip":{"addr":"172.67.207.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0cefed2949db62202cd30107649080af","sha1":"c4f5bf729aa1be370fd6b2ec694a0f1ae030321d","sha256":"28b1856e18e3179111dad0e8462626fb7a849aacafa2c071f2034fa1ba3aaf5b","sha512":"fe7d6033c95b3cc6aeb3129f0dd6e2b188b25a05b9c13f6d9b54f02e27b18e34d987d2bdc4ca11bc14240f56c8ffa588105e372852ecba0cb7fe3f9b68d4fde0","ssdeep":"","tlshash":"347000020a00300e082000fe0a000c2830000a00000bc28008a2003a0c0220028222a8","size":24,"data":"","first_seen":"2023-03-07T12:56:48Z","last_seen":"2026-10-11T21:28:40.234383Z","times_seen":322,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","fqdn":"en.4us.asia","domain":"4us.asia","tld":"asia"},"ip":{"addr":"172.67.207.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f3c3855a71ee2403b49eb2c0f0e4b43e","sha1":"61790790082b83edab4bd5e08e7d5ae12fe35862","sha256":"54f184498ad6f870b1d43cc9728d3219cfebd6aa6c3f650bb7e8823d1a3bf828","sha512":"741582a0284307e72c4d81619afdf3dd32dae39ad9dc9bd9f0619f75d30fe5739cc2314402d54db5f499b031f4d07823a226a2f40e3b5e1dca5dc3feb88a0a7c","ssdeep":"","tlshash":"1c9004114d353157101f00f40444cc0430155d7317d5d3704571173ccc54110055777f","size":42,"data":"","first_seen":"2023-03-07T12:56:48Z","last_seen":"2026-10-11T21:28:40.238379Z","times_seen":301,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","fqdn":"en.4us.asia","domain":"4us.asia","tld":"asia"},"ip":{"addr":"172.67.207.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"de4e3a3811dacb36a09bf02cc1f2ec87","sha1":"eef9aff2b2001152b58fb9263118202b6e38e719","sha256":"d524578704e53be1cbd3936998cd7c510935770d4f147d32e7a6acacf149053c","sha512":"c1c0129b8fbce134d86bce42d49ca8cd7734ddfec72b31123cda17846a7705aedce25e01ea90e1e5420dbde2dab297632159b39896cff987d92a8e9ddc344413","ssdeep":"","tlshash":"5501446a4b0892680b3241e1a92c0187721f8630e3f042c0f87e502417541bedaf66fc","size":696,"data":"","first_seen":"2026-10-11T21:28:40.242615Z","last_seen":"2026-10-11T21:28:40.242615Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","fqdn":"en.4us.asia","domain":"4us.asia","tld":"asia"},"ip":{"addr":"172.67.207.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6cf56e3451dda45fdc29269f56ffe3b7","sha1":"c741e0a315590ed47ee39ad4683eedc5805ee6dc","sha256":"f91a14c8ae1f28ef4fd6a1af412dc315f16581bc1f255cdb95f71f7814f5cca4","sha512":"948701b1c146df5e7cd55b90d8a21adc43065d2c9d7bc8c546b63a29997b213334576bc48eaf4571ba272819453b5e32a423e3506842fd240fe8a6d2794fd3d9","ssdeep":"","tlshash":"a16000003333000c30c00c0fcc000c00cf0c00cc000030003c030c00303000030c33c3","size":15,"data":"","first_seen":"2023-03-08T08:26:38Z","last_seen":"2026-10-11T21:28:40.25015Z","times_seen":309,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","fqdn":"en.4us.asia","domain":"4us.asia","tld":"asia"},"ip":{"addr":"172.67.207.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5a26299bf5669d338645076180bbf580","sha1":"a5c661ed48d5d4c31b170947dac18d49e481358e","sha256":"d943bb73f94f343464e03f4d8f42b8d1bf46fed749ebd1032793a75e3501392f","sha512":"140ed6d20d823ee711cbff71eb5ac7f1d090c420564276edd8b89b5a041685b72417246600170f9438738abc328f477d1587b6902b72565ab4e9bf3dbb1a23f5","ssdeep":"","tlshash":"679002200125211249090050e428c65439b94820a4516200090a7900709060538099d1","size":41,"data":"","first_seen":"2024-06-14T04:10:01Z","last_seen":"2026-10-11T21:28:40.251885Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","fqdn":"en.4us.asia","domain":"4us.asia","tld":"asia"},"ip":{"addr":"172.67.207.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2c5d664dd0d08d2a1678171ec0e35c86","sha1":"2d32e1d02197871c93aec4cd4d228ec5d461d97d","sha256":"9ff2a31569606cf6049074571727ae05911e29562e955e2889501978abe1172e","sha512":"eccb6e6a963b95eb6878322fd9bb103704a1edc9ecb090ae2b2682b6522ca88d111aad44b0afbce5a412fc2bef5a809ab8a64136759bcbdc57c01f209fa1a51c","ssdeep":"","tlshash":"a4d02257b983993d2afe22ff1394cf883820d8331c825531ae3c91269a26f22011ffd4","size":217,"data":"","first_seen":"2026-06-24T17:55:55.853504Z","last_seen":"2026-10-11T21:28:40.253574Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","fqdn":"en.4us.asia","domain":"4us.asia","tld":"asia"},"ip":{"addr":"172.67.207.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b835b53c703c781c27f3816fe32e7fc","sha1":"df9a937d5511ee786854eb04d030e0351d2cc2c2","sha256":"8971a572098594a4efc73cf0ebc8065b5697141dd267c3a4143095cb92775a4b","sha512":"f3cce93361ec317e3b0dfd56b99636035d3dc6e668788569d459836bf6c8b6d8a858991a3c61d43d282a2a4459c64521ace6878289fcbf7203fe371843ed8de8","ssdeep":"","tlshash":"93c0c0d94628953c269537c4800ff3c09471a30fb48338f0cc7f0c390148d881432511","size":187,"data":"","first_seen":"2024-06-14T04:10:00Z","last_seen":"2026-10-11T21:28:40.256433Z","times_seen":293,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-10-11T23:18:22.985666Z","times_seen":147525,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","fqdn":"en.4us.asia","domain":"4us.asia","tld":"asia"},"ip":{"addr":"172.67.207.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"e0498db14fe83331f17dc99853bcfcf5","sha1":"f5cb3a321493d833dc79b1de5a12670e66f1427e","sha256":"d3e961841188e795b42e54d35149f83b5e2fba96ff37f301068c85b442bdb914","sha512":"0223c38c221e2c859927bb8623b40ee6c4189f2888792019a65c4f464b0db60d3f707d75267a8efdb024272a99242e87bf974eed60b649a9660600a7ba7ca7db","ssdeep":"","tlshash":"a5110000e2208a28002028332800020800020000c08008008002002000208030ea000a","size":960,"data":"","first_seen":"2025-11-25T01:08:54.725598Z","last_seen":"2026-10-11T21:28:40.257261Z","times_seen":395,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.4us.asia/4376f5d6-ca82-4f3f-87af-a5475b301526","fqdn":"en.4us.asia","domain":"4us.asia","tld":"asia"},"ip":{"addr":"172.67.207.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"7a055dd910e6c29374d17eca53b46662","sha1":"3f2db2072bbfa4571b2cf3f3787695fa2c5eddab","sha256":"21fad41d14677416fec504212bef735a40120f575b040a1d24836088e6f94c9d","sha512":"71b31bfde8df86eea05d86cc974d32501274426410af2e9d233587ceea6c406daeb4f9be7bfb2fd6a3b3db423cb075ecae1c7a5baf256733f9e5f3adf2bf9950","ssdeep":"6144:nd10hxBqzJiX07LCQbqPH039PJlskv/uC+9/4kl2tniaGeEv2+oUrNsjxrFChxhx:b82Z4Nsdr4hx+KmwMK","tlshash":"b2e4fa4a3ef121328553303a8bdfa589b238c42b250dd914bc4ed7a41fd4a7897b5fe9","size":678146,"data":"","first_seen":"2026-10-11T21:28:40.258574Z","last_seen":"2026-10-11T21:28:40.258574Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","fqdn":"en.4us.asia","domain":"4us.asia","tld":"asia"},"ip":{"addr":"172.67.207.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"9e35a9020f5873ed19a5d2dcb70a384a","sha1":"b97d0ed5a6764a269e490beebb4a866ee3805ee2","sha256":"a0c93b5cad1e878ee014eb2440310bbdd014e5f5530acda403e9ccb7a46d0797","sha512":"4fbe5d4fb3ba710c5388921b4d9db0c9f5abf82eb89d39d7858072a326a795e60819315f9149ca067b1240213ebb000f37f9fec49568db8a9e7388e56fef36f2","ssdeep":"","tlshash":"26e0000fc3000003c30330300000003000000300c000003303c0300cc0c000c0c0000c","size":421,"data":"","first_seen":"2025-05-02T17:12:40.698725Z","last_seen":"2026-10-11T21:28:40.261054Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.4us.asia/25f2fcef-e93e-49e2-a9a3-fcae78fb9412","fqdn":"en.4us.asia","domain":"4us.asia","tld":"asia"},"ip":{"addr":"172.67.207.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"4c1c9347a9700cc6bb8c8ff593fe2796","sha1":"6bb8e1a07d41fcab51ffdd6a89fd32fda2c8f88f","sha256":"3d7a8714c3c23d3a817b0cca5c0dbcc691b4034f11ad69eccc0d5f45085834bb","sha512":"de5850b67fece98b6e7eac1f52d20c5196b2a5feebf2bdd2c8b5763b55efc75d92c82be8189bab981b777b4682910b565c69bf67692ed7777e493b9afc3a0733","ssdeep":"6144:nd10hxBqzJiX07LCQbqPH039PJlskv/uC+9/4kl2tniaGeEv2+oUrNsjxrFChxh8:b82Z4Nsdr4hx+KmwM/","tlshash":"18e4fa4a3ef121328553303a8bdfa589b238c42b250dd914bc4ed7a41fd4a7897b5fe9","size":678068,"data":"","first_seen":"2026-10-11T21:28:40.266576Z","last_seen":"2026-10-11T21:28:40.266576Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.4us.asia/","fqdn":"en.4us.asia","domain":"4us.asia","tld":"asia"},"ip":{"addr":"172.67.207.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"e0498db14fe83331f17dc99853bcfcf5","sha1":"f5cb3a321493d833dc79b1de5a12670e66f1427e","sha256":"d3e961841188e795b42e54d35149f83b5e2fba96ff37f301068c85b442bdb914","sha512":"0223c38c221e2c859927bb8623b40ee6c4189f2888792019a65c4f464b0db60d3f707d75267a8efdb024272a99242e87bf974eed60b649a9660600a7ba7ca7db","ssdeep":"","tlshash":"a5110000e2208a28002028332800020800020000c08008008002002000208030ea000a","size":960,"data":"","first_seen":"2025-11-25T01:08:54.725598Z","last_seen":"2026-10-11T21:28:40.257261Z","times_seen":395,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.4us.asia/","fqdn":"en.4us.asia","domain":"4us.asia","tld":"asia"},"ip":{"addr":"172.67.207.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"fc0f0c892151b495af634faf41a8af7d","sha1":"f1dcadca7eb9a3ae799b9f0e48c7ffff9dc732b8","sha256":"00c7da82ac5e19146b267db1da74f1c4f5e42aa1c4303569ae2561362c702d4a","sha512":"31ffc20ccf95e5ff3af2ce3c89500942ac246ecb64772e9b9082e53ce6c2f16b6d3878da73340f30701dfcb0c8c5ecd36d97f4f14a16821e5db5f828a5ad2f99","ssdeep":"","tlshash":"fd110000c802022202030b3a2008280020000200c082028000a000000080820002280c","size":931,"data":"","first_seen":"2025-11-25T01:08:54.722116Z","last_seen":"2026-10-11T21:28:40.270675Z","times_seen":272,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fixedjs.av4me.xyz/?vidjs=51qxezx","fqdn":"fixedjs.av4me.xyz","domain":"av4me.xyz","tld":"xyz"},"ip":{"addr":"104.21.58.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f20db53ad19098794cf80ee4d7bafa7c","sha1":"6af81acb33a88f820c84f1e780c563c3986f6ad8","sha256":"963162212c1981462ea398978f7a6e753e522a5a0a68e1dda8438f9d2ce40499","sha512":"ec357785bd6115da99e841e88d338a1ec17ddd0c0430619e6232f928a4fbf1f5646a42abc264ea1d70bcff558aecf4be1d8866302ace67ca5f815613074e44ac","ssdeep":"1536:gMJTUxbKOOvpXJKJyf2ns+VGP84nUIjNNYl2xGSKLG3Eja3TdQo/JUJnSVKJ8cpt:hUxbKL1tPhUDYGSKLGIaj6oOSRS8fS","tlshash":"837396bb725d542844e106a769714244fc2be637ad81d290f96c2c306f34e2a99f7fec","size":77059,"data":"","first_seen":"2026-09-08T05:20:11.393952Z","last_seen":"2026-10-11T21:28:40.028244Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","fqdn":"en.4us.asia","domain":"4us.asia","tld":"asia"},"ip":{"addr":"172.67.207.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f18e11a212aac27f7884ac330f220706","sha1":"2ecfcb912291e5ce80942a35d2d2b8941c5b40a2","sha256":"4af149dfc037b371346c193e20f6c58d16df86f06583183ccb697ad13709bdf4","sha512":"2d0ce4191d755cd507cee074c21c21f134dfb75c2541b92ab650f0453af0a9d85a7493d47ac09bd6f01e383a3239dd46c09ae76e48f97f9353cfb2b930726ebc","ssdeep":"","tlshash":"1a9002d427c15080f01211d0015719841032c07250048a508011a5d509e51f00306cfc","size":52,"data":"","first_seen":"2023-06-07T08:40:57Z","last_seen":"2026-10-11T21:28:40.271593Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","fqdn":"en.4us.asia","domain":"4us.asia","tld":"asia"},"ip":{"addr":"172.67.207.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"d1c64b41cf23965c289064f1d693eb1a","sha1":"43809ebb08644b8536b72987a8a09c20580f4358","sha256":"3cd31799ce2978656dba3cb1362395ae5a35b4a2ff8d5adf980f95016166a825","sha512":"e1f67efc3e193be59f11d92f6f28acccdabe5bbcb48a65fc75ee4861e613e579525a27b9041046f16975e02bde3874ef8ef5b8b36ac89afa54c07b6fa0df055a","ssdeep":"","tlshash":"0b010080e0808000822028b0000080000228c002ea082020c000080a80028008808808","size":788,"data":"","first_seen":"2025-03-22T13:13:11.234153Z","last_seen":"2026-10-11T21:28:40.275834Z","times_seen":132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"NO","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":49,"column_number":40},{"level":"log","text":"river pop","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":146,"column_number":12},{"level":"log","text":"","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":172,"column_number":10},{"level":"log","text":"1","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":173,"column_number":641},{"level":"log","text":"https://en.4us.asia/null","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":208,"column_number":15},{"level":"log","text":"4","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":213,"column_number":10},{"level":"log","text":"","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":242,"column_number":32},{"level":"log","text":"map[type:null]","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":261,"column_number":10},{"level":"log","text":"en.4us.asianumber","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":270,"column_number":15},{"level":"log","text":"en.4us.asianumber","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":272,"column_number":296},{"level":"log","text":"en.4us.asianull","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":273,"column_number":118},{"level":"log","text":"en.4us.asianumber","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":277,"column_number":87},{"level":"log","text":"false","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":280,"column_number":13},{"level":"log","text":"0","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":377,"column_number":17},{"level":"log","text":"xUpdateCursorPositionDocAll","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":418,"column_number":62},{"level":"log","text":"lsstrgstringnull","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1164,"column_number":10},{"level":"log","text":"Hot ,rgxok:null, titok:undefined, dmban:null, rgxban:null, unsaferef:number","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":330,"column_number":11},{"level":"log","text":"-------\u003e\u003e\u003enothot = undefined","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":331,"column_number":94},{"level":"log","text":"spare","filename":"https://fixedjs.av4me.xyz/?vidjs=51qxezx","line_number":922,"column_number":34},{"level":"log","text":"77777basedm","filename":"https://en.4us.asia/","line_number":53,"column_number":157},{"level":"log","text":"27","filename":"https://fixedjs.av4me.xyz/?vidjs=51qxezx","line_number":851,"column_number":11},{"level":"log","text":"1","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1465,"column_number":12},{"level":"log","text":"map[type:undefined]","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1478,"column_number":10},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"fc2done","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1720,"column_number":10},{"level":"log","text":"77777","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":185,"column_number":26},{"level":"log","text":"en.4us.asia","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1781,"column_number":18},{"level":"log","text":"en.4us.asia","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1781,"column_number":18},{"level":"log","text":"NO","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":49,"column_number":40},{"level":"log","text":"https://en.4us.asia/","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":172,"column_number":10},{"level":"log","text":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]null","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":208,"column_number":15},{"level":"log","text":"0","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":213,"column_number":10},{"level":"log","text":"true, titoknumber","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":214,"column_number":62},{"level":"log","text":"map[type:null]","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":261,"column_number":10},{"level":"log","text":"en.4us.asiaundefined","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":270,"column_number":15},{"level":"log","text":"xUpdateCursorPositionDocAll","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":418,"column_number":62},{"level":"log","text":"lsstrgstringnull","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1164,"column_number":10},{"level":"log","text":"222222","filename":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","line_number":57,"column_number":104},{"level":"log","text":"--------\u003e\u003e\u003enothot =  20","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":331,"column_number":43},{"level":"warn","text":"VIDEOJS:WARN:A plugin named \"hotkeys\" already exists. You may want to avoid re-registering plugins!","filename":"https://vjs.zencdn.net/7.8.2/video.js","line_number":84,"column_number":49},{"level":"log","text":"set","filename":"https://fixedjs.av4me.xyz/?vidjs=51qxezx","line_number":696,"column_number":65},{"level":"log","text":"77777basedm","filename":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","line_number":56,"column_number":157},{"level":"log","text":"httagadded","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1841,"column_number":13},{"level":"log","text":"incontent","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1746,"column_number":59},{"level":"log","text":"86","filename":"https://fixedjs.av4me.xyz/?vidjs=51qxezx","line_number":851,"column_number":11},{"level":"log","text":"1","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1465,"column_number":12},{"level":"log","text":"map[type:undefined]","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1478,"column_number":10},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"finally","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1527,"column_number":343},{"level":"log","text":"fc2done","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":1720,"column_number":10},{"level":"log","text":"https://bfjkuncdn.com/20230517/k1lrQ0Dm/index.m3u8","filename":"https://fixedjs.av4me.xyz/?vidjs=51qxezx","line_number":827,"column_number":47},{"level":"log","text":"1920","filename":"https://fixedjs.av4me.xyz/?vidjs=51qxezx","line_number":361,"column_number":55},{"level":"log","text":"1080","filename":"https://fixedjs.av4me.xyz/?vidjs=51qxezx","line_number":362,"column_number":46},{"level":"log","text":"969.9200000000011","filename":"https://fixedjs.av4me.xyz/?vidjs=51qxezx","line_number":363,"column_number":43},{"level":"log","text":" [16:10x1080p]","filename":"https://fixedjs.av4me.xyz/?vidjs=51qxezx","line_number":387,"column_number":25},{"level":"log","text":"Jinhua is a senior girl in high school. The college entrance examination is over and her cousin has an incestuous room opening. She has a strong oral sex - selfies and candid shots - online adult porn videos and AV movies for free                        \u003c\u003c\u003e\u003es://www.video01.org/mp4/ok0YVp","filename":"https://fixedjs.av4me.xyz/?vidjs=51qxezx","line_number":388,"column_number":76},{"level":"log","text":"blob:https://en.4us.asia/b33835b3-d8a2-4ced-bfc3-9327a74181a0","filename":"https://fixedjs.av4me.xyz/?vidjs=51qxezx","line_number":392,"column_number":66},{"level":"log","text":"blob:https://en.4us.asia/b33835b3-d8a2-4ced-bfc3-9327a74181a0","filename":"https://fixedjs.av4me.xyz/?vidjs=51qxezx","line_number":406,"column_number":34},{"level":"log","text":"77777","filename":"https://jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","line_number":185,"column_number":26},{"level":"log","text":"noerrorjw","filename":"https://fixedjs.av4me.xyz/?vidjs=51qxezx","line_number":836,"column_number":34},{"level":"log","text":"Jinhua is a senior girl in high school. The college entrance examination is over and her cousin has an incestuous room opening. She has a strong oral sex - selfies and candid shots - online adult porn videos and AV movies for free                         [16:10x1080p]\u003c\u003c\u003e\u003es://www.video01.org/mp4/ok0YVp|||https://www.jkuntp.com/upload/vod/20230814-1/357bad30d0afcd3b78def460a222309a.jpgundefined","filename":"https://fixedjs.av4me.xyz/?vidjs=51qxezx","line_number":840,"column_number":21},{"level":"log","text":"","filename":"https://fixedjs.av4me.xyz/?vidjs=51qxezx","line_number":843,"column_number":13},{"level":"log","text":"0","filename":"https://fixedjs.av4me.xyz/?vidjs=51qxezx","line_number":844,"column_number":99},{"level":"log","text":"noerrorjw","filename":"https://fixedjs.av4me.xyz/?vidjs=51qxezx","line_number":836,"column_number":34},{"level":"log","text":"Jinhua is a senior girl in high school. The college entrance examination is over and her cousin has an incestuous room opening. She has a strong oral sex - selfies and candid shots - online adult porn videos and AV movies for free                         [16:10x1080p]\u003c\u003c\u003e\u003es://www.video01.org/mp4/ok0YVp|||https://www.jkuntp.com/upload/vod/20230814-1/357bad30d0afcd3b78def460a222309a.jpgundefined","filename":"https://fixedjs.av4me.xyz/?vidjs=51qxezx","line_number":840,"column_number":21},{"level":"log","text":"","filename":"https://fixedjs.av4me.xyz/?vidjs=51qxezx","line_number":843,"column_number":13},{"level":"log","text":"0","filename":"https://fixedjs.av4me.xyz/?vidjs=51qxezx","line_number":844,"column_number":99}]},"http":[{"url":{"schema":"https","addr":"cdn1.hotmoza.tv/thumb/a6/3b/0a/a63b0a173cbddeeafb167f722af27574.jpg","fqdn":"cdn1.hotmoza.tv","domain":"hotmoza.tv","tld":"tv"},"ip":{"addr":"104.21.70.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:40.986Z","timestamp":1791753940986,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotmoza.tv","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Oct 2026 00:35:08 GMT","end":"Sat, 09 Jan 2027 01:34:59 GMT"},"fingerprint":{"sha1":"3D:B7:70:F9:26:A0:03:3D:A3:46:85:08:AC:4D:FF:7A:0F:45:C2:D6","sha256":"B7:80:04:00:7A:47:C2:6C:D9:FB:7A:F7:12:4B:FD:C1:36:50:D0:88:0E:4E:E9:8C:C8:DE:3A:4E:E7:01:BA:B4"}}},"request":{"raw":"GET /thumb/a6/3b/0a/a63b0a173cbddeeafb167f722af27574.jpg HTTP/1.1\r\nHost: cdn1.hotmoza.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-B0CEuWqEtwQtV6xKWLD4eP' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a490f05338dd0731\", cfExtPri\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bWssXLD28%2FZMKsXl6eYJGSJ6HmukUkxd%2B6RZuVuZ19badO%2B2GuPMgVYKZOL88nY9CVMQTXkEr1ybT6ds6GTZ1sKfTY2p%2FyNCLLe2BFRsKE%2Bv%2FXN9ECsixQz7SA9nboI9fCs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 11 Oct 2026 21:25:41 GMT\r\npriority: u=5,i\r\ncontent-encoding: zstd\r\ncf-ray: a490f05338dd0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"youtup.net/favicon.ico","fqdn":"youtup.net","domain":"youtup.net","tld":"net"},"ip":{"addr":"172.67.218.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.315Z","timestamp":1791753943315,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"youtup.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Aug 2026 10:22:56 GMT","end":"Mon, 23 Nov 2026 10:22:55 GMT"},"fingerprint":{"sha1":"1D:E7:3D:1E:B3:19:D9:89:05:A5:C4:FD:D0:F2:72:EA:76:63:43:F5","sha256":"49:78:B4:E9:9C:AA:37:84:5C:4E:36:90:32:76:E1:FA:07:82:45:60:96:6C:29:0B:02:FB:8A:AB:BE:C1:39:AB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: youtup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CKB93DEg3NYbzCwTievMtvmvKlh5Ee296bsct5lZxS7iVcdtM4ErHirZDPgvS%2BPr%2BYBpt4ntM8OP8bTL1Z4pEsE%2BMQAO4cdVcl8gpOcrsBHCCJWC5e%2FQW9s8wN2b\"}]}\r\nlast-modified: Thu, 09 Apr 2026 08:06:38 GMT\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 30 Jul 2027 09:48:42 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=3600\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"69d75e0e-4276\"\r\nage: 6349079\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a490f0623e5556a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17014,"size_decoded":9331,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"cd6cd8f7d9af7267bf6b188d541291b4","sha1":"406bcab4e44f55cddba8f659d8be17c556d46d8a","sha256":"e47f1cd1409c2fc5dc18c4542b12d4e3777fe41137af62c112f059023e580a3e","sha512":"b5bab1c768b4e771c4981f75cd88ad8537828fb8ae988a7326099c81ed2979b502b577ae45e433b1ce647609bdbb14539a22f774cde6f3c645dd0f1f6b60dc02","ssdeep":"192:V/FSmX97q/jQYWDtwxt8ajnLm7JL28gBl9ffMephqQ/Uln813Y:twLQ1Dtwn61ilN/phj/o8m","tlshash":"82724c662aedf949c7860e3557a2612942b9cfe30c2d1b4bde6279e8be35fc43d81140","first_seen":"2026-04-16T16:55:58.986504Z","last_seen":"2026-10-11T21:28:39.798443Z","times_seen":60,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":12,"connect":54,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"youtup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jh.lb260522.top/upload/vod/20260627-1/3eb70267d54281d8e6077c963216dc83.jpg","fqdn":"jh.lb260522.top","domain":"lb260522.top","tld":"top"},"ip":{"addr":"172.67.216.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.318Z","timestamp":1791753938318,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lb260522.top","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 07:42:03 GMT","end":"Wed, 16 Dec 2026 07:42:02 GMT"},"fingerprint":{"sha1":"DD:73:3F:C7:90:51:3D:14:01:D7:81:99:07:75:37:08:3C:C6:02:F5","sha256":"57:D5:1A:1F:6D:FB:8F:A8:93:02:8E:9A:DD:37:19:6C:EC:82:EC:1D:B7:AC:D9:12:81:F6:FC:8D:12:E5:FF:3E"}}},"request":{"raw":"GET /upload/vod/20260627-1/3eb70267d54281d8e6077c963216dc83.jpg HTTP/1.1\r\nHost: jh.lb260522.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\netag: W/\"6a973609-ce76\"\r\nexpires: Tue, 27 Oct 2026 14:15:15 GMT\r\nlast-modified: Tue, 01 Sep 2026 20:31:05 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: BYPASS, ChunkedEncoding\r\nage: 1235423\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cgvA9I4j%2BQ%2By6ex4Rk9%2FMpVrMpqSDiyGEzNhJuDZMbgZGMprA3uonYfQWylpUxTjupa%2B9DDnl2ubeLGCNQTkNY8A%2BxwVHL2PStK%2Ba%2Bg2aVZhvZWAlpE9j7ZCc8RZcWrfIpk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a490f043ebbab51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52854,"size_decoded":53620,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 640x360, components 3","md5":"b3a22c205f25819977cc965c57854ddf","sha1":"56a9ca8c7a40a119106915e2e6e6128676e46e15","sha256":"587f935fa17ab2f5049b23149925054c00b80a7c70f6cfb1cd9fae89114ad23d","sha512":"ba063639f3f42025b8358049b92bee1cf68200319e0827f9bd65394605e9efd89702a17b136e971fa267151838eb870f1d12cd20bfd720303305cf4d851abb87","ssdeep":"1536:YGpG2bsS9wFYTGGcMUibEOIHiaTzwzPTy9:YeG2bVCYTfSWEOImL8","tlshash":"7033f1a507114efb706ee01a0d3abb7a5e0c4e42de0388ddcd78ea45ae506ac2dd5d78","first_seen":"2026-10-02T13:02:44.877946Z","last_seen":"2026-10-11T21:28:39.801662Z","times_seen":4,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":161,"dns":15,"connect":13,"send":0,"wait":17,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fqjpg3.top/upload/vod/20241028-1/0eb0be125057950d34a6e05474feb68c.jpg","fqdn":"fqjpg3.top","domain":"fqjpg3.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.411Z","timestamp":1791753938411,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241028-1/0eb0be125057950d34a6e05474feb68c.jpg HTTP/1.1\r\nHost: fqjpg3.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"fqjpg3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hxsav.com/favicon.ico","fqdn":"hxsav.com","domain":"hxsav.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.636Z","timestamp":1791753943636,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: hxsav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mydesii.com/wp-content/uploads/2024/11/cropped-icon-32x32.png","fqdn":"www.mydesii.com","domain":"mydesii.com","tld":"com"},"ip":{"addr":"104.21.32.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:44.038Z","timestamp":1791753944038,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mydesii.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 09:31:18 GMT","end":"Mon, 30 Nov 2026 10:29:51 GMT"},"fingerprint":{"sha1":"A4:D5:52:91:BE:2E:82:AF:F9:12:4D:2E:47:DE:C8:25:73:40:AA:BD","sha256":"F5:D0:59:1D:A0:84:8A:00:B0:D5:0C:41:81:51:79:13:8D:A5:83:80:07:50:02:33:3A:9C:F2:F6:55:87:EC:9C"}}},"request":{"raw":"GET /wp-content/uploads/2024/11/cropped-icon-32x32.png HTTP/1.1\r\nHost: www.mydesii.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:44 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 10 Sep 2026 09:50:04 GMT\r\netag: \"6e4-6728f55f-178b4e3;;;\"\r\nlast-modified: Mon, 04 Nov 2024 16:25:03 GMT\r\naccept-ranges: bytes\r\nx-powered-by: CyberPanel-OLS/2.5.0\r\nage: 401181\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=87dTcsCtDar%2FDXmajFzK2jX%2FRxZfHCZcwX7isJG7i0rbsOEofpXApiO5PFBM5ktv7BxVblBdwKSODWUq%2BVuqdsFtG8uFrLbyYDR%2Bbpv7kJnnou31avsgxdxG9nw4zq9o%2BQ8%3D\"}]}\r\ncf-ray: a490f0664c11120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1764\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1764,"size_decoded":2563,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"04581d4eab42d97ba84551672c152810","sha1":"aa54866a1ce876e3dbe2aae812e96090ab6e5278","sha256":"048c432f12443a3598d49e62587594006d5c54734c00d97b9b5d6d2091657440","sha512":"b49663d8edf10c7456de889dec43e119474fc02106537844ea89a3d000ca896f420c2f990c8f9433cdd525e674341d651cdb183d75129353af4c7e1329d1899d","ssdeep":"","tlshash":"93312b6e402e84f8f54e0f18bbe03014ee39d4dde42b2d0f315d5654e913a9a3a8d4c9","first_seen":"2025-02-21T07:37:56.23034Z","last_seen":"2026-10-11T21:28:39.805225Z","times_seen":163,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stpubs.com/favicon.ico","fqdn":"stpubs.com","domain":"stpubs.com","tld":"com"},"ip":{"addr":"172.67.191.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:44.069Z","timestamp":1791753944069,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stpubs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 21:50:20 GMT","end":"Fri, 25 Dec 2026 22:50:01 GMT"},"fingerprint":{"sha1":"AD:2D:38:42:57:4D:DE:B8:87:7B:84:8F:25:2A:5D:B1:0B:5C:76:1E","sha256":"76:96:84:D6:EE:BA:A1:8B:BA:80:22:88:AC:B9:2C:66:C2:68:7A:BF:8C:30:BB:B5:8D:B2:7B:5B:A0:5B:2D:14"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: stpubs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://en.4us.asia/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:44 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hXme%2F2CzCyUQVNHZ8w2SSq5%2BMAsmF4bzjlowsXIakMOWYZY6p6m2a7uX21EZQkECz9D6NySNoRQWgfR5y%2BJyZV6QJ9LRRuSIcrxJsjXMrjp1m3KoabRmmpX4zzGs\"}]}\r\nlast-modified: Thu, 09 Apr 2026 08:06:38 GMT\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 01 Sep 2027 13:47:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=3600\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"69d75e0e-4276\"\r\nage: 3483557\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a490f0668a2a32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17014,"size_decoded":9326,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"cd6cd8f7d9af7267bf6b188d541291b4","sha1":"406bcab4e44f55cddba8f659d8be17c556d46d8a","sha256":"e47f1cd1409c2fc5dc18c4542b12d4e3777fe41137af62c112f059023e580a3e","sha512":"b5bab1c768b4e771c4981f75cd88ad8537828fb8ae988a7326099c81ed2979b502b577ae45e433b1ce647609bdbb14539a22f774cde6f3c645dd0f1f6b60dc02","ssdeep":"192:V/FSmX97q/jQYWDtwxt8ajnLm7JL28gBl9ffMephqQ/Uln813Y:twLQ1Dtwn61ilN/phj/o8m","tlshash":"82724c662aedf949c7860e3557a2612942b9cfe30c2d1b4bde6279e8be35fc43d81140","first_seen":"2026-04-16T16:55:58.986504Z","last_seen":"2026-10-11T21:28:39.798443Z","times_seen":60,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":6,"connect":15,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/ext/pre_2275043525.jpg","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"141.227.152.51","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.231Z","timestamp":1791753938231,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 07:52:05 GMT","end":"Sat, 28 Nov 2026 07:52:04 GMT"},"fingerprint":{"sha1":"C4:4F:9D:C9:09:9D:31:30:C3:4F:AE:A0:F3:18:7E:88:BF:F8:C7:B7","sha256":"81:05:CD:81:08:79:7C:F7:1F:83:1B:B5:4E:5C:E4:F8:F7:31:1C:F5:F7:00:A5:82:73:35:B8:D4:AB:52:95:7F"}}},"request":{"raw":"GET /ext/pre_2275043525.jpg HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21000\r\nlast-modified: Thu, 13 Jun 2024 11:29:54 GMT\r\netag: \"666ad832-5208\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21000,"size_decoded":21372,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"c92b1a0342a2054db64d23c2363832b8","sha1":"8bf542baa67f64d23a94c0c3712d6d0d065366c9","sha256":"8707f0cfff6f1584f89c1bf850b37ff15596bc0effe43cbc1822b292df2f8155","sha512":"c9470a335fcf2f145cc1920cf1a5dac46f0994d997344c3445c4e2f3d7d416da05ec2414d9afe65a1375a0341bc5a0f1b2794e9c55392ac6146089f672406320","ssdeep":"384:exbX8vUMG4muqiO3ILrSP+jyWL/llWWO7w9uPTPflHB6N2:IWquqPPeyclWpcuPTfSN2","tlshash":"1492d0c4af205635d52e2c7341d08fc2e9c53f88eec8c7a7602294d957e9b44eb7157a","first_seen":"2025-09-07T10:04:44.379094Z","last_seen":"2026-10-11T21:28:39.806567Z","times_seen":50,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":303,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filmesporno.xxx/wp-content/uploads/2021/04/jenna-ortega-naked.jpg","fqdn":"filmesporno.xxx","domain":"filmesporno.xxx","tld":"xxx"},"ip":{"addr":"31.43.191.59","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.251Z","timestamp":1791753938251,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filmesporno.xxx","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 01:11:27 GMT","end":"Wed, 11 Nov 2026 01:11:26 GMT"},"fingerprint":{"sha1":"EE:76:F8:FD:B8:BF:B8:FA:57:BE:B1:62:EE:93:FE:50:17:17:9C:63","sha256":"8B:EE:DF:7C:73:8D:75:65:97:04:1A:05:72:CD:DD:12:D6:9D:F9:B3:BB:FF:97:E5:6F:D0:AA:8E:52:6C:39:D8"}}},"request":{"raw":"GET /wp-content/uploads/2021/04/jenna-ortega-naked.jpg HTTP/1.1\r\nHost: filmesporno.xxx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 26 Apr 2021 00:00:59 GMT\r\netag: W/\"608602bb-1756b\"\r\nversion: MS26072801\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000;\r\nx-served-by: Mini-CDN-offshore\r\nx-cache-status: HIT\r\nx-cache-bypass: 0\r\ncache-control: public, max-age=2592000, immutable, stale-while-revalidate=60, stale-if-error=3600\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":95595,"size_decoded":96052,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", progressive, precision 8, 1280x720, components 3","md5":"823e2828f4e5af600498a0f272fb9aac","sha1":"6693b0d01b04819534ec2e814c1b16c3737a0b9b","sha256":"9fa08b6398cff94d2fac2012650ec3c503378d4232269246eb4b53e98508f170","sha512":"1a3d2742c8be187b3ba871c673eb0a171bb7d9f598e4c6d5ceb0218e11aa3f415c30c3e8ffa0ab1391b193e93890e74e7b0727d91de61cc49796b7503380f2c2","ssdeep":"1536:PJlj+VZHSMD/YdG+FTGViRWaqAOJXDbz32Ig7KZykCrnawSK6L9NW0/A4Jlf:Blj+VZHSMDQd/a0NqAE2IgK6rBS9v/J5","tlshash":"80930217c64327f6fd5a352194fb492e2d7b03233baef1af901e92a3349551c5a1623c","first_seen":"2026-01-13T22:45:00.864022Z","last_seen":"2026-10-11T21:28:39.807679Z","times_seen":9,"resource_available":false,"data":null}},"time_used":737,"timings":{"blocked":670,"dns":5,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornoperso.com/wp-content/uploads/2022/02/polly-fans.jpg","fqdn":"pornoperso.com","domain":"pornoperso.com","tld":"com"},"ip":{"addr":"172.67.166.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.306Z","timestamp":1791753938306,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornoperso.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 22:01:41 GMT","end":"Sun, 03 Jan 2027 23:01:34 GMT"},"fingerprint":{"sha1":"59:B8:3B:55:B6:0C:4D:56:77:75:84:DD:64:A9:AF:6B:8C:CE:B1:53","sha256":"B6:A6:F4:88:0F:BC:D3:C3:C0:A8:A4:86:2B:F7:54:C6:A3:B1:AB:1D:4A:5B:AC:4A:A9:C3:54:87:94:F0:C6:FC"}}},"request":{"raw":"GET /wp-content/uploads/2022/02/polly-fans.jpg HTTP/1.1\r\nHost: pornoperso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://img.pornoperso.com/wp-content/uploads/2022/02/polly-fans.jpg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U1iBanXMCUlBaJVuawng5oUTYd941zHiaNHa7ID%2FeuL8JkvRKE%2BCyUPNk1pcgh671Uju2aOEbH0BibNqLCiuqFNvh3DAW8SoJmgqrt49Oplo8jdOA93Q7aYNHgYNhDmjLw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a490f042cba4b50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg4.com:3519/upload/vod/20260304-1/088aa6c7f5c4e94cf08e09849aa4a780.jpg","fqdn":"sbzytpimg4.com","domain":"sbzytpimg4.com","tld":"com"},"ip":{"addr":"23.140.236.1","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.488Z","timestamp":1791753938488,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbzytp.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 18:35:36 GMT","end":"Fri, 13 Nov 2026 18:35:35 GMT"},"fingerprint":{"sha1":"48:67:53:B8:D9:B0:E4:69:E7:6C:D8:14:FE:A6:61:9A:7E:D7:65:01","sha256":"97:1B:54:8D:56:AC:26:EE:C1:E1:75:88:2C:CC:66:6C:A5:6A:6A:68:EC:1E:AD:83:2A:F7:0D:F1:0D:41:65:1C"}}},"request":{"raw":"GET /upload/vod/20260304-1/088aa6c7f5c4e94cf08e09849aa4a780.jpg HTTP/1.1\r\nHost: sbzytpimg4.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 71432\r\nlast-modified: Wed, 04 Mar 2026 02:54:02 GMT\r\nvary: Accept-Encoding\r\netag: \"69a79eca-11708\"\r\nexpires: Wed, 02 Sep 2026 23:54:17 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 5952682\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":71432,"size_decoded":71853,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x360, components 3","md5":"a4e799f39220d295a9a77eb044ece059","sha1":"face2a45137fcbfd5b09d5d14f50dce37477ab26","sha256":"da78c2da1dd02f71de8c3b18fe9847e59d9a28e77d22eafa277b101d94d5dcd8","sha512":"58184ede90ccbed71314b950a30c3224a481244c8f0c87a67fa6ae8b7a45255e896565d4c7582145caaf4c8426966791273d95ab0cfb5b18a401cfec4c5c8156","ssdeep":"1536:xJSzhaYmjqfJ+qlToNjid5i5ceIs56YNgf6H9d3Z2chArrjg1M/+:Htjc+eTuY+IsX+fIgrjvm","tlshash":"3d63120282532a829fdb337c50977d9be1e28213b1d636d467f31ad3fec825a6c24957","first_seen":"2026-03-07T06:29:57.661598Z","last_seen":"2026-10-11T21:28:39.814125Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1372,"timings":{"blocked":767,"dns":0,"connect":157,"send":0,"wait":567,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","fqdn":"jsjs.jpg4.quest","domain":"jpg4.quest","tld":"quest"},"ip":{"addr":"172.67.182.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.146Z","timestamp":1791753938146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jpg4.quest","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 20:54:45 GMT","end":"Sun, 13 Dec 2026 20:54:44 GMT"},"fingerprint":{"sha1":"00:A0:6A:26:D6:7D:EB:14:A8:1C:B7:4E:AC:00:F9:A6:8A:46:48:D0","sha256":"C1:DA:5E:7E:34:95:3D:ED:59:5B:1A:55:5C:B7:10:E7:34:BA:7B:13:88:AF:83:0A:14:EF:BC:AF:AC:65:7C:44"}}},"request":{"raw":"GET /index.php?js=av4\u0026advertisement\u0026 HTTP/1.1\r\nHost: jsjs.jpg4.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\nserver: cloudflare\r\nimghost: 1729614248-h-jsjsjpg4qustmh--NO-rm1726420936/index.php?js=av4\u0026advertisement\u0026\r\n56nloadrate: 0.1771875\r\ncache-control: public, max-age=14400, s-max-age=1800\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VQ8SdKpv0yUcs0GUWMoLuq5ggqEMSh4vPCHzQjWRXpOnP41G5rd7p0r3X46pTd7wowmoBstAyeduOsu3uEddKA1Ctesj0HH%2BomE8C58R1MtlCyYVhc6FxvHSKNbzTIT3ETk%3D\"}]}\r\ncontent-encoding: zstd\r\npriority: u=2,i=?0\r\ncontent-type: text/html; charset=UTF-8\r\nage: 677\r\nlast-modified: Sun, 11 Oct 2026 21:14:20 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a490f04199c6b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":194959,"size_decoded":48623,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6439), with CRLF line terminators","md5":"6b0037759d7ed4dae5ae5ca50baf4eb4","sha1":"21b5652c8be97f546cad3cceb5d37e5fb00aa1be","sha256":"b960d59ef41396e3c9dcd27dba070a2c0e62a18a69a5d47fa9acb089e3467925","sha512":"2a6304b6e2a52dfe9d108c8a5c2468805d4c2a9057228874110d2f70f7a4f8ba42ea561b456e5269b6ccd55aab3f6f5025281b77ce36abfc414e0a11a3944377","ssdeep":"3072:qhxyQprTgcm7U/RV/rIuvd14EOtsCtJNSI1z8A0djQNi:OxyQpAcm7U/Rquvq98A0djQNi","tlshash":"0114d7f73608502951f302a79a758688f833a02b99816884f91c6d751f78e7f197affc","first_seen":"2026-10-11T21:28:39.814917Z","last_seen":"2026-10-11T21:28:39.814917Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fixedjs.av4me.xyz/av4usimage.png","fqdn":"fixedjs.av4me.xyz","domain":"av4me.xyz","tld":"xyz"},"ip":{"addr":"104.21.58.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.201Z","timestamp":1791753938201,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"av4me.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 14:10:35 GMT","end":"Wed, 25 Nov 2026 15:09:07 GMT"},"fingerprint":{"sha1":"19:B5:26:DD:47:83:AE:CD:BF:38:3A:53:2C:07:50:35:84:1C:D1:87","sha256":"F1:E1:7B:BB:79:FC:5B:67:DB:D2:43:34:0C:54:E4:2D:C0:2B:71:F7:F5:07:64:5A:D8:8F:E9:62:86:15:A7:6E"}}},"request":{"raw":"GET /av4usimage.png HTTP/1.1\r\nHost: fixedjs.av4me.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 2619\r\nserver: cloudflare\r\netag: \"a3b-6437702003080\"\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\ncache-control: public, max-age=360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vhLRT5zMjiqpYWqqTN9Wjd3jwtI4rqt9IxLbq%2B41uaYKvtYgKGca4UBKn44KFA1mlOqHgPYDqx1byuIkX9mHdllfl4kZymIht6R0R6X%2BBOEu1TlYvVZ9dE3HaqVInuEQ6cMJTA%3D%3D\"}]}\r\nage: 171607\r\ncf-cache-status: HIT\r\ncf-ray: a490f0425f9556bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2619,"size_decoded":3336,"mime_type":"image/png","magic":"PNG image data, 339 x 89, 8-bit/color RGB, non-interlaced","md5":"8267aaadeeeb8c9fa7482f2f9db2d4e3","sha1":"a2ef23d3b5f9d9bb3102c855a8ace072884ba60c","sha256":"998cf9d427c2e322904e89a056ba823b56078fb199b7395883f3eafabaadbea8","sha512":"719215d8ec70b8b36b24277a80e7876be2fa1afe3698c05bbff013b6a2936701f266e694c221756e7306d1a945013986a53e41af0bc90bdd4bbf0dcbe33f7637","ssdeep":"","tlshash":"f5513ccb05b2fdbc657d79976105a79ef3a896c72982b872565c38c14243a0096c1fe1","first_seen":"2025-11-13T21:07:01.541567Z","last_seen":"2026-10-11T21:28:39.817214Z","times_seen":455,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":16,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/ext/pre_4064873192.jpg","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"141.227.152.51","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.270Z","timestamp":1791753938270,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 07:52:05 GMT","end":"Sat, 28 Nov 2026 07:52:04 GMT"},"fingerprint":{"sha1":"C4:4F:9D:C9:09:9D:31:30:C3:4F:AE:A0:F3:18:7E:88:BF:F8:C7:B7","sha256":"81:05:CD:81:08:79:7C:F7:1F:83:1B:B5:4E:5C:E4:F8:F7:31:1C:F5:F7:00:A5:82:73:35:B8:D4:AB:52:95:7F"}}},"request":{"raw":"GET /ext/pre_4064873192.jpg HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18419\r\nlast-modified: Thu, 13 Jun 2024 21:03:20 GMT\r\netag: \"666b5e98-47f3\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18419,"size_decoded":18791,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"10d2ae252b00e7651ee1d96916afb4a9","sha1":"39fd86926a0c334060429303349a374b7e19d3a6","sha256":"ec926cd34eab720976dcc3baf58f22d737e1b10c121844e8ee6608450fe26a79","sha512":"c19ebfe9a515a412b444bb0d5fa9f7f5ad4c441e687d8667db1fe8330716b4dd9ff01446287210b9c242f158f4625666c590be9a985227af13dd422a523195dd","ssdeep":"384:JzQ2rFUxRbqwv27j00SEmj2Hf07DNUsxe7MVuuvtqvBomMCgH4KDqtrJ/ch:pQRLbqa2vQL6HfQDNUsx4UqvytH4IQch","tlshash":"7682c16f620dc991d12f537680b9c9afc5f4ed8027b9beac6081d1845d9a7c6d310cbe","first_seen":"2025-02-04T08:44:58.598067Z","last_seen":"2026-10-11T21:28:39.81822Z","times_seen":17,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":301,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fqjpg3.top/upload/vod/20241028-1/0eb0be125057950d34a6e05474feb68c.jpg","fqdn":"fqjpg3.top","domain":"fqjpg3.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:40.959Z","timestamp":1791753940959,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241028-1/0eb0be125057950d34a6e05474feb68c.jpg HTTP/1.1\r\nHost: fqjpg3.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"fqjpg3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ero-sceny.site/favicon.ico","fqdn":"ero-sceny.site","domain":"ero-sceny.site","tld":"site"},"ip":{"addr":"89.105.223.48","port":443,"asn":24875,"as":"NovoServe B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:44.041Z","timestamp":1791753944041,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ero-sceny.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://en.4us.asia/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx/1.24.0\r\ndate: Sun, 11 Oct 2026 21:25:44 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 277\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"ero-sceny.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sc.gl/videojs-hotkeys/latest/videojs.hotkeys.min.js","fqdn":"cdn.sc.gl","domain":"sc.gl","tld":"gl"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:50.753Z","timestamp":1791753950753,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /videojs-hotkeys/latest/videojs.hotkeys.min.js HTTP/1.1\r\nHost: cdn.sc.gl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.fuckmovs.pro/videos/2645/939_tit.jpg","fqdn":"images.fuckmovs.pro","domain":"fuckmovs.pro","tld":"pro"},"ip":{"addr":"104.21.67.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.230Z","timestamp":1791753938230,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fuckmovs.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 05:49:52 GMT","end":"Wed, 02 Dec 2026 06:49:50 GMT"},"fingerprint":{"sha1":"73:49:89:71:FC:94:6C:66:FE:C8:D8:2E:5C:BE:E6:EE:92:4A:97:D4","sha256":"3D:49:A2:24:39:6D:73:B1:3D:44:7B:C2:58:59:A5:8C:7F:5A:C0:FB:EB:78:D1:B1:18:DB:A7:17:4F:E8:16:57"}}},"request":{"raw":"GET /videos/2645/939_tit.jpg HTTP/1.1\r\nHost: images.fuckmovs.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8921\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Aug 2020 14:19:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"5f369d84-22d9\"\r\nexpires: Wed, 14 Oct 2026 14:19:55 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 371142\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0LU7pZlCBzQIA4iXNF3KcCk7%2FkCXgpb%2F02oXyAI27uzB8JLuAio7LC0OoYPu%2B4qJIjvLjYahpwrM9z2hAaLQRwNAU5k%2BY8ziD5BA6CAk2iW3dUC1YbC199r1Zk%2Fke18MWGdIPrgo\"}]}\r\ncf-ray: a490f0431fb0b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8921,"size_decoded":9647,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 300x190, components 3","md5":"277da8623b1bb4f6a3a051e6775d48c4","sha1":"7ae96b132dee20e757f2afd83c33cb48ac6556c3","sha256":"3d22ee4b323c2aee394b88cb26b67835c370f56598a7b5ae4dd0bb0cc304d919","sha512":"d0c5dd4ef2dc18f4ad3435c140c670dfdf5405a1819f0549f5f9fbb14a7882283db3d0457928002d018f8d701082bd26e393fe27d16bba70b6e88779f56877c5","ssdeep":"192:hWbDpCU6lrm1JJ41hlz5lnQkcey/RbbgUau4MzATAriYughyAa:h8bnJe5ZtceyZbjau4iPupH","tlshash":"e902bf854b21e6e8910db9edd8fe0cf4de09f614edb232c744416ebe5fd045c5102329","first_seen":"2025-06-11T22:10:38.992449Z","last_seen":"2026-10-11T21:28:39.819002Z","times_seen":53,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":56,"dns":6,"connect":8,"send":0,"wait":18,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ansuko.net/wp-content/uploads/2024/12/poster-422.jpg","fqdn":"ansuko.net","domain":"ansuko.net","tld":"net"},"ip":{"addr":"172.67.138.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.445Z","timestamp":1791753938445,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ansuko.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 03:22:49 GMT","end":"Sun, 27 Dec 2026 04:22:39 GMT"},"fingerprint":{"sha1":"A0:10:86:46:2D:F7:1F:70:5D:3F:18:DA:F2:25:60:B7:95:52:91:51","sha256":"D1:40:2D:15:A1:99:35:EB:08:96:5E:08:6F:BD:B6:49:D2:71:03:06:C7:51:81:B3:9A:B0:AB:A4:2E:3C:B1:20"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/poster-422.jpg HTTP/1.1\r\nHost: ansuko.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gffuxnq0clO7R%2FkdRov9xqOprgli1DeRQxJ%2Fq2nOyjVeIt5xnn%2BXZaBoNm%2FKyicVvQJZLrVh8Z%2FZckH2ClbPpcelf8kZm86DMNhK5jeXUi3f%2BVklXHkhs1SHjsNl\"}]}\r\npriority: u=5,i\r\nage: 22245\r\nlast-modified: Sun, 11 Oct 2026 15:14:52 GMT\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a490f043e89e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":145447,"size_decoded":146079,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 720x540, components 3","md5":"23151815d0a62887649a2a89badb9a3c","sha1":"88fce1cc8c2bdc7bf9cf61b9a1d2472941f09b20","sha256":"52ae24fa6af7ca2a1544fc0453184a28aec14ca24d6c2d029593fb453ba88261","sha512":"f5aa0134267dec7eaecae47a93681100cac914be4e15103a737a30756bb65da394255031087d338f80f80f55024a7535eec01a4858958901747ee965decaf00f","ssdeep":"3072:QMYvDuOwfsLsFeg3dUuPdeVTkQrQszPE/szyrlSnWNeVjn0qtP+:QM6u9FtNUp4SpzPEwUNijnnB+","tlshash":"60e312f373bf716490c8e3b4096541ad08f9990a7296cc00d6c1b9b774ebdfb69da029","first_seen":"2025-10-19T05:57:44.457371Z","last_seen":"2026-10-11T21:28:39.820194Z","times_seen":17,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgdanaizi11-bbb.com/videos/202601/19/696d9a07233289c9d72f887d/poster2.jpg","fqdn":"imgdanaizi11-bbb.com","domain":"imgdanaizi11-bbb.com","tld":"com"},"ip":{"addr":"23.140.236.1","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.453Z","timestamp":1791753938453,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgdanaizi10.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 14:17:36 GMT","end":"Sun, 15 Nov 2026 14:17:35 GMT"},"fingerprint":{"sha1":"AB:0F:E3:F5:38:A2:27:F8:EA:F7:48:5F:DD:F8:33:5D:F4:D4:1A:5F","sha256":"54:0A:40:FA:7F:6E:15:71:3E:BB:15:68:BA:C9:3C:35:60:D2:72:0B:2D:02:AB:E7:CF:F5:70:D4:A5:7F:54:57"}}},"request":{"raw":"GET /videos/202601/19/696d9a07233289c9d72f887d/poster2.jpg HTTP/1.1\r\nHost: imgdanaizi11-bbb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40017\r\ncross-origin-opener-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-headers: X-Requested-With, Content-Type\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nlast-modified: Wed, 24 Jun 2026 14:56:37 GMT\r\netag: W/\"9c51-19efa2211e6\"\r\nage: 4609491\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40017,"size_decoded":40821,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 600x337, components 3","md5":"cf9f0c58bfef769b4ea11d049e719300","sha1":"199813e20a609ec1e14c45d44b1364f14f0cb1d7","sha256":"035cfdc28a4f71845b476adc341e6b2765a14abf9d57fa7b41a4ce9541e4dcb1","sha512":"9c39c7ccc5160163acac288826cbe1f818a585ec888bf81c89a2fea027dd96be3e7de676ffeeb221a244520891cf3fbfd2a136e2adaadd312c16450953e6daa7","ssdeep":"768:bZcST/m5I9MEnAiqQfRYfDJj+RaDFRBMpoChFTWpV4QY1hIDa8n:VTntnAiqG2eyOo9pV4QUyj","tlshash":"4903f1643ecb64ca701fe275539a405167abd6c1a0ec7f9f8cfd828c6b2945a2472223","first_seen":"2026-10-02T13:02:44.796927Z","last_seen":"2026-10-11T21:28:39.821227Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1379,"timings":{"blocked":585,"dns":0,"connect":160,"send":0,"wait":317,"receive":112,"ssl":200},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xlecx.one/uploads/posts/2023-08/fge46yhe5j.webp","fqdn":"xlecx.one","domain":"xlecx.one","tld":"one"},"ip":{"addr":"104.21.25.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.475Z","timestamp":1791753938475,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xlecx.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 10:36:44 GMT","end":"Fri, 20 Nov 2026 11:36:26 GMT"},"fingerprint":{"sha1":"A2:58:87:B9:23:F3:8D:3B:C7:9D:FE:5C:37:C8:80:8A:F3:98:85:82","sha256":"52:F3:0E:03:16:09:A1:D2:A4:C6:6D:33:DA:44:72:B7:A9:D5:74:38:5A:3A:0E:01:13:EA:DD:4A:DA:E7:B3:4E"}}},"request":{"raw":"GET /uploads/posts/2023-08/fge46yhe5j.webp HTTP/1.1\r\nHost: xlecx.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6474\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Mar 2024 07:13:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6603c712-194a\"\r\naccept-ranges: bytes\r\nage: 2663\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5ElZrKHC7uEiUB7Z331CXgCegWvdx9D8QNCi9dH8SrpvC%2F54VURVfd8yTTawuj1Bl9JiHTmhtL7VzxPpY6KvGYJ%2Bu%2F%2Fvwk%2BINZcm9ljEcsVobbW70N36rN%2BxFLU%3D\"}]}\r\ncf-ray: a490f043dcfd712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6474,"size_decoded":7149,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 160x220, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"18f3fd7f1d6d1369f9abbb598a717c5c","sha1":"57bf2c0c93b6c80ead72849c2f2578469f55dc5e","sha256":"8e0e8f70049038fb405a20ef125f79457435dfa4ec7a802221c76c7f73739652","sha512":"2495ef7c55e0e6f34df2b32626e118046fef318d90762bea1c649881ba29335746d1b9e5254a76712e366881594c6d6bf291a38019e7e1aeecf20126dcc825f5","ssdeep":"192:EElEpm3rXB8onK8nU5tFaDXF7FKbpvf+KIONonqNcqhD6v:EElhzBbK8wtEop5NoqqqhDI","tlshash":"07d1c0147bede6e1b197b1e1a493420563eaf823cb55467a31f99339b7301357c34c88","first_seen":"2025-02-20T13:44:18.754777Z","last_seen":"2026-10-11T21:28:39.821853Z","times_seen":6,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b.pornodrochka.club/uploads/posts/2019-04/medium/1556367493_00-00-05.jpg","fqdn":"b.pornodrochka.club","domain":"pornodrochka.club","tld":"club"},"ip":{"addr":"91.194.110.9","port":443,"asn":213166,"as":"UA-Hosting SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.604Z","timestamp":1791753938604,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pornodrochka.club","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 10:22:50 GMT","end":"Sun, 03 Jan 2027 10:22:49 GMT"},"fingerprint":{"sha1":"A5:57:FF:5A:5F:87:1F:83:F5:C8:D0:D9:64:4D:29:C8:49:ED:49:77","sha256":"6B:29:DB:0C:F5:C6:58:74:64:A7:AA:61:61:84:95:DA:0A:41:32:D5:D4:71:E8:C1:18:0F:44:B9:F0:51:34:97"}}},"request":{"raw":"GET /uploads/posts/2019-04/medium/1556367493_00-00-05.jpg HTTP/1.1\r\nHost: b.pornodrochka.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.10.3\r\ndate: Sun, 11 Oct 2026 21:23:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 74504\r\nlast-modified: Sat, 29 Aug 2020 17:59:18 GMT\r\netag: \"5f4a9776-12308\"\r\nexpires: Sun, 18 Oct 2026 21:23:02 GMT\r\ncache-control: max-age=604800\r\nstrict-transport-security: max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74504,"size_decoded":74855,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 450x253, components 3","md5":"8d7560d312689bb753a3b9ae07b65e23","sha1":"ea19c083c2eab67d01bd11d1fd9d7e1b40707084","sha256":"eb83a47989f3ae7e729e3ba3c3113e5223ec7f85bcd9543c8b85456d895bd218","sha512":"114afa8655c22e601186de7c317e7592cfbed17255f8c1478471fe47cfedaa87a3311f4278b1b89e6e56e44c6c87f597f7084d53b9fcab1dc37c6c6b02eb79c2","ssdeep":"1536:Oyf0+RkYRMQLufT2FDiy4Gskt/eMXEmemfYXNOclKoXx0swsSXa:Bf9RHRMQyTIDiX0NXn5Q9OclHXxDwRK","tlshash":"0573020c9bc6252b5f7e80677afb098a952c53e7779e1f2511a9171fc283aa014326ce","first_seen":"2025-11-15T14:07:54.997737Z","last_seen":"2026-10-11T21:28:39.823376Z","times_seen":15,"resource_available":false,"data":null}},"time_used":909,"timings":{"blocked":628,"dns":0,"connect":0,"send":0,"wait":114,"receive":167,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"homedopo.com/favicon.ico","fqdn":"homedopo.com","domain":"homedopo.com","tld":"com"},"ip":{"addr":"172.67.188.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.569Z","timestamp":1791753943569,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"homedopo.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 00:50:15 GMT","end":"Mon, 07 Dec 2026 00:50:14 GMT"},"fingerprint":{"sha1":"6F:48:18:CA:CF:7B:21:A0:E2:A4:58:64:02:7C:DC:BE:F9:4B:46:A1","sha256":"ED:87:69:FA:BB:6F:14:4B:34:10:0C:A2:11:F9:22:C9:EA:AA:A1:F4:73:91:14:30:0E:A2:DF:45:38:9A:4E:61"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: homedopo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zcXkgLEtVr26VLwdJpmoxZQvweAJVvxGBbWJLyE89Uv7dPGrDZH4%2FewuYQjpvHXsmg3DLQX6pWNT5TCAgdP0N5Ib5vIgrUnvSxsduzwEMttMsnuXUu%2BsVPRUkkxJb2Q%3D\"}]}\r\nlast-modified: Wed, 23 Sep 2026 08:12:46 GMT\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 26 Sep 2027 01:13:45 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=3600\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"6ab389fe-4276\"\r\nage: 1368718\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a490f0638e9c5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17014,"size_decoded":9330,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"cd6cd8f7d9af7267bf6b188d541291b4","sha1":"406bcab4e44f55cddba8f659d8be17c556d46d8a","sha256":"e47f1cd1409c2fc5dc18c4542b12d4e3777fe41137af62c112f059023e580a3e","sha512":"b5bab1c768b4e771c4981f75cd88ad8537828fb8ae988a7326099c81ed2979b502b577ae45e433b1ce647609bdbb14539a22f774cde6f3c645dd0f1f6b60dc02","ssdeep":"192:V/FSmX97q/jQYWDtwxt8ajnLm7JL28gBl9ffMephqQ/Uln813Y:twLQ1Dtwn61ilN/phj/o8m","tlshash":"82724c662aedf949c7860e3557a2612942b9cfe30c2d1b4bde6279e8be35fc43d81140","first_seen":"2026-04-16T16:55:58.986504Z","last_seen":"2026-10-11T21:28:39.798443Z","times_seen":60,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":10,"connect":20,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tubetubetube.com/tubes/javfinder/remu.hayami/video6400/1.jpg","fqdn":"www.tubetubetube.com","domain":"tubetubetube.com","tld":"com"},"ip":{"addr":"172.67.146.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.489Z","timestamp":1791753938489,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tubetubetube.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 07:53:54 GMT","end":"Sat, 05 Dec 2026 08:53:42 GMT"},"fingerprint":{"sha1":"E7:5A:8A:91:A0:BD:55:FA:3D:B4:74:A0:13:5F:04:2C:E8:A9:C2:74","sha256":"82:DC:10:75:E4:23:3A:DB:3E:07:3E:DD:20:A2:60:0F:F7:57:E2:1E:12:25:76:BC:A9:DA:05:AE:79:D5:61:D8"}}},"request":{"raw":"GET /tubes/javfinder/remu.hayami/video6400/1.jpg HTTP/1.1\r\nHost: www.tubetubetube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://tubetubetube.com/tubes/javfinder/remu.hayami/video6400/1.jpg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EnRy%2FB0EpAo0ztdwuGaNeSyQP8lg8xlr7hGpYkux9OKW%2FAX5VaesqkfyCggoaLfvGyZuY5zxk0u4nc0x93TwVQQDUQucbrTPPsbyY%2FHBplQfaPH%2BmqdRy1ZLTqV3snonFc4uuJg0YQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a490f04508035689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":48,"dns":6,"connect":9,"send":0,"wait":12,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"igav.net/favicon.ico","fqdn":"igav.net","domain":"igav.net","tld":"net"},"ip":{"addr":"104.21.81.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.651Z","timestamp":1791753943651,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"igav.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 14:48:51 GMT","end":"Thu, 19 Nov 2026 15:47:27 GMT"},"fingerprint":{"sha1":"AB:81:75:73:B7:D4:34:FB:10:68:79:B9:4D:4E:CC:F4:DA:F4:65:8E","sha256":"5A:59:B5:4D:C5:8C:A1:11:80:5C:D6:55:70:05:DF:92:5D:A7:80:6D:35:13:97:24:A9:4A:B1:A3:CE:5F:FD:35"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: igav.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://stpubs.com/favicon.ico\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G2Xt2lKHmTZ2YzeGIvtMSkMU8afQ4p6DVYn0s1gPbb024JO6Cn6ytZJmuS7FRqYYycirNSTRU%2BD6EHeV5YRePkqLeHHnY%2FlsjFpAmSfttkrGPBVuoUqImIMuug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a490f0645af44c11-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":1,"connect":2,"send":0,"wait":8,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aniru.org/wp-includes/images/w-logo-blue-white-bg.png","fqdn":"aniru.org","domain":"aniru.org","tld":"org"},"ip":{"addr":"172.67.135.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:53.446Z","timestamp":1791753953446,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aniru.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 16:57:12 GMT","end":"Fri, 13 Nov 2026 17:54:57 GMT"},"fingerprint":{"sha1":"F4:1D:D2:69:A2:87:50:97:42:8F:D8:C8:F6:F7:49:1E:17:E2:F2:35","sha256":"4C:50:59:AC:E7:10:51:A1:00:21:81:C2:70:79:FF:E9:E2:74:0C:97:44:F8:46:C4:F0:3E:F2:EC:91:38:62:BB"}}},"request":{"raw":"GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1\r\nHost: aniru.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:53 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 Aug 2024 06:47:49 GMT\r\netag: \"1017-61f9f1abe6e0d\"\r\nexpires: Sat, 17 Oct 2026 03:55:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 149406\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=McUEb0QJDHlBa9qUGeajscN8QXXWX0N1j9PZLxFvLinF%2FKJ4b%2FDiXVywjIIxcLSvd84Ll%2FYjKp2o7F6Ba9WmBJc4D10kP99CQirER4GGiFf4Au4aDoK0%2BPEOWFs%3D\"}]}\r\ncf-ray: a490f0a1082256bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4119\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4119,"size_decoded":4859,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"000bf649cc8f6bf27cfb04d1bcdcd3c7","sha1":"d73d2f6d74ec6cdcbae07955592962e77d8ae814","sha256":"6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0","sha512":"73d2ea5ffc572c1ae73f37f8f0ff25e945afee8e077b6ee42ce969e575cdc2d8444f90848ea1cb4d1c9ee4bd725aee2b4576afc25f17d7295a90e1cbfe6edfd5","ssdeep":"96:h3bdWfcmTY+aRF1pXWZL2+42HGhIUc8KeLEd:hgXTY+as02mOB8XLEd","tlshash":"00814b63df38c566e66a2b189ff6bca56b290fd50ca1194c0eecb025632c06d1065089","first_seen":"2023-04-08T12:31:37Z","last_seen":"2026-10-11T22:41:40.859635Z","times_seen":75431,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/original/2X/0/007b6d22b55cf2afcf233fa072b761feddae60f1.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.235Z","timestamp":1791753938235,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /uploads/default/original/2X/0/007b6d22b55cf2afcf233fa072b761feddae60f1.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjimg.cdn-xj.cc/upload/litpic/2025-03-30/1743325687_332.jpg","fqdn":"xjimg.cdn-xj.cc","domain":"cdn-xj.cc","tld":"cc"},"ip":{"addr":"138.199.37.232","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.268Z","timestamp":1791753938268,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xjimg.cdn-xj.cc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 10:02:56 GMT","end":"Mon, 28 Dec 2026 10:02:55 GMT"},"fingerprint":{"sha1":"C3:2B:25:ED:DB:3A:48:72:23:2D:AC:39:4B:2B:A2:3B:9D:31:0F:B7","sha256":"28:D4:8A:0A:FA:01:6B:06:FC:A8:31:EC:49:6D:F7:BF:AB:BD:50:EC:46:35:ED:9C:56:94:33:68:58:92:20:F7"}}},"request":{"raw":"GET /upload/litpic/2025-03-30/1743325687_332.jpg HTTP/1.1\r\nHost: xjimg.cdn-xj.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 56975\r\nserver: BunnyCDN-DE1-874\r\ncdn-pullzone: 5480810\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"5f0f3cc7febe506f13ae84448c37416b\"\r\nlast-modified: Mon, 12 Jan 2026 13:27:02 GMT\r\nx-amz-id-2: P7wTK9NIoS1BmnqwLjxlJVyqjfT5ei17fTWY7jnqB9x0aHlY53aMeUTMIL/PBNuaqcWYB4aqgXap\r\nx-amz-meta-mtime: 1743325687.962126263\r\nx-amz-request-id: E0DD3D5238F039C0:A\r\nx-wasabi-cm-reference-id: 1778145798 R119-U21.prod16.svy1 365518757:3447879:77\r\ncdn-proxyver: 1.52\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1047\r\ncdn-cachedat: 05/07/2026 10:47:06\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 53953cd4ecd9a5eb63f04e61bd77d6fc\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":56975,"size_decoded":58137,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 390x260, components 3","md5":"5f0f3cc7febe506f13ae84448c37416b","sha1":"20c0a03440ebddd386517137bdf0182227648566","sha256":"4b9ae429f423a01682b9ee275c6aa49de2e5b4384eed6c579946b120e2a5d6aa","sha512":"f85758bd66c3f19da3230520b68efb60b3631ac889c271762e7621c203a848bd55053e6bfe8f0bfeeda3a729201a4e15100a432513f19757f58b4f406878cf6a","ssdeep":"1536:R/6l24YPVN53cOLULle233FDG4dYmKv/4:FoYNXc3Ll/HFHSmKvg","tlshash":"39430237f71f4b55b3cdc2e5176bcd8a4755560183ab9c6034204e7aab68b43813db2d","first_seen":"2026-06-25T11:17:56.912261Z","last_seen":"2026-10-11T21:28:39.82571Z","times_seen":11,"resource_available":false,"data":null}},"time_used":972,"timings":{"blocked":606,"dns":91,"connect":122,"send":0,"wait":97,"receive":21,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"xjimg.cdn-xj.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/ext/pre_6929121866.jpg","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"141.227.152.51","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.296Z","timestamp":1791753938296,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 07:52:05 GMT","end":"Sat, 28 Nov 2026 07:52:04 GMT"},"fingerprint":{"sha1":"C4:4F:9D:C9:09:9D:31:30:C3:4F:AE:A0:F3:18:7E:88:BF:F8:C7:B7","sha256":"81:05:CD:81:08:79:7C:F7:1F:83:1B:B5:4E:5C:E4:F8:F7:31:1C:F5:F7:00:A5:82:73:35:B8:D4:AB:52:95:7F"}}},"request":{"raw":"GET /ext/pre_6929121866.jpg HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14640\r\nlast-modified: Thu, 13 Jun 2024 20:57:24 GMT\r\netag: \"666b5d34-3930\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14640,"size_decoded":15012,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"bdeb3f4506b0c92c1c91520a8affca5f","sha1":"68805637bde9c19fba459469bf1f466d1e02d739","sha256":"edbe781bf527ebe7707a26e883511b0761a6ef231d4af356da389ab6932922bc","sha512":"b96d589fc3576e819c6bb142b52c22f2dfc966fe952ebff8d0defdd50f0b55faa51cdf803b71858d879b286497baa00b500abbaea9bc3ed4621bd286167301d8","ssdeep":"384:tSSRQJaGFl5qDpn9UQ+2vDdeHv/csS8Q2LUCLzwBWYcrl:tFR+nKpnCQXLdeHHBpUIzNd","tlshash":"8a62c0d8636c8ed1fc2d29b3592c9c257b28dbb15299b2076cd0b91cbb3f411830346d","first_seen":"2025-06-24T07:11:14.991372Z","last_seen":"2026-10-11T21:28:39.826512Z","times_seen":27,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":306,"dns":6,"connect":0,"send":0,"wait":114,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"da.da15525716.com/20240929/5S70GKl3/1.jpg","fqdn":"da.da15525716.com","domain":"da15525716.com","tld":"com"},"ip":{"addr":"103.224.182.214","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.451Z","timestamp":1791753938451,"http_version":"HTTP/1","security_state":"","security_info":null,"request":{"raw":"GET /20240929/5S70GKl3/1.jpg HTTP/1.1\r\nHost: da.da15525716.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.0 403 Forbidden\r\ncache-control: no-cache\r\ncontent-type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"da.da15525716.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b.pornodrochka.club/uploads/posts/2018-03/medium/1521726288_00_03_07.jpg","fqdn":"b.pornodrochka.club","domain":"pornodrochka.club","tld":"club"},"ip":{"addr":"91.194.110.9","port":443,"asn":213166,"as":"UA-Hosting SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.499Z","timestamp":1791753938499,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pornodrochka.club","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 10:22:50 GMT","end":"Sun, 03 Jan 2027 10:22:49 GMT"},"fingerprint":{"sha1":"A5:57:FF:5A:5F:87:1F:83:F5:C8:D0:D9:64:4D:29:C8:49:ED:49:77","sha256":"6B:29:DB:0C:F5:C6:58:74:64:A7:AA:61:61:84:95:DA:0A:41:32:D5:D4:71:E8:C1:18:0F:44:B9:F0:51:34:97"}}},"request":{"raw":"GET /uploads/posts/2018-03/medium/1521726288_00_03_07.jpg HTTP/1.1\r\nHost: b.pornodrochka.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.10.3\r\ndate: Sun, 11 Oct 2026 21:23:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 112765\r\nlast-modified: Sat, 29 Aug 2020 17:57:32 GMT\r\netag: \"5f4a970c-1b87d\"\r\nexpires: Sun, 18 Oct 2026 21:23:02 GMT\r\ncache-control: max-age=604800\r\nstrict-transport-security: max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":112765,"size_decoded":113117,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 450x337, components 3","md5":"bac0d1f952519ea4cc990d681440beca","sha1":"f616f32bedb6c19174943ba376f021b5cb776fdd","sha256":"d80a33c155e0adf5c93d0409ad8b51f2bc1cf8ff6199f9219168af7410451952","sha512":"caaa78db2fe1400e5cc54294b0622feb68fc8ddb6a1f446326f8ac38fe40a7f12f5af7488b1c0d61248eb481eb6dcee50015dd934a483c06c6475911c1d9294d","ssdeep":"3072:wGxFfEDFn1Lma6eOiJxDW7n8E7mXuqhw9xN/9R:x/Q1LN6PiJxDiB7mXPhO/n","tlshash":"b3b3232630121193be6a5d2220ceb0d57305abe76ddd1da380b493dbdbf85bf7943942","first_seen":"2024-05-10T14:32:48Z","last_seen":"2026-10-11T21:28:39.827517Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1178,"timings":{"blocked":804,"dns":0,"connect":27,"send":0,"wait":84,"receive":187,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sattking.com/favicon.ico","fqdn":"sattking.com","domain":"sattking.com","tld":"com"},"ip":{"addr":"172.67.222.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.281Z","timestamp":1791753943281,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sattking.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 03:24:51 GMT","end":"Sun, 22 Nov 2026 03:24:50 GMT"},"fingerprint":{"sha1":"5E:53:90:6C:00:B6:52:DB:3A:A5:F5:49:C1:BD:C1:FB:59:56:0A:92","sha256":"BD:0E:E6:D7:05:BA:16:BC:73:23:7E:03:C4:B0:13:A9:23:A4:30:AD:C8:DC:BD:AA:26:97:1C:44:1F:EF:85:BD"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sattking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B2HTwQ4yqMCv1AnRT%2Fp%2FfFWD607UlFR6ygHgBSrpjz2h5tiagEBS4OWBWuf%2B1PRBirHo%2B44E6DeC8zwlG%2BbDQSJNLdOPM0WB1SVnH7mDZFlDvjHkV6kYAEu4RsL%2BtrA%3D\"}]}\r\nlast-modified: Wed, 23 Sep 2026 08:12:46 GMT\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 25 Sep 2027 02:35:00 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=3600\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"6ab389fe-4276\"\r\nage: 1450242\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a490f061ea14569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17014,"size_decoded":9340,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"cd6cd8f7d9af7267bf6b188d541291b4","sha1":"406bcab4e44f55cddba8f659d8be17c556d46d8a","sha256":"e47f1cd1409c2fc5dc18c4542b12d4e3777fe41137af62c112f059023e580a3e","sha512":"b5bab1c768b4e771c4981f75cd88ad8537828fb8ae988a7326099c81ed2979b502b577ae45e433b1ce647609bdbb14539a22f774cde6f3c645dd0f1f6b60dc02","ssdeep":"192:V/FSmX97q/jQYWDtwxt8ajnLm7JL28gBl9ffMephqQ/Uln813Y:twLQ1Dtwn61ilN/phj/o8m","tlshash":"82724c662aedf949c7860e3557a2612942b9cfe30c2d1b4bde6279e8be35fc43d81140","first_seen":"2026-04-16T16:55:58.986504Z","last_seen":"2026-10-11T21:28:39.798443Z","times_seen":60,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":10,"connect":52,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"sattking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ag7692.com/favicon.ico","fqdn":"ag7692.com","domain":"ag7692.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.300Z","timestamp":1791753943300,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ag7692.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"ag7692.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.twi-dl.net/favicon.ico","fqdn":"www.twi-dl.net","domain":"twi-dl.net","tld":"net"},"ip":{"addr":"172.67.152.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.490Z","timestamp":1791753943490,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.twi-dl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 \r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H807Umtp2kRtwvEppPPXPcEANGgV3Kjm2v9RT%2FsTwG7ElEsUFzdW4%2BBBVYtbUXplPRLO6oHT1ssFJHEfpExcZJJLVX81zmdLgoy0%2B0%2BzjXzO3KVaT3TKgGLJv0VUdx7oxQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a490f0634fbd0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"missvid.com/favicon.ico","fqdn":"missvid.com","domain":"missvid.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.615Z","timestamp":1791753943615,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: missvid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"minaeast.net/favicon.ico","fqdn":"minaeast.net","domain":"minaeast.net","tld":"net"},"ip":{"addr":"104.21.22.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:53.327Z","timestamp":1791753953327,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"minaeast.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 04:31:05 GMT","end":"Sat, 28 Nov 2026 05:30:59 GMT"},"fingerprint":{"sha1":"F0:06:5B:98:F4:99:96:16:DF:AD:B0:36:FE:6B:C7:70:BF:08:56:04","sha256":"AC:C5:3B:C1:76:25:A2:79:B2:C2:7F:EE:40:56:11:27:C4:91:3C:9F:D1:4F:4E:ED:CB:72:95:5A:29:2D:B2:4B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: minaeast.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:53 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ESV2u7WV9M7z816PxCJc4fryKYgwtzfHp5wXyfMPhlk2R34rkHekQfD0ocCVAuSwqvsBnaxR6FwWhTsqdFVl%2BthPb6rI%2B8nN2gShnEicrxZ5rNFiIEsqlUQFayHQ0Zs%3D\"}]}\r\nlast-modified: Wed, 23 Sep 2026 08:12:46 GMT\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 24 Sep 2027 05:26:26 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=3600\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"6ab389fe-4276\"\r\nage: 1526366\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a490f0a0ae66b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17014,"size_decoded":9330,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"cd6cd8f7d9af7267bf6b188d541291b4","sha1":"406bcab4e44f55cddba8f659d8be17c556d46d8a","sha256":"e47f1cd1409c2fc5dc18c4542b12d4e3777fe41137af62c112f059023e580a3e","sha512":"b5bab1c768b4e771c4981f75cd88ad8537828fb8ae988a7326099c81ed2979b502b577ae45e433b1ce647609bdbb14539a22f774cde6f3c645dd0f1f6b60dc02","ssdeep":"192:V/FSmX97q/jQYWDtwxt8ajnLm7JL28gBl9ffMephqQ/Uln813Y:twLQ1Dtwn61ilN/phj/o8m","tlshash":"82724c662aedf949c7860e3557a2612942b9cfe30c2d1b4bde6279e8be35fc43d81140","first_seen":"2026-04-16T16:55:58.986504Z","last_seen":"2026-10-11T21:28:39.798443Z","times_seen":60,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":8,"connect":34,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jpgjingpinx1.top/upload/vod/20250805-1/132e1b0eb489dd9bf3bddd596dab7431.png","fqdn":"jpgjingpinx1.top","domain":"jpgjingpinx1.top","tld":"top"},"ip":{"addr":"157.90.33.71","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.495Z","timestamp":1791753938495,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /upload/vod/20250805-1/132e1b0eb489dd9bf3bddd596dab7431.png HTTP/1.1\r\nHost: jpgjingpinx1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: Angie\r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-security-policy: script-src 'nonce-FoyvA7y2zgqtaSaBDNs4QA=='; style-src 'unsafe-inline'\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jpgjingpinx1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imagecdn.clips4sale.com/accounts99/91531/clip_images/previewlg_24020091.jpg","fqdn":"imagecdn.clips4sale.com","domain":"clips4sale.com","tld":"com"},"ip":{"addr":"64.210.135.148","port":443,"asn":30361,"as":"SWIFTWILL2","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.539Z","timestamp":1791753938539,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clips4sale.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 19 Dec 2025 00:00:00 GMT","end":"Tue, 19 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"53:76:6F:8D:99:DD:C6:D9:66:1F:1E:DD:67:E6:72:67:9C:85:C8:D5","sha256":"7D:18:3C:9D:2A:CF:4C:B8:26:22:25:91:E7:83:37:E6:AA:B1:8D:FC:33:8E:41:BE:09:75:91:CE:87:47:B8:E9"}}},"request":{"raw":"GET /accounts99/91531/clip_images/previewlg_24020091.jpg HTTP/1.1\r\nHost: imagecdn.clips4sale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\ncache-control: max-age=8640000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,OPTIONS\r\nalt-svc: h3=\":443\"; ma=3600\r\nx-cdn-diag: ams5-7028-4-1242062-h-0-0---;7403-18-3377696----0-1-0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51607,"size_decoded":51913,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 720x405, components 3","md5":"0750b4078752d11c17ec7262a4cee2ac","sha1":"1cf09ea002884f0510d3283117a6c179d3f85667","sha256":"389ac6ae3575c2ad3c8305d64d86351d92fa594c463345033e5abbf7de5f724a","sha512":"e903b11fc5a56709f49c883104d7acb76d649016a9da58386cf33d7ede36c2c066ea51ae248e2d032d206a7043bcdc249fafbed4b2521ae2f7c0dd1ab1b6049e","ssdeep":"1536:UTwIa0ZvuX0Y3DWorIvluEnipz8ffDwCQjrP4a:xyZvuX93RrIvkq3XDwDPPZ","tlshash":"8a33f2153746ac9ef28de1acde6e6506e41b91e884bd112c9699edb0323f4d0ff640f8","first_seen":"2026-01-14T20:02:26.445677Z","last_seen":"2026-10-11T21:28:39.830293Z","times_seen":4,"resource_available":false,"data":null}},"time_used":588,"timings":{"blocked":569,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jpgjingpinx1.top/upload/vod/20250808-1/01c646b4ec38ca6edd434378c53664ee.png","fqdn":"jpgjingpinx1.top","domain":"jpgjingpinx1.top","tld":"top"},"ip":{"addr":"157.90.33.71","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.543Z","timestamp":1791753938543,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /upload/vod/20250808-1/01c646b4ec38ca6edd434378c53664ee.png HTTP/1.1\r\nHost: jpgjingpinx1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: Angie\r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-security-policy: script-src 'nonce-II7I54ZyhFFpcKr00tP+sg=='; style-src 'unsafe-inline'\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jpgjingpinx1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jpxjpg5.top/upload/vod/20260406-1/805bb7849ec45e95f2b9a7a9762c19f6.png","fqdn":"jpxjpg5.top","domain":"jpxjpg5.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.554Z","timestamp":1791753938554,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /upload/vod/20260406-1/805bb7849ec45e95f2b9a7a9762c19f6.png HTTP/1.1\r\nHost: jpxjpg5.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jpxjpg5.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"the-moms.com/favicon.ico","fqdn":"the-moms.com","domain":"the-moms.com","tld":"com"},"ip":{"addr":"162.254.188.22","port":443,"asn":32338,"as":"HOSTISERVER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.259Z","timestamp":1791753943259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"the-moms.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 06:21:53 GMT","end":"Tue, 01 Dec 2026 06:21:52 GMT"},"fingerprint":{"sha1":"56:D6:FC:2B:D6:1B:74:DD:7B:C9:31:68:7C:4C:00:55:20:96:6B:5E","sha256":"44:FB:98:41:0A:95:DD:1B:F2:D5:CF:74:9B:69:E4:18:FB:08:68:6A:96:B8:6E:60:1E:43:68:EA:34:C3:B5:25"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: the-moms.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 1150\r\nlast-modified: Sat, 05 Oct 2019 22:05:28 GMT\r\netag: \"5d9913a8-47e\"\r\nexpires: Sun, 18 Oct 2026 21:25:43 GMT\r\ncache-control: max-age=604800\r\nstrict-transport-security: max-age=63072000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1150,"size_decoded":1494,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"0bc6ba4f22a563d6a6d467cd6141ae2a","sha1":"fedbdcf6ae2b46258d62c6708f1d20fac54f23c3","sha256":"7ac1989c764482ef753b9393ac41e39943b3d94286673d8470cbe982a48a22e4","sha512":"18ce2fe7e3f6fb18e91e1012c2958059fae7297ce35ad73f03b7a7e1552b172b9d11c985dabea2709be0c34258b1a610165378ac5935f42351401de6f0b2c4b5","ssdeep":"","tlshash":"8a21a69bf23819e0e480037e199a851c6d989cc60c70c70b7948bfd6a3730d0fa7a26a","first_seen":"2025-05-25T07:14:28.103989Z","last_seen":"2026-10-11T21:28:39.835302Z","times_seen":19,"resource_available":false,"data":null}},"time_used":583,"timings":{"blocked":-1,"dns":5,"connect":141,"send":0,"wait":143,"receive":0,"ssl":292},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mubi.com/favicon.ico","fqdn":"mubi.com","domain":"mubi.com","tld":"com"},"ip":{"addr":"184.194.70.148","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.645Z","timestamp":1791753943645,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mubi.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 01 Jun 2026 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F3:1E:79:3E:AB:FF:BA:4F:EE:39:AB:AF:34:4F:2C:45:86:83:93:3C","sha256":"0D:ED:FF:03:96:EC:13:74:1B:42:10:E7:BE:0D:D7:99:A3:13:FD:F0:0A:4F:25:C7:EC:47:91:2F:81:FD:18:75"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: mubi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 5430\r\nserver: openresty\r\nlast-modified: Fri, 09 Oct 2026 16:15:10 GMT\r\netag: \"6ac9130e-1536\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-max-age: 7200\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5430,"size_decoded":5861,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"9c3f3d012b3397a28d4fc6afba1a30d3","sha1":"62a5ded1cf2ab769de860606ab4685950d591f7f","sha256":"b06da2084d8b86b46c3b35b614a588ef7ee24a1c4196344dfc10a847e1484a60","sha512":"860425527af0c348b356d7847be089540e6d121bd7f1efb799ae46ce83f8e4b74799d602191645dfed1e985d9cf71edb8e4ade2a2a23ef2af8e307bbc6a2fe50","ssdeep":"48:CIkXWOIWo4nAWQRjsWFU9/AynMBKOD7UqTV+Z+fRYBxBcS1:CIpsnArxsWFUlPMBfVk+fRYBcS1","tlshash":"0ab16815915b7a2ffcb5a271124b054a77607be070a7c3dc2602bc342c2371362b7ae2","first_seen":"2023-08-18T20:28:04Z","last_seen":"2026-10-11T21:28:39.837139Z","times_seen":117,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":1,"connect":92,"send":0,"wait":96,"receive":0,"ssl":195},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p3-tt.byteimg.com/obj/tos-cn-i-jcdsk5yqko/1563f64580d5466f9c19f09b04cd974e","fqdn":"p3-tt.byteimg.com","domain":"byteimg.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.239Z","timestamp":1791753938239,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /obj/tos-cn-i-jcdsk5yqko/1563f64580d5466f9c19f09b04cd974e HTTP/1.1\r\nHost: p3-tt.byteimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornolomka.com/uploads/posts/2018-01/medium/1514984669_00-09-12.jpg","fqdn":"pornolomka.com","domain":"pornolomka.com","tld":"com"},"ip":{"addr":"91.194.110.16","port":443,"asn":213166,"as":"UA-Hosting SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.443Z","timestamp":1791753938443,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pornolomka.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 10:27:36 GMT","end":"Sun, 03 Jan 2027 10:27:35 GMT"},"fingerprint":{"sha1":"28:1C:91:A0:84:6C:D4:E4:E4:4F:FF:C5:77:B5:65:CB:1C:E9:29:EE","sha256":"04:D4:D0:74:D1:B4:D8:BE:AB:0F:2A:AB:2D:69:67:74:D4:21:23:A7:84:9D:5E:D1:FF:CE:62:33:07:68:D9:6B"}}},"request":{"raw":"GET /uploads/posts/2018-01/medium/1514984669_00-09-12.jpg HTTP/1.1\r\nHost: pornolomka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.10.3\r\ndate: Sun, 11 Oct 2026 21:23:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 103764\r\nlast-modified: Sun, 30 Aug 2020 17:02:11 GMT\r\netag: \"5f4bdb93-19554\"\r\nexpires: Tue, 10 Nov 2026 21:23:02 GMT\r\ncache-control: max-age=2592000, public, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":103764,"size_decoded":104091,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 450x337, components 3","md5":"6a1401b229a570be80dad5aa40090f78","sha1":"162e7de0811e93f05000bf709c6b053ae1c3b9b9","sha256":"616f4928171dc0cf9a7d85be5e300877fc13f8e010676a1c0cef8f11dcc6a8a9","sha512":"5de89ea8ecc4af913a0645ba5d5684604f1d4799355adc2d91c0ca1f2790555dcde4fdffa656e1c5129dfdf4a8eb91bbdc450777b0300aa0354d0e9e0a341267","ssdeep":"3072:bDcc50NN4iq7+QHHvDewSw28+A4c7BaHfDTLZ:nLaeLxe8+FcN6DTLZ","tlshash":"43a31277423b0076a78f151e54eaed1dedd245ca1dab043f39b973a64ba404c9ca60f0","first_seen":"2024-04-30T02:34:41Z","last_seen":"2026-10-11T21:28:39.84029Z","times_seen":27,"resource_available":false,"data":null}},"time_used":962,"timings":{"blocked":561,"dns":0,"connect":27,"send":0,"wait":59,"receive":254,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/ext/pre_9017026638.jpg","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"141.227.152.51","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.496Z","timestamp":1791753938496,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 07:52:05 GMT","end":"Sat, 28 Nov 2026 07:52:04 GMT"},"fingerprint":{"sha1":"C4:4F:9D:C9:09:9D:31:30:C3:4F:AE:A0:F3:18:7E:88:BF:F8:C7:B7","sha256":"81:05:CD:81:08:79:7C:F7:1F:83:1B:B5:4E:5C:E4:F8:F7:31:1C:F5:F7:00:A5:82:73:35:B8:D4:AB:52:95:7F"}}},"request":{"raw":"GET /ext/pre_9017026638.jpg HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14690\r\nlast-modified: Tue, 11 Jun 2024 15:57:50 GMT\r\netag: \"666873fe-3962\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14690,"size_decoded":15062,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"70b5f347ea58cc3371d65b6a4032296e","sha1":"83c0ee656ff904c85d0bc9fefcd6749949f60ed7","sha256":"879f6d20e4cd802f0faefbde6dbc2ff1bdc0fb4c5c28902982962bae5a8eebf4","sha512":"aaf538a7b4ce853d5bd53e2856254cf637cc4a5e88807823f093fd0b12cc67c5bab26ea6b5b7ef9bfdece54cf68f71e2cf64f8d747848fed8176fd92d12ba746","ssdeep":"384:TjmczdAWMNxjzmUeBK7vi+Ofu4y6lLx/Knn79hyYXW:TjmcDMNNzr+Yvzeu4ya/w7vyYXW","tlshash":"7b62c05741f6b078f93e4b33d128221d2a82024e9b525fb6723d9da593c05cff96a461","first_seen":"2025-07-13T02:54:08.911326Z","last_seen":"2026-10-11T21:28:39.847785Z","times_seen":15,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.getvr.us/media/9VJvT9uV0Abs4DJCnd2ycybYfmPx-EVJrYDWay5lCQZYa-hX40lc8jGDHwhIeTTN/fm.jpg","fqdn":"www.getvr.us","domain":"getvr.us","tld":"us"},"ip":{"addr":"104.21.61.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.560Z","timestamp":1791753938560,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvr.us","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:32:46 GMT","end":"Sat, 28 Nov 2026 17:31:25 GMT"},"fingerprint":{"sha1":"E2:7C:73:8D:D2:DA:7D:42:96:F7:C0:8C:32:0A:50:61:85:2F:91:25","sha256":"36:F0:EC:6C:BC:DF:04:4D:74:45:22:E2:85:01:A5:F3:A4:4B:A7:56:8E:39:7A:22:51:11:D8:E2:9E:60:8E:2F"}}},"request":{"raw":"GET /media/9VJvT9uV0Abs4DJCnd2ycybYfmPx-EVJrYDWay5lCQZYa-hX40lc8jGDHwhIeTTN/fm.jpg HTTP/1.1\r\nHost: www.getvr.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5159\r\nserver: cloudflare\r\nlast-modified: Fri, 18 Aug 2023 14:46:58 GMT\r\netag: \"64df8462-1427\"\r\nexpires: Tue, 10 Nov 2026 21:25:38 GMT\r\ncache-control: max-age=2592000, public, max-age=2592000, public, max-age=259200\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R3h%2FPgE78tXsyLQCmtG5FSbhl%2BrhNdvc8qR3BSCpTA1BaumoLPG5wJA%2B6f17mTFQT2HTkhTgY3r%2Ft7kNnFupt%2FYuRvK6DMhG2%2B7C5DvxPRUk457e9XP%2F0ftCj1kW%2BBc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a490f04538790daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5159,"size_decoded":5926,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.107.100\", baseline, precision 8, 111x198, components 3","md5":"774a4b79b17fd71665b1d152541a7335","sha1":"666a8c068bcecf53f23c1a0fc7bb379555a8d154","sha256":"6858a74b4b0560f008a68f608a3e8d021d4210dfbc6f638b5af2cf9915db5718","sha512":"1508fa22bcfede64f614f865b23efb19849b3f75b5ac93aabc3d60bfb6fe5aa10e69c7798f316932ccd259eb2df8558565b96d202d6ae07ed4cdf194c30bf3c8","ssdeep":"96:HhzBnijlaoXjxeDIzRvLcNYkz/CTtvxyQ5p/VxZRYDJukMqOu8Ttt:HpQIoXjoIlvLlbN7Z0ukjo","tlshash":"bab15c77b1095c06eae845302646e6fa2789dcc62b5392ef6343f579edad1f014039c9","first_seen":"2025-07-06T20:43:35.46429Z","last_seen":"2026-10-11T21:28:39.850539Z","times_seen":11,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":8,"connect":20,"send":0,"wait":184,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.souavzyw.vip/upload/vod/20251228-1/04934b31c93a6750e47bf2f927f2868b.png","fqdn":"img1.souavzyw.vip","domain":"souavzyw.vip","tld":"vip"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.605Z","timestamp":1791753938605,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20251228-1/04934b31c93a6750e47bf2f927f2868b.png HTTP/1.1\r\nHost: img1.souavzyw.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.effedupmovies.com/wp-content/uploads/2025/09/cropped-favicon-32x32.png","fqdn":"www.effedupmovies.com","domain":"effedupmovies.com","tld":"com"},"ip":{"addr":"185.8.237.6","port":443,"asn":0,"as":"","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:44.033Z","timestamp":1791753944033,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effedupmovies.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 05:32:15 GMT","end":"Thu, 10 Dec 2026 05:32:14 GMT"},"fingerprint":{"sha1":"6D:40:FD:BA:34:C7:A1:7E:D4:84:E0:0F:8A:93:54:64:5E:32:E9:B3","sha256":"28:30:27:00:78:6C:DC:D6:56:F2:32:B2:74:36:1B:BF:A8:69:09:D0:1F:F8:CB:FF:A9:7B:FE:10:B6:D1:20:EF"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/cropped-favicon-32x32.png HTTP/1.1\r\nHost: www.effedupmovies.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 12890\r\nlast-modified: Fri, 29 May 2026 08:27:12 GMT\r\netag: \"6a194de0-325a\"\r\nx-powered-by: PleskLin\r\ncache-control: private\r\naccept-ranges: bytes\r\nx-provider: WEDOS - WE DO Security (WEDOS.com)\r\nx-cdn-provider: WEDOS Global CDN (WEDOS.delivery)\r\nx-protected-by: WEDOS Global Protection (WEDOS.protection)\r\nx-dns-by: WEDOS anycast DNS servers as a service (WEDOS.zone)\r\nx-status-page: WEDOS Status (WEDOS.status.online)\r\nx-monitored-by: WEDOS Online Monitoring (WEDOS.online)\r\nx-tagline: Built in Europe / EU, securing the future and safety worldwide.\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12890,"size_decoded":13549,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"ab96da12d8312559415480d1f3036eb0","sha1":"1d014a2419e02827bd13334af29578b1c9b4d6bf","sha256":"1cca498904b87c8b14e4100203f31d6bd9b9cac47da3b99ec80f6042c91b47f9","sha512":"4fc3dc1aac1efb54e7877b0bfbd23ea2db2e4f65d9fd4e5039435635caaf167f05df17cee77dbd4d44aa1d2f0911aa6384b34eb8372920dc05fa84b98acf905f","ssdeep":"384:hqhkHlVJH8TaseXN+yXLnFnbrFF7E162qFuU4Khaz5:AOr8TyI4VX2qKV","tlshash":"5042bffbdbc7842102ba18ea5ded053750b294bc0e0b1ac1e6f8634228d36810d5ef4d","first_seen":"2023-05-04T19:26:02Z","last_seen":"2026-10-11T21:28:39.851273Z","times_seen":217,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"www.effedupmovies.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.jkuntp.com/upload/vod/20230814-1/357bad30d0afcd3b78def460a222309a.jpg","fqdn":"www.jkuntp.com","domain":"jkuntp.com","tld":"com"},"ip":{"addr":"156.246.16.44","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:50.308Z","timestamp":1791753950308,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jkuntp.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Sat, 11 Apr 2026 04:32:20 GMT","end":"Tue, 27 Oct 2026 04:32:19 GMT"},"fingerprint":{"sha1":"CC:A2:E2:EF:B2:98:24:3C:B9:AF:A1:E1:07:87:08:A0:5C:D5:85:C3","sha256":"49:55:1E:17:AA:55:6C:E0:A5:04:4D:42:DA:24:A2:79:1D:25:3F:D2:FD:21:2E:D2:49:35:AE:D0:72:51:AF:AF"}}},"request":{"raw":"GET /upload/vod/20230814-1/357bad30d0afcd3b78def460a222309a.jpg HTTP/1.1\r\nHost: www.jkuntp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 11 Oct 2026 21:07:18 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 59723\r\nConnection: keep-alive\r\nLast-Modified: Mon, 14 Aug 2023 04:06:31 GMT\r\nVary: Accept-Encoding\r\nETag: \"64d9a847-e94b\"\r\nExpires: Thu, 29 Oct 2026 15:14:40 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nCache-Control: max-age=2592000, public, max-age=15768000\r\nCache: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59723,"size_decoded":60163,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 980x550, components 3","md5":"a399136fbef92b74f7094020e7ef6dd8","sha1":"698f4228e5a02ca4f005cb17191713eece1391fa","sha256":"3812e04daaba40df8f0a9904a207445ea3816422b1909d87828e3137b52d3f01","sha512":"56d91476c5094136199efa6ca2794fe24abe172db75e46945bb7d3a139ac2d8d2d27f0fdc706bf20d8b4c554b0a882f5420909d65ac8a838e8e088b4654d3a50","ssdeep":"1536:rfF9KEpkj4i/oL/XI5qXpPEhbbYVjKHrEjHJq1Q:xRkb/47pcheaIjH8Q","tlshash":"f04302835bc5ce1954bb842cd8fe01e244d4751f43f0e5a306ae1da2aada15daf52ccb","first_seen":"2025-05-20T07:09:21.254715Z","last_seen":"2026-10-11T21:28:39.852889Z","times_seen":43,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdig.com/media/videos/tmb/000/005/655/1.jpg","fqdn":"fapdig.com","domain":"fapdig.com","tld":"com"},"ip":{"addr":"104.21.6.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.249Z","timestamp":1791753938249,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdig.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 16:47:04 GMT","end":"Tue, 01 Dec 2026 17:44:49 GMT"},"fingerprint":{"sha1":"7F:FE:16:D7:B5:7A:51:B5:57:76:D9:DF:3E:3F:3F:3C:88:DE:BE:AC","sha256":"33:F9:D3:E4:70:FF:A2:AF:F0:F2:6D:FF:F3:7B:A3:81:44:DC:7B:80:A3:B6:7D:7F:36:81:6C:15:75:64:E3:C9"}}},"request":{"raw":"GET /media/videos/tmb/000/005/655/1.jpg HTTP/1.1\r\nHost: fapdig.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17188\r\nserver: cloudflare\r\nlast-modified: Sat, 12 Mar 2016 18:44:18 GMT\r\netag: \"56e46382-4324\"\r\naccept-ranges: bytes\r\nage: 5789\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3RqNoFt6GFQF8SULXCHZ6atJRFLHfCIb7yrkEYv88GHzwWwFW4H44vTKuoawxulSU7maue75ohjE75ME02eHhBvIRXxSc79HqUutdGo4P9iWu2ONyWBeif6Fj9Gw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a490f043993b0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17188,"size_decoded":17850,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: \"Lavc56.58.100\", baseline, precision 8, 320x240, components 3","md5":"b6f2858fc7b1ba3e990a3ce1dde4314c","sha1":"0ace241b11c978db398a42bc4c7f27153eeae57e","sha256":"c0a1094f35ea927f8fdb5c59361d490c2c6166e8edf35c76910e5da34d3933e4","sha512":"9da51f56afe87c45efa19d3859347d775cfa7b4f9f8719e80fc38f3e52ce3c72ef8412d014388ea9381f7268aff5bc777af7534436729e7019175be2385e00b3","ssdeep":"384:f+88cwXvzJiRYWrE3WkFFBdFOtTWYuEaMbODObmkqXmAkkwW6OYGwJ:f+4KbMGAAkdHmUgOS2OYGG","tlshash":"2872d0201f6307e2b62e16b0cac846a7d6c9a2eb94acf6a1f22078d831747419c55b9d","first_seen":"2025-03-17T03:14:34.727139Z","last_seen":"2026-10-11T21:28:39.854336Z","times_seen":3,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":134,"dns":7,"connect":7,"send":0,"wait":21,"receive":0,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oporno.net/wp-content/uploads/2020/04/junge-deutsche-fickt-mit-einem-grossen-alten-schwanz.jpg","fqdn":"oporno.net","domain":"oporno.net","tld":"net"},"ip":{"addr":"95.85.6.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.316Z","timestamp":1791753938316,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oporno.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 23:23:17 GMT","end":"Thu, 12 Nov 2026 23:23:16 GMT"},"fingerprint":{"sha1":"E4:5B:91:17:04:FE:AB:CA:48:E2:20:E6:9C:41:0A:42:22:5D:77:9F","sha256":"FE:B6:BA:C4:4B:43:1D:DA:33:B3:9F:BD:34:4A:2D:D8:93:2B:4E:52:69:B7:6A:1C:77:76:FF:14:A6:47:4C:BF"}}},"request":{"raw":"GET /wp-content/uploads/2020/04/junge-deutsche-fickt-mit-einem-grossen-alten-schwanz.jpg HTTP/1.1\r\nHost: oporno.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 21:25:38 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Sun, 12 Apr 2020 06:21:00 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 75977\r\nCache-Control: max-age=3024000, public\r\nExpires: max-age=A10368000, public\r\nConnection: keep-alive, Keep-Alive\r\nKeep-Alive: timeout=5, max=100\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":75977,"size_decoded":76326,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x720, components 3","md5":"000836b32a0799a077bbc735e27add4b","sha1":"83c1ded0fb639ee632c9f4ef47f16887f0cabb93","sha256":"c03791c80f28535a272cf86d8fa1941f0d8baadcb5fef1f6f4b49905b54cb931","sha512":"dc7dd0d8b5f2f07f74f2a3bee2871cfa5cee44e902488f91333dcb65621999c09d73789171a92e29fa03b2fd729ea0f06349a7b4278c0545c7b464f98d8f1b0f","ssdeep":"1536:TUAnTf25TjH5o6w84wbRunKmjq1AiDVGt6w9qnum8haxKO80x/e4Z:TUAnT+xj2p84YRunKt1nVG1sum/q0x/D","tlshash":"a373011fab60aa73d1961724818dadf60d2f18a780e5117e20bbd0fc41b7c95e78d3e8","first_seen":"2025-01-01T15:41:46.90201Z","last_seen":"2026-10-11T21:28:39.85816Z","times_seen":12,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":14,"connect":27,"send":0,"wait":23,"receive":67,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.dd2pic.cc/upload/vod/20250220-1/b29f0febefbb178b94555fbcf144f3ee.jpg","fqdn":"pic.dd2pic.cc","domain":"dd2pic.cc","tld":"cc"},"ip":{"addr":"134.195.196.199","port":443,"asn":62563,"as":"AS-GLOBALTELEHOST","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.408Z","timestamp":1791753938408,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pic.dipic.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 00:28:54 GMT","end":"Wed, 06 Jan 2027 00:28:53 GMT"},"fingerprint":{"sha1":"6C:DE:1D:4E:0B:EA:3D:7A:E1:AD:1B:21:26:E9:9C:B1:EF:DC:24:25","sha256":"14:06:57:DD:10:B2:B3:1E:6C:52:80:6A:6F:79:90:68:62:6E:55:32:CE:CC:16:AA:31:E4:5B:33:C2:46:6E:86"}}},"request":{"raw":"GET /upload/vod/20250220-1/b29f0febefbb178b94555fbcf144f3ee.jpg HTTP/1.1\r\nHost: pic.dd2pic.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 20 Feb 2025 01:42:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b6887b-877d\"\r\nexpires: Tue, 10 Nov 2026 21:25:38 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34685,"size_decoded":33309,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Generated by Snipaste\", baseline, precision 8, 490x869, components 3","md5":"772fecba8f979da38b6b53311f0a46b8","sha1":"cc8a13c216f83c75c977cc5b485e3e07ada9ecdb","sha256":"f74f7f9cad4e61531d263fec9ba0e44cb848c9277d2eedd2904d584d41808a5c","sha512":"84ae7a062eb3422f87f7ce2b15999cd87beca0870f18e77a026b488788b15324264a9342221cdf2aa1f47a028f8c22b84170299c07d938a1a2e8e6f9872b94b1","ssdeep":"768:M63Ed3PNGGgzQJZYCegddh4v++ogPxFYWD/w7nbsr72PzJ:M1N0NXvygPxFYgw3aU","tlshash":"d6f2f194f61272231dfd6778ec2a5b9c6df5edc03442320b52b836bcb51a3ee01a4266","first_seen":"2026-10-11T09:53:13.9669Z","last_seen":"2026-10-11T21:28:39.859211Z","times_seen":3,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":14,"connect":107,"send":0,"wait":98,"receive":0,"ssl":198},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"pic.dd2pic.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg5.com:3519/upload/vod/20260403-1/422fb59b4c4a065e47abab4a794997fe.jpg","fqdn":"sbzytpimg5.com","domain":"sbzytpimg5.com","tld":"com"},"ip":{"addr":"23.140.236.1","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.448Z","timestamp":1791753938448,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbzytp.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 18:35:36 GMT","end":"Fri, 13 Nov 2026 18:35:35 GMT"},"fingerprint":{"sha1":"48:67:53:B8:D9:B0:E4:69:E7:6C:D8:14:FE:A6:61:9A:7E:D7:65:01","sha256":"97:1B:54:8D:56:AC:26:EE:C1:E1:75:88:2C:CC:66:6C:A5:6A:6A:68:EC:1E:AD:83:2A:F7:0D:F1:0D:41:65:1C"}}},"request":{"raw":"GET /upload/vod/20260403-1/422fb59b4c4a065e47abab4a794997fe.jpg HTTP/1.1\r\nHost: sbzytpimg5.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 355738\r\nlast-modified: Fri, 03 Apr 2026 02:58:14 GMT\r\nvary: Accept-Encoding\r\netag: \"69cf2cc6-56d9a\"\r\nexpires: Wed, 07 Oct 2026 06:20:29 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 2991910\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":355738,"size_decoded":356160,"mime_type":"image/png","magic":"PNG image data, 640 x 360, 8-bit/color RGBA, non-interlaced","md5":"e52ba93baf151fecee7d0f1ca2c97db9","sha1":"3e6726583e2e1af07800ee2d585708745413dc45","sha256":"e79f19a9c5c00a0e8f5d6465acd8cf41a361546ced65998065f9c32289f3e38b","sha512":"14ca4bd135fcda6193a80b953ad8daacafa7ff2e1ace80c017b76d4b4a2d1ef688b1d11b44805c7094175f2b23270e5912fd01499a122d959f1b84fe9645cb25","ssdeep":"6144:YWLklvB942ph8eaYADwmXr8a7NptinVCMRIvVd1zDrnRagCeQ6U7Les5:NLkl3VeeaQwR/in4MRC1z3Rex5Lz5","tlshash":"6874239b7306e171bc048d7fed9a2960319ce5fb053bba8e05a5bb6517341c22788fc5","first_seen":"2026-06-20T20:28:30.939793Z","last_seen":"2026-10-11T21:28:39.860379Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1489,"timings":{"blocked":-1,"dns":15,"connect":165,"send":0,"wait":504,"receive":458,"ssl":322},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotmoza.tv/favicon.ico","fqdn":"hotmoza.tv","domain":"hotmoza.tv","tld":"tv"},"ip":{"addr":"104.21.70.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.559Z","timestamp":1791753943559,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotmoza.tv","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Oct 2026 00:35:08 GMT","end":"Sat, 09 Jan 2027 01:34:59 GMT"},"fingerprint":{"sha1":"3D:B7:70:F9:26:A0:03:3D:A3:46:85:08:AC:4D:FF:7A:0F:45:C2:D6","sha256":"B7:80:04:00:7A:47:C2:6C:D9:FB:7A:F7:12:4B:FD:C1:36:50:D0:88:0E:4E:E9:8C:C8:DE:3A:4E:E7:01:BA:B4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: hotmoza.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-vCpAEaJTvE6euJLkKfMHiR' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a490f0634a4d0731\", cfExtPri\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hMelDNH6M2%2BuVjykK0CDCslu1nmE7ZdeuJn5jV6kPxfzwqxw5EAAXjbBLEeB98iVwPVGmL2Jo829%2FohAkiGSPkOXjKn29pfyJnttf9LrrXNph%2BS3iZtGXnJ%2Bp%2BUE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\npriority: u=4,i\r\ncontent-encoding: zstd\r\ncf-ray: a490f0634a4d0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fqjpg3.top/upload/vod/20241221-1/582a148602c7ce1c4792f300f69656c3.jpg","fqdn":"fqjpg3.top","domain":"fqjpg3.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.406Z","timestamp":1791753938406,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241221-1/582a148602c7ce1c4792f300f69656c3.jpg HTTP/1.1\r\nHost: fqjpg3.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"fqjpg3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pornoperso.com/wp-content/uploads/2021/06/genie-morman.jpg","fqdn":"pornoperso.com","domain":"pornoperso.com","tld":"com"},"ip":{"addr":"172.67.166.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.217Z","timestamp":1791753938217,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornoperso.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 22:01:41 GMT","end":"Sun, 03 Jan 2027 23:01:34 GMT"},"fingerprint":{"sha1":"59:B8:3B:55:B6:0C:4D:56:77:75:84:DD:64:A9:AF:6B:8C:CE:B1:53","sha256":"B6:A6:F4:88:0F:BC:D3:C3:C0:A8:A4:86:2B:F7:54:C6:A3:B1:AB:1D:4A:5B:AC:4A:A9:C3:54:87:94:F0:C6:FC"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/genie-morman.jpg HTTP/1.1\r\nHost: pornoperso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://img.pornoperso.com/wp-content/uploads/2021/06/genie-morman.jpg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e%2B%2FnNqLtHdsgauv8qLACPgehVfx7ovWVx%2BKhzCVsVSlsXogPK9X8iTckH2fwQLT0mrfjf9AwCvwDjay1SQVr1Ho0ixfY8INhY%2BKN9VCwXFYIjPozfb0gpBucOKHPM8D11A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a490f042cba0b50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/ext/pre_9370484288.jpg","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"141.227.152.51","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.288Z","timestamp":1791753938288,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 07:52:05 GMT","end":"Sat, 28 Nov 2026 07:52:04 GMT"},"fingerprint":{"sha1":"C4:4F:9D:C9:09:9D:31:30:C3:4F:AE:A0:F3:18:7E:88:BF:F8:C7:B7","sha256":"81:05:CD:81:08:79:7C:F7:1F:83:1B:B5:4E:5C:E4:F8:F7:31:1C:F5:F7:00:A5:82:73:35:B8:D4:AB:52:95:7F"}}},"request":{"raw":"GET /ext/pre_9370484288.jpg HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12176\r\nlast-modified: Tue, 11 Jun 2024 11:40:57 GMT\r\netag: \"666837c9-2f90\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12176,"size_decoded":12548,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"da2801092a1152b29761d687cbed5e8f","sha1":"1a1666265c52a3cca464dc79bc6ba5c8db8535b0","sha256":"59a3193434d2de96be26b3fb0dc9e6a97a4bd1cd039b32cba1841f6fa4ae1eeb","sha512":"c8bdc43d24c96ec5228e1d315bd6df4101b331aa02dae2eb067f5ff58e6ff6eda7fa0f5e1a2db0fe67d35c205baa748aff566052ea480aa5eaf3b2d34de2a575","ssdeep":"192:yZAKbKtz5B485y/F5wCAiRlRlxB4EWxEY+o4BHUk5xer2:kx65B45gVelR3B+xE4k5xer2","tlshash":"8842d073f5149b73f6de9f34d0a1038412e1bd064fa26d2a2d182a41df7e4f08752b59","first_seen":"2025-01-26T23:07:03.998567Z","last_seen":"2026-10-11T21:28:39.86155Z","times_seen":11,"resource_available":false,"data":null}},"time_used":393,"timings":{"blocked":299,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av6k.com/uploads/allimg/2605/D-05150J415BeEa295X.jpg","fqdn":"av6k.com","domain":"av6k.com","tld":"com"},"ip":{"addr":"172.67.172.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.315Z","timestamp":1791753938315,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"av6k.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 12:52:34 GMT","end":"Sun, 27 Dec 2026 13:50:06 GMT"},"fingerprint":{"sha1":"73:FA:2E:53:19:28:A4:E6:21:79:B8:85:6F:4F:98:64:60:8E:35:D2","sha256":"BE:CE:E5:F4:99:6C:8E:39:70:EE:24:53:3C:F7:84:B4:FC:60:57:70:78:A2:A0:35:C1:5A:54:5F:2B:6B:CD:AB"}}},"request":{"raw":"GET /uploads/allimg/2605/D-05150J415BeEa295X.jpg HTTP/1.1\r\nHost: av6k.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Accept-Encoding, User-Agent\r\nlast-modified: Thu, 14 May 2026 23:44:15 GMT\r\naccept-ranges: bytes\r\nage: 3808\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lQ6hfAbuiplj4L8cQFjThr2h2j8OdYovK%2F7w3fcR8%2Fdg%2FKp26f0MfHZnu%2ByKOoEXQ8aHbz4nMcNyjHAoNRA6bj%2BtIhSQxmFdB02Dp0OOaZRDqINGJEV1x3%2FhpQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a490f043af1a49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11026\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11026,"size_decoded":11737,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, comment: \"Generated by Snipaste\", baseline, precision 8, 372x354, components 3","md5":"059a52912592bbfa13e84b0889072444","sha1":"009e39da97d4aab8bd2d6644eb43f9f16b0cbe2f","sha256":"74fdad7e4661ed64eb7b16fdf493c93692bbc0f7553cc9e187b6f1e15313d4f3","sha512":"3a9a86f43f919aca235cc86f6f0e0b6ed60fa74380b80a01f5912128891668dc02cbc5db4a4fd09b947d37fa03599736ccd80da89c1a1a97c7d10a2782db7ca3","ssdeep":"192:B6CamsMv5yYcRt0ouGqWnRl5tYBvxxUBCeSvAjR5A3yXHOggjpRBSQmZ9tgdMk:sC1HvLcbbjqWnxtypxUBAv8R5AC3Oggx","tlshash":"1b32bf3ac78203be0bb1def8a91260b7d5b9b660744e7b4f5caea2c4c66494e551c131","first_seen":"2026-09-27T16:26:31.432934Z","last_seen":"2026-10-11T21:28:39.862654Z","times_seen":3,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":117,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fuckmovs.pro/favicon.ico","fqdn":"fuckmovs.pro","domain":"fuckmovs.pro","tld":"pro"},"ip":{"addr":"162.254.190.69","port":443,"asn":32338,"as":"HOSTISERVER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.305Z","timestamp":1791753943305,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fuckmovs.pro","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 08:51:06 GMT","end":"Tue, 05 Jan 2027 08:51:05 GMT"},"fingerprint":{"sha1":"5B:97:2B:B3:7D:C6:69:69:08:A8:01:65:58:CC:09:0A:C3:7F:9E:40","sha256":"00:35:C3:2A:33:70:F8:F5:51:C1:8F:A2:63:76:F0:EA:AC:F7:A7:6E:09:B6:DF:5C:EF:3A:86:28:2B:7A:CC:E8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: fuckmovs.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 1150\r\nlast-modified: Mon, 01 Apr 2019 09:10:31 GMT\r\netag: \"5ca1d587-47e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1150,"size_decoded":1527,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"16ba4ea145fcb9702fd424ba10173a1f","sha1":"6f229dd75f224cad28d49ef63c45df4e11ba1061","sha256":"c3033a0ea2ae65943acaae4379d76beadbf4319629afaf24cd508101481d29b9","sha512":"ece7e99320bc8ac3da53a609eb06d051ca78ee0387e7c68899eb84076bf4c750a27854e097ba562d5ef601b3b7268e8837d1b55ad0b9d04b6c2e7ce35d3591d6","ssdeep":"","tlshash":"c1214dc43380b955c4741632f031d6fdeca5bc15825619f7749b2c4b7fb2c88043d684","first_seen":"2023-11-13T17:56:11Z","last_seen":"2026-10-11T21:28:39.863545Z","times_seen":55,"resource_available":false,"data":null}},"time_used":586,"timings":{"blocked":-1,"dns":12,"connect":141,"send":0,"wait":143,"receive":0,"ssl":290},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fm.fhpicpic.com/20241010/0igbLdJi/1.jpg","fqdn":"fm.fhpicpic.com","domain":"fhpicpic.com","tld":"com"},"ip":{"addr":"172.67.160.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.216Z","timestamp":1791753938216,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /20241010/0igbLdJi/1.jpg HTTP/1.1\r\nHost: fm.fhpicpic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 521 \r\nretry-after: 120\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-ray: a490f0458dd5783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6987\r\n\r\n","headers":null,"cookies":null,"status_code":"521","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.dipic.cc/upload/vod/20260506-1/20c66de632010bb8e276e08b2ac16e14.jpg","fqdn":"pic.dipic.cc","domain":"dipic.cc","tld":"cc"},"ip":{"addr":"134.195.196.199","port":443,"asn":62563,"as":"AS-GLOBALTELEHOST","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.563Z","timestamp":1791753938563,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pic.dipic.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 00:28:54 GMT","end":"Wed, 06 Jan 2027 00:28:53 GMT"},"fingerprint":{"sha1":"6C:DE:1D:4E:0B:EA:3D:7A:E1:AD:1B:21:26:E9:9C:B1:EF:DC:24:25","sha256":"14:06:57:DD:10:B2:B3:1E:6C:52:80:6A:6F:79:90:68:62:6E:55:32:CE:CC:16:AA:31:E4:5B:33:C2:46:6E:86"}}},"request":{"raw":"GET /upload/vod/20260506-1/20c66de632010bb8e276e08b2ac16e14.jpg HTTP/1.1\r\nHost: pic.dipic.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 06 May 2026 06:16:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fadcd2-4891\"\r\nexpires: Tue, 10 Nov 2026 21:25:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18577,"size_decoded":18772,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Generated by Snipaste\", baseline, precision 8, 446x289, components 3","md5":"4e483e352f2d1d7c77be3cbd4c49be17","sha1":"86963822b31abb5729cbebe853e2da7110636d78","sha256":"f22529b8c909af4363779b78d520de8b9d5539575511d0f7e3959d9aea5cf6ee","sha512":"4e9c8baafa2a38ca42e14cd47de00b20992107c3dc2d7985daa466b9075e3b897359bd6589b770b3f36c56bcb4f36b63e170fbf4e7efea35311d115184cc0910","ssdeep":"384:i43kH1ic30NzZeimqcnSIEDbzgHv/alpPq1DRV7A2/H:iCCi40aicnSPDPgPaUTfH","tlshash":"bb82d049160a52988d18277b7506bba03c93ffef1c492f8fbc34f464b51324b6a6a098","first_seen":"2026-08-06T17:50:52.524578Z","last_seen":"2026-10-11T21:28:39.86774Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1097,"timings":{"blocked":885,"dns":5,"connect":110,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.pornoperso.com/wp-content/uploads/2021/06/shiny-flowers-belinda.jpg","fqdn":"img.pornoperso.com","domain":"pornoperso.com","tld":"com"},"ip":{"addr":"94.23.76.64","port":443,"asn":16276,"as":"OVH SAS","country":"Portugal","country_code":"PT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:40.690Z","timestamp":1791753940690,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.pornoperso.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 07:17:21 GMT","end":"Sat, 02 Jan 2027 07:17:20 GMT"},"fingerprint":{"sha1":"84:8E:CE:9C:8C:DC:A8:23:39:BA:DE:A5:85:44:8C:4E:4C:29:52:86","sha256":"31:F1:59:5B:7C:AF:10:69:75:BB:4F:18:CA:56:C4:AE:95:68:20:C4:CF:AF:94:08:15:66:82:76:77:0F:CD:63"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/shiny-flowers-belinda.jpg HTTP/1.1\r\nHost: img.pornoperso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://en.4us.asia/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:40 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 30 Jun 2021 14:37:16 GMT\r\netag: W/\"60dc819c-550a\"\r\nversion: MS26072801\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000;\r\nx-served-by: Mini-CDN-offshore\r\nx-cache-status: HIT\r\nx-cache-bypass: 0\r\ncache-control: public, max-age=2592000, immutable, stale-while-revalidate=60, stale-if-error=3600\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21770,"size_decoded":22017,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85\", baseline, precision 8, 600x337, components 3","md5":"6d063ea19e095638faa707ef8ba15c26","sha1":"859183ae6dcf5159976f676332f3f4792910c6a0","sha256":"3927202888650ce1d2ff8fa35fe029c73c7b42579ffe374b74c9d7588431f979","sha512":"de53faee5156e27d046a620930553cbe171606c3cfc400cf5516266bfe6181d2678c32ad04956da0b84e8fffe00f0e88b01e2db5dc7399445599a91640aa2b22","ssdeep":"384:qQh+Nr0q8s2ntIcqrFRGQxgnZfUlW4HxppyWFBngRzAiQ+/GemHkPwlwyF:qQqQ/BO6bne1jpAR0iPGemEYl3F","tlshash":"6ba2d08f75c65d17b41fd3a0ff160d995703a640f38a7ee65a000cd273442a6faaeca8","first_seen":"2025-05-21T07:12:06.571493Z","last_seen":"2026-10-11T21:28:39.86899Z","times_seen":26,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"porn112.com/favicon.ico","fqdn":"porn112.com","domain":"porn112.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.531Z","timestamp":1791753943531,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: porn112.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:50.676Z","timestamp":1791753950676,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fqjpg3.top/upload/vod/20241123-1/8f09793c852f7b7766d987ab0e0c5db2.jpg","fqdn":"fqjpg3.top","domain":"fqjpg3.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.422Z","timestamp":1791753938422,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241123-1/8f09793c852f7b7766d987ab0e0c5db2.jpg HTTP/1.1\r\nHost: fqjpg3.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"fqjpg3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.xxibaocdn.com/video/m3u8/2026/04/18/e5_90_83_e7_93_9c_e7_88_86_e6_96_99/49418_cover_2026-04-18_080303.jpg","fqdn":"img.xxibaocdn.com","domain":"xxibaocdn.com","tld":"com"},"ip":{"addr":"162.209.190.196","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.446Z","timestamp":1791753938446,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.xxibaocdn.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 15:13:41 GMT","end":"Fri, 25 Dec 2026 15:13:40 GMT"},"fingerprint":{"sha1":"87:96:F8:C7:25:D2:6A:6F:2E:7C:8E:3D:E1:29:5D:1A:8B:AE:B8:8F","sha256":"6F:3D:C6:A4:68:5E:CD:E6:A1:A6:04:B5:67:00:56:EB:EF:03:FB:6F:FF:BA:5C:05:C5:B5:E2:76:B1:96:7C:33"}}},"request":{"raw":"GET /video/m3u8/2026/04/18/e5_90_83_e7_93_9c_e7_88_86_e6_96_99/49418_cover_2026-04-18_080303.jpg HTTP/1.1\r\nHost: img.xxibaocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 18 Apr 2026 00:04:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e2ca76-1b0f4\"\r\nexpires: Tue, 10 Nov 2026 21:25:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":110836,"size_decoded":111320,"mime_type":"image/png","magic":"PNG image data, 718 x 404, 8-bit colormap, non-interlaced","md5":"e65923241cd0e7819ebe2fa3b8664aa6","sha1":"07a38538c587efada276700e222cca18265ea47a","sha256":"58a7bafd9ad3f358f82684530c1040e9b155af7431f4cdc7bf1740181a45be6a","sha512":"274dd9a57040a3af7200a734a8c0426562b60813685ad74170b0a9207b7eaf9d26f4468bf927d3399af8c3a6ede6318f44463d93fc88ce39a88cad637bc77200","ssdeep":"3072:vaO5QoEQ5I+gfkbUWYGKC1c7VZhB8SCpMYWAwn:io1Itfkb1ghBWpMYWAwn","tlshash":"09b3123b4e9accbef8fd006516b4ad91f726105360e48a5051e3e3e18be03e6e575be4","first_seen":"2024-08-19T23:59:55.505131Z","last_seen":"2026-10-11T21:28:39.870117Z","times_seen":10,"resource_available":false,"data":null}},"time_used":719,"timings":{"blocked":-1,"dns":17,"connect":164,"send":0,"wait":207,"receive":0,"ssl":313},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"un.shayu260522.top/upload/vod/20260923-56/2373f47d141c553419ad68f350b17cf1.jpg","fqdn":"un.shayu260522.top","domain":"shayu260522.top","tld":"top"},"ip":{"addr":"104.21.46.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.481Z","timestamp":1791753938481,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shayu260522.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:02:43 GMT","end":"Wed, 16 Dec 2026 11:02:42 GMT"},"fingerprint":{"sha1":"AB:C8:D3:7B:74:05:74:F6:3F:B4:7B:53:12:47:F6:07:9A:58:00:96","sha256":"86:F3:D8:BA:7E:03:2C:AF:B6:88:27:9C:FC:EB:6C:36:E0:9A:DE:85:65:49:4A:28:0D:1A:6F:E1:56:5E:45:3A"}}},"request":{"raw":"GET /upload/vod/20260923-56/2373f47d141c553419ad68f350b17cf1.jpg HTTP/1.1\r\nHost: un.shayu260522.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 193321\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\netag: \"6ab3357c-2f329\"\r\nexpires: Fri, 23 Oct 2026 03:33:18 GMT\r\nlast-modified: Wed, 23 Sep 2026 03:33:48 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\nage: 1611994\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=erEvV9FrClRK2UoUItQ9KRQmi5wJMg5YGkE1yAVKMZp8TEu9v%2B70jtc3DI7dg5VqY3NF2SqnZ2C0dhzrGs%2FKblZO%2Fxj3T%2FOnIigpJICLqSAI%2F5B9kCzDIYhxdruQOtQRXLWFmWM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a490f043e9a5b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":193321,"size_decoded":194082,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1028x592, components 3","md5":"a168380d4bf587560048aa9a84fd4310","sha1":"ab9c9dac49ec72f04e552a23068671bfdc78c050","sha256":"50bc2f5c251f68b078be6fb5dc24dba5042e0fb4940b382bc99922f14a7648be","sha512":"598fed86bad929d85b0b5e1d5449d9e149879983f63176173a576adb588ed176ff213a2183f8ff59227f8e2ca4129b5557943b09af738f19f41e442b294ece02","ssdeep":"3072:1fxuPenL7qTvSdsew6cRnPOhj3zUIMm2rvABr2hTVLQBY69vKW/sD/veyx+CDFS4:1poeLVddKnGhj3zUIArYVwaBYQv0LvTV","tlshash":"c214131c638e0d26d4c193fe4056b0ee61dfd8612f1eadd46f4a07a6216f6d0b8285f9","first_seen":"2026-04-06T18:02:45.611994Z","last_seen":"2026-10-11T21:28:39.873605Z","times_seen":6,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"un.shayu260522.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"en.chezcathy.com/favicon.ico","fqdn":"en.chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"141.227.152.51","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.309Z","timestamp":1791753943309,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 07:52:05 GMT","end":"Sat, 28 Nov 2026 07:52:04 GMT"},"fingerprint":{"sha1":"C4:4F:9D:C9:09:9D:31:30:C3:4F:AE:A0:F3:18:7E:88:BF:F8:C7:B7","sha256":"81:05:CD:81:08:79:7C:F7:1F:83:1B:B5:4E:5C:E4:F8:F7:31:1C:F5:F7:00:A5:82:73:35:B8:D4:AB:52:95:7F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: en.chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://chezcathy.com/favicon.ico\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":7,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fm.fhpicpic.com/20241010/0igbLdJi/1.jpg","fqdn":"fm.fhpicpic.com","domain":"fhpicpic.com","tld":"com"},"ip":{"addr":"172.67.160.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:40.913Z","timestamp":1791753940913,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fhpicpic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 06:54:33 GMT","end":"Thu, 10 Dec 2026 07:53:03 GMT"},"fingerprint":{"sha1":"7C:78:7A:F1:99:58:57:21:47:0F:58:CC:49:DA:B1:D7:FD:D9:DE:83","sha256":"26:07:ED:15:66:24:21:BD:C3:41:0F:E7:B7:66:0F:48:04:03:E2:28:F4:B2:42:FA:77:50:57:CA:BD:5D:F6:84"}}},"request":{"raw":"GET /20241010/0igbLdJi/1.jpg HTTP/1.1\r\nHost: fm.fhpicpic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 521 \r\nretry-after: 120\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 11 Oct 2026 21:25:41 GMT\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-ray: a490f052acb4783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6987\r\n\r\n","headers":null,"cookies":null,"status_code":"521","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baraag.net/favicon.ico","fqdn":"baraag.net","domain":"baraag.net","tld":"net"},"ip":{"addr":"167.104.221.188","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.410Z","timestamp":1791753943410,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baraag.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 08:59:16 GMT","end":"Sun, 03 Jan 2027 08:59:15 GMT"},"fingerprint":{"sha1":"E8:48:C0:1D:66:22:1F:D0:0C:BF:92:E0:DA:3F:0F:8D:AF:FC:92:76","sha256":"62:29:B4:0B:4F:57:6C:22:CD:2F:F7:AD:6F:86:28:BA:F3:53:0E:E0:4D:59:B5:77:9F:59:FA:1F:16:A3:4A:40"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: baraag.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: Mastodon\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nreferrer-policy: same-origin\r\ncache-control: private, no-store\r\ncontent-security-policy: base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://baraag.net; img-src 'self' data: blob: https://baraag.net https://media.baraag.net; media-src 'self' data: https://baraag.net https://media.baraag.net; manifest-src 'self' https://baraag.net; form-action 'self'; child-src 'self' blob: https://baraag.net; worker-src 'self' blob: https://baraag.net; connect-src 'self' data: blob: https://baraag.net https://media.baraag.net wss://baraag.net; script-src 'self' https://baraag.net 'wasm-unsafe-eval'; frame-src 'self' https:; style-src 'self' https://baraag.net 'nonce-JXqPGiyT1yuuln6C/DCLuw=='\r\nx-request-id: f1468cf6-4c25-42b1-ac44-d1258176db2b\r\nx-runtime: 0.006030\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\ncontent-encoding: gzip\r\nx-cache-t: large\r\nx-varnish: 41555297248\r\nage: 0\r\nvia: 1.1 fe-nl-1 (Varnish/7.7)\r\nx-cache: MISS\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Mastodon","description":"Mastodon is a free and open-source self-hosted social networking service.","website":"https://joinmastodon.org","common_platform_enumeration":"","icon":"Mastodon.svg","categories":["Message boards"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornochika.net/favicon.ico","fqdn":"pornochika.net","domain":"pornochika.net","tld":"net"},"ip":{"addr":"31.10.5.4","port":443,"asn":207728,"as":"EUROHOSTER Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.492Z","timestamp":1791753943492,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornochika.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 23:05:30 GMT","end":"Tue, 08 Dec 2026 23:05:29 GMT"},"fingerprint":{"sha1":"FA:57:55:32:39:27:BE:52:13:F1:47:EF:8C:93:FF:58:BA:18:4C:90","sha256":"73:E9:59:6D:11:B3:62:4B:49:0F:14:DA:FE:13:00:B8:A4:4A:49:F6:F1:90:F3:15:30:30:B2:5D:16:2E:69:8C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pornochika.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 11 Oct 2026 21:25:43 GMT\r\nContent-Type: image/vnd.microsoft.icon\r\nContent-Length: 1422\r\nConnection: keep-alive\r\nLast-Modified: Fri, 19 Jun 2020 07:13:57 GMT\r\nETag: \"58e-5a86aa2f197e9\"\r\nAccept-Ranges: bytes\r\nStrict-Transport-Security: max-age=31536000;\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1422,"size_decoded":1720,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 32x32, components 3","md5":"2da4f77c53b33ff83bbf86bb555c4ef1","sha1":"b0845df5b5099bd59548a6cd38a0fcb4b73a85a4","sha256":"9bb5530264f589df04b6ebee697a86cd18c9145417d91be5757b90dc376c7413","sha512":"35514ff2adc83865843c55db9b99d8ca42c67083d3d88675102e242930162256716e672fb253e2aadc7efe9f4fc8ef5653a1857fb3f1ce40cc94995d1b40e248","ssdeep":"","tlshash":"2821eaf96a019760ce33d6f6634121f591d70e4d7e456a067e6291a3c779dc598081cc","first_seen":"2025-06-23T12:48:32.827958Z","last_seen":"2026-10-11T21:28:39.877572Z","times_seen":44,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/videojs-contrib-hls/5.10.1/videojs-contrib-hls.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:50.751Z","timestamp":1791753950751,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /ajax/libs/videojs-contrib-hls/5.10.1/videojs-contrib-hls.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.cdn2026.cc/pic/0306/h5732198543992398.jpg","fqdn":"img.cdn2026.cc","domain":"cdn2026.cc","tld":"cc"},"ip":{"addr":"104.21.3.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.291Z","timestamp":1791753938291,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn2026.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 07:21:41 GMT","end":"Tue, 22 Dec 2026 07:21:40 GMT"},"fingerprint":{"sha1":"51:B1:1B:DB:94:D1:45:71:6F:DB:0A:DE:54:C8:A1:9F:95:0D:90:7D","sha256":"71:C8:94:3D:DD:47:FD:CF:57:1F:B7:6D:73:21:A5:32:05:46:92:04:B0:29:4B:CE:40:6B:C5:03:5E:65:6E:DA"}}},"request":{"raw":"GET /pic/0306/h5732198543992398.jpg HTTP/1.1\r\nHost: img.cdn2026.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 10 Jun 2025 05:01:52 GMT\r\netag: \"6847bc40-4d0e\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\nvia: 1.1 tb103:2 (W), 1.1 ld83:13 (W), 1.1 PS-CDG-016xa101:12 (W)\r\nx-ws-request-id: 6ac5f7cc_PS-CDG-016xa101_47343-2373\r\nx-px: ht PS-CDG-016xa101none\r\nage: 6548629\r\nexpires: Sun, 11 Oct 2026 21:26:38 GMT\r\ncache-control: max-age=14400\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BsRYRTap5%2FFKG2ZcypzAbeGMdsKM%2By2yTd51RtJAMFFJqPcdNib1wW6f%2Bzd7vuOTEsjyopCyPo3QGrVSZNryxjJB5uBIfZj3ZRq3JPQhPI9D779qde32enYPhiUG9aehSg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a490f043cd2f7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19726,"size_decoded":12264,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 172x172, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2023:03:05 13:38:36], progressive, precision 8, 300x200, components 3","md5":"e52c86c8c6ddd8a6f628b9fdf38814e2","sha1":"45efcc8cc0c8fa060fed99f5de0bbc5e53de779c","sha256":"dfaec21a1e7631011ca4e6b7e6d55d64a387c0a075875ecc3558de048213e6e8","sha512":"b06430911dea31475770354fa31e19e1d27ead31dc1cdf838d25864f5aceb2572c36ea77bff21735a41fd46d5c882127528ce609d6c9327f97e7ba2992ac092c","ssdeep":"384:DGrB+BQmtGrB+BQTwYRhwxc7VStbXw5ErOgwe3FEI:KqNMqGwed7VSpXwqrl/qI","tlshash":"60928e3e9ba0afb5eaec203da415c3a6ff10ed522e672957700c6e453f74b801d19306","first_seen":"2026-10-02T13:02:44.829765Z","last_seen":"2026-10-11T21:28:39.87945Z","times_seen":3,"resource_available":false,"data":null}},"time_used":509,"timings":{"blocked":156,"dns":1,"connect":17,"send":0,"wait":193,"receive":0,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"incofoods.com/favicon.ico","fqdn":"incofoods.com","domain":"incofoods.com","tld":"com"},"ip":{"addr":"104.21.66.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.495Z","timestamp":1791753943495,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"incofoods.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 23 Sep 2026 19:20:06 GMT","end":"Tue, 22 Dec 2026 20:18:47 GMT"},"fingerprint":{"sha1":"92:9A:CF:06:AC:0E:6F:8F:D6:71:41:11:53:82:2D:10:6E:04:3B:A6","sha256":"4E:02:D4:32:03:CF:D7:C5:26:5C:49:5C:34:D9:DD:C3:CE:E7:D1:25:37:D3:07:11:B9:31:A4:5D:05:1B:01:52"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: incofoods.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oAdB%2BL08QnT0cfvfAya5rnXcOARYo34XkLHPFmaepnyOuYAy%2F7GBQYzeShuf7Tr9eCp%2BBcaHueJkgg2P9%2FF3%2B%2BlKml4WjLtMxG1tzjW7%2Bj2xvToFw52adGWLXfG9FCYL\"}]}\r\nlast-modified: Sun, 23 Aug 2026 13:05:11 GMT\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 26 Aug 2027 07:50:39 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=3600\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"6a8af007-4276\"\r\nage: 4023364\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a490f0630b2456b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17014,"size_decoded":9338,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"cd6cd8f7d9af7267bf6b188d541291b4","sha1":"406bcab4e44f55cddba8f659d8be17c556d46d8a","sha256":"e47f1cd1409c2fc5dc18c4542b12d4e3777fe41137af62c112f059023e580a3e","sha512":"b5bab1c768b4e771c4981f75cd88ad8537828fb8ae988a7326099c81ed2979b502b577ae45e433b1ce647609bdbb14539a22f774cde6f3c645dd0f1f6b60dc02","ssdeep":"192:V/FSmX97q/jQYWDtwxt8ajnLm7JL28gBl9ffMephqQ/Uln813Y:twLQ1Dtwn61ilN/phj/o8m","tlshash":"82724c662aedf949c7860e3557a2612942b9cfe30c2d1b4bde6279e8be35fc43d81140","first_seen":"2026-04-16T16:55:58.986504Z","last_seen":"2026-10-11T21:28:39.798443Z","times_seen":60,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":4,"connect":19,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-11","alert":"Content Category / Application Block","trigger":"incofoods.com","verdict":"suspicious","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imagecdn.clips4sale.com/accounts99/91531/clip_images/previewlg_26277255.jpg","fqdn":"imagecdn.clips4sale.com","domain":"clips4sale.com","tld":"com"},"ip":{"addr":"64.210.135.148","port":443,"asn":30361,"as":"SWIFTWILL2","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.460Z","timestamp":1791753938460,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clips4sale.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 19 Dec 2025 00:00:00 GMT","end":"Tue, 19 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"53:76:6F:8D:99:DD:C6:D9:66:1F:1E:DD:67:E6:72:67:9C:85:C8:D5","sha256":"7D:18:3C:9D:2A:CF:4C:B8:26:22:25:91:E7:83:37:E6:AA:B1:8D:FC:33:8E:41:BE:09:75:91:CE:87:47:B8:E9"}}},"request":{"raw":"GET /accounts99/91531/clip_images/previewlg_26277255.jpg HTTP/1.1\r\nHost: imagecdn.clips4sale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\ncache-control: max-age=8640000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,OPTIONS\r\nalt-svc: h3=\":443\"; ma=3600\r\nx-cdn-diag: ams5-7099-4-1367559-h-0-0---;7403-18-3377696----0-2-1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54019,"size_decoded":54325,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 720x405, components 3","md5":"bd724212e7a2199a9ad215f1ddc7b965","sha1":"fdbfb89482c9e2e7d5a17d047d096c3e2f58d466","sha256":"e4c80356a12d3f527e4c5bf857482ffac0918f21c33323442abae7f91d2c9ed4","sha512":"0147563ed38e601b198e7fc858e4ecf8ec5d5494523495d549d3552656290724194c46122ec928a7b339c4e008579ec0e538e9c9d07f96ea4c5ad3224dc0acf5","ssdeep":"1536:yCKXH7QALFSSxxNGyx2DHpgFhA//xuzFu:yCK37QkF9xG82DWFh+/xj","tlshash":"2833f1b5e755dd17a0beee68ccacaaf0cdf14b003a4191a3621c3c3e325d6c84596dd9","first_seen":"2026-10-11T21:28:39.882442Z","last_seen":"2026-10-11T21:28:39.882442Z","times_seen":1,"resource_available":false,"data":null}},"time_used":710,"timings":{"blocked":621,"dns":2,"connect":18,"send":0,"wait":41,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l.clips4sale.com/favicon.ico","fqdn":"l.clips4sale.com","domain":"clips4sale.com","tld":"com"},"ip":{"addr":"104.18.24.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.565Z","timestamp":1791753943565,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"l.clips4sale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 21 Sep 2026 09:19:33 GMT","end":"Sun, 20 Dec 2026 10:19:30 GMT"},"fingerprint":{"sha1":"BA:E1:FE:7D:2D:DB:3B:2A:FB:1F:08:6D:66:63:67:C3:EB:DB:2F:10","sha256":"6F:24:E5:43:EB:8B:56:40:89:38:27:64:4B:55:97:6D:FB:62:E2:4D:2F:E7:C3:E0:A6:CC:C4:88:CB:48:37:6B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: l.clips4sale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/x-icon\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nlast-modified: Mon, 05 Oct 2026 09:20:13 GMT\r\netag: W/\"a2be-1a10b5d18c8\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 561726\r\nexpires: Tue, 10 Nov 2026 21:25:43 GMT\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=ctPhxv8T7HllqaYdW5tRUQp9C8jQ7vw8zuyjp9DProA-1791753943.6646438-1.0.1.1-1xEiQh68pkETnPSZdhFISzX0wtlsLdc4SBAc3vvo.8PZ6EIqQJZqrXQQZowhByuEn3vcCBQUkkhec79uiVfZBYrUfvw6oFyfvad20Tou4hG_s6yTyTqQP9UuJEpWY7_f; HttpOnly; SameSite=None; Secure; Path=/; Domain=clips4sale.com; Expires=Sun, 11 Oct 2026 21:55:43 GMT\r\nserver: cloudflare\r\ncf-ray: a490f063ec2e56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"ctPhxv8T7HllqaYdW5tRUQp9C8jQ7vw8zuyjp9DProA-1791753943.6646438-1.0.1.1-1xEiQh68pkETnPSZdhFISzX0wtlsLdc4SBAc3vvo.8PZ6EIqQJZqrXQQZowhByuEn3vcCBQUkkhec79uiVfZBYrUfvw6oFyfvad20Tou4hG_s6yTyTqQP9UuJEpWY7_f","quoted":false,"path":"/","domain":"clips4sale.com","expires":"2026-10-11T21:55:43Z","raw_expires":"Sun, 11 Oct 2026 21:55:43 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=ctPhxv8T7HllqaYdW5tRUQp9C8jQ7vw8zuyjp9DProA-1791753943.6646438-1.0.1.1-1xEiQh68pkETnPSZdhFISzX0wtlsLdc4SBAc3vvo.8PZ6EIqQJZqrXQQZowhByuEn3vcCBQUkkhec79uiVfZBYrUfvw6oFyfvad20Tou4hG_s6yTyTqQP9UuJEpWY7_f; HttpOnly; SameSite=None; Secure; Path=/; Domain=clips4sale.com; Expires=Sun, 11 Oct 2026 21:55:43 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":41662,"size_decoded":2426,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 100x100, 32 bits/pixel","md5":"088f7efcf8975a268095c2e2e25a4e6e","sha1":"8d6d7ec398a8b512964ab55019916359e810ef32","sha256":"5c94c7a2b8e389146b2a3285118f3777de917beae8754946ee389c2c9a695b66","sha512":"b13721e7727ed5ea063cdb5d4afab13ee647610895662e00c60a7c5ce761fdfa7181d5e50c82db36402df0e079dce86b728045e6b2cf5dca3d349502db24831b","ssdeep":"48:XkZHShtC6c5FsKnTVgSv8SpT2+l3/sKPhb22vV4V0SSdkkM:XkZyvKFZxgSvnpTQCB22vOP","tlshash":"961351d43526d41df8d046f01e63f1d82a503e046fa24d923cda3b9e16ba5d74ecca71","first_seen":"2023-07-16T03:59:46Z","last_seen":"2026-10-11T21:28:39.885599Z","times_seen":188,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":8,"connect":1,"send":0,"wait":13,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornodrochka.org/favicon.ico","fqdn":"pornodrochka.org","domain":"pornodrochka.org","tld":"org"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.585Z","timestamp":1791753943585,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pornodrochka.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"de.chezcathy.com/favicon.ico","fqdn":"de.chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"141.227.152.51","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:53.295Z","timestamp":1791753953295,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 07:52:05 GMT","end":"Sat, 28 Nov 2026 07:52:04 GMT"},"fingerprint":{"sha1":"C4:4F:9D:C9:09:9D:31:30:C3:4F:AE:A0:F3:18:7E:88:BF:F8:C7:B7","sha256":"81:05:CD:81:08:79:7C:F7:1F:83:1B:B5:4E:5C:E4:F8:F7:31:1C:F5:F7:00:A5:82:73:35:B8:D4:AB:52:95:7F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: de.chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:53 GMT\r\ncontent-length: 1406\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 11 Oct 2026 10:29:15 GMT\r\netag: W/\"1406-1791714555000\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1406,"size_decoded":2029,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel","md5":"8851a1b28ebe567b927c9ae6600a8fc6","sha1":"113da6a02dff45d4b9c0d3c9ae531445a8c7b687","sha256":"b545a5091485f5dd485f0e9d2abcd55a06b22f9359c6da8955b8da7b1d3c9212","sha512":"f438008028a354d1600c8af6a136e3991dcbaa188759f20c22a6c76a3170390c14578561d886272741f029f6f161b3711afb959385bbf49166ccf170e3edf95d","ssdeep":"","tlshash":"2121e1213397e353db451ef532244b944243d32906f79b9411e80685aa4f3301fbc373","first_seen":"2025-05-02T17:12:40.010154Z","last_seen":"2026-10-11T21:28:39.887263Z","times_seen":697,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjimg.cdn-xj.cc/upload/litpic/2025-03-28/1743165627_443.jpg","fqdn":"xjimg.cdn-xj.cc","domain":"cdn-xj.cc","tld":"cc"},"ip":{"addr":"138.199.37.232","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.505Z","timestamp":1791753938505,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xjimg.cdn-xj.cc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 10:02:56 GMT","end":"Mon, 28 Dec 2026 10:02:55 GMT"},"fingerprint":{"sha1":"C3:2B:25:ED:DB:3A:48:72:23:2D:AC:39:4B:2B:A2:3B:9D:31:0F:B7","sha256":"28:D4:8A:0A:FA:01:6B:06:FC:A8:31:EC:49:6D:F7:BF:AB:BD:50:EC:46:35:ED:9C:56:94:33:68:58:92:20:F7"}}},"request":{"raw":"GET /upload/litpic/2025-03-28/1743165627_443.jpg HTTP/1.1\r\nHost: xjimg.cdn-xj.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 49724\r\nserver: BunnyCDN-DE1-874\r\ncdn-pullzone: 5480810\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"b9829e4cf72ae2b1674412db3070c8f3\"\r\nlast-modified: Mon, 12 Jan 2026 13:28:27 GMT\r\nx-amz-id-2: 5AFS01fs3KIAHGdLR3IHOQIbwe2cC29qatfKpDms/zU/EaIbDLyZs+usftp+H9Cj6r6S/H5EXwHr\r\nx-amz-meta-mtime: 1743165627.750365394\r\nx-amz-request-id: F86C094E9BE4E32C:B\r\nx-wasabi-cm-reference-id: 1778152560 R104-U21.prod16.svy1 371255247:3612302:48\r\ncdn-proxyver: 1.58\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1076\r\ncdn-cachedat: 08/07/2026 00:30:35\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 0de357313443bdea232a427044f8cc57\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":49724,"size_decoded":50886,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 390x260, components 3","md5":"b9829e4cf72ae2b1674412db3070c8f3","sha1":"bd680cb63b1f2dbe800da4b104f670fe05253ae3","sha256":"2faec3b331acfd1857e0803779dd3c8212a95e6545b6900dd78bf3ce246e69b0","sha512":"0c9d72af1dda4ec231f924965dc858dc9539919bf40c148f383ba1d6921a0776aa460fb1adfaa823d04f52a40e05b56181bd7ccb29d378259ab6258bdba042dd","ssdeep":"1536:Ra9X9J47DumNooJY+gkvmWXZns097OxqSx8:U9QD3q+g6mWXC0QwSx8","tlshash":"7c230204f6dc76fa9afa1a3b5af1cce6711a8940fb33e1593464605131ef77484a1f21","first_seen":"2026-09-10T13:07:41.066108Z","last_seen":"2026-10-11T21:28:39.889177Z","times_seen":6,"resource_available":false,"data":null}},"time_used":533,"timings":{"blocked":432,"dns":0,"connect":0,"send":0,"wait":24,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"xjimg.cdn-xj.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/ext/pre_9133905697.jpg","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"141.227.152.51","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.520Z","timestamp":1791753938520,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 07:52:05 GMT","end":"Sat, 28 Nov 2026 07:52:04 GMT"},"fingerprint":{"sha1":"C4:4F:9D:C9:09:9D:31:30:C3:4F:AE:A0:F3:18:7E:88:BF:F8:C7:B7","sha256":"81:05:CD:81:08:79:7C:F7:1F:83:1B:B5:4E:5C:E4:F8:F7:31:1C:F5:F7:00:A5:82:73:35:B8:D4:AB:52:95:7F"}}},"request":{"raw":"GET /ext/pre_9133905697.jpg HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6881\r\nlast-modified: Tue, 11 Jun 2024 06:03:12 GMT\r\netag: \"6667e8a0-1ae1\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6881,"size_decoded":7252,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"72abeeb534fb0289064b38e54f3344f3","sha1":"221297f0370ba92832d6f112a399c9c86b191f07","sha256":"4c1778dc0adddcc372dc966a1eb025943eb797aae0e5c97d084e85432338fafe","sha512":"ecd7b6f824013fb1db1805dc47c040bf78c14e1e63b36586b680d5acdc29397634a12f1904034681e59cc63e4ac7744e4f6a7db55309e2f7e0a6577d514e3baa","ssdeep":"192:E2kFAfUnBp1gF3hLCWW7gXisXRFjtLXSsJ:EAsnBpSF3JCvmi0FP","tlshash":"56e19fd397240209e59f0279842f5794c9408a838652aad65fd5770b932e6f04cbfad5","first_seen":"2025-01-25T07:21:07.148474Z","last_seen":"2026-10-11T21:28:39.895231Z","times_seen":65,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"de.chezcathy.com/favicon.ico","fqdn":"de.chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"141.227.152.51","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.303Z","timestamp":1791753943303,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 07:52:05 GMT","end":"Sat, 28 Nov 2026 07:52:04 GMT"},"fingerprint":{"sha1":"C4:4F:9D:C9:09:9D:31:30:C3:4F:AE:A0:F3:18:7E:88:BF:F8:C7:B7","sha256":"81:05:CD:81:08:79:7C:F7:1F:83:1B:B5:4E:5C:E4:F8:F7:31:1C:F5:F7:00:A5:82:73:35:B8:D4:AB:52:95:7F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: de.chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-length: 1406\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 11 Oct 2026 10:29:15 GMT\r\netag: W/\"1406-1791714555000\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1406,"size_decoded":2029,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel","md5":"8851a1b28ebe567b927c9ae6600a8fc6","sha1":"113da6a02dff45d4b9c0d3c9ae531445a8c7b687","sha256":"b545a5091485f5dd485f0e9d2abcd55a06b22f9359c6da8955b8da7b1d3c9212","sha512":"f438008028a354d1600c8af6a136e3991dcbaa188759f20c22a6c76a3170390c14578561d886272741f029f6f161b3711afb959385bbf49166ccf170e3edf95d","ssdeep":"","tlshash":"2121e1213397e353db451ef532244b944243d32906f79b9411e80685aa4f3301fbc373","first_seen":"2025-05-02T17:12:40.010154Z","last_seen":"2026-10-11T21:28:39.887263Z","times_seen":697,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":12,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dogsanimalxxx.club/favicon.ico","fqdn":"dogsanimalxxx.club","domain":"dogsanimalxxx.club","tld":"club"},"ip":{"addr":"172.67.160.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.508Z","timestamp":1791753943508,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dogsanimalxxx.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 10:00:08 GMT","end":"Thu, 12 Nov 2026 10:57:49 GMT"},"fingerprint":{"sha1":"F2:52:3D:7E:95:7F:9A:2B:EF:71:55:69:3D:38:A5:6A:84:28:CD:51","sha256":"67:2E:00:9F:49:00:30:8F:88:73:F8:DB:79:BE:7E:B3:70:AE:55:30:DC:EF:A6:98:59:9C:C5:7C:DE:B0:C4:9D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: dogsanimalxxx.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: Accept-Encoding\r\npriority: u=4,i\r\nage: 35\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vwB62WdMWBwZvv1QVAqAj5ITBC0Dd7%2BXbbewJ4Oi%2BoM6Jimy81XSC30kMcuSGWRrJVna5mfPoyP%2FiQlzSUdTm5Hgy4MQXdSOhYDvHjuQ%2FRDdzm%2Fm0%2FVjDl7Lxi%2Ffr4IE5oEL52Q%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a490f062fa46569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.xxibaocdn.com/video/m3u8/2026/05/11/e5_90_83_e7_93_9c_e7_88_86_e6_96_99/61576_cover_2026-05-11_234411.jpg","fqdn":"img.xxibaocdn.com","domain":"xxibaocdn.com","tld":"com"},"ip":{"addr":"162.209.190.196","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.442Z","timestamp":1791753938442,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.xxibaocdn.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 15:13:41 GMT","end":"Fri, 25 Dec 2026 15:13:40 GMT"},"fingerprint":{"sha1":"87:96:F8:C7:25:D2:6A:6F:2E:7C:8E:3D:E1:29:5D:1A:8B:AE:B8:8F","sha256":"6F:3D:C6:A4:68:5E:CD:E6:A1:A6:04:B5:67:00:56:EB:EF:03:FB:6F:FF:BA:5C:05:C5:B5:E2:76:B1:96:7C:33"}}},"request":{"raw":"GET /video/m3u8/2026/05/11/e5_90_83_e7_93_9c_e7_88_86_e6_96_99/61576_cover_2026-05-11_234411.jpg HTTP/1.1\r\nHost: img.xxibaocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 11 May 2026 18:24:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a021ee6-55ef6\"\r\nexpires: Tue, 10 Nov 2026 21:25:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":351990,"size_decoded":345320,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2880x1620, components 3","md5":"3d5a0c6c7445f4dbfa5aad420a9e293a","sha1":"820c66e49c00c0f045dea3044bf02fbfb04ccfe1","sha256":"c64c25845f038aafff2b29ad23cd58b4fe3017b1af0168fd401a08c62da2efce","sha512":"1e4b656b5300bfec87caf7b2f2b27beb6990427778eb7b51c7900709299026f04765cecfc4cd2d1b802ac0b3895d3587255cd7b883f5783b2654dbfdfc80f30e","ssdeep":"6144:q6i5qvTby9RmxdzcR/8efzfoIj6D/3VNXFSfVcUAAMyNLrCampW:3jqgzcREefzNjs/VVFX8tL+aoW","tlshash":"7e74135b1a56d9c2f82edbe47d07505a8f1a6f38e1867eee4d20ae813c601742cfd126","first_seen":"2026-06-25T11:17:56.92976Z","last_seen":"2026-10-11T21:28:39.8985Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1096,"timings":{"blocked":363,"dns":0,"connect":0,"send":0,"wait":733,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vjs.zencdn.net/7.8.2/video-js.css","fqdn":"vjs.zencdn.net","domain":"zencdn.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:50.756Z","timestamp":1791753950756,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /7.8.2/video-js.css HTTP/1.1\r\nHost: vjs.zencdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/ext/pre_4649349251.jpg","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"141.227.152.51","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.244Z","timestamp":1791753938244,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 07:52:05 GMT","end":"Sat, 28 Nov 2026 07:52:04 GMT"},"fingerprint":{"sha1":"C4:4F:9D:C9:09:9D:31:30:C3:4F:AE:A0:F3:18:7E:88:BF:F8:C7:B7","sha256":"81:05:CD:81:08:79:7C:F7:1F:83:1B:B5:4E:5C:E4:F8:F7:31:1C:F5:F7:00:A5:82:73:35:B8:D4:AB:52:95:7F"}}},"request":{"raw":"GET /ext/pre_4649349251.jpg HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14377\r\nlast-modified: Wed, 12 Jun 2024 16:54:36 GMT\r\netag: \"6669d2cc-3829\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14377,"size_decoded":14749,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"6d4a44bd0fd671b7bf6181a567da9f7c","sha1":"f8c4c1c7ae852228ea881149ea2fddc9ab813628","sha256":"fd46110572b2ee609c1778bc527b3141d3d4ce403cc0c60f745cae4e25ea13f7","sha512":"edf5ce9b588c02bcb795641475132f5526d80413cfa1778d9c7e243d72b8b6dd83b2362d918d0d20bb44f362b27348e3081801478973d3a4bbd8128c47228da6","ssdeep":"384:HHQQ3kS+vLMn2Ll1M0Fpoy6VX7q2AxIUYaa+O:HQS+vL1LXM0volXBWa+O","tlshash":"3952b0416a929d8dce1c0f284aa0669943e4c9153e5c17fd192b87773bbd0c6a4fc0eb","first_seen":"2025-02-15T18:15:16.804602Z","last_seen":"2026-10-11T21:28:39.901711Z","times_seen":5,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":360,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdig.com/media/videos/tmb/000/004/781/1.jpg","fqdn":"fapdig.com","domain":"fapdig.com","tld":"com"},"ip":{"addr":"104.21.6.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.460Z","timestamp":1791753938460,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdig.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 16:47:04 GMT","end":"Tue, 01 Dec 2026 17:44:49 GMT"},"fingerprint":{"sha1":"7F:FE:16:D7:B5:7A:51:B5:57:76:D9:DF:3E:3F:3F:3C:88:DE:BE:AC","sha256":"33:F9:D3:E4:70:FF:A2:AF:F0:F2:6D:FF:F3:7B:A3:81:44:DC:7B:80:A3:B6:7D:7F:36:81:6C:15:75:64:E3:C9"}}},"request":{"raw":"GET /media/videos/tmb/000/004/781/1.jpg HTTP/1.1\r\nHost: fapdig.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11316\r\nserver: cloudflare\r\nlast-modified: Sat, 12 Mar 2016 18:45:38 GMT\r\netag: \"56e463d2-2c34\"\r\naccept-ranges: bytes\r\nage: 4314\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SWB98QLqCFZyuEQ5XISRbVIcSadSjZBmO9CRmjrVDKFOjihjlALWnX7RpPNR%2FsVbVGGd4IdWcqqbFyKocliGcFehktCpoz7%2BhneOwE%2BfyR0LOayL%2F71n4b5jbStw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a490f043d9d60731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11316,"size_decoded":11986,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 320x240, components 3","md5":"cf88a480c02d508575052beade92580f","sha1":"43e94e265bda037d55fb9e7055cc09973bf5a312","sha256":"7033902c9fe29f20c019dda6b7da5a6bf0e62d68b34da1936ba17bb9b82f549e","sha512":"fe84da6689b96bf598992d84baf6acf6b84dc1e3462e6b9273ee6b0bdd822c66eb6c386514bc4122889719d730844634b9d9f9edcdb9afc8f21640a62e865be5","ssdeep":"192:Dpuk671/2FgpjzzuGZAOkYddLjrLuc3N82w/bbwyqSn7ZPoi0Cckfj0:DW7QFgdzCYAO9d3PuPlhqgPzFcCj0","tlshash":"cc32b021734390d60a8e83bb0293fe05f3945745b1a131d52d5d8cabbf744ac59a869f","first_seen":"2026-08-26T12:04:01.363573Z","last_seen":"2026-10-11T21:28:39.904765Z","times_seen":6,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clariontoday.com/favicon.ico","fqdn":"clariontoday.com","domain":"clariontoday.com","tld":"com"},"ip":{"addr":"104.21.4.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:53.291Z","timestamp":1791753953291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clariontoday.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 23:48:13 GMT","end":"Wed, 16 Dec 2026 00:46:47 GMT"},"fingerprint":{"sha1":"2F:B7:00:8A:A9:4E:5A:82:02:57:5B:EA:9F:87:50:AD:37:43:BE:14","sha256":"E4:6A:74:34:32:92:48:9D:5B:3C:16:FC:35:D6:B2:81:67:3F:BA:E6:DF:C2:7C:ED:F2:77:6B:5E:DD:97:C3:53"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: clariontoday.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:53 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wqz4nkWAmoK5xxj31CsIvFat8pey8OX4o7cfpt8vOcx1MA57GllMvfOmVTpMMcT4TrfO68j8cPOHanzXQUHMe2Hd9MLrvcoccPWMmBMRlgTlzmtO9e9%2FBBdqbdwcKSKmnahU\"}]}\r\nlast-modified: Wed, 23 Sep 2026 08:12:46 GMT\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 24 Sep 2027 04:55:22 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=3600\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"6ab389fe-4276\"\r\nage: 1528230\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a490f0a01d075694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17014,"size_decoded":9330,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"cd6cd8f7d9af7267bf6b188d541291b4","sha1":"406bcab4e44f55cddba8f659d8be17c556d46d8a","sha256":"e47f1cd1409c2fc5dc18c4542b12d4e3777fe41137af62c112f059023e580a3e","sha512":"b5bab1c768b4e771c4981f75cd88ad8537828fb8ae988a7326099c81ed2979b502b577ae45e433b1ce647609bdbb14539a22f774cde6f3c645dd0f1f6b60dc02","ssdeep":"192:V/FSmX97q/jQYWDtwxt8ajnLm7JL28gBl9ffMephqQ/Uln813Y:twLQ1Dtwn61ilN/phj/o8m","tlshash":"82724c662aedf949c7860e3557a2612942b9cfe30c2d1b4bde6279e8be35fc43d81140","first_seen":"2026-04-16T16:55:58.986504Z","last_seen":"2026-10-11T21:28:39.798443Z","times_seen":60,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"clariontoday.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image/","fqdn":"image","domain":"image","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:40.038Z","timestamp":1791753940038,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: image\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Storage-Access: none\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"domain.expiring-soon.xyz/contents/videos_screenshots/33000/33669/preview.jpg","fqdn":"domain.expiring-soon.xyz","domain":"expiring-soon.xyz","tld":"xyz"},"ip":{"addr":"103.224.182.213","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:41.000Z","timestamp":1791753941000,"http_version":"HTTP/1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--kcrx11m.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 23:22:29 GMT","end":"Thu, 10 Dec 2026 23:22:28 GMT"},"fingerprint":{"sha1":"FD:2D:97:14:15:9F:0B:69:C2:0E:F7:E9:35:60:69:3D:D1:94:3B:1D","sha256":"5E:51:6C:A9:6E:AD:79:2B:D2:20:83:37:B8:9A:83:5E:AF:05:48:A7:F1:21:95:31:1E:7D:60:33:42:5C:27:6C"}}},"request":{"raw":"GET /contents/videos_screenshots/33000/33669/preview.jpg HTTP/1.1\r\nHost: domain.expiring-soon.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.0 403 Forbidden\r\ncache-control: no-cache\r\ncontent-type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mydesii.com/favicon.ico","fqdn":"www.mydesii.com","domain":"mydesii.com","tld":"com"},"ip":{"addr":"104.21.32.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.263Z","timestamp":1791753943263,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mydesii.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 09:31:18 GMT","end":"Mon, 30 Nov 2026 10:29:51 GMT"},"fingerprint":{"sha1":"A4:D5:52:91:BE:2E:82:AF:F9:12:4D:2E:47:DE:C8:25:73:40:AA:BD","sha256":"F5:D0:59:1D:A0:84:8A:00:B0:D5:0C:41:81:51:79:13:8D:A5:83:80:07:50:02:33:3A:9C:F2:F6:55:87:EC:9C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.mydesii.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlink: \u003chttps://www.mydesii.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-redirect-by: WordPress\r\nlocation: https://www.mydesii.com/wp-content/uploads/2024/11/cropped-icon-32x32.png\r\nx-litespeed-cache-control: public,max-age=604800\r\nx-litespeed-tag: 681_default,681_URL.b54ff2eddcb0060bcd786ce388d8d4d7,681_\r\nx-litespeed-cache: miss\r\nx-powered-by: CyberPanel-OLS/2.5.0\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=On4QPLHplgpVr88zEvdrO9HOyaBSNzAAWJ4aiWAda6e5Bbtpdg3etbqhtLZZ9hEtEu6kouQhx%2B6fqnszYgI5qh9N6MdyXaYfm%2BTVy3s9q61orsr0L7POeZEKqnFbFX8khHQ%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a490f0617eb7120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huttonsrv.com/favicon.ico","fqdn":"huttonsrv.com","domain":"huttonsrv.com","tld":"com"},"ip":{"addr":"104.21.37.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:53.325Z","timestamp":1791753953325,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huttonsrv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 07:51:21 GMT","end":"Wed, 23 Dec 2026 08:49:56 GMT"},"fingerprint":{"sha1":"AA:8F:80:5C:BB:70:FC:E8:3C:1E:D1:BF:18:EA:35:6B:AB:69:1B:A0","sha256":"45:00:D7:71:86:3F:9B:1D:5D:52:6E:49:70:1C:1F:35:46:69:A6:94:D0:BC:4E:AD:BC:2A:47:85:3A:09:E5:70"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: huttonsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:53 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=szjyUujPdgODMNQTqt7W5H8l0xAFwcDLCC6v%2FUFRcs6BQZTHNCNZXzBoKn2XxgGLZ60icahn%2FSeOUfCVaHHGA3g2gloBEtCZ3B3hPKPOvrn6rtFT1Zn8FHCD0%2BvAsECp\"}]}\r\nlast-modified: Thu, 09 Apr 2026 08:06:38 GMT\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 29 Aug 2027 02:13:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=3600\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"69d75e0e-4276\"\r\nage: 3784413\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a490f0a068f156b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17014,"size_decoded":9330,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"cd6cd8f7d9af7267bf6b188d541291b4","sha1":"406bcab4e44f55cddba8f659d8be17c556d46d8a","sha256":"e47f1cd1409c2fc5dc18c4542b12d4e3777fe41137af62c112f059023e580a3e","sha512":"b5bab1c768b4e771c4981f75cd88ad8537828fb8ae988a7326099c81ed2979b502b577ae45e433b1ce647609bdbb14539a22f774cde6f3c645dd0f1f6b60dc02","ssdeep":"192:V/FSmX97q/jQYWDtwxt8ajnLm7JL28gBl9ffMephqQ/Uln813Y:twLQ1Dtwn61ilN/phj/o8m","tlshash":"82724c662aedf949c7860e3557a2612942b9cfe30c2d1b4bde6279e8be35fc43d81140","first_seen":"2026-04-16T16:55:58.986504Z","last_seen":"2026-10-11T21:28:39.798443Z","times_seen":60,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ansuko.net/wp-content/uploads/2024/12/uefucg9u_header.jpg","fqdn":"ansuko.net","domain":"ansuko.net","tld":"net"},"ip":{"addr":"172.67.138.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.529Z","timestamp":1791753938529,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ansuko.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 03:22:49 GMT","end":"Sun, 27 Dec 2026 04:22:39 GMT"},"fingerprint":{"sha1":"A0:10:86:46:2D:F7:1F:70:5D:3F:18:DA:F2:25:60:B7:95:52:91:51","sha256":"D1:40:2D:15:A1:99:35:EB:08:96:5E:08:6F:BD:B6:49:D2:71:03:06:C7:51:81:B3:9A:B0:AB:A4:2E:3C:B1:20"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/uefucg9u_header.jpg HTTP/1.1\r\nHost: ansuko.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dsi%2FSL0uHNxPb25s1ZrLfTTPx%2F11%2F4IPGXs7SiM2ns%2FdxSsKwBatoCrHIg12%2BZ3%2FS%2FLBzSe1zFe4GaSqlfDjxmrLM2n2d6S6P3KXlSf2cTXwvLAeEGUpmVDv%2BOwK\"}]}\r\npriority: u=5,i\r\nage: 22000\r\nlast-modified: Sun, 11 Oct 2026 15:18:58 GMT\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a490f043e89d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142277,"size_decoded":142913,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 888x666, components 3","md5":"84634255c84be6fa9b915ced0eb0d889","sha1":"c4ea964c8b8b801f16e1e1ff6ab4c8131996e55c","sha256":"1af4f2dfcc0ecd4dd80283b90195d3275b66e9e033bbf81b612c4021e544b775","sha512":"1988ad765e05986ae05c080dc42faf36d140231120ce12201e4289c7b52664cc4cb256b5fc081aca67af400f11c59fb607bbd1a7e257f2c350a985d534b5df14","ssdeep":"3072:1eFDRVxDmtyp3w2CQi6vOtQKPTa/whxNvEcXoVFGsC23LbO:1sDRVxSwpDCQPG2KPWwhxNvEcXoVFLCp","tlshash":"a3d312306918b8f5381759ba9205ed876790b610122d391373f8cfe3d19a7af6ecf252","first_seen":"2025-11-13T10:13:26.63682Z","last_seen":"2026-10-11T21:28:39.907865Z","times_seen":9,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stickamvids.net/photos/2019/01/10321_0_300.jpg","fqdn":"stickamvids.net","domain":"stickamvids.net","tld":"net"},"ip":{"addr":"80.209.253.45","port":443,"asn":204196,"as":"Abelohost BV","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.232Z","timestamp":1791753938232,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stickamvids.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 04:23:12 GMT","end":"Wed, 02 Dec 2026 04:23:11 GMT"},"fingerprint":{"sha1":"98:67:FB:F7:A6:17:7D:FB:15:4F:64:5B:81:34:26:16:5C:F4:8C:E9","sha256":"C2:93:B8:02:1D:86:AD:4D:AA:D4:7A:F8:C0:5D:51:5F:BE:5C:6A:D3:E4:9C:E9:19:28:88:39:D8:B8:92:B8:97"}}},"request":{"raw":"GET /photos/2019/01/10321_0_300.jpg HTTP/1.1\r\nHost: stickamvids.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5183\r\nlast-modified: Wed, 14 Feb 2024 17:08:38 GMT\r\netag: \"65ccf396-143f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5183,"size_decoded":5529,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 230x172, components 3","md5":"cd88d0ca02be98013a2b4868a3c129a7","sha1":"cc4183fb3b6a957998f39258320bdb612be90ad6","sha256":"2dbff6e4412221c19c4e35395d2149145d6aa062cb9e3f70cf977ac19ba78298","sha512":"07179963bcfc16343fcfa6c9a7c6df76430508d30089df28454b78161b953e93faea963db250a41d358acb64d1639cf124da380f29b2e9d5e68e7c3599d82951","ssdeep":"96:LahQESyEZBQxhm+KzTS2wRvciyRG2yYR3vHR5ZZFiZrPZWqgi2:LQQa+qxh4zT5cRyPR5FgrhWF/","tlshash":"bbb18d9f67098ea193da0e2d5ad03991d89ff6213b85affc40500e79e109cf2446d64f","first_seen":"2024-08-19T22:28:21.457031Z","last_seen":"2026-10-11T21:28:39.910056Z","times_seen":26,"resource_available":false,"data":null}},"time_used":842,"timings":{"blocked":722,"dns":1,"connect":25,"send":0,"wait":22,"receive":4,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.cdn202608.com/videos/202411/18/673ac41094b74ce10336d73a/cover.webp","fqdn":"img.cdn202608.com","domain":"cdn202608.com","tld":"com"},"ip":{"addr":"206.82.6.214","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.547Z","timestamp":1791753938547,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.cdn202608.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 19:31:53 GMT","end":"Fri, 20 Nov 2026 19:31:52 GMT"},"fingerprint":{"sha1":"EB:23:EB:59:22:16:1F:93:2B:E6:D3:F0:B0:BF:B4:D6:1C:05:26:DB","sha256":"67:AB:63:8F:25:28:A9:FA:6B:F6:39:B9:DA:54:74:E9:F2:AF:46:BB:2A:60:BB:58:C7:23:C7:25:E5:61:14:9C"}}},"request":{"raw":"GET /videos/202411/18/673ac41094b74ce10336d73a/cover.webp HTTP/1.1\r\nHost: img.cdn202608.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-headers: X-Requested-With, Content-Type\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ndate: Sun, 11 Oct 2026 21:25:40 GMT\r\netag: W/\"75d0-1a0f98595a0\"\r\nlast-modified: Thu, 01 Oct 2026 22:11:16 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: Caddy\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-length: 30160\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30160,"size_decoded":30890,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 426x239, components 3","md5":"7f472ca6c9d6a702091d23114d3627ad","sha1":"591bcd5d001f6a924f9643e9d763e0c0bfeed7db","sha256":"b9eb5e00b687fb067fa7ec446917bf73729bea2048f66b07b7464b6da0538360","sha512":"5ec3405e9141a0462f0116609d43c4fe557da4466a4e62e6c095fe463d97c1b01156012481efd27aac54a9dc87c5171efca959337f3bbc59888f4ad083b58260","ssdeep":"768:RY37sTbxkd2AZIEx5e5eVhu1BSNUg6KOXxWs+LLi+br:RywT1kd2dO5dbu3+D+MZP","tlshash":"1bd2e0cc4b2631697b6d3cf382a8c74a98805cd3f8d046515e76e7720689ac1b6f3b5a","first_seen":"2023-08-15T20:52:10Z","last_seen":"2026-10-11T21:28:39.910983Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1822,"timings":{"blocked":883,"dns":1,"connect":186,"send":0,"wait":168,"receive":228,"ssl":344},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"img.cdn202608.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pub-97b3682e3af64300bc04b2cd7f162f85.r2.dev/a7067d47_84388056_137e.png","fqdn":"pub-97b3682e3af64300bc04b2cd7f162f85.r2.dev","domain":"pub-97b3682e3af64300bc04b2cd7f162f85.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:41.039Z","timestamp":1791753941039,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2.dev","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 05:31:57 GMT","end":"Sun, 06 Dec 2026 05:31:56 GMT"},"fingerprint":{"sha1":"D8:E0:2D:AF:57:03:9A:11:FD:1D:8A:1C:DB:25:40:82:3D:34:D8:13","sha256":"BB:31:54:78:77:B8:BF:E0:D0:02:9D:1C:7A:55:28:80:33:85:00:EB:84:D5:A5:ED:60:57:9B:3F:86:1F:1C:C9"}}},"request":{"raw":"GET /a7067d47_84388056_137e.png HTTP/1.1\r\nHost: pub-97b3682e3af64300bc04b2cd7f162f85.r2.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 451 Unavailable For Legal Reasons\r\nDate: Sun, 11 Oct 2026 21:25:41 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReferrer-Policy: same-origin\r\nX-Frame-Options: SAMEORIGIN\r\nServer: cloudflare\r\nCF-RAY: a490f053ed33b500-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"451","status_text":"Unavailable For Legal Reasons","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdig.com/favicon.ico","fqdn":"fapdig.com","domain":"fapdig.com","tld":"com"},"ip":{"addr":"104.21.6.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.347Z","timestamp":1791753943347,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdig.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 16:47:04 GMT","end":"Tue, 01 Dec 2026 17:44:49 GMT"},"fingerprint":{"sha1":"7F:FE:16:D7:B5:7A:51:B5:57:76:D9:DF:3E:3F:3F:3C:88:DE:BE:AC","sha256":"33:F9:D3:E4:70:FF:A2:AF:F0:F2:6D:FF:F3:7B:A3:81:44:DC:7B:80:A3:B6:7D:7F:36:81:6C:15:75:64:E3:C9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: fapdig.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://fapdig.com/faviconico/\r\nserver: cloudflare\r\nset-cookie: ASPro_1382933ca042bef776e8100bd5eb8ac5=eua2rapebqe5c30hanoa7k8oeb; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kyduZaHEt0CfNZC2qpfcwC14ob3BjJcvnrL6YObTN3Xc%2FNpCdlWdwZd0n9GvWCYSetS4cAN1UqM97XEaKCjyIoqZ6c77CBLpwMcLtDJ%2FYbhz9t0wijcBr7ucQpP3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a490f0623ac70731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"ASPro_1382933ca042bef776e8100bd5eb8ac5","value":"eua2rapebqe5c30hanoa7k8oeb","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"ASPro_1382933ca042bef776e8100bd5eb8ac5=eua2rapebqe5c30hanoa7k8oeb; path=/"}],"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoosex.cc/favicon.ico","fqdn":"zoosex.cc","domain":"zoosex.cc","tld":"cc"},"ip":{"addr":"104.21.18.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.567Z","timestamp":1791753943567,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoosex.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 20:53:30 GMT","end":"Tue, 08 Dec 2026 21:53:18 GMT"},"fingerprint":{"sha1":"DF:21:74:61:02:FC:3C:32:E6:BA:74:B1:A0:2B:44:AF:A5:83:2C:0F","sha256":"BB:AF:C8:8D:0A:BB:11:21:CE:9B:26:89:DF:5A:49:F3:99:60:BE:7B:D3:5D:EA:B7:A6:BE:2E:53:6F:5C:9C:37"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: zoosex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a5jD7xuhn4M3CoSF9yiFi88sYEYnNJWa98qQPRuCAgmmqMOakq8nJ4OeZ7AlwJRpXDRV75tx7xJ%2FGb65D7l6g0dL1k4brqWJu9EUlxgIeDaC7PRueTuuqJETYT0%3D\"}]}\r\ncontent-encoding: zstd\r\nlast-modified: Thu, 14 Sep 2023 05:58:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"3aee-6054b5c2237b2\"\r\nx-request-id: dbeb7e7f12694f40a7ca42460b237eab\r\nage: 4414\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a490f064694956b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15086,"size_decoded":5974,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"3d501ecc61b7d3ba5986e939138f0d68","sha1":"840e564b66523f39377a6da37e19902bda53c6a2","sha256":"36b63153ccb84c5fa606621163c12491101b4d6c0f1c50f77a0c426b1712ffb7","sha512":"675f0ef845d13ceb87515e9b8146f1e88775ad81ffe305f2cf4ca52bc64bb4e501cbb179de6f9c1e125052e4170d2675e9d32893cbf49d8e50ed5b1710ff2a31","ssdeep":"384:j86Q+8WQKPNFVj65Mh1h/6gSBcvS1PaLfOBqq77twylhH+RojQj:AvWQKPNFVj65Mh1h/6gSBcvS1PaLfaNQ","tlshash":"2362860f6bb6d422c22131f97ba332bd35aed412a8694b537614a4dcddb83643e8b1d4","first_seen":"2023-06-06T22:34:50Z","last_seen":"2026-10-11T21:28:39.911861Z","times_seen":15,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":18,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eroshorts.site/erosceny/screen/dochka-sprovocirovala-otca-na-incest-0.jpg","fqdn":"eroshorts.site","domain":"eroshorts.site","tld":"site"},"ip":{"addr":"89.105.223.48","port":443,"asn":24875,"as":"NovoServe B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.264Z","timestamp":1791753938264,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eroshorts.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 21:41:19 GMT","end":"Fri, 27 Nov 2026 21:41:18 GMT"},"fingerprint":{"sha1":"B5:0C:F0:B7:71:8E:6F:24:32:E5:4B:D7:54:83:B2:4B:67:72:48:77","sha256":"2A:20:C1:C3:6F:15:DB:F1:33:9D:16:19:BA:58:E0:27:E6:43:BE:6B:3E:82:BD:F3:48:2F:FB:50:0F:30:20:16"}}},"request":{"raw":"GET /erosceny/screen/dochka-sprovocirovala-otca-na-incest-0.jpg HTTP/1.1\r\nHost: eroshorts.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 02 Mar 2026 18:51:19 GMT\r\netag: W/\"69a5dc27-2ceb\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11499,"size_decoded":11602,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x240, components 3","md5":"07a58ea341b10c3c1b8ece9d1579dbdd","sha1":"409558e3fac7c87699a687504e27c01086903fb1","sha256":"7ce58199f6103ba27e4e3eec296b2e410e762edd0c6dad4a6b11d63ff0123624","sha512":"370f7207d8fc97101e39850198e667d61271ed28c1647021286792d8813700278b10c96df1d81c260565ca05b2d4db228f7100e092416fed84b8062638e5c928","ssdeep":"192:d2rq57WIXanSubpjPWcfj+gODMLuKSc46yvKjBs/FZqVg35fDZtAp:jhllZfhFNKjm/W67LAp","tlshash":"a632ae090351b19df82d2d721f9bc133be7489719c53aa627221331bff0e8e28b1a0d6","first_seen":"2025-06-29T12:28:15.923461Z","last_seen":"2026-10-11T21:28:39.914381Z","times_seen":31,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":370,"dns":1,"connect":23,"send":0,"wait":21,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooporner.com/media/videos/tmb/000/001/792/1.jpg","fqdn":"zooporner.com","domain":"zooporner.com","tld":"com"},"ip":{"addr":"104.21.72.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.473Z","timestamp":1791753938473,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooporner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 05:01:36 GMT","end":"Sat, 12 Dec 2026 06:00:11 GMT"},"fingerprint":{"sha1":"4F:58:34:DC:EB:12:07:9B:AB:EC:9C:AE:6E:19:DD:72:4D:30:70:94","sha256":"FE:D0:D9:DF:63:6B:FC:DB:CE:48:28:ED:9C:1B:92:57:EA:38:C2:DA:38:2C:69:63:11:D7:82:E2:9C:7C:0F:FF"}}},"request":{"raw":"GET /media/videos/tmb/000/001/792/1.jpg HTTP/1.1\r\nHost: zooporner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7380\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Mar 2023 16:19:32 GMT\r\netag: \"6421c214-1cd4\"\r\naccept-ranges: bytes\r\nage: 1150\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0xRnwaeMRhnQl6LAj6G8O1%2FJq0f2F6aEIjjCv7%2FCiPCc5zRtHH2a07o119Ama9WJdHbreyVHS3NEYx78LRXiXglnRMKf2g8ug94nKbupf5s65op%2B57oym1U9pzX%2FAh2T\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a490f0449acb5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7380,"size_decoded":8053,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 320x240, components 3","md5":"011dea0f4c7be03778043f24b33c3967","sha1":"51869625010b57b9de280191beda33e49893ced9","sha256":"f58cf230473fa61bfeeb8b82bd3de34b6ac9d18e9fb0cf00f6d908d04cbecc47","sha512":"a4e1ae172c391494361f40980c1841819097cf888a5126e821c24126f9f531afd97685ad846e47e2ddfc29641e7e9feeb2d5a10fc2a1d481f96f9646e75382f2","ssdeep":"96:wyerh5Bpbeu3dzbNZMM9JYFPCxS4f+3wLOhComgX6UX3U9l4LxfD3rpgUO9IhBjv:E7BptdPNZCFqU42JWgqUXyy6ehZlSDu","tlshash":"15e1ae80f52000f5d2633b68ea0836b7519ea34b8da4bb18bc3749ddbc3f3052a45233","first_seen":"2026-06-28T18:40:42.498092Z","last_seen":"2026-10-11T21:28:39.915119Z","times_seen":3,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":5,"connect":16,"send":0,"wait":17,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fqjpg10.top/upload/vod/20251002-1/898199f6a0414818d330c1e58284e5b8.png","fqdn":"fqjpg10.top","domain":"fqjpg10.top","tld":"top"},"ip":{"addr":"23.134.76.191","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.514Z","timestamp":1791753938514,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fqjpg10.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 05:27:48 GMT","end":"Mon, 02 Nov 2026 05:27:47 GMT"},"fingerprint":{"sha1":"CE:28:80:B0:05:19:5C:8B:0B:3B:EC:8F:4D:FB:7C:6A:9C:16:0E:51","sha256":"92:80:CD:0C:A7:99:7A:96:A5:ED:DE:0F:9F:7B:C6:04:F5:36:1A:01:69:60:53:9D:3B:8F:14:E8:BF:FA:4B:29"}}},"request":{"raw":"GET /upload/vod/20251002-1/898199f6a0414818d330c1e58284e5b8.png HTTP/1.1\r\nHost: fqjpg10.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 11 Oct 2026 21:25:39 GMT\r\nContent-Type: image/png\r\nContent-Length: 356937\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Mar 2026 13:31:37 GMT\r\nETag: \"69b411b9-57249\"\r\nExpires: Sat, 17 Oct 2026 18:46:43 GMT\r\nX-Cache-Status: HIT\r\nCache-Control: max-age=2592000, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":356937,"size_decoded":357292,"mime_type":"image/png","magic":"PNG image data, 700 x 394, 8-bit/color RGBA, non-interlaced","md5":"187580e6cb70a427b876a597111d27fe","sha1":"7fc96e61646f94608a9b8203157be2783ba29a11","sha256":"42f793f7f4a1c7573c333fb01c918f2febfc555b77431477cbda7a866445a4d4","sha512":"c6867d41b6be328de88d1b23f0e9acf325af944cddeceee03caab989b6d91bee3df4e96cb30b9e5dbb56e2912394616bbe00ae4964f7487466d01b305b986fe3","ssdeep":"6144:Rtn/ZqjuVq7UsJfwOEaC8TfdBNcysQJGdhQlueO64qLd0Z+GKRV04rUtcn:Xn/ZqiVqosJfwT4fdkluEhQluB64quQD","tlshash":"5c74239cd980427ea67fcd8d7e20d4693e60f6c843248cc95fa883d6cead6c8dd8d552","first_seen":"2026-06-30T06:25:24.196286Z","last_seen":"2026-10-11T21:28:39.915801Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1681,"timings":{"blocked":851,"dns":1,"connect":124,"send":0,"wait":166,"receive":374,"ssl":145},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"fqjpg10.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"un.shayu260522.top/upload/vod/20200806-1/65702e9bee1795b397ae7b65274f9859.jpg","fqdn":"un.shayu260522.top","domain":"shayu260522.top","tld":"top"},"ip":{"addr":"104.21.46.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.524Z","timestamp":1791753938524,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shayu260522.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:02:43 GMT","end":"Wed, 16 Dec 2026 11:02:42 GMT"},"fingerprint":{"sha1":"AB:C8:D3:7B:74:05:74:F6:3F:B4:7B:53:12:47:F6:07:9A:58:00:96","sha256":"86:F3:D8:BA:7E:03:2C:AF:B6:88:27:9C:FC:EB:6C:36:E0:9A:DE:85:65:49:4A:28:0D:1A:6F:E1:56:5E:45:3A"}}},"request":{"raw":"GET /upload/vod/20200806-1/65702e9bee1795b397ae7b65274f9859.jpg HTTP/1.1\r\nHost: un.shayu260522.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 92041\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\netag: \"69f32af9-16789\"\r\nexpires: Tue, 27 Oct 2026 13:39:31 GMT\r\nlast-modified: Sun, 27 Sep 2026 13:40:02 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\nage: 1178370\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9efIZQ0aPkGeaVe1oanla3ltoqzMNWOZlnmPZqxCHKU%2FGB4aVDVZw79zPftuZqMeXDume1MhDvFK0ztLMxfWWT%2FPQtyQ0bq70aNxpttaYE9J8HFqusxpH0I7Ew6JpXbqGcuC%2BpE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a490f0446a19b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92041,"size_decoded":92797,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 761x512, components 3","md5":"81046899ec2370061d32f614e6a832ab","sha1":"35cbb9e86d4681592bad106b3b3ffe4dd6e444db","sha256":"44e7ebec5c377d4a8fc379cf2060461d7fb55f96fbb93d46ff4818efd6d4669b","sha512":"fc70305ad9ce574434ffea74257a2b0a79156caffa9f9f55393df2e8ea70afdd604331c75c798f18199303d1fccd0de8e73677f521dd47abcbebbf20d4b9624b","ssdeep":"1536:RkUOUJlDiCEwfKjHxtLfhhtp8brPjG9c16gzePP+0tSx5q9cQi2FwMGzt:ykjDiafkHxtz7tpCrbGue3+0tK5q9cr9","tlshash":"0b931250f19cd66ed75801f69549b62b7ca8e833fffe40e854b03e48527ac161a0937c","first_seen":"2026-10-02T13:02:44.430927Z","last_seen":"2026-10-11T21:28:39.91649Z","times_seen":3,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"un.shayu260522.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ptt.sex/favicon.ico","fqdn":"www.ptt.sex","domain":"ptt.sex","tld":"sex"},"ip":{"addr":"172.67.219.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.253Z","timestamp":1791753943253,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.ptt.sex\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\nx-frame-options: SAMEORIGIN\r\nvary: referer\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iHpLG93hoHub942BfdL6dWQ8BnJ%2FC5kryVFdLL8rq3wFsfNNMdhfQbtmaKvAWtLTHQmib51egefYSLvt0%2FUbiWyX19pUfB8ZzleAXuq6axBBiLiVE26ZmT1z1h%2BxpA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-ray: a490f061997b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic10.anzise.com/pic/20220107/fe5e9f92942538eafa1c714fb63c41f6/1.jpg","fqdn":"pic10.anzise.com","domain":"anzise.com","tld":"com"},"ip":{"addr":"172.67.222.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.203Z","timestamp":1791753938203,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anzise.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 07:27:50 GMT","end":"Sun, 03 Jan 2027 08:27:46 GMT"},"fingerprint":{"sha1":"56:CF:89:32:0C:C3:AB:AD:E0:68:F4:DF:39:8A:A5:B1:C5:A3:06:79","sha256":"44:6D:DF:EB:87:F5:BE:4F:74:8E:9D:69:FF:49:1E:78:32:ED:A4:94:C1:3B:4A:62:0B:3A:B5:11:14:D8:15:52"}}},"request":{"raw":"GET /pic/20220107/fe5e9f92942538eafa1c714fb63c41f6/1.jpg HTTP/1.1\r\nHost: pic10.anzise.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19650\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Jan 2022 20:58:02 GMT\r\ncache-control: public, max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,OPTIONS\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cHs f ])\r\nage: 883833\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jJUx9fzPmkPCqIbbriU%2FjK2X9bIIyREaDsz5B%2BmyDHDjtl%2BAg2pH5AgbFrP11dSMnBNxHxVmKkogvVjqT8bC6bEO%2FxmujrW6199E6m5lMt%2FPV%2Fbg%2F2tJPQ0udhOG0SuVN8DH\"}]}\r\ncf-ray: a490f0429b60568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19650,"size_decoded":20494,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 720x406, components 3","md5":"4cc120b690beffa59deb51017aa9b1b3","sha1":"87ebf7e3549b8e183059da9f6914825abd619f69","sha256":"fbe09e347354e2e3ceb9c83ce6cba0b1ce2a2698a5af239fc054963024f74c9b","sha512":"264822c14370fbb1eeea002cedd16c5e191fdca44cad82c2c1eff96c37f4514561fa2ca1ef89b0f3c58153f87ab049538059c9c4a32d51a30ec598f43745faca","ssdeep":"384:mCuBHAQvf7+ic4DYdoKbQ44nJYpP6ECCxG5uPmIXu4gwtJ3:m5BHAepc4DYdN6s+uPmL4gwX","tlshash":"4d92e1cfc6dd768fb5bc92a23cf689b35049329a76b8317cb80817cb426e480c1d24d8","first_seen":"2026-10-11T20:34:32.04484Z","last_seen":"2026-10-11T21:28:39.917291Z","times_seen":2,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":4,"send":0,"wait":17,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"japanesebeauties.one/favicon.ico","fqdn":"japanesebeauties.one","domain":"japanesebeauties.one","tld":"one"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.583Z","timestamp":1791753943583,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"japanesebeauties.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Oct 2026 03:42:36 GMT","end":"Sat, 02 Jan 2027 04:42:33 GMT"},"fingerprint":{"sha1":"43:8B:8D:62:8F:59:65:BC:2A:15:1E:E7:A2:2E:63:28:F0:81:53:FE","sha256":"65:81:7A:89:23:B7:DF:03:B8:C9:D6:00:BD:3C:C9:F0:8C:11:21:83:F8:1E:5B:8E:8D:32:0F:40:96:65:D0:71"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: japanesebeauties.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 31 May 2010 16:51:06 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fpvPvxle5KRyT36jsvilX44MUUe3KJCNl7h86RgxyEBASX%2FMkWlbV8HVqzYFuoY4wnsv9PfihVBaZV49H%2FeVDjS%2FaHPKiDDibhcqD157KvWXzwttVSq8aPTkDqTMUx%2FtqTzDUTmf\"}]}\r\netag: W/\"4c03e8fa-57e\"\r\nage: 4991\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a490f0647b6d4c11-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1406,"size_decoded":821,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16","md5":"b6714af3dd675a43d5c1802801b4b79b","sha1":"5a59a1ddaae4e53b15f388ecbd96b5764aa4b501","sha256":"5259d1e33d76801f231aba90af9864cd6b19ca6dd7bcbf1c181c4523b8b228e6","sha512":"5bb87b494a815b148c4893dfbc6f3345c51eeec339cc54ee282d44713c84ce45748cf340d6b8698cb8ec069fe488a28bbd4934291a0d3f8db4b1644788c281d3","ssdeep":"","tlshash":"ef218c00b365f412fc643a71c25326b22b05fbc34423c3a336050b2a7db31522be4244","first_seen":"2024-10-22T15:18:11.011153Z","last_seen":"2026-10-11T21:28:39.919282Z","times_seen":18,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":1,"connect":8,"send":0,"wait":10,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornolomka.com/uploads/posts/2017-12/medium/1512215253_00-40-38.jpg","fqdn":"pornolomka.com","domain":"pornolomka.com","tld":"com"},"ip":{"addr":"91.194.110.16","port":443,"asn":213166,"as":"UA-Hosting SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.439Z","timestamp":1791753938439,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pornolomka.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 10:27:36 GMT","end":"Sun, 03 Jan 2027 10:27:35 GMT"},"fingerprint":{"sha1":"28:1C:91:A0:84:6C:D4:E4:E4:4F:FF:C5:77:B5:65:CB:1C:E9:29:EE","sha256":"04:D4:D0:74:D1:B4:D8:BE:AB:0F:2A:AB:2D:69:67:74:D4:21:23:A7:84:9D:5E:D1:FF:CE:62:33:07:68:D9:6B"}}},"request":{"raw":"GET /uploads/posts/2017-12/medium/1512215253_00-40-38.jpg HTTP/1.1\r\nHost: pornolomka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.10.3\r\ndate: Sun, 11 Oct 2026 21:23:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 151361\r\nlast-modified: Sun, 30 Aug 2020 17:01:59 GMT\r\netag: \"5f4bdb87-24f41\"\r\nexpires: Tue, 10 Nov 2026 21:23:02 GMT\r\ncache-control: max-age=2592000, public, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":151361,"size_decoded":151688,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 450x253, components 3","md5":"c16639b98009dee76d7e4d4ce66b158f","sha1":"35a90b94ab695360a9667420255264cfb3f52357","sha256":"a278ea20349730914948f5662d6d4e64ad4d894ed20a2faeddd47c976cc38edf","sha512":"dae3d0230ce7cb254cf1a313e177c3005bbca0941f483e7df8bc9a197eae75abe1620f0af9baf5b149407ebfca5d527292fc96d7c60a194af5505872f020320f","ssdeep":"3072:KVFWZ0gOxROPLwoUs017OgTuOUjJ1JHY1xqOvRfGmxqhuH8yjUvFs:yWZ0gOeTwyG6gTp0J1Zix9vDiy8yjUts","tlshash":"19e3126fe69eeb25d9fdb0c075dbb7b20080c239a5cc679154787609e85e4f4208ee8d","first_seen":"2024-05-06T15:06:05Z","last_seen":"2026-10-11T21:28:39.920142Z","times_seen":13,"resource_available":false,"data":null}},"time_used":964,"timings":{"blocked":536,"dns":0,"connect":29,"send":0,"wait":28,"receive":313,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.msn01.com/pic/20210910/16e1e0f1ebedef8f2f5aa81743a428b4/1.jpg","fqdn":"pic.msn01.com","domain":"msn01.com","tld":"com"},"ip":{"addr":"104.21.14.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.464Z","timestamp":1791753938464,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msn01.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 06:18:43 GMT","end":"Tue, 05 Jan 2027 06:18:42 GMT"},"fingerprint":{"sha1":"C3:E5:CA:E3:14:9E:FD:A5:D8:8B:03:22:DE:FF:59:56:AE:E0:D6:8C","sha256":"94:C1:13:88:82:9F:3C:06:CC:33:B4:C2:4D:CE:43:21:7F:13:FC:62:0D:27:D7:85:D3:CC:D4:7D:FC:9D:13:F5"}}},"request":{"raw":"GET /pic/20210910/16e1e0f1ebedef8f2f5aa81743a428b4/1.jpg HTTP/1.1\r\nHost: pic.msn01.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20243\r\nserver: cloudflare\r\nlast-modified: Thu, 09 Sep 2021 21:05:05 GMT\r\ncache-control: public, max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,OPTIONS\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cHs f ])\r\nage: 893087\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c%2FmknBgtwSNxAqDmEpDUNRanZOIet2gJr0Xo5U3WB0EWOjxTaXZFnOj1zivpEhCOp89tN4PLl0NU6scFsnfAdOmIP3qXUZ1%2BJTyOO%2F2vL7T%2BLM%2BxwkQV6ggtTrAVyBUN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a490f044bf60b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20243,"size_decoded":21079,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc58.134.100\", baseline, precision 8, 640x360, components 3","md5":"1377ccfb801706e7d5266c27dbe72076","sha1":"baee509fa8075025cd99f77b9da09ad234b97438","sha256":"e1d27d3fda808210d9911844002f290962a8b8b30a939f5f647aa6b891a2be56","sha512":"d202cd4239e9eed2d34dfe14353615cc1446a7c8950b49ce438e49ff394ccb9341827d9c724185aae2a9f78299f7d8db09a45b03b985d6f35e9959ff46c12446","ssdeep":"384:MZgrTsQEUdYoKx2g4HD8C8MfWi1cZcPoYOP+GpDMtDLH0okBA7k:MZsTsn7opHHD8Cl15PROmGCLUko","tlshash":"a892d128d6e2f81def68a5f6d9f851621712b4005044f95fcd85882c839f2fa7b7e688","first_seen":"2025-10-27T00:36:58.318173Z","last_seen":"2026-10-11T21:28:39.921875Z","times_seen":4,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":1,"dns":5,"connect":16,"send":0,"wait":26,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fm.lbtup2025.com/upload/vod/2022/07-16/11/nuoxexbqc4g1139nuoxexbqc4g205625.jpg","fqdn":"fm.lbtup2025.com","domain":"lbtup2025.com","tld":"com"},"ip":{"addr":"172.67.152.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.474Z","timestamp":1791753938474,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lbtup2025.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Oct 2026 06:19:42 GMT","end":"Mon, 04 Jan 2027 07:18:25 GMT"},"fingerprint":{"sha1":"9C:F4:15:D3:BE:45:5D:C1:34:63:4B:DD:44:A8:DC:D3:F8:B2:09:2F","sha256":"CD:27:1B:F3:73:7B:34:5D:EE:D3:9C:5C:ED:35:7D:37:E1:1B:16:92:10:3E:04:1A:E1:91:8C:ED:FB:81:60:F7"}}},"request":{"raw":"GET /upload/vod/2022/07-16/11/nuoxexbqc4g1139nuoxexbqc4g205625.jpg HTTP/1.1\r\nHost: fm.lbtup2025.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 10 Sep 2024 05:49:55 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uEij9zQvxtm0Gpn%2Fyuy29Cd5zUqkOgYy%2BhV3nXqX%2Fe2ndS3%2FIzjpeIxl7gMYvfSpBzf%2FCKG6wpd3MQEWJpZbB1LJiIGTf2fJb6rAuB4ed6eKJ76aYIb6wEKOrRZBmsL6BLND\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: \"66dfde03-1ec3\"\r\nexpires: Wed, 28 Oct 2026 07:43:11 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1172546\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a490f043ceb61ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7875,"size_decoded":8652,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.89.100\", baseline, precision 8, 240x320, components 3","md5":"8f93125cd8985feee2f3ed528989638e","sha1":"6a886bfffedb2748a73c5116f6fea73e1bbc34f2","sha256":"6043d4ab587e9c7c168b586a4d2a3bb526368d33fa4006315c00ba05315619d1","sha512":"1706b8a5e554f4afef8e1436d57562e64ca2e696ed753df9a4093a80d4011ceb80f7f3ea695b7b9d0fd92d6b99bb11174a2546930b42788e5513f8fb3d99500d","ssdeep":"192:HPPQehxgkYgSETb/GB9G+7R9vAIQCOJO7jCIBe50PVnEHs:HnprXH/AVyIQZJsCEeEWs","tlshash":"d2f1bf48d1096a229813ce75a7de05e463f2c77b865c142b832bd3fe05a4a4d7a0ab73","first_seen":"2026-06-25T11:17:56.484924Z","last_seen":"2026-10-11T21:28:39.92267Z","times_seen":24,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornoperso.com/wp-content/uploads/2021/06/shiny-flowers-belinda.jpg","fqdn":"pornoperso.com","domain":"pornoperso.com","tld":"com"},"ip":{"addr":"172.67.166.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.482Z","timestamp":1791753938482,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornoperso.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 22:01:41 GMT","end":"Sun, 03 Jan 2027 23:01:34 GMT"},"fingerprint":{"sha1":"59:B8:3B:55:B6:0C:4D:56:77:75:84:DD:64:A9:AF:6B:8C:CE:B1:53","sha256":"B6:A6:F4:88:0F:BC:D3:C3:C0:A8:A4:86:2B:F7:54:C6:A3:B1:AB:1D:4A:5B:AC:4A:A9:C3:54:87:94:F0:C6:FC"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/shiny-flowers-belinda.jpg HTTP/1.1\r\nHost: pornoperso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://img.pornoperso.com/wp-content/uploads/2021/06/shiny-flowers-belinda.jpg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SZ7IFvLo82Lv9AQA3wLQtj7ogwq7kfeUFTqEVlbcHVVaUKZzB43iSslu6gaHV4%2FnnuG3QCo%2BPPkS2hL%2F1J65b2oZ0na2FAI4L5wsFSOvCXTLitZS30Xr%2FEXiSZJNDbHTVA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a490f043eca2b50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-620120-3","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:40.602Z","timestamp":1791753940602,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:18 GMT","end":"Fri, 11 Dec 2026 20:00:17 GMT"},"fingerprint":{"sha1":"28:B6:EA:A0:82:D0:48:3A:13:C3:DC:38:88:85:51:9B:B3:CB:89:B4","sha256":"80:50:66:22:4E:D0:C3:BC:40:94:CA:B1:AA:D1:DB:13:A9:E5:74:53:AA:EB:19:DE:D1:A8:AC:C9:B7:18:01:EF"}}},"request":{"raw":"GET /gtag/js?id=UA-620120-3 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 11 Oct 2026 21:25:40 GMT\r\nexpires: Sun, 11 Oct 2026 21:25:40 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 128898\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":368042,"size_decoded":129502,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5434)","md5":"9885ff30515350984a25baa93d76bbcb","sha1":"2de95fb509e4e3a1379f141863f781967a2c7207","sha256":"02b9992571fb4ef4e972818dae7dd31ee7e335bf7ec36323e3db5dc4e1926907","sha512":"8227766cc17ca0a615292b164349fe158918f646f4b4189a2a455fb2aebe181eba7589c995241993b3592edb240636ed37902903f93e15c2a074a338bd401fd3","ssdeep":"6144:VsfCyDnGI9amdFcfIb/EfD3ceVijGupYp:mR9NjGu8","tlshash":"8c7408ccb3d6b42683a3b574503f018bb27a69d2a84cd889f146ece42d3469a5177f7c","first_seen":"2026-10-11T09:53:13.349514Z","last_seen":"2026-10-11T21:28:39.923318Z","times_seen":2,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":5,"connect":16,"send":0,"wait":42,"receive":51,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.porn100.tv/thumbs/797/3721068341_0.jpg","fqdn":"www.porn100.tv","domain":"porn100.tv","tld":"tv"},"ip":{"addr":"104.21.37.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:40.978Z","timestamp":1791753940978,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"porn100.tv","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 19:46:30 GMT","end":"Mon, 23 Nov 2026 20:45:07 GMT"},"fingerprint":{"sha1":"47:20:8B:C9:2B:B8:EE:83:66:8A:C0:A7:65:FD:95:92:07:B9:12:28","sha256":"32:20:6A:3F:F6:47:01:56:C1:59:AC:A9:D1:66:4F:79:36:83:4B:48:1A:89:60:D6:ED:E3:02:67:62:52:F4:4D"}}},"request":{"raw":"GET /thumbs/797/3721068341_0.jpg HTTP/1.1\r\nHost: www.porn100.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 11 Oct 2026 21:25:40 GMT\r\nx-frame-options: SAMEORIGIN\r\nvary: referer\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kzpoyYGBuQk0hn%2B4B7d47onVdGqpcWzVnY0HstbMqdsqcOiM3ipX3p07AcBGTMHKKp3LtRMJDfn5URtBszW964Y2BZ7G6rcW%2BgNqKhogCI5m75XB7F0c3EJ09Y2z%2FY2FsQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-ray: a490f0533cfc783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"im4.mediacont.net/xxxzooporn/thumbs/23/655-woman-sex.jpg","fqdn":"im4.mediacont.net","domain":"mediacont.net","tld":"net"},"ip":{"addr":"93.113.203.4","port":443,"asn":208949,"as":"Hbing Limited","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.301Z","timestamp":1791753938301,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mediacont.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 22:02:32 GMT","end":"Sat, 14 Nov 2026 22:02:31 GMT"},"fingerprint":{"sha1":"48:1A:6F:19:8D:BA:DF:AC:BB:0E:EC:8B:3A:D4:9E:E4:2B:56:60:F8","sha256":"EB:39:9C:FC:7C:06:F4:89:DD:85:E9:95:3D:30:D6:21:59:D9:29:C1:58:4D:BF:D2:6B:FE:AE:14:BB:D2:07:8C"}}},"request":{"raw":"GET /xxxzooporn/thumbs/23/655-woman-sex.jpg HTTP/1.1\r\nHost: im4.mediacont.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6381\r\nlast-modified: Thu, 03 Nov 2022 16:49:15 GMT\r\netag: \"6363f10b-18ed\"\r\nexpires: Sat, 09 Jan 2027 21:25:38 GMT\r\ncache-control: max-age=7776000\r\nx-request-id: 4a42e9329b88bdd0572b472d449d8669\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6381,"size_decoded":6727,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x175, components 3","md5":"8bf5bbc9d0eba5056a8b6ddda81be6fe","sha1":"7dc873286fd1caadad77688798855253b5a569fc","sha256":"0c04f85dbc613480c74f80ee6fc1727c3e02176af7968a91429703ccaf37c0cf","sha512":"184235cadee43a820bae4bf2bdeaedcb229af6598dc563d5f81f553fa6f7f4fa8e0f2abe86eab6603b4f369ba766bbe670ce28b639b6d73c5c673639b8e06858","ssdeep":"96:HGb1sxweXvaZXtNf78NVqH3j52zulHITIwkwXhXHMtnyYmVWfH50qg8n3v:S1sSeXvaXNf78INHITI9kgyYKa5M8nf","tlshash":"f6d18efabf71125ff21c1e788d3a4b01ae953d35be506c4860e6378e1b789a1854b0a4","first_seen":"2026-08-19T02:40:09.451651Z","last_seen":"2026-10-11T21:28:39.924565Z","times_seen":3,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":452,"dns":1,"connect":17,"send":0,"wait":19,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg4.com:3519/upload/vod/20260301-1/ac06fda79a1e002b9973c5cbd6347968.jpg","fqdn":"sbzytpimg4.com","domain":"sbzytpimg4.com","tld":"com"},"ip":{"addr":"23.140.236.1","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.494Z","timestamp":1791753938494,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbzytp.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 18:35:36 GMT","end":"Fri, 13 Nov 2026 18:35:35 GMT"},"fingerprint":{"sha1":"48:67:53:B8:D9:B0:E4:69:E7:6C:D8:14:FE:A6:61:9A:7E:D7:65:01","sha256":"97:1B:54:8D:56:AC:26:EE:C1:E1:75:88:2C:CC:66:6C:A5:6A:6A:68:EC:1E:AD:83:2A:F7:0D:F1:0D:41:65:1C"}}},"request":{"raw":"GET /upload/vod/20260301-1/ac06fda79a1e002b9973c5cbd6347968.jpg HTTP/1.1\r\nHost: sbzytpimg4.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 117605\r\nlast-modified: Sun, 01 Mar 2026 02:34:31 GMT\r\nvary: Accept-Encoding\r\netag: \"69a3a5b7-1cb65\"\r\nexpires: Wed, 02 Sep 2026 10:36:33 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 6000546\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":117605,"size_decoded":118027,"mime_type":"image/png","magic":"PNG image data, 718 x 404, 8-bit colormap, non-interlaced","md5":"b3c12d2761b1dcb1f9a01756d34c2c67","sha1":"0baa06276e0a716b50105b9f618f559ac42ca165","sha256":"8f550537703baa1b43406804c408f1220b1bba0bd4acbbd1de97a80d3e30ff43","sha512":"e6c8ed9b005ca735d4fc9d2cb51adaa1faeb688c2e4091147a3d86884b8e5dda5e998f4a8785764d1227454e460dd7f38affbb9f5b1b42c4f618c93996b1cc56","ssdeep":"1536:LVq3OS0UZj697imIpXB2NLN1j8Kn0sINl1H0xgzMrqec1WAu6yMcvldu2I6vGVDk:RqeS0ij6UpXWNB5nHsl1/zSncBbsnIbG","tlshash":"90b312625e153596c1274c1edf8f0a97276c6a94483d20be3efead353c780da40dde64","first_seen":"2026-03-20T14:27:27.587172Z","last_seen":"2026-10-11T21:28:39.925221Z","times_seen":15,"resource_available":false,"data":null}},"time_used":1355,"timings":{"blocked":767,"dns":0,"connect":0,"send":0,"wait":568,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filmesporno.xxx/wp-content/uploads/2021/04/hello-kitty-porn-jpg.jpg","fqdn":"filmesporno.xxx","domain":"filmesporno.xxx","tld":"xxx"},"ip":{"addr":"31.43.191.59","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.561Z","timestamp":1791753938561,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filmesporno.xxx","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 01:11:27 GMT","end":"Wed, 11 Nov 2026 01:11:26 GMT"},"fingerprint":{"sha1":"EE:76:F8:FD:B8:BF:B8:FA:57:BE:B1:62:EE:93:FE:50:17:17:9C:63","sha256":"8B:EE:DF:7C:73:8D:75:65:97:04:1A:05:72:CD:DD:12:D6:9D:F9:B3:BB:FF:97:E5:6F:D0:AA:8E:52:6C:39:D8"}}},"request":{"raw":"GET /wp-content/uploads/2021/04/hello-kitty-porn-jpg.jpg HTTP/1.1\r\nHost: filmesporno.xxx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 30 Apr 2021 07:37:41 GMT\r\netag: W/\"608bb3c5-3534\"\r\nversion: MS26072801\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncloudflare-cdn-cache-control: public, max-age=120, stale-while-revalidate=60, stale-if-error=3600\r\nstrict-transport-security: max-age=31536000;\r\nx-served-by: Mini-CDN-offshore\r\nx-cache-status: HIT\r\nx-cache-bypass: 0\r\ncache-control: public, max-age=2592000, immutable, stale-while-revalidate=60, stale-if-error=3600\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13620,"size_decoded":14320,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 352x198, components 3","md5":"f2691887c77a537175c3394a864c8014","sha1":"e94cd5691c99cd3c1f919b707a3278a2c271b081","sha256":"cf0a68f25cb516e73b782dbd8cb62c9ac9388d011701692f9d55feb6ed209c3f","sha512":"a02a8766d65206fdd89e08150ad0dac6fd653b84a482da27805c24c9768fa4a008246cf75dcac9ad3838ad888c6b5d1a27a3c06810da814193448d31785d25c3","ssdeep":"384:zRRQMstse+rzPsNlrZJcNEaqK8u/1FAyB/8Syu:t7ssj+jcN4KtTxxr","tlshash":"f752c055291158eacccf0f302ca98e94aec58884551b8cf3b6d39d146b3f1d21dd63f5","first_seen":"2026-08-04T21:34:34.794569Z","last_seen":"2026-10-11T21:28:39.925797Z","times_seen":6,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":207,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"youtute.net/favicon.ico","fqdn":"youtute.net","domain":"youtute.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.403Z","timestamp":1791753943403,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: youtute.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pfbike.com/favicon.ico","fqdn":"pfbike.com","domain":"pfbike.com","tld":"com"},"ip":{"addr":"104.21.87.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:53.302Z","timestamp":1791753953302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pfbike.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 11:18:55 GMT","end":"Wed, 02 Dec 2026 11:18:54 GMT"},"fingerprint":{"sha1":"9C:F4:1B:0C:58:F9:72:82:52:FB:F3:A2:14:8A:AE:F9:95:82:8D:A9","sha256":"E4:89:E1:A4:0C:67:9A:16:AE:48:8E:30:A4:83:8F:F0:46:31:E1:A0:9E:B0:AB:A2:4C:F6:B8:85:FE:4D:B5:EC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pfbike.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:53 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nOSKUEc2aB7tcp%2BrhlBMHt02X8ugU7kRrt3gDHuTRPtrHzcVTqUkBxelkPHjcLbBsa3aAz68kl7m3xdAQ3PHeLbxMpEbOqDWBPD7tw0rFzZvKNqHSkHGyFo1JvQs\"}]}\r\nlast-modified: Fri, 02 Oct 2026 05:11:59 GMT\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 02 Oct 2027 06:17:35 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=3600\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"6abf3d1f-4276\"\r\nage: 832097\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a490f0a078a2120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17014,"size_decoded":9321,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"cd6cd8f7d9af7267bf6b188d541291b4","sha1":"406bcab4e44f55cddba8f659d8be17c556d46d8a","sha256":"e47f1cd1409c2fc5dc18c4542b12d4e3777fe41137af62c112f059023e580a3e","sha512":"b5bab1c768b4e771c4981f75cd88ad8537828fb8ae988a7326099c81ed2979b502b577ae45e433b1ce647609bdbb14539a22f774cde6f3c645dd0f1f6b60dc02","ssdeep":"192:V/FSmX97q/jQYWDtwxt8ajnLm7JL28gBl9ffMephqQ/Uln813Y:twLQ1Dtwn61ilN/phj/o8m","tlshash":"82724c662aedf949c7860e3557a2612942b9cfe30c2d1b4bde6279e8be35fc43d81140","first_seen":"2026-04-16T16:55:58.986504Z","last_seen":"2026-10-11T21:28:39.798443Z","times_seen":60,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":9,"connect":39,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/ext/pre_3253777624.jpg","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"141.227.152.51","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.472Z","timestamp":1791753938472,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 07:52:05 GMT","end":"Sat, 28 Nov 2026 07:52:04 GMT"},"fingerprint":{"sha1":"C4:4F:9D:C9:09:9D:31:30:C3:4F:AE:A0:F3:18:7E:88:BF:F8:C7:B7","sha256":"81:05:CD:81:08:79:7C:F7:1F:83:1B:B5:4E:5C:E4:F8:F7:31:1C:F5:F7:00:A5:82:73:35:B8:D4:AB:52:95:7F"}}},"request":{"raw":"GET /ext/pre_3253777624.jpg HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18534\r\nlast-modified: Thu, 13 Jun 2024 22:56:16 GMT\r\netag: \"666b7910-4866\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18534,"size_decoded":18906,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"5424808eb2208e2d3f8c7ed18bd62338","sha1":"76211af0af49a287d83033842fdfd7cc37b78168","sha256":"1f9e22d684d5e39d3549e289680436afe11a38646cb06a675a8784b75ea76bf0","sha512":"5a384c956256dde19cfea1207e20d4e3451640cf5f5da510355e77266eef8143efcb0c89b35b05f096e52a89d787680c88ab689723c1d8074e010ab20efdaecd","ssdeep":"384:25X3UhQeNPa3GEBo3C9MM2tu6MQXiFLpfSWIkc6QXqn9SGmGq4H:2n83NPaZK3g2iL5SW6qw2qO","tlshash":"3182d07027a71952f00e6b39fd84d244e435af14feb1aa074a251d4d3be03699bbe2c3","first_seen":"2026-10-11T20:34:31.976346Z","last_seen":"2026-10-11T21:28:39.926401Z","times_seen":2,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stickamvids.net/favicon.ico","fqdn":"stickamvids.net","domain":"stickamvids.net","tld":"net"},"ip":{"addr":"80.209.253.45","port":443,"asn":204196,"as":"Abelohost BV","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.312Z","timestamp":1791753943312,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stickamvids.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 04:23:12 GMT","end":"Wed, 02 Dec 2026 04:23:11 GMT"},"fingerprint":{"sha1":"98:67:FB:F7:A6:17:7D:FB:15:4F:64:5B:81:34:26:16:5C:F4:8C:E9","sha256":"C2:93:B8:02:1D:86:AD:4D:AA:D4:7A:F8:C0:5D:51:5F:BE:5C:6A:D3:E4:9C:E9:19:28:88:39:D8:B8:92:B8:97"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: stickamvids.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Thu, 14 May 2026 06:38:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a056ddf-3aee\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15086,"size_decoded":5035,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"f01b0867ad9fbd4030d8a230c5f600e6","sha1":"5eaa57da7ec922520302c758652eab46a06e6c62","sha256":"75c9598b7e2ca0b61478bdd376eebedab2196a14c0efd54d242eaccfb84ce8aa","sha512":"b9b6ff06a70d914cd8a1f92798657f1afda9ea86e63da22b548ac4ca94872f31a9a340229600a2348942881fae215cebe30f59e0a4422fb04fffed5d100c4f01","ssdeep":"384:jhakLfOSORnRpxc0vrjn7cATfC+gadLOPo0:qxcMrj7cAL5E","tlshash":"6e62dfa88a70c18bf3a845b9d8e4cbbd17bd1d3a1d89414379ebadcf7b49f285814601","first_seen":"2026-06-13T07:25:21.703235Z","last_seen":"2026-10-11T21:28:39.929277Z","times_seen":34,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.pornohlam.com/uploads/posts/2018-02/medium/1517801109_00-19-00.jpg","fqdn":"a.pornohlam.com","domain":"pornohlam.com","tld":"com"},"ip":{"addr":"91.194.110.9","port":443,"asn":213166,"as":"UA-Hosting SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.248Z","timestamp":1791753938248,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pornohlam.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 10:23:43 GMT","end":"Sun, 03 Jan 2027 10:23:42 GMT"},"fingerprint":{"sha1":"DE:9B:AC:02:B4:C4:E1:6F:9E:D8:94:22:B2:81:3B:F6:54:21:64:FE","sha256":"63:A8:55:1D:9D:10:29:52:AD:42:E8:DB:AA:F8:00:BF:0F:D8:34:07:1D:C3:84:59:20:37:E8:7C:0F:4D:C6:A4"}}},"request":{"raw":"GET /uploads/posts/2018-02/medium/1517801109_00-19-00.jpg HTTP/1.1\r\nHost: a.pornohlam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.10.3\r\ndate: Sun, 11 Oct 2026 21:23:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 120396\r\nlast-modified: Sat, 29 Aug 2020 13:26:22 GMT\r\netag: \"5f4a577e-1d64c\"\r\nexpires: Sun, 18 Oct 2026 21:23:02 GMT\r\ncache-control: max-age=604800\r\nstrict-transport-security: max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":120396,"size_decoded":120748,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 450x337, components 3","md5":"22e685d35081668c1cd6091bf435c2b7","sha1":"0ea0e11474401ad3d81c379b74a9595cee0bc6ca","sha256":"df23b4cd68a0319a9baba6bb8b782e4f850769ce61562397adedc8ac324312e6","sha512":"0e44ebc042488fe33f5f0bc14069f0335899172c41432355bff03b292903506598cc56559633677247e94ebf8e6271cc46ca03bd82a67e895e5950ff583c9cc1","ssdeep":"3072:LGrJ5j4r39lDjWI6L6LGyR+H/SlnUtcgBL8hzvCU7osIp:6DshyL6T/UKf7odp","tlshash":"d5c312c537c40e944b48bdf8d4397370363276c693db266840218be3df4aad8de69297","first_seen":"2026-10-11T21:28:39.931265Z","last_seen":"2026-10-11T21:28:39.931265Z","times_seen":1,"resource_available":false,"data":null}},"time_used":900,"timings":{"blocked":266,"dns":9,"connect":59,"send":0,"wait":100,"receive":109,"ssl":335},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/ext/pre_8614105463.jpg","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"141.227.152.51","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.305Z","timestamp":1791753938305,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 07:52:05 GMT","end":"Sat, 28 Nov 2026 07:52:04 GMT"},"fingerprint":{"sha1":"C4:4F:9D:C9:09:9D:31:30:C3:4F:AE:A0:F3:18:7E:88:BF:F8:C7:B7","sha256":"81:05:CD:81:08:79:7C:F7:1F:83:1B:B5:4E:5C:E4:F8:F7:31:1C:F5:F7:00:A5:82:73:35:B8:D4:AB:52:95:7F"}}},"request":{"raw":"GET /ext/pre_8614105463.jpg HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8620\r\nlast-modified: Fri, 14 Jun 2024 05:15:44 GMT\r\netag: \"666bd200-21ac\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8620,"size_decoded":8991,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 300x226, components 3","md5":"be40421b992ea0fe3d601fa3e2add5ca","sha1":"75c910d45ec771f2b7cfe7f51d4b8a50080567d5","sha256":"649e5a679c629f5b6fd829c3918f0c5bb855907187b56b2d2318816c6b5addc9","sha512":"81eae5a3bd273e2137966ec563b1f4acf2eb3255ea723be80afd56be2cc993ae934fbe68a552f9ac264f80c96634d1a622082b0b5afee11d7af215fc65b7afd5","ssdeep":"192:JecMpmbkr0Hp4TGtHoZyOTZb9zucPXvNU1vjJenz:NMpIW0eTG+gODicPVU1rJOz","tlshash":"e9029d91fa088402cc9f5733ad0638a5de419eb530929b47b8cc55744fbe2c1afcb6e4","first_seen":"2026-10-11T20:34:32.051704Z","last_seen":"2026-10-11T21:28:39.933207Z","times_seen":2,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":43,"dns":22,"connect":63,"send":0,"wait":33,"receive":0,"ssl":319},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xvideosrei.com/favicon.ico","fqdn":"xvideosrei.com","domain":"xvideosrei.com","tld":"com"},"ip":{"addr":"31.43.191.59","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.339Z","timestamp":1791753943339,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xvideosrei.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 01:17:53 GMT","end":"Wed, 11 Nov 2026 01:17:52 GMT"},"fingerprint":{"sha1":"FA:9F:42:41:98:A3:99:B6:53:5B:8F:03:0B:2C:0A:D0:2E:D4:F5:BA","sha256":"65:6F:A7:6D:EC:C1:A6:0A:05:F0:50:8E:73:D4:37:FC:F3:1A:4F:6A:A0:DD:E6:A9:89:71:57:A4:F3:A3:78:4B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xvideosrei.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: text/html; charset=utf-8\r\nversion: MS26072801\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncloudflare-cdn-cache-control: no-store\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: br\r\nsurrogate-control: no-store\r\nx-served-by: Mini-CDN-offshore\r\nx-cache-status: HIT\r\nx-cache-bypass: 0\r\ncache-control: no-store, no-cache, must-revalidate, private\r\ncdn-cache-control: no-store\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"page.phic4.top/myda.php","fqdn":"page.phic4.top","domain":"phic4.top","tld":"top"},"ip":{"addr":"172.239.194.103","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:41.035Z","timestamp":1791753941035,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.phic4.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 11:14:23 GMT","end":"Mon, 16 Nov 2026 11:14:22 GMT"},"fingerprint":{"sha1":"A0:7B:47:FA:54:AF:D9:00:7B:AD:2F:85:D8:2C:1E:CC:A1:28:15:A7","sha256":"79:6D:9C:0B:1F:A0:10:51:86:8E:18:33:77:19:64:85:75:61:3D:D8:CF:2B:7D:1C:DB:F1:60:61:E3:98:C0:41"}}},"request":{"raw":"GET /myda.php HTTP/1.1\r\nHost: page.phic4.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Sun, 11 Oct 2026 21:25:47 GMT\r\ncontent-type: text/html\r\ncache-control: no-store, max-age=0\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64\r\npermissions-policy: ch-ua=(self \"https://*.parklogic.com\"), ch-ua-arch=(self \"https://*.parklogic.com\"), ch-ua-bitness=(self \"https://*.parklogic.com\"), ch-ua-full-version=(self \"https://*.parklogic.com\"), ch-ua-full-version-list=(self \"https://*.parklogic.com\"), ch-ua-mobile=(self \"https://*.parklogic.com\"), ch-ua-model=(self \"https://*.parklogic.com\"), ch-ua-platform=(self \"https://*.parklogic.com\"), ch-ua-platform-version=(self \"https://*.parklogic.com\"), ch-ua-wow64=(self \"https://*.parklogic.com\")\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/videojs-flash@2.2.1/dist/videojs-flash.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:50.862Z","timestamp":1791753950862,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 18:43:31 GMT","end":"Mon, 07 Dec 2026 19:43:28 GMT"},"fingerprint":{"sha1":"C3:5B:D6:E9:86:06:91:EE:6D:00:E5:15:F5:23:66:F0:7C:0C:E6:46","sha256":"0D:52:A5:47:28:79:E1:05:1C:8E:DB:39:17:95:F3:D8:05:10:86:FC:5A:70:B8:B3:84:AB:34:1E:E0:63:DE:18"}}},"request":{"raw":"GET /videojs-flash@2.2.1/dist/videojs-flash.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nfly-request-id: 01KZ740359TFS3HWAKG1N1QDJ4-arn\r\ncontent-digest: sha256=:kWKDLMPtlQfY+GndDU/Q2s3gWgeBctgqmLBeCu8fGjQ=:\r\ndate: Sun, 11 Oct 2026 21:25:50 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: a490f090dd0d56c9-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 1058618\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 11 Oct 2027 21:25:50 GMT\r\nlast-modified: Tue, 29 Sep 2026 15:22:12 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39407,"size_decoded":10627,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"b671db9a73a06770313c1a05bcdc0b58","sha1":"12280acce4192448e93e3b2ef9e1adf6c6eba94a","sha256":"9162832cc3ed9507d8f869dd0d4fd0dacde05a078172d82a98b05e0aef1f1a34","sha512":"447afc04766985884c8610b4f14c2e7e56c19fbbfafd599c853520e05c7319f168fca2008f99434d317e7e3dfab231ee63c11b1c90b417bfba172441b0b9287b","ssdeep":"768:9kSNvFLF6ZC//JxfbmViy+PdvXw6szTVr:9kS1FLFECzy+PdvuXVr","tlshash":"e703b74afde22366451390b402dfa1c8d2b4853bb136658cb48ed6606f6da7642fefc4","first_seen":"2023-03-07T12:39:18Z","last_seen":"2026-10-11T21:28:39.93468Z","times_seen":380,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"porn112.com/i/9/244.jpg","fqdn":"porn112.com","domain":"porn112.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.432Z","timestamp":1791753938432,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /i/9/244.jpg HTTP/1.1\r\nHost: porn112.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.missvid.com/favicon.ico","fqdn":"www.missvid.com","domain":"missvid.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.354Z","timestamp":1791753943354,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.missvid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooporner.com/favicon.ico","fqdn":"zooporner.com","domain":"zooporner.com","tld":"com"},"ip":{"addr":"104.21.72.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.570Z","timestamp":1791753943570,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooporner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 05:01:36 GMT","end":"Sat, 12 Dec 2026 06:00:11 GMT"},"fingerprint":{"sha1":"4F:58:34:DC:EB:12:07:9B:AB:EC:9C:AE:6E:19:DD:72:4D:30:70:94","sha256":"FE:D0:D9:DF:63:6B:FC:DB:CE:48:28:ED:9C:1B:92:57:EA:38:C2:DA:38:2C:69:63:11:D7:82:E2:9C:7C:0F:FF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: zooporner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://zooporner.com/faviconico/\r\nset-cookie: ASPro_1382933ca042bef776e8100bd5eb8ac5=frgk20tud9k7799rro4el7fdcu; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m9SXGgTkMgnMAWw0HsR9XgAJfz3Uhs3YEJJM2cEqtVa0xjAO1X%2B7HYdKHNWn4fCBC%2FqpMbPssvrzneKUizKAFfHpvMRMXlPV05h7tl133cN8F4lx9dOGgZ2Ko%2B69OkSV\"}]}\r\npriority: u=4,i\r\ncf-ray: a490f0636be68be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"ASPro_1382933ca042bef776e8100bd5eb8ac5","value":"frgk20tud9k7799rro4el7fdcu","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"ASPro_1382933ca042bef776e8100bd5eb8ac5=frgk20tud9k7799rro4el7fdcu; path=/"}],"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2xb.com/favicon.ico","fqdn":"d2xb.com","domain":"d2xb.com","tld":"com"},"ip":{"addr":"104.21.94.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.610Z","timestamp":1791753943610,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d2xb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 05:20:02 GMT","end":"Tue, 05 Jan 2027 06:18:39 GMT"},"fingerprint":{"sha1":"A6:70:78:C4:E4:F3:FD:9E:68:65:D3:69:24:7E:22:B9:01:0F:6B:86","sha256":"23:92:DC:45:38:6C:E7:3A:DA:AF:7E:C1:EB:B5:C9:CA:22:55:14:0F:60:24:B2:CD:62:2B:0D:24:23:61:15:BB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: d2xb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TuQcCaDbcpm9lcx8S5Ct5XUWEiSnQ4%2Fih23SPN40%2Fk2BFCi7%2FBoXuOxpNd9dG%2FSsIuyvIvC2sYONVgmdMi5qEg6WsG7EchfHyKCaQZc%2F1%2B12SGN2vNWOiDdNcw%3D%3D\"}]}\r\nlast-modified: Sun, 23 Aug 2026 13:05:11 GMT\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 26 Aug 2027 05:58:05 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=3600\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"6a8af007-4276\"\r\nage: 4030102\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a490f063c933a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17014,"size_decoded":9336,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"cd6cd8f7d9af7267bf6b188d541291b4","sha1":"406bcab4e44f55cddba8f659d8be17c556d46d8a","sha256":"e47f1cd1409c2fc5dc18c4542b12d4e3777fe41137af62c112f059023e580a3e","sha512":"b5bab1c768b4e771c4981f75cd88ad8537828fb8ae988a7326099c81ed2979b502b577ae45e433b1ce647609bdbb14539a22f774cde6f3c645dd0f1f6b60dc02","ssdeep":"192:V/FSmX97q/jQYWDtwxt8ajnLm7JL28gBl9ffMephqQ/Uln813Y:twLQ1Dtwn61ilN/phj/o8m","tlshash":"82724c662aedf949c7860e3557a2612942b9cfe30c2d1b4bde6279e8be35fc43d81140","first_seen":"2026-04-16T16:55:58.986504Z","last_seen":"2026-10-11T21:28:39.798443Z","times_seen":60,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":6,"connect":20,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fqjpg10.top/upload/vod/20260103-1/8b055307275f1a16ff27afa6538115b9.png","fqdn":"fqjpg10.top","domain":"fqjpg10.top","tld":"top"},"ip":{"addr":"23.134.76.191","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.425Z","timestamp":1791753938425,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fqjpg10.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 05:27:48 GMT","end":"Mon, 02 Nov 2026 05:27:47 GMT"},"fingerprint":{"sha1":"CE:28:80:B0:05:19:5C:8B:0B:3B:EC:8F:4D:FB:7C:6A:9C:16:0E:51","sha256":"92:80:CD:0C:A7:99:7A:96:A5:ED:DE:0F:9F:7B:C6:04:F5:36:1A:01:69:60:53:9D:3B:8F:14:E8:BF:FA:4B:29"}}},"request":{"raw":"GET /upload/vod/20260103-1/8b055307275f1a16ff27afa6538115b9.png HTTP/1.1\r\nHost: fqjpg10.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 11 Oct 2026 21:25:39 GMT\r\nContent-Type: image/png\r\nContent-Length: 94822\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Mar 2026 13:31:43 GMT\r\nETag: \"69b411bf-17266\"\r\nExpires: Sat, 17 Oct 2026 18:43:08 GMT\r\nX-Cache-Status: HIT\r\nCache-Control: max-age=2592000, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":94822,"size_decoded":95176,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, height=284, software=Android Gallery, orientation=[*0*], datetime=2024:11:19 22:28:08, width=512], baseline, precision 8, 512x284, components 3","md5":"4d7b42060f73c8da6eb4c900ca0bb529","sha1":"5a660dc28eb733201ad90b4ca7b7e9a894821eca","sha256":"24ed01013246460e88246803daa7e8a691ac3c6526489828f52f3445eebd9e9b","sha512":"1e8799733958993fe082c9b2fdda9b41f4b33f7c160aa3d1fd6364d06e33c2401431daa358033fe7d7e7e21ddd4a6575d7843fd57e73ac3056bf7feedcef6cb6","ssdeep":"1536:vT42gqUwr3UIHtko54Mx35JnmI2+Ub5VnT/3EzlML0uT5VmuksCIU:NgentkoeYpUIcHTUW0uFVAsc","tlshash":"9693022d024f4202e92d50353a1e6e0d7fa2857694de27d64f53f13df88f0958eeaea1","first_seen":"2026-07-31T05:54:13.726671Z","last_seen":"2026-10-11T21:28:39.935445Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1235,"timings":{"blocked":510,"dns":1,"connect":96,"send":0,"wait":204,"receive":188,"ssl":234},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"fqjpg10.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lb260401.top/upload/vod/20260423-1/bd00c54eb2c4dfb6bdda4996bee06db7.jpg","fqdn":"lb260401.top","domain":"lb260401.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.454Z","timestamp":1791753938454,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20260423-1/bd00c54eb2c4dfb6bdda4996bee06db7.jpg HTTP/1.1\r\nHost: lb260401.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lb260401.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.pornoperso.com/wp-content/uploads/2021/06/genie-morman.jpg","fqdn":"img.pornoperso.com","domain":"pornoperso.com","tld":"com"},"ip":{"addr":"94.23.76.64","port":443,"asn":16276,"as":"OVH SAS","country":"Portugal","country_code":"PT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:40.588Z","timestamp":1791753940588,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.pornoperso.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 07:17:21 GMT","end":"Sat, 02 Jan 2027 07:17:20 GMT"},"fingerprint":{"sha1":"84:8E:CE:9C:8C:DC:A8:23:39:BA:DE:A5:85:44:8C:4E:4C:29:52:86","sha256":"31:F1:59:5B:7C:AF:10:69:75:BB:4F:18:CA:56:C4:AE:95:68:20:C4:CF:AF:94:08:15:66:82:76:77:0F:CD:63"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/genie-morman.jpg HTTP/1.1\r\nHost: img.pornoperso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://en.4us.asia/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:40 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 30 Jun 2021 11:08:32 GMT\r\netag: W/\"60dc50b0-622c\"\r\nversion: MS26072801\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000;\r\nx-served-by: Mini-CDN-offshore\r\nx-cache-status: HIT\r\nx-cache-bypass: 0\r\ncache-control: public, max-age=2592000, immutable, stale-while-revalidate=60, stale-if-error=3600\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25132,"size_decoded":25318,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85\", baseline, precision 8, 600x337, components 3","md5":"459ed8c3d70d9b02a6dfb4cbb3c0e2b3","sha1":"76a3cac9683fafff667054dfee9ba81fa3731cc7","sha256":"73c3e431540e1f4e13c581217e128f2ad6447e539b4b4a750eeb0718247e8107","sha512":"6ff8d421a0169a2af3a2f04bbf7eaf5e9cee86abcf1a71f68bad4d333ae242e5efb4b5cde7a77ed6b580069b2a72fbeb5537450aaf0767af59449cdf8d720311","ssdeep":"384:qwahg+yKVZsoEr7K1x3JoRsuwgRdHgmHFmGAc3IH1N4I+BYBPBDhSFN2777u8n:qw5ax3GwgRqmHFzAcuHvYYzD2Gn","tlshash":"2cb2c06b15a4c366a83d419eb8036c4f91dd1f0c68a63dfe10679f677bb4084688f22e","first_seen":"2025-07-25T08:10:29.748566Z","last_seen":"2026-10-11T21:28:39.936502Z","times_seen":4,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":37,"send":0,"wait":37,"receive":0,"ssl":305},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.video01.org/favicon.ico","fqdn":"www.video01.org","domain":"video01.org","tld":"org"},"ip":{"addr":"104.21.94.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.249Z","timestamp":1791753943249,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.video01.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\nx-frame-options: SAMEORIGIN\r\nvary: referer\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Viv01eODLtdX%2BqqdILixKqLiGFYYr3o5gLqHbtDoLNy5CoakpnEV%2FCg89Ng22SZSyzb%2BEWLbqRN1t4yXMhZRXy1pd9e78%2Bwk4SN0dKqTX%2BTnpnl9gbiT%2B6mYm8LvJ3wcQp4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-ray: a490f061988375ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/ext/pre_2945005078.jpg","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"141.227.152.51","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.449Z","timestamp":1791753938449,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 07:52:05 GMT","end":"Sat, 28 Nov 2026 07:52:04 GMT"},"fingerprint":{"sha1":"C4:4F:9D:C9:09:9D:31:30:C3:4F:AE:A0:F3:18:7E:88:BF:F8:C7:B7","sha256":"81:05:CD:81:08:79:7C:F7:1F:83:1B:B5:4E:5C:E4:F8:F7:31:1C:F5:F7:00:A5:82:73:35:B8:D4:AB:52:95:7F"}}},"request":{"raw":"GET /ext/pre_2945005078.jpg HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13074\r\nlast-modified: Thu, 13 Jun 2024 18:03:53 GMT\r\netag: \"666b3489-3312\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13074,"size_decoded":13446,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"392ab3234f7687a2cea704be74876a42","sha1":"855bb42651898afcd9b85109367fc4a864b176ce","sha256":"c2a0fe9aad73eb802da46fcc246caf33cc0630b05d5a635911e9515ae81ac667","sha512":"e97846b3ee65eda7ce736ff88656b5ce007863f7622508a530a56fdeef09c8c8e5c47f055cbabbb5df8d9c13ae120ae2948b341f8df90cc005031d0272d9eb24","ssdeep":"384:faG/T+AaBwdsFxS81/P4mWMCob8pUMAKa8QpLECDO:faGcwdsFEMNopUMAKa8CC","tlshash":"0c42cf1303a1f97cc80c29b27551653d5a186bb9505e9a3f8b66fc465fec1c838e03fa","first_seen":"2025-06-30T08:49:08.553344Z","last_seen":"2026-10-11T21:28:39.937179Z","times_seen":3,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.xxibaocdn.com/video/m3u8/2026/05/08/e4_b9_b1_e4_bc_a6_e4_b8_ad_e5_87_ba/64898_cover_2026-05-08_053247.jpg","fqdn":"img.xxibaocdn.com","domain":"xxibaocdn.com","tld":"com"},"ip":{"addr":"162.209.190.196","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.470Z","timestamp":1791753938470,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.xxibaocdn.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 15:13:41 GMT","end":"Fri, 25 Dec 2026 15:13:40 GMT"},"fingerprint":{"sha1":"87:96:F8:C7:25:D2:6A:6F:2E:7C:8E:3D:E1:29:5D:1A:8B:AE:B8:8F","sha256":"6F:3D:C6:A4:68:5E:CD:E6:A1:A6:04:B5:67:00:56:EB:EF:03:FB:6F:FF:BA:5C:05:C5:B5:E2:76:B1:96:7C:33"}}},"request":{"raw":"GET /video/m3u8/2026/05/08/e4_b9_b1_e4_bc_a6_e4_b8_ad_e5_87_ba/64898_cover_2026-05-08_053247.jpg HTTP/1.1\r\nHost: img.xxibaocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 07 May 2026 21:33:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69fd0526-225c8\"\r\nexpires: Tue, 10 Nov 2026 21:25:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":140744,"size_decoded":139937,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1365x2048, components 3","md5":"134d7b6501730f184a968659f2594d49","sha1":"6dbff7944e0615e881330336b8b6845dc6335abd","sha256":"06d6b2519343158cfdf9712916b7ede6f663158f1984e858a38190921e7b2b2e","sha512":"a59a9394d948f2a6b49eb3c4583bbe955a60f7380d9ab4c735b12b5ebbac048ceab202b0df8a49339d151525dad8f11b53295ea56e734a85059cc37551107958","ssdeep":"3072:OzIYjk1KaITVk9MA8bMDmM+LQ/aK8Ld+vlZrD6sEUL:OzO1KCMAeQmM+LQ/adQPlEUL","tlshash":"37d312572b70e34bc7680a716055ebdaa307662d82d2b3534eda4ef42b10bd7786d433","first_seen":"2026-06-05T02:41:40.788463Z","last_seen":"2026-10-11T21:28:39.937799Z","times_seen":15,"resource_available":false,"data":null}},"time_used":1049,"timings":{"blocked":357,"dns":0,"connect":0,"send":0,"wait":692,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jpxjpg5.top/upload/vod/20250727-1/1ca043b28979fe1399c417675d7e65fa.png","fqdn":"jpxjpg5.top","domain":"jpxjpg5.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.513Z","timestamp":1791753938513,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /upload/vod/20250727-1/1ca043b28979fe1399c417675d7e65fa.png HTTP/1.1\r\nHost: jpxjpg5.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jpxjpg5.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipinvipimage.com/m2/20260927/H2lGWaug/1.jpg","fqdn":"jipinvipimage.com","domain":"jipinvipimage.com","tld":"com"},"ip":{"addr":"172.67.177.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.280Z","timestamp":1791753938280,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jipinvipimage.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 08 Sep 2026 06:45:12 GMT","end":"Mon, 07 Dec 2026 06:45:11 GMT"},"fingerprint":{"sha1":"C0:A8:4D:23:52:E6:71:40:41:F1:39:DC:0D:7C:A4:16:C1:61:0E:6B","sha256":"9D:40:9F:97:69:9D:EA:EF:6E:E0:22:D2:1B:08:6C:F6:0C:FB:1B:78:08:78:31:FA:8D:10:2D:D4:53:A8:59:42"}}},"request":{"raw":"GET /m2/20260927/H2lGWaug/1.jpg HTTP/1.1\r\nHost: jipinvipimage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 26 Sep 2026 22:30:37 GMT\r\netag: \"6ab8478d-1fa2\"\r\ncache-control: public, max-age=604800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Range, Content-Type, Accept, Origin\r\naccess-control-expose-headers: Content-Length, Content-Range, Accept-Ranges\r\nx-mother-library: m2\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nage: 369609\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=twu1EuknkRAj98SMBb7jNX448K2QjRBkEY7uCmf8EVjKnanct2UZ9czOysZtY7qmUDBwSuq%2FZ1E%2FTA8%2BBv3cphiiy2w9%2B%2Fy38Ow299OK4EnsTEB307mxOFM3D7gn5NoW4HHZmw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a490f043ca8932fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8098,"size_decoded":9091,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: \"Lavc61.3.100\", baseline, precision 8, 320x240, components 3","md5":"54dc4e1f4c6b88ab774531169204b933","sha1":"4db506f8ca407a29c3e16332f23cc659ba98dc19","sha256":"9ca14a15edf0c87abd858c7922eb5900795bcad25afc49e9ecdbc4b39ca8597b","sha512":"0d66cbfa72679df24cdbac2bd39e27169107b577dff372bf662787b8996ab3c7e86c9a5712d571d6f712df3022eeec67b73a9f1de25cea8e51f0145a2672f1bb","ssdeep":"192:it9Q7ws1SMipR3BqQQvTQoHJeaMrhPdFFeaoVbXb9:a9Q7wK+DBTQvTjsaM9doVbR","tlshash":"22f17e8b21bfc91ec1a598b0a896213a8073badd4b3daedc40c0755b577d2771d86258","first_seen":"2026-10-02T13:02:44.839192Z","last_seen":"2026-10-11T21:28:39.938454Z","times_seen":3,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":156,"dns":9,"connect":13,"send":0,"wait":41,"receive":0,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.pornoperso.com/wp-content/uploads/2021/06/familynude.jpg","fqdn":"img.pornoperso.com","domain":"pornoperso.com","tld":"com"},"ip":{"addr":"94.23.76.64","port":443,"asn":16276,"as":"OVH SAS","country":"Portugal","country_code":"PT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:40.582Z","timestamp":1791753940582,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.pornoperso.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 07:17:21 GMT","end":"Sat, 02 Jan 2027 07:17:20 GMT"},"fingerprint":{"sha1":"84:8E:CE:9C:8C:DC:A8:23:39:BA:DE:A5:85:44:8C:4E:4C:29:52:86","sha256":"31:F1:59:5B:7C:AF:10:69:75:BB:4F:18:CA:56:C4:AE:95:68:20:C4:CF:AF:94:08:15:66:82:76:77:0F:CD:63"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/familynude.jpg HTTP/1.1\r\nHost: img.pornoperso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://en.4us.asia/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:40 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 29 Jun 2021 19:57:38 GMT\r\netag: W/\"60db7b32-3cbb\"\r\nversion: MS26072801\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncloudflare-cdn-cache-control: public, max-age=120, stale-while-revalidate=60, stale-if-error=3600\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000;\r\nx-served-by: Mini-CDN-offshore\r\nx-cache-status: HIT\r\nx-cache-bypass: 0\r\ncache-control: public, max-age=2592000, immutable, stale-while-revalidate=60, stale-if-error=3600\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15547,"size_decoded":16155,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 100\", progressive, precision 8, 600x337, components 3","md5":"30668074545ab109022ba2546586d61b","sha1":"9b845bc2c5e15acb421565ef0f7e32d9d38afda6","sha256":"c1a4118f998bea7fb90927b121fee8047f3e91b29256d6dbae0274201bb51fff","sha512":"f92deca5735ee8d7615ec2cd4ef9cea3708ed91b9cd6785c9d953baa254852bdc75bc000216fa0dba52f5ad018d89ffbd73475a5fe21ad04ebc0172d788dfdda","ssdeep":"384:7Rlj92eVKywxhFarB3JxdsnVYVZgyPhCB434j7:fj99funwKyoBi34j7","tlshash":"ec62cf21549da008dbb9b37ccd7a8623ab2a0f0cc535c97917489074eb3e810dac7ecd","first_seen":"2024-12-08T18:32:56.385236Z","last_seen":"2026-10-11T21:28:39.939134Z","times_seen":22,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":3,"connect":30,"send":0,"wait":60,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.w3schools.com/w3css/4/w3.css","fqdn":"www.w3schools.com","domain":"w3schools.com","tld":"com"},"ip":{"addr":"95.101.10.17","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.014Z","timestamp":1791753943014,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"certification.w3schools.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 00:49:05 GMT","end":"Sun, 03 Jan 2027 00:49:04 GMT"},"fingerprint":{"sha1":"AC:1E:1E:1A:EF:B6:7D:08:DE:C8:A5:8D:C6:88:2C:3F:15:A2:34:C3","sha256":"9E:78:C8:E9:99:1F:A3:BC:C0:CB:E7:9D:3A:BC:4C:77:4F:7C:34:E2:6F:BB:40:DF:D8:B2:A9:90:DE:48:5B:15"}}},"request":{"raw":"GET /w3css/4/w3.css HTTP/1.1\r\nHost: www.w3schools.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\nlast-modified: Fri, 02 Oct 2026 11:13:04 GMT\r\naccept-ranges: bytes\r\netag: \"0e06dfe5e52dd1:0\"\r\ncontent-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com https://pathfinder.w3schools.com; upgrade-insecure-requests\r\nx-content-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com https://pathfinder.w3schools.com;\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 5256\r\ncache-control: public, max-age=30724624\r\nexpires: Sat, 02 Oct 2027 12:02:47 GMT\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-loc: true\r\nstrict-transport-security: max-age=2628000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23427,"size_decoded":6060,"mime_type":"text/css","magic":"ASCII text","md5":"75b37d4abbdde1322116d2744181081d","sha1":"6d6b5ff442af4682c30e970c382002a7c694ac5b","sha256":"c4f2aba13970ecf8303fb9329f97c8824861569273b0aa27acce48abc61d04f5","sha512":"8ba303e078af3f71176b6e7fa5c32b0f3984014393133a960da7103bc78204a144a3d034a3d1ad7126f1547f45408e00e036175f54766ffccc8cf84cd4c129a5","ssdeep":"384:aHHLO7eS0F4bBY/fn6jZcy9/cGK1q8CarY64Cb+dOy:aHHCLYXfl1q8CarY64Cb+dl","tlshash":"fbb2f022ff8a1138261a873660d5fbfc573a8681df9f1b7a7030373943894c26796e49","first_seen":"2023-06-26T21:08:35Z","last_seen":"2026-10-11T21:28:39.939835Z","times_seen":17482,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":2,"connect":1,"send":0,"wait":11,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filmesporno.xxx/favicon.ico","fqdn":"filmesporno.xxx","domain":"filmesporno.xxx","tld":"xxx"},"ip":{"addr":"31.43.191.59","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.328Z","timestamp":1791753943328,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filmesporno.xxx","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 01:11:27 GMT","end":"Wed, 11 Nov 2026 01:11:26 GMT"},"fingerprint":{"sha1":"EE:76:F8:FD:B8:BF:B8:FA:57:BE:B1:62:EE:93:FE:50:17:17:9C:63","sha256":"8B:EE:DF:7C:73:8D:75:65:97:04:1A:05:72:CD:DD:12:D6:9D:F9:B3:BB:FF:97:E5:6F:D0:AA:8E:52:6C:39:D8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: filmesporno.xxx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: text/html; charset=utf-8\r\nversion: MS26072801\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncloudflare-cdn-cache-control: no-store\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: br\r\nsurrogate-control: no-store\r\nx-served-by: Mini-CDN-offshore\r\nx-cache-status: HIT\r\nx-cache-bypass: 0\r\ncache-control: no-store, no-cache, must-revalidate, private\r\ncdn-cache-control: no-store\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oedy9.com/favicon.ico","fqdn":"oedy9.com","domain":"oedy9.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:53.329Z","timestamp":1791753953329,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: oedy9.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"oedy9.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f.lbp2025.com/20260110/fnbYZs2O/1.jpg","fqdn":"f.lbp2025.com","domain":"lbp2025.com","tld":"com"},"ip":{"addr":"104.21.63.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.599Z","timestamp":1791753938599,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lbp2025.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 10:59:05 GMT","end":"Wed, 02 Dec 2026 11:57:49 GMT"},"fingerprint":{"sha1":"92:C7:B3:9B:31:D0:28:B5:FA:1D:92:45:3B:86:7B:9C:6F:74:A5:DB","sha256":"10:AC:B2:70:7E:E0:4F:B9:CB:1E:8A:DF:1A:3D:15:0B:A0:B2:32:FA:15:14:B2:1A:83:A6:4B:8B:23:55:73:A5"}}},"request":{"raw":"GET /20260110/fnbYZs2O/1.jpg HTTP/1.1\r\nHost: f.lbp2025.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Sat, 10 Jan 2026 20:06:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"6962b14a-1f5b\"\r\nexpires: Fri, 06 Nov 2026 07:32:12 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 395606\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mzZ8aRVT20yHFBit%2Bb3861xZSRQvRkAFiJt%2BNXk1efRj%2B7VsNp%2BWXqbjmCezeyc3%2BzgeOItnnFJe67eRplzYvqFAd%2FnnNJRGM%2FE5mTH5FOgLFtp3VjCB52vMIcuUoP7P\"}]}\r\ncf-ray: a490f0454bbd2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8027,"size_decoded":8698,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 43x60, segment length 16, comment: \"Lavc61.3.100\", baseline, precision 8, 240x320, components 3","md5":"54af5df5030875c9f2c4ff51a3819a72","sha1":"06776f2b46003ed39f40b0ab52f1e0c79ed5f175","sha256":"c1377f337a4281f769ac5891ebba0edff15562e175aef92cd40448ea43e779ec","sha512":"cd69b2ee726029d6ec51311c846fe11d91ab2dd22714660174c91590f3b327704c5855604863c035542b8f08c854c35dc6f3616765eb89661dde1d8ffecc2944","ssdeep":"192:YYr4EdYbI67mynTioZGkjbQvgOB7gmigLqNiOoA7uP:Ycqb/7mG5HQvg5NNrd7uP","tlshash":"59f1aee6b660fe23be689e7d41d45c94d7ef134066852eb04400a7b8ad38949f77307d","first_seen":"2026-10-11T20:34:31.568888Z","last_seen":"2026-10-11T21:28:39.940678Z","times_seen":2,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":3,"connect":18,"send":0,"wait":21,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"minaeast.net/favicon.ico","fqdn":"minaeast.net","domain":"minaeast.net","tld":"net"},"ip":{"addr":"104.21.22.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.424Z","timestamp":1791753943424,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"minaeast.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 04:31:05 GMT","end":"Sat, 28 Nov 2026 05:30:59 GMT"},"fingerprint":{"sha1":"F0:06:5B:98:F4:99:96:16:DF:AD:B0:36:FE:6B:C7:70:BF:08:56:04","sha256":"AC:C5:3B:C1:76:25:A2:79:B2:C2:7F:EE:40:56:11:27:C4:91:3C:9F:D1:4F:4E:ED:CB:72:95:5A:29:2D:B2:4B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: minaeast.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Wed, 23 Sep 2026 08:12:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b7v4iukxa5%2BKLhuv7hCQwqjd0oO9IrRmc8oAbsEv7jWp0TPsRiN46gXEmzVLM9K5BmHyb4Z3u5QsVahBceFYi1QgQPB18xUd1TO71mZ%2FYqoqZT0d3ngTAIAcx8m1zE4%3D\"}]}\r\nexpires: Fri, 24 Sep 2027 05:26:26 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=3600\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"6ab389fe-4276\"\r\nage: 1526357\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a490f062fedc569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17014,"size_decoded":9308,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"cd6cd8f7d9af7267bf6b188d541291b4","sha1":"406bcab4e44f55cddba8f659d8be17c556d46d8a","sha256":"e47f1cd1409c2fc5dc18c4542b12d4e3777fe41137af62c112f059023e580a3e","sha512":"b5bab1c768b4e771c4981f75cd88ad8537828fb8ae988a7326099c81ed2979b502b577ae45e433b1ce647609bdbb14539a22f774cde6f3c645dd0f1f6b60dc02","ssdeep":"192:V/FSmX97q/jQYWDtwxt8ajnLm7JL28gBl9ffMephqQ/Uln813Y:twLQ1Dtwn61ilN/phj/o8m","tlshash":"82724c662aedf949c7860e3557a2612942b9cfe30c2d1b4bde6279e8be35fc43d81140","first_seen":"2026-04-16T16:55:58.986504Z","last_seen":"2026-10-11T21:28:39.798443Z","times_seen":60,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":3,"connect":5,"send":0,"wait":31,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.peeinghub.com/favicon.ico","fqdn":"www.peeinghub.com","domain":"peeinghub.com","tld":"com"},"ip":{"addr":"185.197.160.111","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.616Z","timestamp":1791753943616,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.peeinghub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 146\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jwplayer.com/v2/media/86xIKFg4/poster.jpg?width=720","fqdn":"cdn.jwplayer.com","domain":"jwplayer.com","tld":"com"},"ip":{"addr":"13.249.8.19","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:49.045Z","timestamp":1791753949045,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwplayer.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 24 Jul 2026 00:00:00 GMT","end":"Sat, 06 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:76:89:12:6F:2C:23:A6:21:05:61:5E:91:37:C5:3A:5C:EA:62:1C","sha256":"88:99:73:44:23:6B:7F:0C:6C:BC:41:05:71:E8:FE:DC:5E:BE:91:3D:EF:AE:8C:FC:BC:FD:EC:66:75:F0:C0:72"}}},"request":{"raw":"GET /v2/media/86xIKFg4/poster.jpg?width=720 HTTP/1.1\r\nHost: cdn.jwplayer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://en.4us.asia/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ncontent-type: image/jpeg\r\ncontent-length: 0\r\nlocation: https://assets-jpcust.jwpsrv.com/thumbnails/5jdh8fd8-720.jpg\r\ndate: Sun, 11 Oct 2026 21:24:44 GMT\r\nx-robots-tag: none, indexifembedded\r\nserver: gunicorn\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: accept-encoding, cache-control, origin, dnt, accept-language\r\naccess-control-allow-methods: GET\r\ncache-control: max-age=180, max-stale=180\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 cf605369addb5ed57a33ca47f2e018fa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: jLE8OFFS4SnXDuNsRfQJWyPnvfHGM18zaB3WTxSuUT845MikaCne5w==\r\nage: 65\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"gunicorn","description":"","website":"https://gunicorn.org","common_platform_enumeration":"","icon":"gunicorn.png","categories":["Web servers"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":3,"connect":21,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20240531-1/d792486b41d8addcda0198f38330e739.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"23.140.236.1","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.293Z","timestamp":1791753938293,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbzytp.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 18:35:36 GMT","end":"Fri, 13 Nov 2026 18:35:35 GMT"},"fingerprint":{"sha1":"48:67:53:B8:D9:B0:E4:69:E7:6C:D8:14:FE:A6:61:9A:7E:D7:65:01","sha256":"97:1B:54:8D:56:AC:26:EE:C1:E1:75:88:2C:CC:66:6C:A5:6A:6A:68:EC:1E:AD:83:2A:F7:0D:F1:0D:41:65:1C"}}},"request":{"raw":"GET /upload/vod/20240531-1/d792486b41d8addcda0198f38330e739.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 126217\r\nlast-modified: Fri, 31 May 2024 12:07:16 GMT\r\nvary: Accept-Encoding\r\netag: \"6659bd74-1ed09\"\r\nexpires: Tue, 01 Sep 2026 17:56:27 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 6060552\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":126217,"size_decoded":126639,"mime_type":"image/png","magic":"PNG image data, 718 x 404, 8-bit colormap, non-interlaced","md5":"5fb5ae776ae293eade5565e8b4e7890e","sha1":"d1b5da602eaae0123a093b202eede4f1349ab8c0","sha256":"adb83502b2e926f72985d97c004e52877a195f55a7359833a7a44a7c5c262bff","sha512":"582ce1f949d54d7fc1df76985ae01d6b90511aa3b076708c4c8c575eb8c585cb002eb4b2b22e454a6f7550db6e9a597f33abe1973e980e076c470f499ee9bc2e","ssdeep":"1536:UOvldVZHoHjsENNpPLN/26qaQ8JUNabVOblM8ff7YUKoFFo8RwLTFRF22GNLTco3:PtoHYAzz8a1KNVxMOfMUKFDE2kNoY/LR","tlshash":"76c312603168d6d7800e8e393765ffd733bd213e5aa8ee710cf04a49c2798875cb8196","first_seen":"2023-05-30T05:04:53Z","last_seen":"2026-10-11T21:28:39.94275Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1646,"timings":{"blocked":528,"dns":0,"connect":167,"send":0,"wait":611,"receive":2,"ssl":331},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornochika.net/contents/videos_screenshots/1000/1777/preview.jpg","fqdn":"pornochika.net","domain":"pornochika.net","tld":"net"},"ip":{"addr":"31.10.5.4","port":443,"asn":207728,"as":"EUROHOSTER Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.308Z","timestamp":1791753938308,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornochika.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 23:05:30 GMT","end":"Tue, 08 Dec 2026 23:05:29 GMT"},"fingerprint":{"sha1":"FA:57:55:32:39:27:BE:52:13:F1:47:EF:8C:93:FF:58:BA:18:4C:90","sha256":"73:E9:59:6D:11:B3:62:4B:49:0F:14:DA:FE:13:00:B8:A4:4A:49:F6:F1:90:F3:15:30:30:B2:5D:16:2E:69:8C"}}},"request":{"raw":"GET /contents/videos_screenshots/1000/1777/preview.jpg HTTP/1.1\r\nHost: pornochika.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 11 Oct 2026 21:25:38 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Fri, 19 Jun 2020 07:13:54 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5eec65b2-4f0e\"\r\nStrict-Transport-Security: max-age=31536000;\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20238,"size_decoded":20420,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 352x198, components 3","md5":"1a0908fa527a305cba09b9d2342f070f","sha1":"4fadc98761dbe8d1bc525867df9d3f5ab97d73cb","sha256":"21a8c303c8ef87dbd446e827e435b6558eafd8efb568c8de53d13e653ecd16f8","sha512":"8c0261865c2014bac021ac348718d01ac4722e0516c002faba9126bb25908545dba44e6d1613619021dc8e70ea31c6d6b59e4de6bca83e47709daba268759dbc","ssdeep":"384:y0JGzSSohrXx5YevIzXvjVXu3P0y9MQEgWq8HRAJP/VY6KxX:y0JGzibYevIzfJu3P0y9aqmm9gh","tlshash":"7d92e137d573c584282fd5989d2223068d8c5fd1b2f9d8301b73c9660b657d8e2e9687","first_seen":"2024-08-19T23:05:40.951262Z","last_seen":"2026-10-11T21:28:39.943692Z","times_seen":9,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":346,"dns":14,"connect":26,"send":0,"wait":42,"receive":1,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toxicstream.com/wp-content/uploads/2025/07/708.webp","fqdn":"toxicstream.com","domain":"toxicstream.com","tld":"com"},"ip":{"addr":"104.21.55.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.527Z","timestamp":1791753938527,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toxicstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Sep 2026 10:04:06 GMT","end":"Tue, 29 Dec 2026 11:01:40 GMT"},"fingerprint":{"sha1":"EF:3F:A9:75:19:57:F7:C4:85:4E:1A:3B:80:52:03:22:3C:7D:FE:39","sha256":"FC:0A:D9:EF:F2:64:04:44:44:CD:14:AB:D5:FB:1E:61:79:FD:AF:76:82:57:67:B6:DC:58:28:7B:33:40:98:E9"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/708.webp HTTP/1.1\r\nHost: toxicstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 222318\r\nlast-modified: Mon, 14 Jul 2025 08:32:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-apo-via: origin,no-cache\r\nage: 5884\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DwgLe%2BHgP3KpRkCyR%2Bklw88FjIvWKatBLEsk38HNIEa2Wr6pYEt%2FYlgxkl5wfZHEx1RjgukBE%2Bbxp%2BUchVFARSH9hQRIMp0jw3MoaR2eH1zuSBs2gn7DwSAeGSrGgYG99ZM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a490f0452f3376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":222318,"size_decoded":223084,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f63b4a5809294b9c287ba68d04c5e6d5","sha1":"69b38dc3ebfb29d2cd44b9b44949b50da9ce79a4","sha256":"bd02c94a1e27ab6d6895cfeb91e2098e9ff829c80b408430d66d44838ef527d3","sha512":"2afae5c3879cdc0dd9ef7115021ffd9650dc87ed6c35e3df40643edfc71052496f543bfe4e053b91a832bde358fe85b4e46e3795c12ddf88caa47b0f8a9de497","ssdeep":"6144:46hF3OHUtMyjAwS1zT/IyKLU07mSXj451JtpAME7jIKOPMIUilNpDdAczfAdwu:p1OTysn/IyIU3SXj8HaIpailNLXzA2u","tlshash":"5224233ffa6c7eaba23cc380ea9e59754f565fb5044c58a58c35b2718e726cd0892c31","first_seen":"2026-08-06T17:50:52.589078Z","last_seen":"2026-10-11T21:28:39.946825Z","times_seen":3,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":7,"connect":13,"send":0,"wait":14,"receive":6,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biu37.xyz/20260117/1083187988441071616/1083187988441071616.png","fqdn":"biu37.xyz","domain":"biu37.xyz","tld":"xyz"},"ip":{"addr":"46.8.9.226","port":443,"asn":60592,"as":"Gransy s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:40.909Z","timestamp":1791753940909,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.biu37.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Sep 2026 15:41:05 GMT","end":"Mon, 30 Nov 2026 15:41:04 GMT"},"fingerprint":{"sha1":"D6:6B:33:DA:69:AB:51:E2:A8:6C:A0:E8:3E:97:FE:39:7B:45:9A:95","sha256":"1F:DF:62:7A:93:D3:AD:C8:1C:93:A9:CB:72:E6:E7:9C:3A:FF:87:9E:B2:D4:BD:EC:22:00:EC:7A:38:85:B6:B0"}}},"request":{"raw":"GET /20260117/1083187988441071616/1083187988441071616.png HTTP/1.1\r\nHost: biu37.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 405 \r\ncontent-length: 0\r\ndate: Sun, 11 Oct 2026 21:25:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"405","status_text":"Method Not Allowed","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gujarconnect.com/favicon.ico","fqdn":"gujarconnect.com","domain":"gujarconnect.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.294Z","timestamp":1791753943294,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: gujarconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mydesii.com/wp-content/uploads/2024/09/Desi-Girl-Jungle-Sex.jpg","fqdn":"mydesii.com","domain":"mydesii.com","tld":"com"},"ip":{"addr":"104.21.32.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.213Z","timestamp":1791753938213,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mydesii.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 09:31:18 GMT","end":"Mon, 30 Nov 2026 10:29:51 GMT"},"fingerprint":{"sha1":"A4:D5:52:91:BE:2E:82:AF:F9:12:4D:2E:47:DE:C8:25:73:40:AA:BD","sha256":"F5:D0:59:1D:A0:84:8A:00:B0:D5:0C:41:81:51:79:13:8D:A5:83:80:07:50:02:33:3A:9C:F2:F6:55:87:EC:9C"}}},"request":{"raw":"GET /wp-content/uploads/2024/09/Desi-Girl-Jungle-Sex.jpg HTTP/1.1\r\nHost: mydesii.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://www.mydesii.com/wp-content/uploads/2024/09/Desi-Girl-Jungle-Sex.jpg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aGKBa0PLgJn4dd2mhM%2FH23hcOpDNi89S%2BRkHVB6F41RTCYSKgJCtAKgwk7aqzv0aTZL9dmfWQgiD9oyhUnHQIWn81VkRplIXKqqwxfpVdUO4GVezuIVPQ%2BTCx%2BjlFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a490f042bc33569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":2,"connect":5,"send":0,"wait":20,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g.uuu.cam/movie/javfinder/remu.hayami/video6400/1.jpg","fqdn":"g.uuu.cam","domain":"uuu.cam","tld":"cam"},"ip":{"addr":"172.67.193.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:40.877Z","timestamp":1791753940877,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uuu.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 18:04:04 GMT","end":"Thu, 03 Dec 2026 19:01:29 GMT"},"fingerprint":{"sha1":"43:AB:54:BF:8F:FF:09:5D:3C:4D:D6:74:65:0F:02:11:7C:68:0C:F4","sha256":"EF:87:F2:10:00:A5:8B:93:7E:C0:75:ED:58:FE:F7:53:E1:FC:A6:50:DD:57:54:46:36:4F:E6:61:1B:EA:45:B3"}}},"request":{"raw":"GET /movie/javfinder/remu.hayami/video6400/1.jpg HTTP/1.1\r\nHost: g.uuu.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://en.4us.asia/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:40 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\nlast-modified: Tue, 21 Jan 2020 02:57:57 GMT\r\nserver-timing: cfExtPri\r\nx-content-type-options: nosniff\r\netag: \"5e2668b5-d66b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 2053871\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xGIwdwZGwssFH2SVVPnAEzMPgyQi8DANCGMkupysuUGtyHkkg9obtDvP8KUwNvALvUbHR21BC15TbczMwX5nRBolwJum5ER1xLVRMyI2Gh%2B2Snw3J3S20k2PGQA%3D\"}]}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a490f052a9030daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 54891\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54891,"size_decoded":55732,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 700x393, components 3","md5":"df2b544c73386a6127a88487617da975","sha1":"dfd9b3e9deebf174f4129ccaa8f252c78a950947","sha256":"73d575e94be521ead962351f31362bb0ae890734f3cd72c11c7067e4aed701d3","sha512":"c7f6343012c5d59e1e68f15bcaac957dd37a5d8359d5227a55e9fdec0248b356e802e2926999c5ee1c0b054c9800587a94dbc4a3ae859ae3bbbf5546bc0a0aae","ssdeep":"1536:tHoLAaD+l1BoZOAK5oC/rA8SwCYXIFUiU:tHdaSlTpoCDA8LXCUiU","tlshash":"26330230b2851a63749a7674adf054e1787527923b9e33128df920d339ec1a3954f3de","first_seen":"2025-11-02T12:24:20.287583Z","last_seen":"2026-10-11T21:28:39.949262Z","times_seen":17,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":13,"connect":12,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pornlulu.com/favicon.ico","fqdn":"www.pornlulu.com","domain":"pornlulu.com","tld":"com"},"ip":{"addr":"104.21.34.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.247Z","timestamp":1791753943247,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.pornlulu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\nx-frame-options: SAMEORIGIN\r\nvary: referer\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lY5DU1dqV6Heu%2FVUHRnFe5vMiSayyixMVmaGaZN0b3QdGeafucv0NX0EufpOxn6NssDm5dB6UZyWGTyg1n6IEX9cde39oj2gFTdRp4OCc%2FkOu4lkiH22RGjU07oEw6rTa6dV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-ray: a490f061cf57712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.91rb.com/favicon.ico","fqdn":"www.91rb.com","domain":"91rb.com","tld":"com"},"ip":{"addr":"23.225.104.238","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:53.310Z","timestamp":1791753953310,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"91rb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 15:02:04 GMT","end":"Sun, 13 Dec 2026 15:02:03 GMT"},"fingerprint":{"sha1":"AE:E0:04:2D:D1:B0:4D:60:FE:89:5D:AB:8E:F1:CC:40:DA:54:EA:55","sha256":"46:94:20:FB:76:56:40:4B:BF:C4:3C:0F:7D:AF:37:8C:18:2F:F4:C2:7D:54:BF:A5:AB:22:1D:56:7E:62:E0:87"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.91rb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Server,range,Content-Length,Content-Range\r\ncache-control: max-age=2592000\r\ncontent-type: image/x-icon\r\ndate: Sun, 11 Oct 2026 20:23:39 GMT\r\netag: \"69b6b393-25be\"\r\nexpires: Tue, 10 Nov 2026 20:23:39 GMT\r\nlast-modified: Sun, 11 Oct 2026 20:23:39 GMT\r\nserver: nginx\r\nx-cache: HIT, policy, disk\r\ncontent-length: 9662\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9662,"size_decoded":10179,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"b3ca8f80f6b732d015a45cc3f8ce4ae4","sha1":"6658f0090fe6f91128bd3ff09076710aeb4e4a0d","sha256":"631b80fc0092b2626c323f1943d7b2311f05867405a5578dba6f616bdb12c1c4","sha512":"a78dc4d56c3710240cbce9355446426ef632ffc330289c339793f8303efc27e3fdf6797ba111a521161417117f9b5cf4d8213ea1d06d95ec1ac7a1a057da7ec4","ssdeep":"48:92m6cccHxccRwU86EwpbamYmHQ8CppypEeqVQ7Cvvg9AIQJ5piE:92Xv+awG3vgG1Lpj","tlshash":"011282bb90046c54e555577882a6fbff8b725f882a74d60a44e67d9b3f303e3160aa00","first_seen":"2023-10-19T00:45:41Z","last_seen":"2026-10-11T21:28:39.950433Z","times_seen":94,"resource_available":false,"data":null}},"time_used":793,"timings":{"blocked":-1,"dns":5,"connect":155,"send":0,"wait":155,"receive":157,"ssl":320},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fixedjs.av4me.xyz/av4usimage.png","fqdn":"fixedjs.av4me.xyz","domain":"av4me.xyz","tld":"xyz"},"ip":{"addr":"104.21.58.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:26:09.410Z","timestamp":1791753969410,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"av4me.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 14:10:35 GMT","end":"Wed, 25 Nov 2026 15:09:07 GMT"},"fingerprint":{"sha1":"19:B5:26:DD:47:83:AE:CD:BF:38:3A:53:2C:07:50:35:84:1C:D1:87","sha256":"F1:E1:7B:BB:79:FC:5B:67:DB:D2:43:34:0C:54:E4:2D:C0:2B:71:F7:F5:07:64:5A:D8:8F:E9:62:86:15:A7:6E"}}},"request":{"raw":"GET /av4usimage.png HTTP/1.1\r\nHost: fixedjs.av4me.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 11 Oct 2026 21:26:09 GMT\r\nserver: cloudflare\r\netag: \"a3b-6437702003080\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\ncache-control: public, max-age=360000\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0rP9LHs9yEUdMwswSu9zUpmhwkQ2%2F1FymPIodbKpOZdsDpjG73UxwJ88VufqfTzATVNWTQOX8Wm3oYJY3LgO9hlH0CKAcYwtEcXQlzfb9Wl4OMGXar6eFAik0nMpZrd2Uk3lhw%3D%3D\"}]}\r\ncontent-type: image/png\r\nage: 171638\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a490f104dd53712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2619,"size_decoded":3356,"mime_type":"image/png","magic":"PNG image data, 339 x 89, 8-bit/color RGB, non-interlaced","md5":"8267aaadeeeb8c9fa7482f2f9db2d4e3","sha1":"a2ef23d3b5f9d9bb3102c855a8ace072884ba60c","sha256":"998cf9d427c2e322904e89a056ba823b56078fb199b7395883f3eafabaadbea8","sha512":"719215d8ec70b8b36b24277a80e7876be2fa1afe3698c05bbff013b6a2936701f266e694c221756e7306d1a945013986a53e41af0bc90bdd4bbf0dcbe33f7637","ssdeep":"","tlshash":"f5513ccb05b2fdbc657d79976105a79ef3a896c72982b872565c38c14243a0096c1fe1","first_seen":"2025-11-13T21:07:01.541567Z","last_seen":"2026-10-11T21:28:39.817214Z","times_seen":455,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.4us.asia/","fqdn":"en.4us.asia","domain":"4us.asia","tld":"asia"},"ip":{"addr":"172.67.207.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-11T21:25:37.127Z","timestamp":1791753937127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4us.asia","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 18:49:41 GMT","end":"Fri, 01 Jan 2027 19:49:29 GMT"},"fingerprint":{"sha1":"C1:10:7B:90:5B:3F:81:FA:5F:C0:3E:F6:EC:C4:77:25:41:0C:34:96","sha256":"F9:2F:9D:0F:8C:E3:90:7C:C5:24:11:0C:4F:49:76:C3:FC:28:D6:D0:FE:B3:94:B3:45:5E:36:5D:DA:9C:49:7E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: en.4us.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:37 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v5lCscpJrYYBTftItZzlyk7Fls83jn4%2B%2BFifxSrA0sPr008kirSXz7EZSyiqhbbU5hllTI4vSFaDsL9%2FQI8BNkXaHs3ioFMs56PyoLo5hvt%2B2c7YDnttBa1x5Nr9nw%3D%3D\"}]}\r\npriority: u=0,i\r\npdojs-line8: host-en.4us.asia4.194.8.20-myhost-en.4us.asia.96.142.48/\r\nphost: en.4us.asia\r\npdojs-line400: notjp-nojp-myhost-en.4us.asia-filteron-\r\npdojs-line1011: notjp-nojp-myhost-en.4us.asia-filteron-/\r\nline1340: URI-/-myhost-en.4us.asia-filteron-\r\nline1477: nojp\r\nline1512: -nojp\r\npdojs-line1523: 3236uuuuuuuuu: counted/dev/shm/hotthumnojpa\r\npdojs-line1524: host-4\r\npdojs-line1581: ibig--chname--filteron--txtlang--shows-2244\r\ncache-control: max-age=1382, public\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\nx-proxy-cache-99502: EXPIRED\r\nx-real-forw-ngx: 163.61.75.165-0172.69.130.60-138.128.66.21, 172.69.130.60\r\nxkey-192la: en.4us.asia/--en.4us.asia-en.4us.asia-myzone---no\r\nx-proxy-cache-gjp: HIT\r\nxkey-g-jp: en.4us.asia/--en.4us.asia--my_zone\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a490f03b3bc45684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":175398,"size_decoded":29799,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (59345), with CRLF, LF line terminators","md5":"932dc2f6f95cc516323584c2abbd2731","sha1":"b2f3aa952fe9017f1dc7df9e25157499a3bc0390","sha256":"d0518d2f9b2c4cdf974a54f034c1e39a85b819211ef73d968d02bdbe705e3a2f","sha512":"c309b80e81c15a1761b6f5bcf852201697eac5dcf4cbe18e0235797e23fbc9a79365b84417176f522b9ad0ed7f749eab6fdd893acaeddbcc4469ac516ec3c2e9","ssdeep":"1536:pMSGYbIsB/yOL/b0lSHUInCk2iG9veC+1H:pMsf/yOjrUInIo9","tlshash":"db04b43b914438672ac382d2f19252bee933e21ddada491cb9ae21d673c7d7d8437134","first_seen":"2026-10-11T21:28:39.951788Z","last_seen":"2026-10-11T21:28:39.951788Z","times_seen":1,"resource_available":true,"data":null}},"time_used":744,"timings":{"blocked":-1,"dns":7,"connect":17,"send":0,"wait":490,"receive":230,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20240525-1/2244e14a4f6d19bdba856dbf43f0560a.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"23.140.236.1","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.278Z","timestamp":1791753938278,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbzytp.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 18:35:36 GMT","end":"Fri, 13 Nov 2026 18:35:35 GMT"},"fingerprint":{"sha1":"48:67:53:B8:D9:B0:E4:69:E7:6C:D8:14:FE:A6:61:9A:7E:D7:65:01","sha256":"97:1B:54:8D:56:AC:26:EE:C1:E1:75:88:2C:CC:66:6C:A5:6A:6A:68:EC:1E:AD:83:2A:F7:0D:F1:0D:41:65:1C"}}},"request":{"raw":"GET /upload/vod/20240525-1/2244e14a4f6d19bdba856dbf43f0560a.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7805\r\nlast-modified: Sat, 25 May 2024 05:41:20 GMT\r\nvary: Accept-Encoding\r\netag: \"66517a00-1e7d\"\r\nexpires: Wed, 02 Sep 2026 00:29:43 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 6036956\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7805,"size_decoded":8224,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 399x225, components 3","md5":"5b34121a14d025dc74c34fb0f5818069","sha1":"8532dbeae1da527a361b2624ef23e80e7d7a07db","sha256":"39b55eb22ec5b81ab1d53df1e47f9bc453e4f25c3984cdb372e552241e7f9aac","sha512":"ec7b1cc19cf2d2115513744a5b4dffb6c892d788f44bb8b1013a507ef6a796c7bc8e3a9b267849f73f2b2b7d713f744156ccc850cb1aef3a40b71518daf6e1d7","ssdeep":"192:GQnhD/ACdmHIA2Bk94eqIrZ5iidwCTatKfcIvyy3yOr:GihD/ACk4eqIrcKfcID3ys","tlshash":"92f1c513ce099386a20842bead535d786f4d171d78e62bfe19738d975800f764c8f16e","first_seen":"2025-08-22T11:17:18.258999Z","last_seen":"2026-10-11T21:28:39.953862Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1645,"timings":{"blocked":505,"dns":1,"connect":163,"send":0,"wait":649,"receive":1,"ssl":322},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fqjpg3.top/upload/vod/20250323-1/aadfe7f3fb8a115e3ab5f8d82e4dfb9d.jpg","fqdn":"fqjpg3.top","domain":"fqjpg3.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.437Z","timestamp":1791753938437,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20250323-1/aadfe7f3fb8a115e3ab5f8d82e4dfb9d.jpg HTTP/1.1\r\nHost: fqjpg3.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"fqjpg3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"diorcatm.com/favicon.ico","fqdn":"diorcatm.com","domain":"diorcatm.com","tld":"com"},"ip":{"addr":"172.67.216.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.524Z","timestamp":1791753943524,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"diorcatm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Oct 2026 12:54:58 GMT","end":"Fri, 08 Jan 2027 13:54:54 GMT"},"fingerprint":{"sha1":"EB:FB:22:67:31:A3:B9:3F:25:58:9B:65:46:40:6F:88:72:EB:9F:26","sha256":"C9:95:12:47:7C:94:66:AE:97:70:64:23:42:EB:C8:D8:86:1B:8E:E9:C5:D2:05:23:72:97:49:FD:66:03:72:17"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: diorcatm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Thu, 09 Apr 2026 08:06:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f1Zal%2F%2FB%2BcxxRcp24NgypUlwjeLR1OGOz%2BMwt7h7vr9xHhSDLOcRvMuFlnF204WctpODzNcWh0EG2qEAMmSkQSDMMBFgL5TISt99Zc3RoMO78brdpKWpN03Es21xEN8%3D\"}]}\r\nexpires: Fri, 27 Aug 2027 07:47:17 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=3600\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"69d75e0e-4276\"\r\nage: 3937167\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a490f063ac4f32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17014,"size_decoded":9312,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"cd6cd8f7d9af7267bf6b188d541291b4","sha1":"406bcab4e44f55cddba8f659d8be17c556d46d8a","sha256":"e47f1cd1409c2fc5dc18c4542b12d4e3777fe41137af62c112f059023e580a3e","sha512":"b5bab1c768b4e771c4981f75cd88ad8537828fb8ae988a7326099c81ed2979b502b577ae45e433b1ce647609bdbb14539a22f774cde6f3c645dd0f1f6b60dc02","ssdeep":"192:V/FSmX97q/jQYWDtwxt8ajnLm7JL28gBl9ffMephqQ/Uln813Y:twLQ1Dtwn61ilN/phj/o8m","tlshash":"82724c662aedf949c7860e3557a2612942b9cfe30c2d1b4bde6279e8be35fc43d81140","first_seen":"2026-04-16T16:55:58.986504Z","last_seen":"2026-10-11T21:28:39.798443Z","times_seen":60,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":6,"connect":2,"send":0,"wait":12,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"diorcatm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vjs.zencdn.net/7.8.2/video.js","fqdn":"vjs.zencdn.net","domain":"zencdn.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:50.745Z","timestamp":1791753950745,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /7.8.2/video.js HTTP/1.1\r\nHost: vjs.zencdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sexsex61.com/favicon.ico","fqdn":"www.sexsex61.com","domain":"sexsex61.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.450Z","timestamp":1791753943450,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.sexsex61.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spartakchess.com/favicon.ico","fqdn":"spartakchess.com","domain":"spartakchess.com","tld":"com"},"ip":{"addr":"104.21.32.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.530Z","timestamp":1791753943530,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spartakchess.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 14:43:44 GMT","end":"Mon, 14 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"54:3C:44:53:35:98:71:2B:32:6C:1C:CA:C2:92:B8:7B:46:76:89:FC","sha256":"1E:E5:5C:93:48:BF:3E:C0:5D:15:BE:8B:EA:3F:2D:7E:03:02:34:85:33:DC:33:93:10:14:C8:1D:6C:04:F3:55"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: spartakchess.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Sun, 26 Jul 2026 12:54:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YMSEb19onpYa6PFBWoG6CVX8kterKw7f1GorKl7sSADR%2FoyTqolAWWYcLRhYLLrks3mJHaWhXxd94NIh85HEWuxIM7rIaYF83CwUj4w2mew2nR6%2Fozv4I6C5LZgVksXc3z6G\"}]}\r\nexpires: Wed, 28 Jul 2027 02:31:16 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=3600\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"6a66038e-4276\"\r\nage: 6548148\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a490f063a9951a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17014,"size_decoded":9310,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"cd6cd8f7d9af7267bf6b188d541291b4","sha1":"406bcab4e44f55cddba8f659d8be17c556d46d8a","sha256":"e47f1cd1409c2fc5dc18c4542b12d4e3777fe41137af62c112f059023e580a3e","sha512":"b5bab1c768b4e771c4981f75cd88ad8537828fb8ae988a7326099c81ed2979b502b577ae45e433b1ce647609bdbb14539a22f774cde6f3c645dd0f1f6b60dc02","ssdeep":"192:V/FSmX97q/jQYWDtwxt8ajnLm7JL28gBl9ffMephqQ/Uln813Y:twLQ1Dtwn61ilN/phj/o8m","tlshash":"82724c662aedf949c7860e3557a2612942b9cfe30c2d1b4bde6279e8be35fc43d81140","first_seen":"2026-04-16T16:55:58.986504Z","last_seen":"2026-10-11T21:28:39.798443Z","times_seen":60,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":2,"connect":4,"send":0,"wait":11,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"css.jpg4.quest/ckplayer/ckplayer.js","fqdn":"css.jpg4.quest","domain":"jpg4.quest","tld":"quest"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:50.765Z","timestamp":1791753950765,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /ckplayer/ckplayer.js HTTP/1.1\r\nHost: css.jpg4.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ansuko.net/wp-content/uploads/2024/12/qna5mxck_header.jpg","fqdn":"ansuko.net","domain":"ansuko.net","tld":"net"},"ip":{"addr":"172.67.138.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.321Z","timestamp":1791753938321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ansuko.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 03:22:49 GMT","end":"Sun, 27 Dec 2026 04:22:39 GMT"},"fingerprint":{"sha1":"A0:10:86:46:2D:F7:1F:70:5D:3F:18:DA:F2:25:60:B7:95:52:91:51","sha256":"D1:40:2D:15:A1:99:35:EB:08:96:5E:08:6F:BD:B6:49:D2:71:03:06:C7:51:81:B3:9A:B0:AB:A4:2E:3C:B1:20"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/qna5mxck_header.jpg HTTP/1.1\r\nHost: ansuko.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OLW26x%2Fejd9S%2BND%2FdSqTctTyz%2FlZrTAU1YYJ29EUSHpZEKBdR%2BJt9k%2B6O0FCHK415hrNUtW0gJ%2BjsBcrm3UEjFOFbUIvrphch4mx6cdJzAPhspDDapqrman8pxqn\"}]}\r\npriority: u=5,i\r\nage: 22147\r\nlast-modified: Sun, 11 Oct 2026 15:16:30 GMT\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a490f043e8a12efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146283,"size_decoded":146917,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 640x640, components 3","md5":"8133280a5f260fbc6247c4f6f2feb529","sha1":"7e81a699673f604bdb3902bdccd02de7d3884f35","sha256":"e1ec22a2e1009306a710180e476ce4caaa9f2b735f0f006e07db8974987692ef","sha512":"4e77e9e504cd313e9ea516a0e9d9be50ed36e6694ba930059fefd88cab7e913e4fadad1f630ace366f8c06854e22a51c828295fc8ce9862a02ac537516d02c03","ssdeep":"3072:lyFhJONm+1lbUkPpxR3gp5ifzfNWvoaxCoyY2AuME09fB:lyMNRf3ffNWAaxcM9J","tlshash":"04e312e374761ef0692f88fc849f452283e2e5235794749dcaf64e3834ac12ed2da994","first_seen":"2025-08-03T04:39:11.47583Z","last_seen":"2026-10-11T21:28:39.954614Z","times_seen":16,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":147,"dns":0,"connect":0,"send":0,"wait":43,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapdig.com/media/videos/tmb/000/009/933/1.jpg","fqdn":"fapdig.com","domain":"fapdig.com","tld":"com"},"ip":{"addr":"104.21.6.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.438Z","timestamp":1791753938438,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdig.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 16:47:04 GMT","end":"Tue, 01 Dec 2026 17:44:49 GMT"},"fingerprint":{"sha1":"7F:FE:16:D7:B5:7A:51:B5:57:76:D9:DF:3E:3F:3F:3C:88:DE:BE:AC","sha256":"33:F9:D3:E4:70:FF:A2:AF:F0:F2:6D:FF:F3:7B:A3:81:44:DC:7B:80:A3:B6:7D:7F:36:81:6C:15:75:64:E3:C9"}}},"request":{"raw":"GET /media/videos/tmb/000/009/933/1.jpg HTTP/1.1\r\nHost: fapdig.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13964\r\nserver: cloudflare\r\nlast-modified: Sat, 12 Mar 2016 18:54:16 GMT\r\netag: \"56e465d8-368c\"\r\naccept-ranges: bytes\r\nage: 4366\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Exm%2B%2Bxxp31s6K0KSJyxAQa4hFoFDdt0bF3xR7cEEvdMEZyV%2FgIMXPefDn6Y8uejHobZ36zZnne%2Fx3jW1KF7xJKyNtjyWWy0s38UoOOroP5BlSiPmF0i09j%2B98Nrd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a490f043a9590731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13964,"size_decoded":14636,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: \"Lavc56.58.100\", baseline, precision 8, 320x240, components 3","md5":"6ec30ac177590d5df779263803e5ee41","sha1":"04460cfb4f05acc9373de07ab17d2aac8dc03d9e","sha256":"d218418701c8b0cb23a3294898a7394f186ae330e99dd4a23b0a0ed7b7a4f53f","sha512":"b3e1650e5ad095408e8e64d5a1630287ed4e3d55a537dacc50f27b6f0c95fa8ebcf67c1656d6d0821b4e51ebd07f60996d165f3cdb154a6a60a08e8e71e611b6","ssdeep":"384:VY19mGQFZ/EmCe5831cVXSSgHIzcqaD8MJlIwJCKvR:VYiGQZMmCe+lchDqDJLZJ","tlshash":"b752c0a36c2a01d10e2d9c7891cf7bad37a7251a7112763655f258c9bbe01cd0a0d5fe","first_seen":"2024-08-19T19:51:37.0247Z","last_seen":"2026-10-11T21:28:39.956558Z","times_seen":12,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sichuanganxi.com/favicon.ico","fqdn":"sichuanganxi.com","domain":"sichuanganxi.com","tld":"com"},"ip":{"addr":"172.67.170.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.427Z","timestamp":1791753943427,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sichuanganxi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 01:10:34 GMT","end":"Wed, 23 Dec 2026 02:08:15 GMT"},"fingerprint":{"sha1":"56:47:E8:A5:50:67:16:A1:B1:4F:B2:D6:67:36:BE:B0:BE:DC:01:56","sha256":"FB:C4:3A:8F:E7:E0:EC:22:11:35:AE:C4:E7:41:77:B5:2E:6A:A9:40:65:49:CF:74:EB:B9:B2:B0:C9:64:2E:F0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sichuanganxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=owMuXarKTT9pod3vTPlSsOPkvTgo7QNw1Z70uj5SQfU8MT8HwLsYwybgIkc5jcS27ZLrK9Tt5i9ocahOuijtyIlFiv6ITtb6Vrs3V2McgZanET0nFQ1VPupWDwTHdxHdnUnW\"}]}\r\nlast-modified: Thu, 09 Apr 2026 08:06:38 GMT\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 30 Jul 2027 23:51:02 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=3600\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"69d75e0e-4276\"\r\nage: 6298496\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a490f062cde8b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17014,"size_decoded":9328,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"cd6cd8f7d9af7267bf6b188d541291b4","sha1":"406bcab4e44f55cddba8f659d8be17c556d46d8a","sha256":"e47f1cd1409c2fc5dc18c4542b12d4e3777fe41137af62c112f059023e580a3e","sha512":"b5bab1c768b4e771c4981f75cd88ad8537828fb8ae988a7326099c81ed2979b502b577ae45e433b1ce647609bdbb14539a22f774cde6f3c645dd0f1f6b60dc02","ssdeep":"192:V/FSmX97q/jQYWDtwxt8ajnLm7JL28gBl9ffMephqQ/Uln813Y:twLQ1Dtwn61ilN/phj/o8m","tlshash":"82724c662aedf949c7860e3557a2612942b9cfe30c2d1b4bde6279e8be35fc43d81140","first_seen":"2026-04-16T16:55:58.986504Z","last_seen":"2026-10-11T21:28:39.798443Z","times_seen":60,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":11,"connect":35,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.the-moms.com/iwphglw/thumbs/336/063_and-shaving.jpg","fqdn":"images.the-moms.com","domain":"the-moms.com","tld":"com"},"ip":{"addr":"104.21.58.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.211Z","timestamp":1791753938211,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"the-moms.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:29:53 GMT","end":"Tue, 08 Dec 2026 14:28:39 GMT"},"fingerprint":{"sha1":"B6:09:77:ED:74:06:46:01:23:03:82:81:BF:83:AC:59:EE:5E:B4:14","sha256":"B0:45:AA:2B:8F:4A:CC:D5:47:69:AB:FA:F4:E7:7E:A2:AC:15:49:38:FD:79:A6:8A:FD:79:81:E6:D4:50:F6:58"}}},"request":{"raw":"GET /iwphglw/thumbs/336/063_and-shaving.jpg HTTP/1.1\r\nHost: images.the-moms.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9120\r\nserver: cloudflare\r\nlast-modified: Thu, 24 Sep 2020 09:15:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"5f6c63bf-23a0\"\r\nexpires: Sat, 17 Oct 2026 01:17:09 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 158908\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gHrL%2F4pxlU8MNjDLjbGU7Wp40spr%2B2GfUt%2Fu%2FquA1EotTnwHY%2FtNEcFkopj9K9LRPhY%2FTo4ZT%2B1EWkh5MZ3tCIYSOY2ftErFVE4L81%2F09B%2FDRV4vZ%2B7aw8%2F8XaNH%2B6NU1iYX3gyM\"}]}\r\ncf-ray: a490f042bfa3c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9120,"size_decoded":9860,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x200, components 3","md5":"f4cb606d28be2bfe3b7981b63fe28c80","sha1":"78b51b8492bb548276a53849f016cea98643cb07","sha256":"18c305c623019116db3c87de75b2e4549bee8792b0dc5ed8cb67671e2883af0d","sha512":"4c04f610adfc59b6529efd021f4870d7c3475b97b61e84475667500ff85de80baf114cfa5f4e45b5a8cd75e920d0947f2465c1708547780a70c367d2538845ba","ssdeep":"192:NBW2nk7SlsuhkOpmCxiqU0doXOzrH2VkH70:Nvnk7SvkOuo4k2I0","tlshash":"2c129d77ad312443db6e7925fa4ea60b32625d500ab5adcb180397383b8bd42642c3b6","first_seen":"2025-05-25T07:14:28.241261Z","last_seen":"2026-10-11T21:28:39.960102Z","times_seen":19,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":2,"connect":4,"send":0,"wait":20,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mydesii.com/wp-content/uploads/2024/09/Desi-Girl-Jungle-Sex.jpg","fqdn":"www.mydesii.com","domain":"mydesii.com","tld":"com"},"ip":{"addr":"104.21.32.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:40.590Z","timestamp":1791753940590,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mydesii.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 09:31:18 GMT","end":"Mon, 30 Nov 2026 10:29:51 GMT"},"fingerprint":{"sha1":"A4:D5:52:91:BE:2E:82:AF:F9:12:4D:2E:47:DE:C8:25:73:40:AA:BD","sha256":"F5:D0:59:1D:A0:84:8A:00:B0:D5:0C:41:81:51:79:13:8D:A5:83:80:07:50:02:33:3A:9C:F2:F6:55:87:EC:9C"}}},"request":{"raw":"GET /wp-content/uploads/2024/09/Desi-Girl-Jungle-Sex.jpg HTTP/1.1\r\nHost: www.mydesii.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://en.4us.asia/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:40 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 10 Sep 2026 11:43:47 GMT\r\netag: \"7237-66d4bcf3-178ade3;;;\"\r\nlast-modified: Sun, 01 Sep 2024 19:13:55 GMT\r\naccept-ranges: bytes\r\nx-powered-by: CyberPanel-OLS/2.5.0\r\nage: 278660\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JxbP0LyxCYyf6UxLWlif0qYdLoEoab8Uvf90mF179kZKHUiN6Vg8vvgi4v9OX5og1FpCZMlYUGzg3ZnRZ42VLeMY0vA%2Fx54lT1obbXpeFNaaTKg11UsQRngubSEFxByG%2BnY%3D\"}]}\r\ncf-ray: a490f0510908120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29239\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29239,"size_decoded":30035,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 900x522, components 3","md5":"14fd58ae997b4329860bd5deb20c4b78","sha1":"cac507e396129075be3f7570d27af4a07f936f0c","sha256":"609bd2c2ed9ddaa45362dda601544a631547782ad3896d1c38a7150148daf023","sha512":"2503ad974452c8be586050ceebee29702b72129a7570b5b3c820283fdb5e935e00903207a16339aa0e8ae318ca5df350e259083a804f35a12f70bf3200e0ffd2","ssdeep":"768:eLCjIkwR/p3XwSZz/EJ3Zbh42wZ5N2ozNsjMM3rUfRQXj9:6OwR1A4z/03g58ogMieW9","tlshash":"2ad2f1f5d29dc5f7d292b5f52b1c1d81ebe8e3afe6261a11c131ccfe83a41050ba9618","first_seen":"2026-03-02T16:55:39.763735Z","last_seen":"2026-10-11T21:28:39.960991Z","times_seen":5,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":46,"connect":12,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fqjpg3.top/upload/vod/20241105-1/0f3cde723faa7d797ce0d7090b72386e.jpg","fqdn":"fqjpg3.top","domain":"fqjpg3.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:41.027Z","timestamp":1791753941027,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241105-1/0f3cde723faa7d797ce0d7090b72386e.jpg HTTP/1.1\r\nHost: fqjpg3.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"fqjpg3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/nosleep/0.11.0/NoSleep.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:50.690Z","timestamp":1791753950690,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/nosleep/0.11.0/NoSleep.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":10687,"size_decoded":4969,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10613)","md5":"ea77f824de2ef57acb12e7cb6596365e","sha1":"10bad0dbdf30a0471c2c786b349daeb1dd19180e","sha256":"2b19d92ce83bf3b498f73103ba1240f09c84798b1f92aedf1491ccf0aa6f5e4c","sha512":"cf69dd76334b7318c829868da8a7e9c2097ef261555388132fc69f95d42e91420e2988056c3d93c830b20059422ae5a82e1109e3dce9127ccb0e23cc5ca27591","ssdeep":"192:N0rZbTPe+fl9SKRGyFgkw+wi+FrZJqbzr+5rA7wbUCzebIkm:N09voK7gzi+FrZJqbzrarAyUX5m","tlshash":"7a22f8b33133fd9f8fba085ac61d61045c7dbc6f4aa94091bb0884e86af4558ead5d34","first_seen":"2023-03-07T12:02:01Z","last_seen":"2026-10-11T21:28:39.96172Z","times_seen":2417,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.w3schools.com/w3css/4/w3.css","fqdn":"www.w3schools.com","domain":"w3schools.com","tld":"com"},"ip":{"addr":"95.101.10.17","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:53.196Z","timestamp":1791753953196,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"certification.w3schools.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 00:49:05 GMT","end":"Sun, 03 Jan 2027 00:49:04 GMT"},"fingerprint":{"sha1":"AC:1E:1E:1A:EF:B6:7D:08:DE:C8:A5:8D:C6:88:2C:3F:15:A2:34:C3","sha256":"9E:78:C8:E9:99:1F:A3:BC:C0:CB:E7:9D:3A:BC:4C:77:4F:7C:34:E2:6F:BB:40:DF:D8:B2:A9:90:DE:48:5B:15"}}},"request":{"raw":"GET /w3css/4/w3.css HTTP/1.1\r\nHost: www.w3schools.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\nlast-modified: Fri, 02 Oct 2026 11:13:04 GMT\r\naccept-ranges: bytes\r\netag: \"0e06dfe5e52dd1:0\"\r\ncontent-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com https://pathfinder.w3schools.com; upgrade-insecure-requests\r\nx-content-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com https://pathfinder.w3schools.com;\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 5256\r\ncache-control: public, max-age=30724614\r\nexpires: Sat, 02 Oct 2027 12:02:47 GMT\r\ndate: Sun, 11 Oct 2026 21:25:53 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-loc: true\r\nstrict-transport-security: max-age=2628000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23427,"size_decoded":6060,"mime_type":"text/css","magic":"ASCII text","md5":"75b37d4abbdde1322116d2744181081d","sha1":"6d6b5ff442af4682c30e970c382002a7c694ac5b","sha256":"c4f2aba13970ecf8303fb9329f97c8824861569273b0aa27acce48abc61d04f5","sha512":"8ba303e078af3f71176b6e7fa5c32b0f3984014393133a960da7103bc78204a144a3d034a3d1ad7126f1547f45408e00e036175f54766ffccc8cf84cd4c129a5","ssdeep":"384:aHHLO7eS0F4bBY/fn6jZcy9/cGK1q8CarY64Cb+dOy:aHHCLYXfl1q8CarY64Cb+dl","tlshash":"fbb2f022ff8a1138261a873660d5fbfc573a8681df9f1b7a7030373943894c26796e49","first_seen":"2023-06-26T21:08:35Z","last_seen":"2026-10-11T21:28:39.939835Z","times_seen":17482,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"un.shayu260522.top/upload/vod/20261002-1/c39f0b10e78d49974c26126d6dc9afe2.jpg","fqdn":"un.shayu260522.top","domain":"shayu260522.top","tld":"top"},"ip":{"addr":"104.21.46.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.263Z","timestamp":1791753938263,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shayu260522.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:02:43 GMT","end":"Wed, 16 Dec 2026 11:02:42 GMT"},"fingerprint":{"sha1":"AB:C8:D3:7B:74:05:74:F6:3F:B4:7B:53:12:47:F6:07:9A:58:00:96","sha256":"86:F3:D8:BA:7E:03:2C:AF:B6:88:27:9C:FC:EB:6C:36:E0:9A:DE:85:65:49:4A:28:0D:1A:6F:E1:56:5E:45:3A"}}},"request":{"raw":"GET /upload/vod/20261002-1/c39f0b10e78d49974c26126d6dc9afe2.jpg HTTP/1.1\r\nHost: un.shayu260522.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 41484\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\netag: \"6abf2e92-a20c\"\r\nexpires: Sun, 01 Nov 2026 04:33:15 GMT\r\nlast-modified: Fri, 02 Oct 2026 04:33:48 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\nage: 836251\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ITjfC4fXM4Mjjy1k8L8voZ3t32s2Vo8EUDExUOBlEba3%2BlKjnWBFwi3v3dMRjRuG3PV2L4E%2BTqbdy%2FqBUlS9QJDg8he7a5vIcuIU4qRl3MrSp4tZAt%2BLD7eKa32BN6F4yShR08U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a490f043c979b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41484,"size_decoded":42240,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 480x270, components 3","md5":"a6918e4c8999d91ff0febaec57243f86","sha1":"8a0c369ff58e4478f091e44f4b7e03c6538ed30d","sha256":"e442414152ffc95933d322564b586d8bba670198a5c54a6d061ca515c0224e32","sha512":"fb2434ce30aed92fff4b40c32c112740bd244f6a17769b72a83b3c0f104268d2a4edb8c9a0eabc2b6400551c852fc6300391b31de4150bfb77b358253b5d898c","ssdeep":"768:xI53lvAtn9R0rZE6fDbGhvBokpDxP9PvonGXAIOIIKqg5bG5HRgAlH5lmTOhE3gP:xk14t9R0rZE6DbmJBp3D2IIFg8jlH5l9","tlshash":"6113f1bd9b4ccc787910ca85612cd8fffed04a9c29efb4607d97a18045b5a506e247c2","first_seen":"2026-07-28T16:05:22.785079Z","last_seen":"2026-10-11T21:28:39.965551Z","times_seen":13,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":158,"dns":4,"connect":7,"send":0,"wait":22,"receive":0,"ssl":136},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"un.shayu260522.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.redporn.video/img/vahabi76a8.jpg","fqdn":"www.redporn.video","domain":"redporn.video","tld":"video"},"ip":{"addr":"104.21.23.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.519Z","timestamp":1791753938519,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redporn.video","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 07:01:44 GMT","end":"Wed, 02 Dec 2026 08:00:14 GMT"},"fingerprint":{"sha1":"01:CB:18:C9:18:41:EF:67:8C:AE:B4:23:1F:43:C1:94:74:05:27:E9","sha256":"29:EC:98:81:A4:BE:4B:E2:38:43:DE:16:41:CF:4E:11:50:A9:D1:C6:47:F0:A4:BF:75:96:58:E9:02:CE:4A:CE"}}},"request":{"raw":"GET /img/vahabi76a8.jpg HTTP/1.1\r\nHost: www.redporn.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14194\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8lgdK5x5qVKKJOUDZQKHQ9bKUlkZslFjIBUOMltqNAJdTXJyjJ6gO5IkFy84S4l5OwjFDkHMsex9uYV2dyiTKgFaUFDYwAXpbVOjEtkv1GO7tzv1bMdw7VLx1vqp535SyoJNUQ%3D%3D\"}]}\r\nlast-modified: Mon, 19 Jan 2026 20:43:06 GMT\r\netag: \"3772-648c3bcf3ffba\"\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 30 Jul 2027 02:03:20 GMT\r\nage: 6376938\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a490f0456c508be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14194,"size_decoded":14966,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85\", baseline, precision 8, 352x198, components 3","md5":"5420fe2ca13dc9a5513462a8b76722d9","sha1":"e54a290ffeaf68f670b35b9e91745a8f96f03229","sha256":"7a137f742f87c758a8cc0a77e8b4bc1b0919d0e4f10523aec6c9badf2d3898c8","sha512":"d0e7a9a69420ffec22c491be9cbbf7b58897de623e014978bbf2f27e0e4c8a7c10e6aa023c0b454ef746304f7442d97ff045cd20f334e315a2ea6f728568fada","ssdeep":"384:PJQqwzdK9gSuHOEUEMbV/ub+te5b3XB+23G:PJQqYK9gOrPbQbye1AMG","tlshash":"4952d1f0b6137d94c14d28bea1c270e9aae4547835d8ba055d0a5b1fc36adea5cc6b03","first_seen":"2026-10-11T20:34:31.734873Z","last_seen":"2026-10-11T21:28:39.967299Z","times_seen":2,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":91,"dns":4,"connect":5,"send":0,"wait":28,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic32.havzy1.com/pic/20220527/e4543ed341778cd227120399edbc21f3/1.jpg","fqdn":"pic32.havzy1.com","domain":"havzy1.com","tld":"com"},"ip":{"addr":"172.67.181.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:40.970Z","timestamp":1791753940970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"havzy1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 20:13:35 GMT","end":"Sun, 15 Nov 2026 21:12:14 GMT"},"fingerprint":{"sha1":"10:3E:8E:69:15:51:0C:8A:8A:32:BC:52:5E:83:49:CB:0A:28:81:F4","sha256":"5B:F4:2D:92:3C:AE:14:42:50:A4:43:D2:79:E0:A8:E6:8C:F4:A3:94:44:45:95:DF:47:74:C0:7A:5F:10:B2:60"}}},"request":{"raw":"GET /pic/20220527/e4543ed341778cd227120399edbc21f3/1.jpg HTTP/1.1\r\nHost: pic32.havzy1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cMsSf ])\r\ncache-control: public, max-age=2592000\r\nage: 1528209\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FGER%2BAUyzKVAB0BPlJyugFtWJJlZHjjCvVnSKo7jl3nOcCbSdHjeoBE1mRXN0fvoic8JaExYJNpjc4HbnGCyn4F7AE3BABMxKo5CvQw9nr%2Bo6gAvBAlczyzdRH9gP7Knlg3q\"}]}\r\ncontent-encoding: zstd\r\ndate: Sun, 11 Oct 2026 21:25:40 GMT\r\ncf-ray: a490f0532c8cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fqjpg10.top/upload/vod/20260222-1/e17a0251890ce5b9b926d3e3fb63f787.png","fqdn":"fqjpg10.top","domain":"fqjpg10.top","tld":"top"},"ip":{"addr":"23.134.76.191","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.536Z","timestamp":1791753938536,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fqjpg10.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 05:27:48 GMT","end":"Mon, 02 Nov 2026 05:27:47 GMT"},"fingerprint":{"sha1":"CE:28:80:B0:05:19:5C:8B:0B:3B:EC:8F:4D:FB:7C:6A:9C:16:0E:51","sha256":"92:80:CD:0C:A7:99:7A:96:A5:ED:DE:0F:9F:7B:C6:04:F5:36:1A:01:69:60:53:9D:3B:8F:14:E8:BF:FA:4B:29"}}},"request":{"raw":"GET /upload/vod/20260222-1/e17a0251890ce5b9b926d3e3fb63f787.png HTTP/1.1\r\nHost: fqjpg10.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 11 Oct 2026 21:25:39 GMT\r\nContent-Type: image/png\r\nContent-Length: 109240\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Mar 2026 13:31:44 GMT\r\nETag: \"69b411c0-1aab8\"\r\nExpires: Sat, 17 Oct 2026 18:43:31 GMT\r\nX-Cache-Status: HIT\r\nCache-Control: max-age=2592000, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":109240,"size_decoded":109595,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, height=284, software=Android Gallery, orientation=[*0*], datetime=2024:10:04 14:08:18, width=512], baseline, precision 8, 512x284, components 3","md5":"5d3c4c695f02ad8947b1d506e593f2b1","sha1":"b5bc05a64ac403bb385626c5c2a1f69daf7e623d","sha256":"b833b0ee6d1ce3beff4224e4f21cd29ab1eebd051dbd51bf3dc3c988f84eddd5","sha512":"792047d3d4aaf5cca0fec17f8904032e9d16c98cef8d1e02710c30d3ad1ea6df1f70bc434c7c4693985c2c69036a3a0600010ed222f205ab18b8aefb5a101927","ssdeep":"3072:OvHfWjr1VZEZ3wrtuJkpAcxj3azeGTK32BfX8vV:sHKrvZm3wxu6pjstTK3sq","tlshash":"7ab312a5f7216159641b01b2c1cbdce32177050cad94be994bb87183ebee77e9328cd8","first_seen":"2026-10-11T20:34:30.769145Z","last_seen":"2026-10-11T21:28:39.969329Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1476,"timings":{"blocked":861,"dns":0,"connect":108,"send":0,"wait":182,"receive":187,"ssl":127},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"fqjpg10.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/original/2X/8/8156b6b85e2992f61cfe63c83af20b177c786d2e.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.602Z","timestamp":1791753938602,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /uploads/default/original/2X/8/8156b6b85e2992f61cfe63c83af20b177c786d2e.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.twi-dl.net/favicon.ico","fqdn":"www.twi-dl.net","domain":"twi-dl.net","tld":"net"},"ip":{"addr":"172.67.152.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:44.037Z","timestamp":1791753944037,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twi-dl.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 02:22:20 GMT","end":"Wed, 18 Nov 2026 03:22:15 GMT"},"fingerprint":{"sha1":"8A:AC:D2:E9:B4:39:7F:EF:3E:F6:9E:6A:5D:57:AB:42:A7:EA:D2:26","sha256":"E0:BE:8C:7B:DD:D3:99:64:42:17:F1:D7:B5:AD:B7:68:7C:C4:46:13:60:0C:3A:45:29:49:39:DE:FF:76:2A:4D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.twi-dl.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://en.4us.asia/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 11 Oct 2026 21:25:44 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k3iIrVBAYqV8bbtIOY5iDHdImIDvyyxpVs7b6Yrr1PtrybCLlwiOCbnnON93CkTqhyFiiNGU2gXM2%2BAv%2F0OQ89KqUlF3rkzZiUvKNoozJDutnLMrMloaKJByqYGiC1vSpg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=4,i\r\nserver: cloudflare\r\ncf-ray: a490f0664cc2c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","fqdn":"en.4us.asia","domain":"4us.asia","tld":"asia"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:48.873Z","timestamp":1791753948873,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4us.asia","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 18:49:41 GMT","end":"Fri, 01 Jan 2027 19:49:29 GMT"},"fingerprint":{"sha1":"C1:10:7B:90:5B:3F:81:FA:5F:C0:3E:F6:EC:C4:77:25:41:0C:34:96","sha256":"F9:2F:9D:0F:8C:E3:90:7C:C5:24:11:0C:4F:49:76:C3:FC:28:D6:D0:FE:B3:94:B3:45:5E:36:5D:DA:9C:49:7E"}}},"request":{"raw":"GET /v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p] HTTP/1.1\r\nHost: en.4us.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://en.4us.asia/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cnt=0; lctcfck=NO; myda=yes; _ym_uid=1791753947588421529; _ym_d=1791753947; _ym_isad=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"cnt","value":"0"},{"name":"lctcfck","value":"NO"},{"name":"myda","value":"yes"},{"name":"_ym_uid","value":"1791753947588421529"},{"name":"_ym_d","value":"1791753947"},{"name":"_ym_isad","value":"1"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.pornohlam.com/uploads/posts/2018-02/medium/1517490869_00-09-10.jpg","fqdn":"a.pornohlam.com","domain":"pornohlam.com","tld":"com"},"ip":{"addr":"91.194.110.9","port":443,"asn":213166,"as":"UA-Hosting SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.312Z","timestamp":1791753938312,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pornohlam.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 10:23:43 GMT","end":"Sun, 03 Jan 2027 10:23:42 GMT"},"fingerprint":{"sha1":"DE:9B:AC:02:B4:C4:E1:6F:9E:D8:94:22:B2:81:3B:F6:54:21:64:FE","sha256":"63:A8:55:1D:9D:10:29:52:AD:42:E8:DB:AA:F8:00:BF:0F:D8:34:07:1D:C3:84:59:20:37:E8:7C:0F:4D:C6:A4"}}},"request":{"raw":"GET /uploads/posts/2018-02/medium/1517490869_00-09-10.jpg HTTP/1.1\r\nHost: a.pornohlam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.10.3\r\ndate: Sun, 11 Oct 2026 21:23:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 89938\r\nlast-modified: Sat, 29 Aug 2020 13:26:22 GMT\r\netag: \"5f4a577e-15f52\"\r\nexpires: Sun, 18 Oct 2026 21:23:02 GMT\r\ncache-control: max-age=604800\r\nstrict-transport-security: max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89938,"size_decoded":90289,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 450x258, components 3","md5":"523ef9347b77e2686a4cfad6a03adc5a","sha1":"f879016d0949980561b385574bb5ccc3f50dbbd0","sha256":"2285925cf8004523084cefc4b749958a73c4b0a0f77729067431cc4facd72e36","sha512":"f0be60a153a4fcf4df6836c79b11eb4e4dad5089482702fde8da536d6f492412c15c07f70ce9cc0446d6b16fd52db4ef592db3328b7f212e1fb0ee6d797804a2","ssdeep":"1536:eD9AMIqS8/wusa3M92sXgmkkStQWE6KTQBin8r8A1HGsMkTv3x4XP80NGS:ASnXa89hwm36KTV8r8AkajB4XPx","tlshash":"1e93124cab343d34c61d8b0b62ad17cf62e4eb72b1e0951f5f299637e388669a423711","first_seen":"2024-08-19T22:34:14.1536Z","last_seen":"2026-10-11T21:28:39.971107Z","times_seen":25,"resource_available":false,"data":null}},"time_used":866,"timings":{"blocked":258,"dns":9,"connect":60,"send":0,"wait":28,"receive":165,"ssl":328},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.jkuntupiaxxzz.com/upload/vod/20260614-53/965adb2a546c4fb7dbf13a15eda5a8e8.jpg","fqdn":"www.jkuntupiaxxzz.com","domain":"jkuntupiaxxzz.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.486Z","timestamp":1791753938486,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20260614-53/965adb2a546c4fb7dbf13a15eda5a8e8.jpg HTTP/1.1\r\nHost: www.jkuntupiaxxzz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.porn100.tv/favicon.ico","fqdn":"www.porn100.tv","domain":"porn100.tv","tld":"tv"},"ip":{"addr":"104.21.37.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.536Z","timestamp":1791753943536,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"porn100.tv","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 19:46:30 GMT","end":"Mon, 23 Nov 2026 20:45:07 GMT"},"fingerprint":{"sha1":"47:20:8B:C9:2B:B8:EE:83:66:8A:C0:A7:65:FD:95:92:07:B9:12:28","sha256":"32:20:6A:3F:F6:47:01:56:C1:59:AC:A9:D1:66:4F:79:36:83:4B:48:1A:89:60:D6:ED:E3:02:67:62:52:F4:4D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.porn100.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\nx-frame-options: SAMEORIGIN\r\nvary: referer\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rQLhl9vD73hhRRChCfDXr8OQ6HnCUCf8l3CwHKhXUA1Y18z76dpxihwLldMtFsELceBveltk15E7PnKcSUU4cPs25lAgt5krcE5XHYl9p1EzQ3ZC23W1zDUL9j%2FwqDSeeg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=4,i\r\nserver: cloudflare\r\ncf-ray: a490f0631cc6783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stickamvids.net/photos/2018/08/10154_0_300.jpg","fqdn":"stickamvids.net","domain":"stickamvids.net","tld":"net"},"ip":{"addr":"80.209.253.45","port":443,"asn":204196,"as":"Abelohost BV","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.289Z","timestamp":1791753938289,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stickamvids.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 04:23:12 GMT","end":"Wed, 02 Dec 2026 04:23:11 GMT"},"fingerprint":{"sha1":"98:67:FB:F7:A6:17:7D:FB:15:4F:64:5B:81:34:26:16:5C:F4:8C:E9","sha256":"C2:93:B8:02:1D:86:AD:4D:AA:D4:7A:F8:C0:5D:51:5F:BE:5C:6A:D3:E4:9C:E9:19:28:88:39:D8:B8:92:B8:97"}}},"request":{"raw":"GET /photos/2018/08/10154_0_300.jpg HTTP/1.1\r\nHost: stickamvids.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7654\r\nlast-modified: Wed, 14 Feb 2024 17:08:38 GMT\r\netag: \"65ccf396-1de6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7654,"size_decoded":8000,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", progressive, precision 8, 230x172, components 3","md5":"82c048d484eb8b5f689ef43e6f0eff26","sha1":"d8dc0f2792631dd3ccbd053b0a2d69b94ed1f484","sha256":"cd54b0be3add71fe198435d88a5a7b2f5ba00c07c348c2cfec19badf2a3d2f2a","sha512":"f20f086b4c086069b69ef9500a7795bcd3d7b41bb1563e0ab9e91a9e9e52f139c782a183f43a8924a589aa23e546dff835c3b893ed552c7d8774caedab5f06bd","ssdeep":"192:LkrlVdePUKiY+oEYIjOwqnAEs+5+PSN/uu/SpQGNR/TmD:LkRP8ifoEDOwqnq+5n5uuapRpTo","tlshash":"68f17d6837d3526dfb2f0bba681c6445bf808df164146be062875086a9f53d2a9a33d1","first_seen":"2024-10-22T11:16:37.256689Z","last_seen":"2026-10-11T21:28:39.972354Z","times_seen":24,"resource_available":false,"data":null}},"time_used":828,"timings":{"blocked":729,"dns":0,"connect":22,"send":0,"wait":24,"receive":2,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgdanaizi3.com:8660/videos/202601/17/696a6af82c55ec2c28c9929e/poster2.jpg","fqdn":"imgdanaizi3.com","domain":"imgdanaizi3.com","tld":"com"},"ip":{"addr":"23.140.204.17","port":8660,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.544Z","timestamp":1791753938544,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imgdanaizi3.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 16:54:56 GMT","end":"Thu, 12 Nov 2026 16:54:55 GMT"},"fingerprint":{"sha1":"50:EF:7C:10:23:D3:70:DB:A4:42:7D:13:72:B1:8E:B2:74:0D:3E:AE","sha256":"BC:73:08:21:A7:52:6B:7B:C8:79:10:89:79:0D:8C:BB:B8:7E:04:3B:01:21:A8:B1:80:A4:D7:0C:D5:DE:CA:8F"}}},"request":{"raw":"GET /videos/202601/17/696a6af82c55ec2c28c9929e/poster2.jpg HTTP/1.1\r\nHost: imgdanaizi3.com:8660\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 50649\r\ncross-origin-opener-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-headers: X-Requested-With, Content-Type\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nlast-modified: Wed, 24 Jun 2026 01:42:30 GMT\r\netag: W/\"c5d9-19ef74b08c1\"\r\nage: 6000554\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50649,"size_decoded":51453,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 600x338, components 3","md5":"cca7abcb29cc6c6fdd8689be1ca10a25","sha1":"360ce7c3e42f8354c0e3b088476307b15ae85506","sha256":"cda5feaa1a4dc4377ebe8b9a5dae695dc00f3f319d854065c2eae8ccaea4cea1","sha512":"b1624bcfa223f8a5de49f7b8ccaaebf9739458dcf7f25279d0bab8ce60a43d4047be2960331ce3cc9424f8e2d8200c62a1bdaf11bd942638879918c9fc4f6324","ssdeep":"1536:Lvv3nkk5/JLQv5ZsPTwQpOHDnHifh5RYL:bfkk5RLQBZsPTth5RYL","tlshash":"8c3302f4b163e2038af37c64cc719b225051263c597e798e01dcbca9c5e78ae6c2576c","first_seen":"2026-10-11T20:34:31.137437Z","last_seen":"2026-10-11T21:28:39.97321Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1847,"timings":{"blocked":899,"dns":5,"connect":171,"send":0,"wait":309,"receive":131,"ssl":317},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jpgjingpinx1.top/upload/vod/20250805-1/132e1b0eb489dd9bf3bddd596dab7431.png","fqdn":"jpgjingpinx1.top","domain":"jpgjingpinx1.top","tld":"top"},"ip":{"addr":"157.90.33.71","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:41.022Z","timestamp":1791753941022,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"jpgjingpinx1.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 23:15:35 GMT","end":"Sat, 21 Nov 2026 23:15:34 GMT"},"fingerprint":{"sha1":"28:B5:E1:A6:7A:7B:F3:64:1D:3C:EA:46:2F:2C:4B:3C:B2:EE:81:3F","sha256":"80:EC:3B:64:B5:1D:A2:D1:60:95:F3:60:42:C0:88:AB:90:94:4D:22:7A:8E:EB:AD:5D:AB:0C:11:12:A0:26:09"}}},"request":{"raw":"GET /upload/vod/20250805-1/132e1b0eb489dd9bf3bddd596dab7431.png HTTP/1.1\r\nHost: jpgjingpinx1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: Angie\r\ndate: Sun, 11 Oct 2026 21:25:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-security-policy: script-src 'nonce-LFcUFNe183U6RMspAztUjQ=='; style-src 'unsafe-inline'\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jpgjingpinx1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zooporner.com/faviconico/","fqdn":"zooporner.com","domain":"zooporner.com","tld":"com"},"ip":{"addr":"104.21.72.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:44.044Z","timestamp":1791753944044,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooporner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 05:01:36 GMT","end":"Sat, 12 Dec 2026 06:00:11 GMT"},"fingerprint":{"sha1":"4F:58:34:DC:EB:12:07:9B:AB:EC:9C:AE:6E:19:DD:72:4D:30:70:94","sha256":"FE:D0:D9:DF:63:6B:FC:DB:CE:48:28:ED:9C:1B:92:57:EA:38:C2:DA:38:2C:69:63:11:D7:82:E2:9C:7C:0F:FF"}}},"request":{"raw":"GET /faviconico/ HTTP/1.1\r\nHost: zooporner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ASPro_1382933ca042bef776e8100bd5eb8ac5=frgk20tud9k7799rro4el7fdcu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"ASPro_1382933ca042bef776e8100bd5eb8ac5","value":"frgk20tud9k7799rro4el7fdcu"}],"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\npriority: u=4,i\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wy%2FMRjBScYCl5JdhyQnKiWakfTj8UqOo4q%2Br9xkUHI6D365DjisI5NS%2BqLNBQaX0Qod2i2ht%2BwYjCRHUyDaouHJ24V2aSYvnd4CTpNvJJjok1TfUuTlJc%2BnmHU1OWHIN\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a490f0664d8f8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bfjkuncdn.com/20230517/k1lrQ0Dm/hls/index.m3u8","fqdn":"bfjkuncdn.com","domain":"bfjkuncdn.com","tld":"com"},"ip":{"addr":"23.226.76.18","port":443,"asn":53755,"as":"IOFLOOD","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:51.992Z","timestamp":1791753951992,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bfaskcdn.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Mon, 20 Apr 2026 04:55:18 GMT","end":"Thu, 05 Nov 2026 04:55:17 GMT"},"fingerprint":{"sha1":"D6:82:7D:DF:63:3E:DC:A1:A0:39:27:3E:70:45:A2:74:4F:75:9D:06","sha256":"97:11:CD:ED:49:51:3C:4C:41:64:37:13:37:C0:DF:54:D3:BE:BB:6E:A1:54:63:37:61:0F:3F:67:96:D4:54:56"}}},"request":{"raw":"GET /20230517/k1lrQ0Dm/hls/index.m3u8 HTTP/1.1\r\nHost: bfjkuncdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://en.4us.asia\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:52 GMT\r\ncontent-type: application/vnd.apple.mpegURL\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":16702,"size_decoded":17032,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"1f457714b631d4973ec330938950e2d4","sha1":"1ee977e7afb286bfcee54172a8c86522b18b8b63","sha256":"c3c17c128e74c56fa2f7ce86bf37a540920ce58cd57089d6a96e80984ae30967","sha512":"e485bfa6a7e612011e12dccc61acdc7f597cdcd70e088a9b455c03f0cae5d055ab763c3a135538931c28b51f1e19dd0501ce0fe5ab49be91e08965db2466fb01","ssdeep":"192:w8cgu150AhYAaZ4dR+gZnyWFFKogHcPeM1Ht1:w1gu1LhSZ4dR+any4bPecHL","tlshash":"95725a92c4c1f922d95d4b7d8aeafda41abbdd220c4c6088366097c754b735bb1f1cb8","first_seen":"2026-10-11T21:28:39.975228Z","last_seen":"2026-10-11T21:28:39.975228Z","times_seen":1,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"porn112.com/i/9/244.jpg","fqdn":"porn112.com","domain":"porn112.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:40.971Z","timestamp":1791753940971,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /i/9/244.jpg HTTP/1.1\r\nHost: porn112.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jpgjingpinx1.top/upload/vod/20250809-1/fa51aed872038d03ad90745f66f87c2f.png","fqdn":"jpgjingpinx1.top","domain":"jpgjingpinx1.top","tld":"top"},"ip":{"addr":"157.90.33.71","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:41.033Z","timestamp":1791753941033,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"jpgjingpinx1.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 23:15:35 GMT","end":"Sat, 21 Nov 2026 23:15:34 GMT"},"fingerprint":{"sha1":"28:B5:E1:A6:7A:7B:F3:64:1D:3C:EA:46:2F:2C:4B:3C:B2:EE:81:3F","sha256":"80:EC:3B:64:B5:1D:A2:D1:60:95:F3:60:42:C0:88:AB:90:94:4D:22:7A:8E:EB:AD:5D:AB:0C:11:12:A0:26:09"}}},"request":{"raw":"GET /upload/vod/20250809-1/fa51aed872038d03ad90745f66f87c2f.png HTTP/1.1\r\nHost: jpgjingpinx1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: Angie\r\ndate: Sun, 11 Oct 2026 21:25:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-security-policy: script-src 'nonce-foX+ni8FiafnyQs0sOP2Nw=='; style-src 'unsafe-inline'\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jpgjingpinx1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"im3.mediacont.net/beastiality/48/623_sex-home.jpg","fqdn":"im3.mediacont.net","domain":"mediacont.net","tld":"net"},"ip":{"addr":"93.113.203.4","port":443,"asn":208949,"as":"Hbing Limited","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.220Z","timestamp":1791753938220,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mediacont.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 22:02:32 GMT","end":"Sat, 14 Nov 2026 22:02:31 GMT"},"fingerprint":{"sha1":"48:1A:6F:19:8D:BA:DF:AC:BB:0E:EC:8B:3A:D4:9E:E4:2B:56:60:F8","sha256":"EB:39:9C:FC:7C:06:F4:89:DD:85:E9:95:3D:30:D6:21:59:D9:29:C1:58:4D:BF:D2:6B:FE:AE:14:BB:D2:07:8C"}}},"request":{"raw":"GET /beastiality/48/623_sex-home.jpg HTTP/1.1\r\nHost: im3.mediacont.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17363\r\nlast-modified: Thu, 03 Nov 2022 17:47:27 GMT\r\netag: \"6363feaf-43d3\"\r\nexpires: Sat, 09 Jan 2027 21:25:38 GMT\r\ncache-control: max-age=7776000\r\nx-request-id: 705125bee5f83eff90068bbee1f577de\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17363,"size_decoded":17710,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 330x248, components 3","md5":"5793d66e0ec5ee615495bc7356059843","sha1":"747b761f06438a28dc5c617eb76aba690d0dd557","sha256":"9a09b2ec505edfe9c2a40f9818a4952377824a70eeb0d2144119ccb4f628e8ce","sha512":"137b792139970bbfb09406bbc31c2496efdc1328f62243611243d156687931d6a43c459b1bbf0e36a520b6f4dfe752d2a674d904ba5ef56e5eba87c925826c54","ssdeep":"384:1d7pO9RwZUjVZxVGQ7KRXfnlaeAstvEWjMztmg:T7pO9RwZURVGQ7KVn/AaXvg","tlshash":"b172cfeb502ade98108e227d7f6444dd9fee855a10910b057df4859633374aa9d3387c","first_seen":"2026-08-08T09:04:00.274232Z","last_seen":"2026-10-11T21:28:39.977288Z","times_seen":5,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":424,"dns":1,"connect":19,"send":0,"wait":21,"receive":21,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg5.com:3519/upload/vod/20260407-1/aa359f6cde62729bd9b16d3056c8e94f.jpg","fqdn":"sbzytpimg5.com","domain":"sbzytpimg5.com","tld":"com"},"ip":{"addr":"23.140.236.1","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.314Z","timestamp":1791753938314,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbzytp.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 18:35:36 GMT","end":"Fri, 13 Nov 2026 18:35:35 GMT"},"fingerprint":{"sha1":"48:67:53:B8:D9:B0:E4:69:E7:6C:D8:14:FE:A6:61:9A:7E:D7:65:01","sha256":"97:1B:54:8D:56:AC:26:EE:C1:E1:75:88:2C:CC:66:6C:A5:6A:6A:68:EC:1E:AD:83:2A:F7:0D:F1:0D:41:65:1C"}}},"request":{"raw":"GET /upload/vod/20260407-1/aa359f6cde62729bd9b16d3056c8e94f.jpg HTTP/1.1\r\nHost: sbzytpimg5.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 114731\r\nlast-modified: Tue, 07 Apr 2026 02:15:25 GMT\r\nvary: Accept-Encoding\r\netag: \"69d468bd-1c02b\"\r\nexpires: Wed, 02 Sep 2026 00:37:02 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 6036516\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":114731,"size_decoded":115153,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 986x554, components 3","md5":"2cb16fad1932fadd7effe3a5455f9eb0","sha1":"6ae9a9f9da5781c4a317aa556ce7556429d66178","sha256":"55caf0c62bb4f95283de8bdba9495f7fd43c54ad985fa8f37394a0919d015cc2","sha512":"3c2ef35a6f42829d90a9663a20cf890e85731f4c20ea205eb2eaa827049a3ae41690f730c108b1b59a8f4aac4d5369eae214396f3d29db505b41381be50e9486","ssdeep":"3072:+Q7TcDxpdxddTdDClPmocDEV+qEKkce9SZVuUz79iA:+myxzxddIlPYEVAVuUUzBn","tlshash":"c9b312d36f4648c2596ae162783b8ece3fe443600d656480c2d787d9bed69d38f61b1c","first_seen":"2026-05-24T13:00:54.210976Z","last_seen":"2026-10-11T21:28:39.978791Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1224,"timings":{"blocked":10,"dns":13,"connect":159,"send":0,"wait":290,"receive":436,"ssl":308},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.tphsck.com/upload/vod/20250701-1/b5e2507676530156bb93f87ee9892bfb.png","fqdn":"img.tphsck.com","domain":"tphsck.com","tld":"com"},"ip":{"addr":"104.21.24.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.565Z","timestamp":1791753938565,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tphsck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 16:01:24 GMT","end":"Wed, 23 Dec 2026 17:00:09 GMT"},"fingerprint":{"sha1":"EF:BC:74:DE:61:1F:DB:93:90:52:A0:17:5F:C5:6E:6F:B9:1C:71:9A","sha256":"D8:4C:12:84:05:60:56:0A:42:AA:62:3D:83:60:19:92:E0:3A:C9:FF:59:EB:2B:78:17:9A:60:7E:38:E5:7E:8D"}}},"request":{"raw":"GET /upload/vod/20250701-1/b5e2507676530156bb93f87ee9892bfb.png HTTP/1.1\r\nHost: img.tphsck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/png\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\netag: W/\"68637d7a-161a6e\"\r\nexpires: Tue, 13 Oct 2026 07:28:53 GMT\r\nlast-modified: Fri, 14 Aug 2026 04:20:30 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, disk\r\nage: 2464941\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8n5PuCBtjCzQsEUncm8GyJYkztD9flaE3xakfGZOCo0ZJjo0vjs566RdQVeBzCeCFX9QKfmMSddD5VZg0ef4hJ3A3b0C%2BoMWeJfY%2BBPqQ6049fY6yDJhLCDlQ4NAZPGx5g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a490f0452a9735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1448558,"size_decoded":1447974,"mime_type":"image/png","magic":"PNG image data, 1043 x 587, 8-bit/color RGBA, non-interlaced","md5":"f758757bdfe2a61554e69a26bc8c1c6f","sha1":"53ec623bc5e506a401a96846e853b22e77c6e26c","sha256":"07bc19ad2099209c126d7ff4f1ebac85efc44ae4e39626f5c31dfab7d9893bc5","sha512":"320ee1f73c7dc1938eca27be44423b3a4920783fd39c1500f5f87bc3d68e0c94985c318e3b38b0f45c919b6807b334c34099d2d60ea4d8a6a9099a0cdc4f1180","ssdeep":"24576:9ATM/klGDkpBCHNgKzCeAGROmfRdw0uSKaQNCMCXL0uT:9ATM/+uukRr7S147H","tlshash":"bb2533c02864a6cbab54688b11c1ee9fe4f5719c57d7383e02afb48d06bcd3ea8f4515","first_seen":"2026-10-11T20:34:31.74998Z","last_seen":"2026-10-11T21:28:39.982963Z","times_seen":2,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":4,"connect":12,"send":0,"wait":19,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.com/","fqdn":"www.9188porn.com","domain":"9188porn.com","tld":"com"},"ip":{"addr":"104.21.17.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:40.918Z","timestamp":1791753940918,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9188porn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 09:17:44 GMT","end":"Wed, 23 Dec 2026 10:15:30 GMT"},"fingerprint":{"sha1":"56:38:B7:B6:49:E8:A4:E3:4E:6A:33:3A:A9:E4:C2:9C:3E:55:0E:0E","sha256":"BF:18:B9:5E:BB:6F:AF:4C:90:E7:A0:54:0E:47:DC:6D:E0:5C:48:FA:94:13:C9:53:D5:F4:89:0E:A2:22:AE:42"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.9188porn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 11 Oct 2026 21:25:40 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o5s2evDZMJzvneKYoM1bKw2SZPQAz7xuj7hz%2FWI96EwZ9V%2FZKpavYAlADe1DODJg9pEF%2BIXKnaP0JErg7IMjTMPdTyeUMpfaUZfznNPmgWNp9beZm3ktV7WyInuVlZ9Q0QCK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-ray: a490f052de7e0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xvideosporno.blog.br/favicon.ico","fqdn":"xvideosporno.blog.br","domain":"xvideosporno.blog.br","tld":"blog.br"},"ip":{"addr":"104.26.11.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.406Z","timestamp":1791753943406,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xvideosporno.blog.br","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 15:47:34 GMT","end":"Thu, 03 Dec 2026 15:47:33 GMT"},"fingerprint":{"sha1":"97:83:BC:33:19:12:B2:40:A5:8C:A2:BA:C2:61:2C:1A:19:40:39:B2","sha256":"DD:42:0A:D1:C8:C6:7D:1A:6D:D8:6B:A5:9F:BD:73:01:2F:BA:5D:0C:0E:51:3C:18:25:4E:E4:93:79:0D:44:54"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xvideosporno.blog.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Sun, 16 Aug 2026 20:31:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a821e07-3c2e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nx-cacheable: YES:Forced\r\nx-varnish: 917596973 917530934\r\npriority: u=4,i\r\nvia: 1.1 varnish (Varnish/6.6)\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\nage: 2458\r\ncache-control: max-age=432000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JFArsA4B9AjmGyyhxm%2FiOm2D28qBbmIZ%2FnHQnk8DJeVTWQQf3q0JcVUutFPZfVLdwKsyU34gjahk9Tzsx670NVhRQ0kXdcv1%2BPohq3EWsCaP%2B6CnpvZr3gsBtDArCU8EZiULwGGd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a490f0625b511ae6-OSL\r\ncontent-length: 1900\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish:6.6","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":2789,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"c7370cb342619289ab2cc6c76223303a","sha1":"ac51209ae6950a979e11669b7e5d9167e11a54cc","sha256":"3e86a0bc78ff523dfe4413401abfc97eee7b5bf507b1f5ad9fe54608d0eab232","sha512":"6ad4465ffed1597d7f9577348e346b1805f70c49e84c71ef74bab37d84e6bc91e75159bb50bf7a837df0a7c4de5482fce60482ba6c016d09d6393025bca96d27","ssdeep":"48:cJX9I4I7kaKFD11jwpJ85ki0HfOazRTdWUkv18ob75IvqQZlxNd4QB:ERI7kX11jsJ8x0G6TdW2oHidvxP4M","tlshash":"dc620fc6567405e9e9b4fef0d2106914025f6d6e1c33bb550c96bc873f7a2c6832a40f","first_seen":"2026-08-18T23:21:09.416568Z","last_seen":"2026-10-11T21:28:39.987465Z","times_seen":8,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.clips4sale.com/favicon.ico","fqdn":"www.clips4sale.com","domain":"clips4sale.com","tld":"com"},"ip":{"addr":"104.18.24.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.644Z","timestamp":1791753943644,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clips4sale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Oct 2026 13:25:59 GMT","end":"Fri, 08 Jan 2027 14:25:57 GMT"},"fingerprint":{"sha1":"74:BB:34:1A:28:5E:40:12:A1:E8:A0:32:95:13:71:67:4A:BA:C2:CA","sha256":"45:B4:74:83:7E:ED:67:8E:97:90:E0:43:B9:5C:06:38:97:AA:52:FF:E4:C6:9F:ED:52:FA:41:33:FE:E2:E5:C5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.clips4sale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/x-icon\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 06 Oct 2026 20:16:37 GMT\r\netag: W/\"a2be-1a112dc6a41\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=15768000\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version\r\nexpires: Mon, 12 Oct 2026 01:25:43 GMT\r\nage: 1155\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=pPC69Qe5rGou6WA3qYFLjCtvmSDfp1ZbwEgFDUPffD8-1791753943.7411675-1.0.1.1-ZDYjtnHPAJ2yCAtWkXptaogBZV1r71730K2y9gtKhsMDQ428zteynrfQszWPkBoPv9gS4Trb47X_dn0vuubbr2j2gyTCOziL7AW3EIQmADRm2_zE1bZndx76Oiw_37G5; HttpOnly; SameSite=None; Secure; Path=/; Domain=clips4sale.com; Expires=Sun, 11 Oct 2026 21:55:43 GMT\r\nserver: cloudflare\r\ncf-ray: a490f0645f175685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"pPC69Qe5rGou6WA3qYFLjCtvmSDfp1ZbwEgFDUPffD8-1791753943.7411675-1.0.1.1-ZDYjtnHPAJ2yCAtWkXptaogBZV1r71730K2y9gtKhsMDQ428zteynrfQszWPkBoPv9gS4Trb47X_dn0vuubbr2j2gyTCOziL7AW3EIQmADRm2_zE1bZndx76Oiw_37G5","quoted":false,"path":"/","domain":"clips4sale.com","expires":"2026-10-11T21:55:43Z","raw_expires":"Sun, 11 Oct 2026 21:55:43 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=pPC69Qe5rGou6WA3qYFLjCtvmSDfp1ZbwEgFDUPffD8-1791753943.7411675-1.0.1.1-ZDYjtnHPAJ2yCAtWkXptaogBZV1r71730K2y9gtKhsMDQ428zteynrfQszWPkBoPv9gS4Trb47X_dn0vuubbr2j2gyTCOziL7AW3EIQmADRm2_zE1bZndx76Oiw_37G5; HttpOnly; SameSite=None; Secure; Path=/; Domain=clips4sale.com; Expires=Sun, 11 Oct 2026 21:55:43 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41662,"size_decoded":2451,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 100x100, 32 bits/pixel","md5":"088f7efcf8975a268095c2e2e25a4e6e","sha1":"8d6d7ec398a8b512964ab55019916359e810ef32","sha256":"5c94c7a2b8e389146b2a3285118f3777de917beae8754946ee389c2c9a695b66","sha512":"b13721e7727ed5ea063cdb5d4afab13ee647610895662e00c60a7c5ce761fdfa7181d5e50c82db36402df0e079dce86b728045e6b2cf5dca3d349502db24831b","ssdeep":"48:XkZHShtC6c5FsKnTVgSv8SpT2+l3/sKPhb22vV4V0SSdkkM:XkZyvKFZxgSvnpTQCB22vOP","tlshash":"961351d43526d41df8d046f01e63f1d82a503e046fa24d923cda3b9e16ba5d74ecca71","first_seen":"2023-07-16T03:59:46Z","last_seen":"2026-10-11T21:28:39.885599Z","times_seen":188,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":9,"connect":3,"send":0,"wait":16,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","fqdn":"en.4us.asia","domain":"4us.asia","tld":"asia"},"ip":{"addr":"172.67.207.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:48.930Z","timestamp":1791753948930,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4us.asia","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 18:49:41 GMT","end":"Fri, 01 Jan 2027 19:49:29 GMT"},"fingerprint":{"sha1":"C1:10:7B:90:5B:3F:81:FA:5F:C0:3E:F6:EC:C4:77:25:41:0C:34:96","sha256":"F9:2F:9D:0F:8C:E3:90:7C:C5:24:11:0C:4F:49:76:C3:FC:28:D6:D0:FE:B3:94:B3:45:5E:36:5D:DA:9C:49:7E"}}},"request":{"raw":"GET /v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p] HTTP/1.1\r\nHost: en.4us.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://en.4us.asia/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cnt=0; lctcfck=NO; myda=yes; _ym_uid=1791753947588421529; _ym_d=1791753947; _ym_isad=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"cnt","value":"0"},{"name":"lctcfck","value":"NO"},{"name":"myda","value":"yes"},{"name":"_ym_uid","value":"1791753947588421529"},{"name":"_ym_d","value":"1791753947"},{"name":"_ym_isad","value":"1"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZIBbBI%2BZvn92Xf4Q4pWKax%2FLfbvtLNWQntUkjZsqkQkXGiu%2FS4JYvvvMZAQDKWvXBGxirY4C2r5OAgV619LVpfuCQff2MVrSCM5cnIVXBCteZZCc7ELWbRBbhzB7aQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\npdojs-line8: host-en.4us.asia4.194.8.20-myhost-en.4us.asia.96.142.48/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]\r\nphost: en.4us.asia\r\npdojs-line400: notjp-nojp-myhost-en.4us.asia-filteron-\r\npdojs-line1011: notjp-nojp-myhost-en.4us.asia-filteron-/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]\r\npdo118: feedvid-, cachefileb-cacpdo3/9b/22/5cb430, lfm-1-19, lmd-20, lud-15499, xfvlen-1144983, fsize-301824, played-8984\r\npdo427: feedvid-, cachefileb-cacpdo3/9b/22/5cb430, lfm-1-19, lmd-20, lud-15499, xfvlen-1144983, fsize-301824, played-8984\r\npdophp-line460: -; cachetime- 1134.0750175881; ctime- 20260910025449; lmd- 20261012053506\r\nline1347: getq-Jinhua is a senior girl in high school. The college entrance examination is over and her cousin has an incestuous room opening. She has a strong oral sex - selfies and candid shots - online adult porn videos and AV movies for free\r\nline1351: getq-Jinhua is a senior girl in high school. The college entrance examination is over and her cousin has an incestuous room opening. She has a strong oral sex - selfies and candid shots - online adult porn videos and AV movies for free\r\nline1411: getq-Jinhua is a senior girl in high school. The college entrance examination is over and her cousin has an incestuous room opening. She has a strong oral sex - selfies and candid shots - online adult porn videos and AV movies for free\r\npdoline1625: method-0: ik-jinh|||ua i|||s a |||seni|||or g|||irl |||in h|||igh |||scho|||ol. |||the |||coll|||ege |||entr|||ance||| exa|||mina|||tion||| is |||over||| and||| her||| cou|||sin |||has |||an i|||nces|||tuou|||s ro|||om o|||peni|||ng. |||she |||has |||a st|||rong||| ora|||l se|||x - |||self|||ies |||and |||cand|||id s|||hots||| - o|||nlin|||e ad|||ult |||porn|||  an|||d av||| mov|||ies |||for |||    |||    |||    |||    |||    |||    |||jinhua is a senior girl in high school|||the college entrance examination is over and her cousin has an incestuous room opening|||she has a strong oral sex|||selfies and candid shots|||online adult porn|||and av movies for|||ik====jinhua is a senior girl in high school. the college entrance examination is over and her cousin has an incestuous room opening. she has a strong oral sex - selfies and candid shots - online adult porn  and av movies for                         : vidlang-cn6368\r\npdoline1739: method-0: ik-|||jinh|||ua i|||s a |||seni|||or g|||irl |||in h|||igh |||scho|||ol. |||the |||coll|||ege |||entr|||ance||| exa|||mina|||tion||| is |||over||| and||| her||| cou|||sin |||has |||an i|||nces|||tuou|||s ro|||om o|||peni|||ng. |||she |||has |||a st|||rong||| ora|||l se|||x - |||self|||ies |||and |||cand|||id s|||hots||| - o|||nlin|||e ad|||ult |||porn|||  an|||d av||| mov|||ies |||for |||    |||    |||    |||    |||    |||    |||jinhua is a senior girl in high school|||the college entrance examination is over and her cousin has an incestuous room opening|||she has a strong oral sex|||selfies and candid shots|||online adult porn|||and av movies forjinhua is a senior girl in high school. the college entrance examination is over and her cousin has an incestuous room opening. she has a strong oral sex - selfies and candid shots - online adult porn  and av movies for                         : vidlang-cn6368\r\npdoline1740: sarray-0cn\r\npdoline1803: notjp-nojp: fvkwcnt-6368\r\npdoline1809: notjp-nojp: fvkwcnt-6368\r\npdoline1826: notjp-nojp: mblenik-244: khitTop-405.33333333333: fvkwcnt-Array: sdeep-: scount-0: xfvcount-6368: icnt-2432: ikarraycnt-68|||jinh|||ua i|||s a |||seni|||or g|||irl |||in h|||igh |||scho|||ol. |||the |||coll|||ege |||entr|||ance||| exa|||mina|||tion||| is |||over||| and||| her||| cou|||sin |||has |||an i|||nces|||tuou|||s ro|||om o|||peni|||ng. |||she |||a st|||rong||| ora|||l se|||x - |||self|||ies |||and |||cand|||id s|||hots||| - o|||nlin|||e ad|||ult |||porn|||  an|||d av||| mov|||for |||    |||jinhua is a senior girl in high school|||the college entrance examination is over and her cousin has an incestuous room opening|||she has a strong oral sex|||selfies and candid shots|||online adult porn|||and av movies for: yhkey-\r\npdoline2093: $i-44$load-1.14125\r\nline2423: sitet--VIDEOS\r\ncache-control: max-age=4107, public\r\ngenre: genre=\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\nx-proxy-cache-99502: HIT\r\nx-real-forw-ngx: 163.61.75.165-0162.158.222.23-1195.64.118.152, 162.158.222.23\r\nxkey-192la: en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]-B-en.4us.asia-en.4us.asia-myzone---yes\r\nx-proxy-cache-gjp: MISS\r\nxkey-g-jp: en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]-B-en.4us.asia--my_zone\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a490f084c9785684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26084,"size_decoded":15952,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14506), with CRLF line terminators","md5":"a538423098e31b1ff756c583041f5946","sha1":"59b5ca38efa16f3ffdea98bc23a5f14bdc8537da","sha256":"902ac3b98e89a2e3217487e7f3ef2ce884d4f84e627a3f53d8ae1dd20aa68eaf","sha512":"46178d7adde3f4e5a2c7c9e9fe6e86db999f51dcb46cbc01660619d70fea427519678c3aab5a3c6125778c7dbf0599430cbc1208ecb99efeb172b49390a4cadc","ssdeep":"384:iWjn8ebmoPzvGYn4iyNpuwpWrBaBAdaoqRw2jgeIOUUV4cj09aM2NiTcvASnuThB:iWRyqrGYMtsrEBAd5qRhVIW/1MmHiHL","tlshash":"bfc2f9eb8984323b03b24286783972bed6277189d7d48cc0f8be057a6b0776865375dd","first_seen":"2026-10-11T21:28:39.988378Z","last_seen":"2026-10-11T21:28:39.988378Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1591,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1357,"receive":234,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"la.lashayu.com/upload/vod/20260310-1/163c6d983a144dd75f86a38b59cab4f5.jpg","fqdn":"la.lashayu.com","domain":"lashayu.com","tld":"com"},"ip":{"addr":"192.198.185.34","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.250Z","timestamp":1791753938250,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"la.lashayu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 15:25:32 GMT","end":"Mon, 02 Nov 2026 15:25:31 GMT"},"fingerprint":{"sha1":"50:E0:56:F6:93:07:EA:2A:00:86:E7:BE:F7:BE:61:34:19:B6:E4:C1","sha256":"8C:30:C8:B8:74:8D:D9:E5:AE:CB:6A:8D:37:6E:FF:95:B6:F9:82:CB:10:DC:6D:C0:35:A2:C0:91:91:C9:2A:FE"}}},"request":{"raw":"GET /upload/vod/20260310-1/163c6d983a144dd75f86a38b59cab4f5.jpg HTTP/1.1\r\nHost: la.lashayu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: : true\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\netag: W/\"69af7470-26170\"\r\nexpires: Tue, 10 Nov 2026 21:25:38 GMT\r\nlast-modified: Tue, 10 Mar 2026 01:31:28 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nx-cache: BYPASS, ChunkedEncoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":156016,"size_decoded":155821,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.51.100\", baseline, precision 8, 720x1280, components 3","md5":"4098fe7244ac7be2bd9d321e4ece749d","sha1":"526d636a92cafd1cbcec931d242395fede2ed49e","sha256":"e013a762a06397137e31c246ee21c5772cefa7054eeb9a247e52174101bcbcf9","sha512":"ea37e5bf74514c0fe742dd5a3e002b915d855ff11610161342ba95f13a39783673466baf7d7dc4d1a224b89f234fc37a01f3b94ef4e6d788d83c02b22f0fdfe7","ssdeep":"3072:vANt7PC2uS9WpV6Wtt7SnH974yLdlvc6Dybdb9F:INt7oV6w7md8Ydl5Dyhr","tlshash":"42e3126c3d8200e2a11d19bbf1b4e6fa1ea677353d71cba80147b44c178576aa23f4d8","first_seen":"2025-09-20T15:05:37.264899Z","last_seen":"2026-10-11T21:28:39.990401Z","times_seen":18,"resource_available":false,"data":null}},"time_used":475,"timings":{"blocked":311,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/videojs-flash/dist/videojs-flash.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:50.748Z","timestamp":1791753950748,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 18:43:31 GMT","end":"Mon, 07 Dec 2026 19:43:28 GMT"},"fingerprint":{"sha1":"C3:5B:D6:E9:86:06:91:EE:6D:00:E5:15:F5:23:66:F0:7C:0C:E6:46","sha256":"0D:52:A5:47:28:79:E1:05:1C:8E:DB:39:17:95:F3:D8:05:10:86:FC:5A:70:B8:B3:84:AB:34:1E:E0:63:DE:18"}}},"request":{"raw":"GET /videojs-flash/dist/videojs-flash.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":2,"connect":2,"send":0,"wait":15,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biu37.xyz/20260117/1083187988441071616/1083187988441071616.png","fqdn":"biu37.xyz","domain":"biu37.xyz","tld":"xyz"},"ip":{"addr":"46.8.9.226","port":443,"asn":60592,"as":"Gransy s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.206Z","timestamp":1791753938206,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /20260117/1083187988441071616/1083187988441071616.png HTTP/1.1\r\nHost: biu37.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 405 \r\ncontent-length: 0\r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"405","status_text":"Method Not Allowed","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sha.lashayu.com/20241102/jtvCWulg/1.jpg","fqdn":"sha.lashayu.com","domain":"lashayu.com","tld":"com"},"ip":{"addr":"104.20.18.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.207Z","timestamp":1791753938207,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lashayu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 14:55:58 GMT","end":"Sun, 13 Dec 2026 15:55:55 GMT"},"fingerprint":{"sha1":"FB:62:D3:00:BC:41:A4:B7:26:B4:A6:B6:62:7B:1B:88:F9:C9:31:2F","sha256":"01:BD:D6:2D:2F:53:2A:4F:33:E1:23:62:D3:A5:D1:90:1F:FA:05:14:8D:F0:FC:51:A8:5F:5D:4D:60:F8:BB:74"}}},"request":{"raw":"GET /20241102/jtvCWulg/1.jpg HTTP/1.1\r\nHost: sha.lashayu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 74284\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\netag: \"69f32a4b-1222c\"\r\nexpires: Fri, 30 Oct 2026 02:29:15 GMT\r\nlast-modified: Thu, 30 Apr 2026 10:09:15 GMT\r\nserver: cloudflare\r\nx-cache: BYPASS, write file cache failed: over disk size, current: 14380813934592, capacity: 14380706431385\r\nage: 1018550\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LSMwCZxZT4W2xlnHHzpnThj%2FRTvxRAbgyM8ibQtbNSDC2dGvFXyZUG%2FDe%2BOFJ38XWho%2BQjgXzEIWazIrhN7ASttjXpQvqNsKCsOEuYrPdly%2BIXNRQOEYtc%2B0hLz%2BkEENAtw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a490f042a8275699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74284,"size_decoded":75125,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 718x404, components 3","md5":"ef9c344e49c0fde740db095a2d1241ca","sha1":"c99388789a13d59e4d2772a04d0b816e79eec74f","sha256":"5417d3ca13ee27f211486499a4a2dcc4cb9dc2ac34c166c1a924b77831523ea3","sha512":"3215e395c6c8b286abff1522ff5ab2b3911d3f7ea7bfbd809218d3374729c62d8f2ba167e7d4b0ff8bcd3d59a228e17e3b2c594eb4c52e05a47fe1656eddf466","ssdeep":"1536:HzwVanfyKDioHQT7qSJTX70boFaQt1rG6sQAlPL8OK:Hz5nfyUBQT7qqc0drhol8F","tlshash":"4c730207e90256276ef44a7b3fbc0aefb84269977480aec17973999ffac20c0835d045","first_seen":"2026-07-31T05:54:13.886009Z","last_seen":"2026-10-11T21:28:39.993068Z","times_seen":16,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":1,"connect":2,"send":0,"wait":30,"receive":7,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guzwiayz.com/20231028/BPtXq0DY/1.jpg?t=1698479709","fqdn":"guzwiayz.com","domain":"guzwiayz.com","tld":"com"},"ip":{"addr":"209.142.69.38","port":443,"asn":6939,"as":"HURRICANE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.456Z","timestamp":1791753938456,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guzwiayz.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Sat, 04 Oct 2025 05:49:17 GMT","end":"Tue, 03 Nov 2026 05:49:16 GMT"},"fingerprint":{"sha1":"1D:03:B9:35:A5:16:81:B7:8A:B5:A9:0D:BC:9B:7C:5B:AB:76:70:74","sha256":"0A:FB:A3:1F:ED:28:50:76:1B:E0:68:7D:A6:F9:1D:2F:F7:62:6D:16:0D:BC:CA:A4:D5:4A:D3:CA:E0:2C:08:87"}}},"request":{"raw":"GET /20231028/BPtXq0DY/1.jpg?t=1698479709 HTTP/1.1\r\nHost: guzwiayz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 11 Oct 2026 21:25:39 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 17225\r\nConnection: keep-alive\r\nLast-Modified: Sun, 29 Sep 2024 05:21:28 GMT\r\nContent-Disposition: attachment; filename=\"1.jpg\"\r\nETag: \"66f8e3d8-4349\"\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: X-Requested-With\r\nAccess-Control-Allow-Methods: POST, GET, OPTIONS\r\nCache: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17225,"size_decoded":17667,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 399x225, components 3","md5":"cac1d3bf0787f94fbbbaa566edfffa85","sha1":"98b974e55330617be76be8785362089ba882a872","sha256":"cce7753810aa9af86895d745ea0019273f06697ccff53f79eaa1d1292c6b0d31","sha512":"f99d272e9042e31b3321437a3ddd4372f7726f80e1cc5877a2904ad689f71d0563a2ea44d64f1b1dd26724495ef1eadf9d2e8676328c901df27260d3d3bc0f97","ssdeep":"384:Gi8ntroS58agwQL39wpPsc60EIWrLHlA4hRcg+PW8kjVTrSQ6ck:Gi8t0vxTVVfIwLDcg+e8eVTsck","tlshash":"ee72df88693662a7d7bb4b603ba5b47344cbfe882c21a5bf11d38124ef41f7098207a4","first_seen":"2026-08-05T05:55:10.426229Z","last_seen":"2026-10-11T21:28:39.994583Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1325,"timings":{"blocked":609,"dns":0,"connect":153,"send":0,"wait":209,"receive":10,"ssl":341},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"css.jpg4.quest/tvjw/swfobject.js","fqdn":"css.jpg4.quest","domain":"jpg4.quest","tld":"quest"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:50.758Z","timestamp":1791753950758,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /tvjw/swfobject.js HTTP/1.1\r\nHost: css.jpg4.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"css.jpg4.quest/jw6.1/jwplayer.js","fqdn":"css.jpg4.quest","domain":"jpg4.quest","tld":"quest"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:50.761Z","timestamp":1791753950761,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /jw6.1/jwplayer.js HTTP/1.1\r\nHost: css.jpg4.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/ext/pre_2734312094.jpg","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"141.227.152.51","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.240Z","timestamp":1791753938240,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 07:52:05 GMT","end":"Sat, 28 Nov 2026 07:52:04 GMT"},"fingerprint":{"sha1":"C4:4F:9D:C9:09:9D:31:30:C3:4F:AE:A0:F3:18:7E:88:BF:F8:C7:B7","sha256":"81:05:CD:81:08:79:7C:F7:1F:83:1B:B5:4E:5C:E4:F8:F7:31:1C:F5:F7:00:A5:82:73:35:B8:D4:AB:52:95:7F"}}},"request":{"raw":"GET /ext/pre_2734312094.jpg HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8752\r\nlast-modified: Fri, 14 Jun 2024 00:09:10 GMT\r\netag: \"666b8a26-2230\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8752,"size_decoded":9123,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"4e1fa934fed0e241c29f8b5e2adcb7d2","sha1":"bedbaceba79e6586c21c8fbfb29eeec6e01d2616","sha256":"265caa35ec9a9b974ede1a542ddad60421bd6f138f342bdea6510ff4bfa541b5","sha512":"06f7ac425ff81dda010109ca364e794ea851589222810c50fcce428521565ab0aeb3c704020fe88339e5a5ae22627f30e45cb2fd97e02dd09058f9165fcb0338","ssdeep":"192:9OCdgo+BNP6yijkUxPgGHsJDF8wx/sxoE0XgHcCMfC:tYzijbgGH+Ixo9XgHcC5","tlshash":"94029f48b3d44a26e4ccbffaa93811ef8f51dca782921713e4da8509634d4f18ed15d5","first_seen":"2026-08-15T18:36:42.453687Z","last_seen":"2026-10-11T21:28:39.995613Z","times_seen":3,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":46,"dns":27,"connect":42,"send":0,"wait":47,"receive":15,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sl260908.top/upload/vod/20260923-56/c5e8f3b2cf7a6828fc750395de8816e1.jpg","fqdn":"sl260908.top","domain":"sl260908.top","tld":"top"},"ip":{"addr":"172.67.185.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.503Z","timestamp":1791753938503,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sl260908.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 02:09:33 GMT","end":"Mon, 07 Dec 2026 03:07:12 GMT"},"fingerprint":{"sha1":"F9:45:6E:12:CE:A4:56:32:F7:67:C4:E4:5C:D0:90:9C:D5:C3:DC:7F","sha256":"BE:73:A8:39:7A:BF:12:E3:E9:1A:69:A0:DD:6E:91:3A:97:3F:25:3E:12:82:46:54:3A:28:1F:3A:57:C2:69:73"}}},"request":{"raw":"GET /upload/vod/20260923-56/c5e8f3b2cf7a6828fc750395de8816e1.jpg HTTP/1.1\r\nHost: sl260908.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27754\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\netag: \"6ab334ee-6c6a\"\r\nexpires: Fri, 23 Oct 2026 03:31:59 GMT\r\nlast-modified: Wed, 23 Sep 2026 03:32:29 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\nage: 1618012\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uDiTzGMi7XOad0JYLBJXhT6L3wI1oL2DAFewhWvP77rZzjXpOHmC%2B%2F4WBXOZlu7VadayRTPvAQD6heaVlq%2BV2JzPZn03WIt4vws7aAJiAPwqbepZmU1otJCrSTu6rT8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a490f0450bdfb4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27754,"size_decoded":28501,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 640x360, components 3","md5":"cfd10e1f5a69164d7d80106fe7806301","sha1":"7de1975873fee26be027e2ca562a4238409d4250","sha256":"cfd48016e5508bf503ec106d878e73d925bf3f48074f5cf3d4df2d301a3a7264","sha512":"353a36981f6e2e888d833515f3f45abde7d17bee45165460f6e9b600cb47bf20445be61df06f08aaaf2bc2cecb87b5009a5fe03cc1a84743a6c7962d813693df","ssdeep":"384:cWJUMum6cJRAXeNnRB4npqFnGmc7e4UzBmOrH4duSPJbNN0W1Tj2/P+h/U8clwL:cWbu/cCInRB9Xcq4MZ0d5bH1V","tlshash":"c2c2e1dd43d8292cc512e87912c059fdf86d31fa15e528205e8b95f7c9a1289c8fbba4","first_seen":"2026-10-11T20:34:30.811531Z","last_seen":"2026-10-11T21:28:39.997289Z","times_seen":2,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":35,"dns":3,"connect":9,"send":0,"wait":17,"receive":1,"ssl":57},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"sl260908.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fapdig.com/faviconico/","fqdn":"fapdig.com","domain":"fapdig.com","tld":"com"},"ip":{"addr":"104.21.6.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:44.031Z","timestamp":1791753944031,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapdig.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 16:47:04 GMT","end":"Tue, 01 Dec 2026 17:44:49 GMT"},"fingerprint":{"sha1":"7F:FE:16:D7:B5:7A:51:B5:57:76:D9:DF:3E:3F:3F:3C:88:DE:BE:AC","sha256":"33:F9:D3:E4:70:FF:A2:AF:F0:F2:6D:FF:F3:7B:A3:81:44:DC:7B:80:A3:B6:7D:7F:36:81:6C:15:75:64:E3:C9"}}},"request":{"raw":"GET /faviconico/ HTTP/1.1\r\nHost: fapdig.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ASPro_1382933ca042bef776e8100bd5eb8ac5=eua2rapebqe5c30hanoa7k8oeb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"ASPro_1382933ca042bef776e8100bd5eb8ac5","value":"eua2rapebqe5c30hanoa7k8oeb"}],"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\npriority: u=4,i\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SzSjiHNC9HqLDuQY7qPCAhWtW4VLwIexqUW4HxFOa1KKSDw25OGOrNN1rf6iv137FfLJpWfJUhoi2s1h5FQlOV9lq9vkxZxuB94aW%2F98IOYseS9bLuW6agegx76G\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a490f066596ab51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjimg.cdn-xj.cc/upload/litpic/2025-04-02/1743544841_331.jpg","fqdn":"xjimg.cdn-xj.cc","domain":"cdn-xj.cc","tld":"cc"},"ip":{"addr":"138.199.37.232","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.423Z","timestamp":1791753938423,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xjimg.cdn-xj.cc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 10:02:56 GMT","end":"Mon, 28 Dec 2026 10:02:55 GMT"},"fingerprint":{"sha1":"C3:2B:25:ED:DB:3A:48:72:23:2D:AC:39:4B:2B:A2:3B:9D:31:0F:B7","sha256":"28:D4:8A:0A:FA:01:6B:06:FC:A8:31:EC:49:6D:F7:BF:AB:BD:50:EC:46:35:ED:9C:56:94:33:68:58:92:20:F7"}}},"request":{"raw":"GET /upload/litpic/2025-04-02/1743544841_331.jpg HTTP/1.1\r\nHost: xjimg.cdn-xj.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 58181\r\nserver: BunnyCDN-DE1-874\r\ncdn-pullzone: 5480810\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"bd17c0889022049ebf4a4114522310a0\"\r\nlast-modified: Mon, 12 Jan 2026 12:16:47 GMT\r\nx-amz-id-2: JHs3pvn7SBksR3vDS5uzbxorTI22OcbHGVTrVUZEAJ/W76Xy9L+uV1Zg0G/PcUInc1IRrsFeGheK\r\nx-amz-meta-mtime: 1743544841.453731246\r\nx-amz-request-id: F012A0D7B18FAC39:A\r\nx-wasabi-cm-reference-id: 1778144517 R119-U21.prod16.svy1 365385087:3519525:49\r\ncdn-proxyver: 1.52\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1077\r\ncdn-cachedat: 05/07/2026 09:08:00\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 98e75190b61b19ee711ac29058bf72e9\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":58181,"size_decoded":59343,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 390x260, components 3","md5":"bd17c0889022049ebf4a4114522310a0","sha1":"ca0e012249c25020d2b76e2ab7d990c5929fd7f1","sha256":"df0514d524b320e1947f3fd842ce4173d45efb54b56157a6b40e3e3c209d3730","sha512":"bdf25a0af877a7a4602fd82cc356362a50ba832f5ba436b43e453b377c631d3eb7e96eeb42bff73d86beeb229e6cabb1d712fa0c8d8355e76da504c377c5c078","ssdeep":"768:RQT3TrVOC+mTJqvQOsvDD9lRimQCRvfqT+mY5b5gyEIrPAHygYVQ3Z/ipyMknucP:RgPVIoO8DRim35TPAB/1nuCO7nVO","tlshash":"f743f27beb4012d1444d70f978ee3f32e0999534aa096126bdfb18f8bd9fa128c45798","first_seen":"2026-06-28T18:40:42.647087Z","last_seen":"2026-10-11T21:28:40.000123Z","times_seen":13,"resource_available":false,"data":null}},"time_used":592,"timings":{"blocked":478,"dns":0,"connect":0,"send":0,"wait":98,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"xjimg.cdn-xj.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn1.hotmoza.tv/thumb/a6/3b/0a/a63b0a173cbddeeafb167f722af27574.jpg","fqdn":"cdn1.hotmoza.tv","domain":"hotmoza.tv","tld":"tv"},"ip":{"addr":"104.21.70.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.452Z","timestamp":1791753938452,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /thumb/a6/3b/0a/a63b0a173cbddeeafb167f722af27574.jpg HTTP/1.1\r\nHost: cdn1.hotmoza.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-MXJRzdJ2dq6YYtwqisQZCx' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a490f044b9d749c5\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8SqywHJzct6xfzo%2FqXQKTxIp2669I3q5E9FyTci4Jqn0LlBo%2FAe8lu8yH0hoXPqWbT4CdfKLRKibjHQXzuDrBLYkQ4DxcIsZkqtBo%2BAUM2iL7GJjEmG%2FujQijJtyfjX1hhs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a490f044b9d749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mygentledog.com/favicon.ico","fqdn":"mygentledog.com","domain":"mygentledog.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.538Z","timestamp":1791753943538,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: mygentledog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fqjpg10.top/upload/vod/20260324-1/239178bb8f89bb61d885f516bf67d879.png","fqdn":"fqjpg10.top","domain":"fqjpg10.top","tld":"top"},"ip":{"addr":"23.134.76.191","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.484Z","timestamp":1791753938484,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fqjpg10.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 05:27:48 GMT","end":"Mon, 02 Nov 2026 05:27:47 GMT"},"fingerprint":{"sha1":"CE:28:80:B0:05:19:5C:8B:0B:3B:EC:8F:4D:FB:7C:6A:9C:16:0E:51","sha256":"92:80:CD:0C:A7:99:7A:96:A5:ED:DE:0F:9F:7B:C6:04:F5:36:1A:01:69:60:53:9D:3B:8F:14:E8:BF:FA:4B:29"}}},"request":{"raw":"GET /upload/vod/20260324-1/239178bb8f89bb61d885f516bf67d879.png HTTP/1.1\r\nHost: fqjpg10.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 11 Oct 2026 21:25:39 GMT\r\nContent-Type: image/png\r\nContent-Length: 125858\r\nConnection: keep-alive\r\nLast-Modified: Mon, 23 Mar 2026 17:43:22 GMT\r\nETag: \"69c17bba-1eba2\"\r\nExpires: Sat, 17 Oct 2026 18:43:00 GMT\r\nX-Cache-Status: HIT\r\nCache-Control: max-age=2592000, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":125858,"size_decoded":126213,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3","md5":"42d861d10b79e4059bc86fd62e53ade5","sha1":"70d0e7ca1cc8560c47257d3b5b84845ff62dbed5","sha256":"875f0e299219d9bab26f44d889562deb6967640622e438fac3a215f734cc3d22","sha512":"7260b5fc04e691e159d64ca1e70e6be7061cbe0f392c6870b8b63efb6f21929eb4b0013b5c77c6531d621cee8a7b443864d77251955c70d770831039f6fc5afa","ssdeep":"3072:R8/f5FiJ03HLQNzDyCwCELadtE/EoAvQA3ImZtpOh:I5FiJyAyLCXLEMh3I+Wh","tlshash":"8cc31250a1f3438ae89ddb77125b211c01a4f913978a9669eb63cbf73035e4cfa324d9","first_seen":"2026-04-18T23:14:49.475864Z","last_seen":"2026-10-11T21:28:40.001872Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1403,"timings":{"blocked":717,"dns":0,"connect":98,"send":0,"wait":233,"receive":225,"ssl":125},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"fqjpg10.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lourmel.nl/favicon.ico","fqdn":"lourmel.nl","domain":"lourmel.nl","tld":"nl"},"ip":{"addr":"104.21.10.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.364Z","timestamp":1791753943364,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lourmel.nl","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Oct 2026 04:08:05 GMT","end":"Wed, 06 Jan 2027 05:04:23 GMT"},"fingerprint":{"sha1":"7D:02:05:2F:1E:81:10:B9:E1:F3:03:A0:6D:8D:9C:E0:68:AE:13:45","sha256":"92:A4:08:93:2D:10:58:3A:D2:25:08:63:9D:0A:46:33:C3:57:F4:2B:A4:D4:DA:F2:53:46:BC:8A:08:D8:A7:7C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: lourmel.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-length: 2165\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"favicon.ico\"\r\ncontent-encoding: br\r\netag: \"290a01b7762e23ab373778eb3cf1d226\"\r\nlast-modified: Mon, 16 Feb 2026 21:32:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /favicon.ico\r\nx-vercel-cache: HIT\r\nx-vercel-id: gru1::gc57s-1771377306214-bae19c2f691d\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 10754060\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WnEZ1KFxalTWxeGuk%2FMm7bJP1fSP%2FprFYA0STjZX2QdYkXuOYqmFnKRfsNLsrHT809J4cRk8Rr4arcVMVO8NAiyIpkX%2FqhhJ%2FNbSrXUCsBENcPuWHnLoH%2FsDD1dy\"}]}\r\ncf-ray: a490f062cb007127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15406,"size_decoded":3217,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"290a01b7762e23ab373778eb3cf1d226","sha1":"5c4c63a19e22e56b45702a6153034f9df385c803","sha256":"75bfa1083976f329a595f9361d4dbfb2d8c1803d3b3c59e1e0a6bbc320a92790","sha512":"ab616dd19ad357c8f822d85aa11a997c3fab7d193a87b9f3690b5c3b96d0abfc309063c9a340eb65d7ef327779c2f80e04f0917bf3067d9852b184cbd8cb1142","ssdeep":"48:p4d6xgFtfIRuF8wmO8oOjHPjzOXmILa+oeD+r7aGGuap3NNFbaXL:p4d6MtfXyRvoEzOWCFGziFbo","tlshash":"36623fd7fba90b5cec1032ba55261e7224ffae8551cf05494c07f0564bbf14311ea716","first_seen":"2025-02-13T03:49:54.934477Z","last_seen":"2026-10-11T21:28:40.002692Z","times_seen":9,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slaman.sakura.ne.jp/favicon.ico","fqdn":"slaman.sakura.ne.jp","domain":"slaman.sakura.ne.jp","tld":"sakura.ne.jp"},"ip":{"addr":"49.212.180.77","port":443,"asn":9371,"as":"SAKURA Internet Inc.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.535Z","timestamp":1791753943535,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sakura.ne.jp","organization":""},"issuer":{"commonName":"Gehirn RSA Domain Validation Secure Server CA 2","organization":"Gehirn Inc."},"validity":{"start":"Fri, 01 May 2026 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"99:E6:4E:9A:7B:62:8E:1F:18:6F:A0:A1:AC:0B:E9:87:0A:AB:B2:49","sha256":"20:8B:45:5C:89:E5:E1:D9:7F:00:4E:6D:D4:EE:4C:04:64:10:5E:FD:25:B2:53:F0:22:2B:3E:C2:CD:07:CC:95"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: slaman.sakura.ne.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 236\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sc.gl/videojs-hotkeys/latest/videojs.hotkeys.min.js","fqdn":"cdn.sc.gl","domain":"sc.gl","tld":"gl"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:51.074Z","timestamp":1791753951074,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /videojs-hotkeys/latest/videojs.hotkeys.min.js HTTP/1.1\r\nHost: cdn.sc.gl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eroshorts.site/erosceny/screen/ozabochennaya-sestra-sovrashchaet-svoego-malenkogo-brata-0.jpg","fqdn":"eroshorts.site","domain":"eroshorts.site","tld":"site"},"ip":{"addr":"89.105.223.48","port":443,"asn":24875,"as":"NovoServe B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.471Z","timestamp":1791753938471,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eroshorts.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 21:41:19 GMT","end":"Fri, 27 Nov 2026 21:41:18 GMT"},"fingerprint":{"sha1":"B5:0C:F0:B7:71:8E:6F:24:32:E5:4B:D7:54:83:B2:4B:67:72:48:77","sha256":"2A:20:C1:C3:6F:15:DB:F1:33:9D:16:19:BA:58:E0:27:E6:43:BE:6B:3E:82:BD:F3:48:2F:FB:50:0F:30:20:16"}}},"request":{"raw":"GET /erosceny/screen/ozabochennaya-sestra-sovrashchaet-svoego-malenkogo-brata-0.jpg HTTP/1.1\r\nHost: eroshorts.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 02 Mar 2026 18:52:18 GMT\r\netag: W/\"69a5dc62-741c\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29724,"size_decoded":29893,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x240, components 3","md5":"41934c7e25b9ec0f5a16dfadd8bfe970","sha1":"83c696f78e537a00f46ad6a0378d6dcde3e6a97b","sha256":"0c8637ab4e4f88cbd717004cd4223d6591e8a09db94d44a693a41e12e3d19e6c","sha512":"606f9f44aaf015a8eb79bc14fa1fa76ae65d29b70aa875ecf4a4383e85fefc52870c4c1231a1069f56f1b5aa2156dccaf21356709638bf2a5e68499f4da31265","ssdeep":"768:hdU9K7ydf0jAsd1laKCb43mbhZ0dG+dDR5qC:hdNI0j1/lZCbLf0dGCDiC","tlshash":"96d2f1a7d74b691fe52ebb3308890207328aa63a6510d387cd81adc656ff3d1dc959c8","first_seen":"2025-08-06T16:36:49.138377Z","last_seen":"2026-10-11T21:28:40.003375Z","times_seen":10,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":162,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mymediaing.my/sdk/p/?zid=9801","fqdn":"cdn.mymediaing.my","domain":"mymediaing.my","tld":"my"},"ip":{"addr":"104.21.71.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:40.595Z","timestamp":1791753940595,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mymediaing.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 08:29:13 GMT","end":"Sun, 15 Nov 2026 09:29:08 GMT"},"fingerprint":{"sha1":"A7:09:2E:1E:43:AD:93:B6:E7:62:CD:89:0D:1E:73:91:51:E3:22:83","sha256":"74:3F:2A:C5:82:5D:9E:DC:41:38:72:E7:46:5C:18:A3:D0:DE:79:06:4A:EE:35:0F:2F:EA:96:34:C3:46:44:21"}}},"request":{"raw":"GET /sdk/p/?zid=9801 HTTP/1.1\r\nHost: cdn.mymediaing.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:40 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2EZTt0xvb6CvAtzCZ1VpaV2iaVpWlIaRpgd%2FpQtnrhr7MfsWwzgw6k4lUNbFyezdeRpcFE4EoWBScpZxQwNg7P2vz%2FATBXVz8M9Yy93XKAK1LOh6NtJWPeMtrybr%2F%2BMOOUZUmw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-time: 1791753940\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a490f050eb8256a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52892,"size_decoded":15555,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (52408)","md5":"b1fdb72c35052f7d1c43f60170c4961e","sha1":"473f9ac28bcd62020aec4466db7b2dced25a361d","sha256":"0c621f03bd9e783620d914e5fbef0baa70217f6d94824af6ee8c3cf3c4a54f5a","sha512":"448eb60a4a4ab3c5a1d3e6bd6d7470a423d47f998a71fa3ae44582bf563dcfb650845414bee6a62ddb5d40591df7f7a1b3bf1fba157355c183225e3d80a684e3","ssdeep":"1536:nFiJtBRiqSJQUUBU1wpIbS0UboLxCSMzHUgNvFf:nDqSJQUUBU1wpIbS0UboLxCSMzHHH","tlshash":"1a3392982fd0b94053dbab7b772fb4e5f4571c2f6a81484fe225bc20359071beaa5930","first_seen":"2026-10-11T21:28:40.004155Z","last_seen":"2026-10-11T21:28:40.004155Z","times_seen":1,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":3,"connect":26,"send":0,"wait":63,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bornagainmormon.com/favicon.ico","fqdn":"bornagainmormon.com","domain":"bornagainmormon.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.352Z","timestamp":1791753943352,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bornagainmormon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 23:00:42 GMT","end":"Wed, 09 Dec 2026 00:00:31 GMT"},"fingerprint":{"sha1":"53:EB:C4:A4:88:36:FD:99:39:8E:BB:18:CB:CE:CE:D5:E4:68:20:CC","sha256":"78:07:BA:7D:1F:2D:AB:DB:22:CE:9C:A8:EA:E0:FB:61:46:10:1D:FB:02:B8:53:97:BA:B3:07:2A:D9:45:25:C6"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bornagainmormon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1kKXyasBHYj7qsOY1XzymdX6X%2B1GiTgEbG%2Bf66uxdJKu2nTNng04TvPB5qKkqRt6Jw0JgPg%2Beh%2FyNgshWcF7%2FYz%2FG2%2F8nxvLk2PhpLiR1kT0%2BRhg7DmEZclzlU6Piy36XkZhiaKt\"}]}\r\nlast-modified: Wed, 23 Sep 2026 08:12:46 GMT\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 27 Sep 2027 08:21:55 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=3600\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"6ab389fe-4276\"\r\nage: 1256628\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a490f0624d628deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17014,"size_decoded":9348,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"cd6cd8f7d9af7267bf6b188d541291b4","sha1":"406bcab4e44f55cddba8f659d8be17c556d46d8a","sha256":"e47f1cd1409c2fc5dc18c4542b12d4e3777fe41137af62c112f059023e580a3e","sha512":"b5bab1c768b4e771c4981f75cd88ad8537828fb8ae988a7326099c81ed2979b502b577ae45e433b1ce647609bdbb14539a22f774cde6f3c645dd0f1f6b60dc02","ssdeep":"192:V/FSmX97q/jQYWDtwxt8ajnLm7JL28gBl9ffMephqQ/Uln813Y:twLQ1Dtwn61ilN/phj/o8m","tlshash":"82724c662aedf949c7860e3557a2612942b9cfe30c2d1b4bde6279e8be35fc43d81140","first_seen":"2026-04-16T16:55:58.986504Z","last_seen":"2026-10-11T21:28:39.798443Z","times_seen":60,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":6,"connect":29,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"bornagainmormon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fh260908.top/20260919/bHwVx0GC/1.jpg","fqdn":"fh260908.top","domain":"fh260908.top","tld":"top"},"ip":{"addr":"172.67.184.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.523Z","timestamp":1791753938523,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fh260908.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 02:07:25 GMT","end":"Mon, 07 Dec 2026 03:06:10 GMT"},"fingerprint":{"sha1":"C0:C9:EB:B9:D6:37:65:FD:91:6C:FD:04:07:FD:A3:47:FF:2A:2D:F4","sha256":"4A:E9:AB:F3:80:83:BD:68:54:B0:41:FA:39:A9:86:68:E9:AA:A0:D0:EB:59:5D:C9:4C:03:EA:EA:A9:70:1C:B9"}}},"request":{"raw":"GET /20260919/bHwVx0GC/1.jpg HTTP/1.1\r\nHost: fh260908.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\netag: W/\"6aaf7bb2-a95b\"\r\nexpires: Tue, 20 Oct 2026 07:39:20 GMT\r\nlast-modified: Sun, 20 Sep 2026 06:22:42 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: BYPASS, ChunkedEncoding\r\nage: 1863977\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dE6wA6SM2inhxpuS%2BQO6kRzSeNXJoaV9PeXUh4Axk88w6HGyV3xuhnJMcJWNuOoqjRi3dh2DW6TE%2F2xOGBXN9pjnpDXC%2BP3DIyLzC1EdTa3vWWlGrDCZ8ZYcOZ%2BdNYM%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a490f043dbfe5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43355,"size_decoded":43744,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 720x399, components 3","md5":"fe0708721a4995dcd1c41220471bd30e","sha1":"6f4297791e128e296baf9736718c5e50e1148a42","sha256":"da56df71c4658a3cf72263be0610234a1839128f09377f4fead221852d03174c","sha512":"d224f3b631b703345774c60049c702ada93a5f1be7bedfb694a6d22fb88b9644ad384cc4f80e37f02f308d185ac535ae287d2394df36e790fe45a328fb9d2477","ssdeep":"768:GuG1XawuIvBTdKBS+LM105O+yYX9ehtlKe4SHwwnXfLQOWfxAVjAVYMolUuP5MFe:UDuIJ8i6et34c3PjWZARA+pPvj5","tlshash":"3a1302b03ea0aface1487b3dccf862a5d1a03a815084bed2d57c1b1291958d5f6cced9","first_seen":"2026-10-11T20:34:30.666293Z","last_seen":"2026-10-11T21:28:40.005727Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"fh260908.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"en.4us.asia/p.sl1121.top/upload/vod/20251215-1/e19358e430d0bcbf98c874b9d123ed3e.jpg","fqdn":"en.4us.asia","domain":"4us.asia","tld":"asia"},"ip":{"addr":"172.67.207.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:40.962Z","timestamp":1791753940962,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4us.asia","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 18:49:41 GMT","end":"Fri, 01 Jan 2027 19:49:29 GMT"},"fingerprint":{"sha1":"C1:10:7B:90:5B:3F:81:FA:5F:C0:3E:F6:EC:C4:77:25:41:0C:34:96","sha256":"F9:2F:9D:0F:8C:E3:90:7C:C5:24:11:0C:4F:49:76:C3:FC:28:D6:D0:FE:B3:94:B3:45:5E:36:5D:DA:9C:49:7E"}}},"request":{"raw":"GET /p.sl1121.top/upload/vod/20251215-1/e19358e430d0bcbf98c874b9d123ed3e.jpg HTTP/1.1\r\nHost: en.4us.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nCookie: cnt=0; lctcfck=NO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"cnt","value":"0"},{"name":"lctcfck","value":"NO"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:40 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yp%2FfNaVRfz3XYG0GLRVL%2BeP%2BdO4XrxYKqXMf4NphYG3wnUkzlnHPjI8VecwDtiAg%2BuMiUwpjg3aTlX3it5QpVe7rmmLdwf1u7XxymdMO8yN9ohz0lYETR7uUqHyK1w%3D%3D\"}]}\r\npriority: u=5,i\r\npdojs-line8: host-en.4us.asia4.194.8.20-myhost-en.4us.asia.96.142.48/p.sl1121.top/upload/vod/20251215-1/e19358e430d0bcbf98c874b9d123ed3e.jpg\r\nphost: en.4us.asia\r\npdojs-line400: notjp-nojp-myhost-en.4us.asia-filteron-\r\npdojs-line1011: notjp-nojp-myhost-en.4us.asia-filteron-/p.sl1121.top/upload/vod/20251215-1/e19358e430d0bcbf98c874b9d123ed3e.jpg\r\nline1340: URI-/p.sl1121.top/upload/vod/20251215-1/e19358e430d0bcbf98c874b9d123ed3e.jpg-myhost-en.4us.asia-filteron-\r\ncache-control: public, max-age=92881\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\nx-proxy-cache-99502: HIT\r\nx-real-forw-ngx: 163.61.75.165-0172.69.246.182-166.153.161.141, 172.69.246.182\r\nxkey-192la: en.4us.asia/p.sl1121.top/upload/vod/20251215-1/e19358e430d0bcbf98c874b9d123ed3e.jpg--en.4us.asia-en.4us.asia-myzone---no\r\nx-proxy-cache-gjp: HIT\r\nxkey-g-jp: en.4us.asia/p.sl1121.top/upload/vod/20251215-1/e19358e430d0bcbf98c874b9d123ed3e.jpg--en.4us.asia--my_zone\r\nage: 3319\r\nlast-modified: Sun, 11 Oct 2026 20:30:21 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a490f053081d5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6539,"size_decoded":4292,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1341), with CRLF, LF line terminators","md5":"3eb21c04f6374321d1cde676d79a04d2","sha1":"a5a2f82c06d7d6f811fa0a5c426cbeaae93c0ca1","sha256":"ba609f387fcf2e59ead5b488ac09d654effc97cde4b09f4fc59a0ddc797d433e","sha512":"6f9f39aefed48a989904691f72178338a2658ba731a57ce56b34f4a92b34c5c05e3e8bbf737932d5e097cf4996e3d023e2a3b58789eea2aadf69a85a7ee1104b","ssdeep":"192:pz95BTAk5Y1+G5KKkwaYylbFAztF1TMGYn4iyNpuwpQeFJLiCx:pzHbmoPzvGYn4iyNpuwpQxe","tlshash":"efd1876b7908652b23b2908bec733398c03722d796c91dc1f9654c7fb540b99ad232de","first_seen":"2026-10-11T20:34:31.142431Z","last_seen":"2026-10-11T21:28:40.007314Z","times_seen":2,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bornagainmormon.com/favicon.ico","fqdn":"bornagainmormon.com","domain":"bornagainmormon.com","tld":"com"},"ip":{"addr":"104.21.3.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:53.279Z","timestamp":1791753953279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bornagainmormon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 23:00:42 GMT","end":"Wed, 09 Dec 2026 00:00:31 GMT"},"fingerprint":{"sha1":"53:EB:C4:A4:88:36:FD:99:39:8E:BB:18:CB:CE:CE:D5:E4:68:20:CC","sha256":"78:07:BA:7D:1F:2D:AB:DB:22:CE:9C:A8:EA:E0:FB:61:46:10:1D:FB:02:B8:53:97:BA:B3:07:2A:D9:45:25:C6"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bornagainmormon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:53 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6ZR%2FGuZ729w53N1VlFvXqZJDHX7W%2FuBNEb3F9s120UYFN5peMqnr0PwYK44goxrf7UvX7xAUsv53sPv8aZmpdI%2F7emO1iJbWXB%2FCgIh5wjOMhzu6LD2pze%2BqPWuw4h%2F9nx9os%2Bgq\"}]}\r\nlast-modified: Wed, 23 Sep 2026 08:12:46 GMT\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 27 Sep 2027 08:21:55 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=3600\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"6ab389fe-4276\"\r\nage: 1256637\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a490f09ffb4a8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17014,"size_decoded":9346,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"cd6cd8f7d9af7267bf6b188d541291b4","sha1":"406bcab4e44f55cddba8f659d8be17c556d46d8a","sha256":"e47f1cd1409c2fc5dc18c4542b12d4e3777fe41137af62c112f059023e580a3e","sha512":"b5bab1c768b4e771c4981f75cd88ad8537828fb8ae988a7326099c81ed2979b502b577ae45e433b1ce647609bdbb14539a22f774cde6f3c645dd0f1f6b60dc02","ssdeep":"192:V/FSmX97q/jQYWDtwxt8ajnLm7JL28gBl9ffMephqQ/Uln813Y:twLQ1Dtwn61ilN/phj/o8m","tlshash":"82724c662aedf949c7860e3557a2612942b9cfe30c2d1b4bde6279e8be35fc43d81140","first_seen":"2026-04-16T16:55:58.986504Z","last_seen":"2026-10-11T21:28:39.798443Z","times_seen":60,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"bornagainmormon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"guzwiayz.com/20240508/VqfLRF7E/1.jpg?t=1715152283","fqdn":"guzwiayz.com","domain":"guzwiayz.com","tld":"com"},"ip":{"addr":"209.142.69.38","port":443,"asn":6939,"as":"HURRICANE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.485Z","timestamp":1791753938485,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guzwiayz.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Sat, 04 Oct 2025 05:49:17 GMT","end":"Tue, 03 Nov 2026 05:49:16 GMT"},"fingerprint":{"sha1":"1D:03:B9:35:A5:16:81:B7:8A:B5:A9:0D:BC:9B:7C:5B:AB:76:70:74","sha256":"0A:FB:A3:1F:ED:28:50:76:1B:E0:68:7D:A6:F9:1D:2F:F7:62:6D:16:0D:BC:CA:A4:D5:4A:D3:CA:E0:2C:08:87"}}},"request":{"raw":"GET /20240508/VqfLRF7E/1.jpg?t=1715152283 HTTP/1.1\r\nHost: guzwiayz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 11 Oct 2026 21:25:39 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 13750\r\nConnection: keep-alive\r\nLast-Modified: Mon, 30 Sep 2024 09:57:09 GMT\r\nContent-Disposition: attachment; filename=\"1.jpg\"\r\nETag: \"66fa75f5-35b6\"\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: X-Requested-With\r\nAccess-Control-Allow-Methods: POST, GET, OPTIONS\r\nCache: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13750,"size_decoded":14192,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: \"Lavc57.89.100\", baseline, precision 8, 320x240, components 3","md5":"05c3feb92769076666a62f93bbb11d5c","sha1":"b37d32a355a8a40b86764073a25aebc79dd11cb5","sha256":"b4685468597e33aad71f580aacbe9470d59b16384af657abb299de07e0ab1c1f","sha512":"2c78b3d5a7faf500d8ee3c91ef3d4484252cd0e94893ebf6bb2ae4aabd27edaf91560b46a2d9d4229066650bf960df85f3f544d1cd527868b266f2d9dbe90187","ssdeep":"384:R98DZ0xaGJR7TSg8ytcn/INSZZhY2mbSWeTyYa:vvTB8yW/IkfY2HTyYa","tlshash":"9852c08c381e1a1ee418fd4c45d6a19752ef8de0faf0c9421df6ae078a4c0dd989d67a","first_seen":"2026-09-15T22:08:54.576323Z","last_seen":"2026-10-11T21:28:40.009063Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1429,"timings":{"blocked":729,"dns":0,"connect":157,"send":0,"wait":207,"receive":0,"ssl":333},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filmesporno.xxx/wp-content/uploads/2022/06/video-a-novinha-dando-par-traficante-na-favela-023.jpg","fqdn":"filmesporno.xxx","domain":"filmesporno.xxx","tld":"xxx"},"ip":{"addr":"31.43.191.59","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.498Z","timestamp":1791753938498,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filmesporno.xxx","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 01:11:27 GMT","end":"Wed, 11 Nov 2026 01:11:26 GMT"},"fingerprint":{"sha1":"EE:76:F8:FD:B8:BF:B8:FA:57:BE:B1:62:EE:93:FE:50:17:17:9C:63","sha256":"8B:EE:DF:7C:73:8D:75:65:97:04:1A:05:72:CD:DD:12:D6:9D:F9:B3:BB:FF:97:E5:6F:D0:AA:8E:52:6C:39:D8"}}},"request":{"raw":"GET /wp-content/uploads/2022/06/video-a-novinha-dando-par-traficante-na-favela-023.jpg HTTP/1.1\r\nHost: filmesporno.xxx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 27 Jun 2022 17:18:33 GMT\r\netag: W/\"62b9e669-457d\"\r\nversion: MS26072801\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncloudflare-cdn-cache-control: public, max-age=120, stale-while-revalidate=60, stale-if-error=3600\r\nstrict-transport-security: max-age=31536000;\r\nx-served-by: Mini-CDN-offshore\r\nx-cache-status: HIT\r\nx-cache-bypass: 0\r\ncache-control: public, max-age=2592000, immutable, stale-while-revalidate=60, stale-if-error=3600\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17789,"size_decoded":18354,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x337, components 3","md5":"07fcba5f7bcc71c697cfe83f64fbc814","sha1":"e365f1a1d8580cf7691fcfacbdb2cfb1dfdccefb","sha256":"1a3361bc10262a6cc3e6ce61188225d9fcc0d1f928e6449fb0a1fb6631118ffc","sha512":"4606e5958328834867a7309bf0f2bb4973ab89f9dd1b8cd01f5d968f4f99a81643c60272c53d2ebfc3ee0bd3f1314b396d1d35c594327946ac2114e3bf00b477","ssdeep":"384:7b4w/AAjdigxB6kAJEo5uek9QeIEkGp0R1gJ/E7lAAnU0zXBhbFmY:7sfAjdhxfmep0TgJM7ZnzXcY","tlshash":"8d82d05bc27163646e4dbf271248e32fd6a85510318c27187ebbbc50b7e9705a5ca0fe","first_seen":"2024-04-27T18:55:18Z","last_seen":"2026-10-11T21:28:40.009854Z","times_seen":20,"resource_available":false,"data":null}},"time_used":440,"timings":{"blocked":384,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zooporner.com/media/videos/tmb/000/000/433/1.jpg","fqdn":"zooporner.com","domain":"zooporner.com","tld":"com"},"ip":{"addr":"104.21.72.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.522Z","timestamp":1791753938522,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zooporner.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 05:01:36 GMT","end":"Sat, 12 Dec 2026 06:00:11 GMT"},"fingerprint":{"sha1":"4F:58:34:DC:EB:12:07:9B:AB:EC:9C:AE:6E:19:DD:72:4D:30:70:94","sha256":"FE:D0:D9:DF:63:6B:FC:DB:CE:48:28:ED:9C:1B:92:57:EA:38:C2:DA:38:2C:69:63:11:D7:82:E2:9C:7C:0F:FF"}}},"request":{"raw":"GET /media/videos/tmb/000/000/433/1.jpg HTTP/1.1\r\nHost: zooporner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Mar 2023 11:13:03 GMT\r\netag: \"64217a3f-20cb\"\r\naccept-ranges: bytes\r\nage: 549\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bec%2Bira8LZKRafqPpuIqf9CBS8dwnghWbfudc92KR%2BHJ1OdfyGBdx7GvLGU0TU8WttO3xZsTK0CaxZrhqhyH3pMlZinR3AvXuhUrz32U21auoxXGHhV4x%2BRLqbqJlduA\"}]}\r\ncf-ray: a490f04abe5c8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8395\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8395,"size_decoded":9089,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: \"Lavc59.51.101\", baseline, precision 8, 320x240, components 3","md5":"3cc2609eec7ec8d5e9492e50aa92eb53","sha1":"1665d427524d4cdbebe19ce8f35ff501de140cd6","sha256":"8ceee61cd50be931ec81142bcc466f91980b5a6807ef6cc5f7adbfa76c9705dc","sha512":"a5b2c0ad6c8297dc0d0a662fe3ce7c1fd80b17392af2213068c7f953d2336cf04e12813aa5f9044183b71ffd75d5b6e6e5826941b020546cc8b36628e7632680","ssdeep":"192:Vk4geeXzPsSyZbKWneRaI3/l6tzp1V8rrZ6yqmx/ARXX:K4CqhKWne02stzpArZ6ooRn","tlshash":"a902c0c836be8ff5f1f31539841b931ea6c5482a98d2ed511771a0f63378ce81456cb5","first_seen":"2023-07-06T08:23:32Z","last_seen":"2026-10-11T21:28:40.012405Z","times_seen":14,"resource_available":false,"data":null}},"time_used":933,"timings":{"blocked":870,"dns":3,"connect":36,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fqjpg3.top/upload/vod/20241221-1/582a148602c7ce1c4792f300f69656c3.jpg","fqdn":"fqjpg3.top","domain":"fqjpg3.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:40.958Z","timestamp":1791753940958,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241221-1/582a148602c7ce1c4792f300f69656c3.jpg HTTP/1.1\r\nHost: fqjpg3.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"fqjpg3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.effedupmovies.com/favicon.ico","fqdn":"www.effedupmovies.com","domain":"effedupmovies.com","tld":"com"},"ip":{"addr":"185.8.237.6","port":443,"asn":0,"as":"","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.324Z","timestamp":1791753943324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effedupmovies.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 05:32:15 GMT","end":"Thu, 10 Dec 2026 05:32:14 GMT"},"fingerprint":{"sha1":"6D:40:FD:BA:34:C7:A1:7E:D4:84:E0:0F:8A:93:54:64:5E:32:E9:B3","sha256":"28:30:27:00:78:6C:DC:D6:56:F2:32:B2:74:36:1B:BF:A8:69:09:D0:1F:F8:CB:FF:A9:7B:FE:10:B6:D1:20:EF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.effedupmovies.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nvary: Accept-Encoding,Cookie\r\nlink: \u003chttps://www.effedupmovies.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-redirect-by: WordPress\r\nlocation: https://www.effedupmovies.com/wp-content/uploads/2025/09/cropped-favicon-32x32.png\r\nx-powered-by: PHP/8.5.11, PleskLin\r\ncache-control: private\r\nx-provider: WEDOS - WE DO Security (WEDOS.com)\r\nx-cdn-provider: WEDOS Global CDN (WEDOS.delivery)\r\nx-protected-by: WEDOS Global Protection (WEDOS.protection)\r\nx-dns-by: WEDOS anycast DNS servers as a service (WEDOS.zone)\r\nx-status-page: WEDOS Status (WEDOS.status.online)\r\nx-monitored-by: WEDOS Online Monitoring (WEDOS.online)\r\nx-tagline: Built in Europe / EU, securing the future and safety worldwide.\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.5.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"www.effedupmovies.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mtd4u.com/favicon.ico","fqdn":"www.mtd4u.com","domain":"mtd4u.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.581Z","timestamp":1791753943581,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.mtd4u.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdocac.av4me.xyz/av4usimage.png","fqdn":"pdocac.av4me.xyz","domain":"av4me.xyz","tld":"xyz"},"ip":{"addr":"104.21.58.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:48.974Z","timestamp":1791753948974,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"av4me.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 14:10:35 GMT","end":"Wed, 25 Nov 2026 15:09:07 GMT"},"fingerprint":{"sha1":"19:B5:26:DD:47:83:AE:CD:BF:38:3A:53:2C:07:50:35:84:1C:D1:87","sha256":"F1:E1:7B:BB:79:FC:5B:67:DB:D2:43:34:0C:54:E4:2D:C0:2B:71:F7:F5:07:64:5A:D8:8F:E9:62:86:15:A7:6E"}}},"request":{"raw":"GET /av4usimage.png HTTP/1.1\r\nHost: pdocac.av4me.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 11 Oct 2026 21:25:48 GMT\r\nserver: cloudflare\r\netag: \"a3b-6437702003080\"\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\ncache-control: public, max-age=360000\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dqp1A%2BSn2MF8QWVTJ17Q8for9YNUDmBi1wPwaESV5gNKGql0zVbGwW9NGyLvAEC0bHyQL94IFUNFhwbPApIRLsZGvdPFAxI00Qv%2BEQMy0ysUyz6wRZKWKuX4YHTkqZ7V6yu7\"}]}\r\ncontent-type: image/png\r\nage: 6385\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a490f0851cf5712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2619,"size_decoded":3351,"mime_type":"image/png","magic":"PNG image data, 339 x 89, 8-bit/color RGB, non-interlaced","md5":"8267aaadeeeb8c9fa7482f2f9db2d4e3","sha1":"a2ef23d3b5f9d9bb3102c855a8ace072884ba60c","sha256":"998cf9d427c2e322904e89a056ba823b56078fb199b7395883f3eafabaadbea8","sha512":"719215d8ec70b8b36b24277a80e7876be2fa1afe3698c05bbff013b6a2936701f266e694c221756e7306d1a945013986a53e41af0bc90bdd4bbf0dcbe33f7637","ssdeep":"","tlshash":"f5513ccb05b2fdbc657d79976105a79ef3a896c72982b872565c38c14243a0096c1fe1","first_seen":"2025-11-13T21:07:01.541567Z","last_seen":"2026-10-11T21:28:39.817214Z","times_seen":455,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":1,"dns":1,"connect":4,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"av6k.com/uploads/allimg/2307/D-0GG1055646dCa25E1.jpg","fqdn":"av6k.com","domain":"av6k.com","tld":"com"},"ip":{"addr":"172.67.172.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.269Z","timestamp":1791753938269,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"av6k.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 12:52:34 GMT","end":"Sun, 27 Dec 2026 13:50:06 GMT"},"fingerprint":{"sha1":"73:FA:2E:53:19:28:A4:E6:21:79:B8:85:6F:4F:98:64:60:8E:35:D2","sha256":"BE:CE:E5:F4:99:6C:8E:39:70:EE:24:53:3C:F7:84:B4:FC:60:57:70:78:A2:A0:35:C1:5A:54:5F:2B:6B:CD:AB"}}},"request":{"raw":"GET /uploads/allimg/2307/D-0GG1055646dCa25E1.jpg HTTP/1.1\r\nHost: av6k.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j8ag2llov%2B%2BTADXrHJvC50Hrzvd1je3w9B0dpD9UT5BP1fuu475xQgAY3Fe83QR71z9Dnz473qaUg2TLejosJ8EEj6uFxCw9wOO4zJg8NptK3rVI7e3unYKqTA%3D%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding, User-Agent\r\nlast-modified: Mon, 17 Jul 2023 03:05:56 GMT\r\ncontent-encoding: gzip\r\nage: 3602\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a490f0439f0b49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20884,"size_decoded":21123,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85\", baseline, precision 8, 449x800, components 3","md5":"77eae5a6872d7adf0a4fe136c71913cf","sha1":"fccce642d33b41763c868581d7357c0b3f560252","sha256":"4806396d96b2fc0a892253444cf06ae4c4d520701694bad3eeb521bbdb1db697","sha512":"bf96f1236f2b99a39c19230e636cf293271a26ec2d71a9f78b30b29315e835ccfcbac5ca940b5ba31f98f8c1955a3af37e268bf6e2b68f174f1bdc8d18895236","ssdeep":"384:onhOuCfaDCyMC3pqmRreyRgYFjy5ednOkQMeOH/TahWmI7PdcXaPc4OsP:oh7CSe8pq8eyRgYo857BLPdcqE6P","tlshash":"8f92e108fd071abc689f6c772524a12b634935f4cc888a1d7ad22b574b34a77fc994c9","first_seen":"2026-10-11T20:34:31.844119Z","last_seen":"2026-10-11T21:28:40.013355Z","times_seen":2,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":17,"dns":14,"connect":101,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stickamvids.net/photos/2020/03/11096_0_300.jpg","fqdn":"stickamvids.net","domain":"stickamvids.net","tld":"net"},"ip":{"addr":"80.209.253.45","port":443,"asn":204196,"as":"Abelohost BV","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.309Z","timestamp":1791753938309,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stickamvids.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 04:23:12 GMT","end":"Wed, 02 Dec 2026 04:23:11 GMT"},"fingerprint":{"sha1":"98:67:FB:F7:A6:17:7D:FB:15:4F:64:5B:81:34:26:16:5C:F4:8C:E9","sha256":"C2:93:B8:02:1D:86:AD:4D:AA:D4:7A:F8:C0:5D:51:5F:BE:5C:6A:D3:E4:9C:E9:19:28:88:39:D8:B8:92:B8:97"}}},"request":{"raw":"GET /photos/2020/03/11096_0_300.jpg HTTP/1.1\r\nHost: stickamvids.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6371\r\nlast-modified: Wed, 14 Feb 2024 17:08:40 GMT\r\netag: \"65ccf398-18e3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6371,"size_decoded":6717,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 230x172, components 3","md5":"d46c22688d6908faf1b6fb7b3da9f801","sha1":"cc1fbb70fe4c6c953b5ab8c07696142afe8f5883","sha256":"883d6e764b506d0e7b97b582e66f8da669111914695ad2193c4b6c006947d620","sha512":"c515d2647dbcbce9ddfd132482f25bce1c8ea090eb976c624042b88c3009f6a2ff2c315b8e6e67dc4b4a34eed91ef1081dffb0c1959f7d4eddbda91090a1a884","ssdeep":"192:LQQE3NO7NXIVvwfN87J9yun5A01kbvkCrQwaZj:L5eE7NYVvnlAN01kbvkCsZj","tlshash":"30d17e5bd16694c46f0bc0f9628035b581d5a6c5fa17b3bf8a80ca2fef30cb4544ab5d","first_seen":"2025-02-21T07:39:20.431494Z","last_seen":"2026-10-11T21:28:40.019431Z","times_seen":38,"resource_available":false,"data":null}},"time_used":802,"timings":{"blocked":703,"dns":1,"connect":22,"send":0,"wait":22,"receive":3,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic32.havzy1.com/pic/20220527/e4543ed341778cd227120399edbc21f3/1.jpg","fqdn":"pic32.havzy1.com","domain":"havzy1.com","tld":"com"},"ip":{"addr":"172.67.181.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.428Z","timestamp":1791753938428,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /pic/20220527/e4543ed341778cd227120399edbc21f3/1.jpg HTTP/1.1\r\nHost: pic32.havzy1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cMsSf ])\r\ncache-control: public, max-age=2592000\r\nage: 1528207\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dZzvP%2BJFRoPi%2BzpCBGqMeTV8GiuLM5vXOXmpTUt96bFTEPLyohq%2F0tM63f7KNlXRImBmJXRzMmqwBqGXcTm2rMG7vNl%2BDmZhassUn5HDZvT5%2FiDXmnHNTW85khNOhUsVbM%2Bi\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a490f044998449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ansuko.net/wp-content/uploads/2024/12/148420_header.webp","fqdn":"ansuko.net","domain":"ansuko.net","tld":"net"},"ip":{"addr":"172.67.138.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.441Z","timestamp":1791753938441,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ansuko.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 03:22:49 GMT","end":"Sun, 27 Dec 2026 04:22:39 GMT"},"fingerprint":{"sha1":"A0:10:86:46:2D:F7:1F:70:5D:3F:18:DA:F2:25:60:B7:95:52:91:51","sha256":"D1:40:2D:15:A1:99:35:EB:08:96:5E:08:6F:BD:B6:49:D2:71:03:06:C7:51:81:B3:9A:B0:AB:A4:2E:3C:B1:20"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/148420_header.webp HTTP/1.1\r\nHost: ansuko.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SbjFz0MEjtWikpbVrv118t80DDulfx4PIdMr0rZZ6ld6VMDtZr3eFAC80RQNiOk4zfOlnoIfK4%2BtyGNkzSs0GmBm%2BDczdiPSLbMS9TYy%2BrbxoDyACwMaLGVq0ihD\"}]}\r\npriority: u=5,i\r\nage: 22000\r\nlast-modified: Sun, 11 Oct 2026 15:18:58 GMT\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a490f043e8a02efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54372,"size_decoded":54998,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e26b8523d0c0cc9e10e58e9d78534d34","sha1":"09f96b3cd86efbac542e3cff12b5f4107a95f982","sha256":"f73303c6ac35396409d4eab229112ce3eb30fe4554fca667e80bed523762ed4f","sha512":"d8e330a050be345cc5473ed8f735f6d66a06ee687a37f3b0d76c010a30f408d371236addcb5858abc4872bf5ab26cc4ddf84f02ca02e5120056a8f7291cdfd0a","ssdeep":"1536:3qnAXjFKVvQzAKUMnlnb18p2ERJtkSJy/yMNp/:CAzFKecKzhqhJNM/","tlshash":"d033f15c99ab64bd683cf8347d7c26c3362648b431d5b5b39193b910d5bb0f69a304ce","first_seen":"2025-11-07T16:17:29.819907Z","last_seen":"2026-10-11T21:28:40.021861Z","times_seen":3,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdocac.jpg4.quest/av4usimage.png","fqdn":"pdocac.jpg4.quest","domain":"jpg4.quest","tld":"quest"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:53.368Z","timestamp":1791753953368,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /av4usimage.png HTTP/1.1\r\nHost: pdocac.jpg4.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xvideosporno.blog.br/wp-content/uploads/garota-magrinha-sendo-arrombada-por-um-cacete-gigante.jpg","fqdn":"xvideosporno.blog.br","domain":"xvideosporno.blog.br","tld":"blog.br"},"ip":{"addr":"104.26.11.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.458Z","timestamp":1791753938458,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xvideosporno.blog.br","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 15:47:34 GMT","end":"Thu, 03 Dec 2026 15:47:33 GMT"},"fingerprint":{"sha1":"97:83:BC:33:19:12:B2:40:A5:8C:A2:BA:C2:61:2C:1A:19:40:39:B2","sha256":"DD:42:0A:D1:C8:C6:7D:1A:6D:D8:6B:A5:9F:BD:73:01:2F:BA:5D:0C:0E:51:3C:18:25:4E:E4:93:79:0D:44:54"}}},"request":{"raw":"GET /wp-content/uploads/garota-magrinha-sendo-arrombada-por-um-cacete-gigante.jpg HTTP/1.1\r\nHost: xvideosporno.blog.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 39726\r\nserver: cloudflare\r\nlast-modified: Wed, 13 Sep 2023 18:02:54 GMT\r\netag: \"6501f94e-10171\"\r\nexpires: Fri, 16 Oct 2026 04:42:37 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-cacheable: YES:Forced\r\nx-varnish: 369796066\r\nvary: accept, accept-encoding\r\nvia: 1.1 varnish (Varnish/6.6)\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rNpO9Yas7WkorSyVMV5ZKEJ2E%2BbQ2RIAns2rOKIL3xfvxIqEvKRLdZS1CNXXLB0M%2FaG0BDASPwRIV3Wj2MThYdqajaBQaqCURRSc6p4u4z3y1W1zqonG%2BphMgGkdCRukJ5gIeTgH\"}]}\r\npriority: u=1;i=?0,cf-chb=(259;u=3;i=?0 14856;u=5;i=?0 53659;u=6;i=?0)\r\ncf-polished: ok, orig_size=65905\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-bgj: h2pri,imgq:85\r\nage: 2179186\r\ncf-cache-status: HIT\r\ncf-ray: a490f0455e56568d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish:6.6","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39726,"size_decoded":40736,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2a8e33d8568d219f2af37e5d3852b8ce","sha1":"89cec8e206c080d09241414232fd48ff446fbcd9","sha256":"101fa493f8e2863c3704f746b97f953ef66d2ad2c3d836d3495d8b21e8aba3a9","sha512":"c56c873982cc0416df05d46592c554e39a68385bbdb7343cb9689f1d624fa580c6a3416297c06fd35fcb3338400280e89e1def75b5579719ed8322a2b56fff8a","ssdeep":"768:JPpqqitUa5u7MGE8nz5d1fpqGRYbK3aL50n0Fr0ux4Nnu5Oi2ZSqZrg:JPMtUKu7u8n5kGebwxn0FQG40WZHrg","tlshash":"fc03f14a7533ee7695510309c3774d2912bbe4b6c760ffa403990258db86672922ff4e","first_seen":"2025-03-10T03:32:23.802195Z","last_seen":"2026-10-11T21:28:40.024328Z","times_seen":14,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":100,"dns":0,"connect":0,"send":0,"wait":21,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"un.shayu260522.top/papaduanpian-img/avid57c5679647fef.jpg","fqdn":"un.shayu260522.top","domain":"shayu260522.top","tld":"top"},"ip":{"addr":"104.21.46.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.509Z","timestamp":1791753938509,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shayu260522.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:02:43 GMT","end":"Wed, 16 Dec 2026 11:02:42 GMT"},"fingerprint":{"sha1":"AB:C8:D3:7B:74:05:74:F6:3F:B4:7B:53:12:47:F6:07:9A:58:00:96","sha256":"86:F3:D8:BA:7E:03:2C:AF:B6:88:27:9C:FC:EB:6C:36:E0:9A:DE:85:65:49:4A:28:0D:1A:6F:E1:56:5E:45:3A"}}},"request":{"raw":"GET /papaduanpian-img/avid57c5679647fef.jpg HTTP/1.1\r\nHost: un.shayu260522.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18776\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\netag: \"69f32ae3-4958\"\r\nexpires: Tue, 03 Nov 2026 20:18:10 GMT\r\nlast-modified: Fri, 04 Sep 2026 17:59:04 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\nage: 607376\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4ROHRptIp1b59p2QUSjn26naZ4egn%2Fqn11eG0pZclfGnIckkc4fldKyVMC8ym2VpFnb0EpkOKwUTdGvGMgaCAFIk00fyvPIqHdkF1P94%2FQRFdhlrNvdIi6TJNlb1OkvH97yNXHY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a490f04419cfb515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18776,"size_decoded":19528,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.27.101\", baseline, precision 8, 768x576, components 3","md5":"b56f3f9c1752afb979406e474cb35b0f","sha1":"94b5fbb9ad46b7abe582fb314d864104c9e7cb65","sha256":"3409b1e2114c6ca349b8b54133d94f8395614bdda4160ec02de0b7a6c49b61a5","sha512":"9a2353057d881e336e12024b52768b50d0eb7341c7a2f7535796ec30bf9781125df9a91bafe3e228eceef925e52f605c0c2e2cef83b7392345e1b6b9649e70d7","ssdeep":"384:wRN2xu5FJ5d0l9OqFUOABYGxHgY3/7kt6zJm2g0UIRPpAgd0g+lhPcYF:YgxuFc9OqK1v7k4a0UIRPNd0gUcYF","tlshash":"4082d0086f56ca9ba922bb7f8d2f8943a4df0305b86935358c97cf31d8d4079f658828","first_seen":"2026-10-11T09:53:13.306775Z","last_seen":"2026-10-11T21:28:40.026399Z","times_seen":3,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"un.shayu260522.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thumbs.dreamstime.com/b/adorable-little-girls-having-fun-beach-adorable-little-girls-beach-summer-vacation-195526066.jpg","fqdn":"thumbs.dreamstime.com","domain":"dreamstime.com","tld":"com"},"ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.541Z","timestamp":1791753938541,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thumbs.dreamstime.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 04:53:17 GMT","end":"Sat, 21 Nov 2026 04:53:16 GMT"},"fingerprint":{"sha1":"A5:5A:B9:2E:BF:C1:4D:83:BE:A9:75:B5:8D:B6:FD:63:36:4A:81:CA","sha256":"4B:32:DF:93:8B:B3:DE:9A:3B:23:09:AA:8F:94:9D:27:31:B5:08:BC:CB:EB:06:77:AC:FC:BC:C2:7B:06:0C:BE"}}},"request":{"raw":"GET /b/adorable-little-girls-having-fun-beach-adorable-little-girls-beach-summer-vacation-195526066.jpg HTTP/1.1\r\nHost: thumbs.dreamstime.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/webp\r\netag: \"zMjJdr1pwYI1PVkoJNJxK+BtCzwb/C5ne5kqsvrJgrQ\"\r\nfastly-io-served-by: vpop-kiad7010216\r\nfastly-io-transform-stats: ifsz=207309 ofsz=33870 ofmt=webp\r\nfastly-stats: io=1\r\nserver: nginx\r\nstrict-transport-security: max-age=63072000\r\nvia: 1.1 varnish, 1.1 varnish\r\ncache-control: max-age=31536000, public\r\nvcl-version: 35\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 2146583\r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\nx-served-by: cache-iad-kjyo7100054-IAD, cache-bma-essb1270039-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 48, 0\r\nx-timer: S1791753940.752357,VS0,VE1\r\nvary: Accept\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 33870\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":33870,"size_decoded":34612,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"eae7ad1b63b2dca2cbcf7428933b7dee","sha1":"80418f388772f1cb2bb7605af54cec7249a0d06a","sha256":"51f643b0f40039455465ea3fc3a531b2d2e5242148411f8c5baa9b7da4c559c6","sha512":"a53e9c1733dfedce31274a5635f6af3f0bfe4da77e68776e8be881cb30a2185fc4ec9f3f337ff0b057c4e606a23b89fdd44036e7cacc6fe8c4ed8522cb70bc83","ssdeep":"768:mCpsasD3tyj9naM5P2IYd+uP/Eo30A8OHD9+4psX/Hm:16LYj9Lud3Eo358UQYiG","tlshash":"b7e2021752c25922b23e450d9b2a41f12cf0ac78042dddf4233a33a67ea5d7ebcba750","first_seen":"2026-08-04T21:37:25.906823Z","last_seen":"2026-10-11T21:28:40.027425Z","times_seen":3,"resource_available":false,"data":null}},"time_used":979,"timings":{"blocked":886,"dns":10,"connect":11,"send":0,"wait":12,"receive":3,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fixedjs.av4me.xyz/?vidjs=51qxezx","fqdn":"fixedjs.av4me.xyz","domain":"av4me.xyz","tld":"xyz"},"ip":{"addr":"104.21.58.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:40.598Z","timestamp":1791753940598,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"av4me.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 14:10:35 GMT","end":"Wed, 25 Nov 2026 15:09:07 GMT"},"fingerprint":{"sha1":"19:B5:26:DD:47:83:AE:CD:BF:38:3A:53:2C:07:50:35:84:1C:D1:87","sha256":"F1:E1:7B:BB:79:FC:5B:67:DB:D2:43:34:0C:54:E4:2D:C0:2B:71:F7:F5:07:64:5A:D8:8F:E9:62:86:15:A7:6E"}}},"request":{"raw":"GET /?vidjs=51qxezx HTTP/1.1\r\nHost: fixedjs.av4me.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 11 Oct 2026 21:25:40 GMT\r\nserver: cloudflare\r\npdo-line12: host-fixedjs.av4me.xyz4.194.8.20-myhost-158.222.41/?vidjs=51qxezx\r\nphost: \r\npdo-line55: host-fixedjs.av4me.xyz4.194.8.20-myhost-158.222.41/?vidjs=51qxezx\r\ncache-control: public, max-age=172800\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rW70yLt9K2Zcm7xq6mG9do5PbU1SAdKxGEXR9KYv%2BQNpv73htnQR%2Fzj2zzu77EOSQIme%2BGJL7rCVhcbg62tyvuShIkj9ZYX5LhnKvwi23RUoQFAyo9nIraJ5Tzi%2Bgotl9tsnoA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\npriority: u=2,i=?0\r\ncontent-type: text/html; charset=UTF-8\r\nage: 55082\r\nlast-modified: Sun, 11 Oct 2026 06:07:38 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a490f050dc8f712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}],"data":{"size":77059,"size_decoded":18832,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (752), with CRLF line terminators","md5":"f20db53ad19098794cf80ee4d7bafa7c","sha1":"6af81acb33a88f820c84f1e780c563c3986f6ad8","sha256":"963162212c1981462ea398978f7a6e753e522a5a0a68e1dda8438f9d2ce40499","sha512":"ec357785bd6115da99e841e88d338a1ec17ddd0c0430619e6232f928a4fbf1f5646a42abc264ea1d70bcff558aecf4be1d8866302ace67ca5f815613074e44ac","ssdeep":"1536:gMJTUxbKOOvpXJKJyf2ns+VGP84nUIjNNYl2xGSKLG3Eja3TdQo/JUJnSVKJ8cpt:hUxbKL1tPhUDYGSKLGIaj6oOSRS8fS","tlshash":"837396bb725d542844e106a769714244fc2be637ad81d290f96c2c306f34e2a99f7fec","first_seen":"2026-09-08T05:20:11.393952Z","last_seen":"2026-10-11T21:28:40.028244Z","times_seen":14,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":2,"connect":14,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diorcatm.com/favicon.ico","fqdn":"diorcatm.com","domain":"diorcatm.com","tld":"com"},"ip":{"addr":"172.67.216.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:53.284Z","timestamp":1791753953284,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"diorcatm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Oct 2026 12:54:58 GMT","end":"Fri, 08 Jan 2027 13:54:54 GMT"},"fingerprint":{"sha1":"EB:FB:22:67:31:A3:B9:3F:25:58:9B:65:46:40:6F:88:72:EB:9F:26","sha256":"C9:95:12:47:7C:94:66:AE:97:70:64:23:42:EB:C8:D8:86:1B:8E:E9:C5:D2:05:23:72:97:49:FD:66:03:72:17"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: diorcatm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:53 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bHZdkTK84LVoOzfF64qQRVu5kcLjoVPpX0CZeRgMqr3cuCXI0LZlaVr%2FVHb58nsVsWb31GOwuSw%2F3C3fRodIBPXwZJbdyP6CDnBuUGh%2FMZEHLqq%2F6Hxlb4%2BSHabAQ1c%3D\"}]}\r\nlast-modified: Thu, 09 Apr 2026 08:06:38 GMT\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 27 Aug 2027 07:47:17 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=3600\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"69d75e0e-4276\"\r\nage: 3937176\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a490f0a02907a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17014,"size_decoded":9336,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"cd6cd8f7d9af7267bf6b188d541291b4","sha1":"406bcab4e44f55cddba8f659d8be17c556d46d8a","sha256":"e47f1cd1409c2fc5dc18c4542b12d4e3777fe41137af62c112f059023e580a3e","sha512":"b5bab1c768b4e771c4981f75cd88ad8537828fb8ae988a7326099c81ed2979b502b577ae45e433b1ce647609bdbb14539a22f774cde6f3c645dd0f1f6b60dc02","ssdeep":"192:V/FSmX97q/jQYWDtwxt8ajnLm7JL28gBl9ffMephqQ/Uln813Y:twLQ1Dtwn61ilN/phj/o8m","tlshash":"82724c662aedf949c7860e3557a2612942b9cfe30c2d1b4bde6279e8be35fc43d81140","first_seen":"2026-04-16T16:55:58.986504Z","last_seen":"2026-10-11T21:28:39.798443Z","times_seen":60,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":20,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"diorcatm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"picc.sex8sex855.com/20260427/P3u5Omso/1.jpg","fqdn":"picc.sex8sex855.com","domain":"sex8sex855.com","tld":"com"},"ip":{"addr":"172.96.39.74","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.253Z","timestamp":1791753938253,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"picc.sex8sex855.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 15:40:09 GMT","end":"Wed, 16 Dec 2026 15:40:08 GMT"},"fingerprint":{"sha1":"77:2E:6E:9B:8A:1E:41:7B:0F:D4:D6:93:6B:91:88:B1:72:C8:83:AF","sha256":"ED:A7:71:D5:90:9E:38:6D:09:DD:78:F7:65:57:0C:A0:3B:61:DF:92:10:07:1A:94:B8:FE:8C:ED:5B:C0:0C:CE"}}},"request":{"raw":"GET /20260427/P3u5Omso/1.jpg HTTP/1.1\r\nHost: picc.sex8sex855.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-headers: Range,Origin,Accept,Accept-Encoding,Content-Type,If-Modified-Since,If-None-Match,Cache-Control,X-Requested-With\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length,Content-Range,Accept-Ranges,Content-Type\r\naccess-control-max-age: 86400\r\ncache-control: max-age=2592000\r\ncontent-type: image/jpeg\r\ndate: Sun, 11 Oct 2026 21:08:34 GMT\r\netag: \"69effd39-249d4\"\r\nexpires: Tue, 10 Nov 2026 21:08:34 GMT\r\nlast-modified: Sun, 11 Oct 2026 21:08:34 GMT\r\nserver: openresty/1.27.1.2\r\nx-cache: HIT, policy, disk\r\ncontent-length: 149972\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":149972,"size_decoded":150658,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 960x540, components 3","md5":"fe0401be52a5541138b0de9716b57c45","sha1":"afbe70369dad4445843676abdb5d9bcdb9855bd1","sha256":"700736defef8a460402c678f409fdfb0ce5983e6adbab7599400c6d3e0a687cd","sha512":"293c5aa3cc48c9aa8e3892e2602583976b73a543d41da06ecb9beec799839befbaf0ff23f426f83c3e7048c295b9fecbe4fd6f1ac7bea94dcc17b3c52d7cf572","ssdeep":"3072:Ii+acO3yNQagdlZSHwoTGbGfZUuKwd+MsGk97U8YQGVErWZfTZ2:IbZvglLon1KwEPy87GqETk","tlshash":"e1e31319fbccdcb7f653088eee14ee6653106d98316ac8551de2d6a0b0336167dbcca4","first_seen":"2026-10-02T13:02:44.788067Z","last_seen":"2026-10-11T21:28:40.029233Z","times_seen":3,"resource_available":false,"data":null}},"time_used":605,"timings":{"blocked":445,"dns":3,"connect":19,"send":0,"wait":22,"receive":65,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.peeinghub.com/thumbs/79/1f/791fec08c5609712f5ab856011170959.0.jpg","fqdn":"st.peeinghub.com","domain":"peeinghub.com","tld":"com"},"ip":{"addr":"167.235.2.93","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.512Z","timestamp":1791753938512,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"st.peeinghub.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 14:03:54 GMT","end":"Fri, 01 Jan 2027 14:03:53 GMT"},"fingerprint":{"sha1":"C5:A7:1A:53:8E:5F:29:F6:4F:C7:43:69:61:AD:FD:22:23:6B:9F:6B","sha256":"97:A6:5C:E4:14:F5:8F:85:6D:EB:57:4C:7B:E0:C9:1B:6F:CD:FF:8C:A0:DE:E8:99:70:60:26:A5:0B:42:00:30"}}},"request":{"raw":"GET /thumbs/79/1f/791fec08c5609712f5ab856011170959.0.jpg HTTP/1.1\r\nHost: st.peeinghub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7732\r\nlast-modified: Wed, 25 Nov 2020 03:15:04 GMT\r\netag: \"5fbdcc38-1e34\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7732,"size_decoded":8077,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x240, components 3","md5":"45ae854983737b1873280dd18bbcf861","sha1":"2c0a0fcd1d7c394276d00654aed45b76e65a3a76","sha256":"23f5de0a57d701b9c9bc6254c2c5f49d65c24f8e465d25c9dd22de017e735ab6","sha512":"201c8d2aa4056dacf050e53b20d46d1664b9e451f2e3827393d3a4b2f3f6cb712972d37c9319e819926889a266d897df7f1640e86fb8a50820fcd60b932acd8b","ssdeep":"192:A81Tp2moH4sXlN4194fycnqvBYFt28HLZcNF:A81Tp1lklNu9wz0sLk","tlshash":"18f18e8b4766d9c1fe395171793fad683ec06cf741e2525716ecaab1022f7b0b8806e0","first_seen":"2025-03-10T03:32:23.725203Z","last_seen":"2026-10-11T21:28:40.030003Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1034,"timings":{"blocked":826,"dns":0,"connect":36,"send":0,"wait":58,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgsiwa.com:5278/cvjpg/HwAx6PMo.png","fqdn":"imgsiwa.com","domain":"imgsiwa.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:40.945Z","timestamp":1791753940945,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cvjpg/HwAx6PMo.png HTTP/1.1\r\nHost: imgsiwa.com:5278\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/ext/pre_6603839535.jpg","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"141.227.152.51","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.459Z","timestamp":1791753938459,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 07:52:05 GMT","end":"Sat, 28 Nov 2026 07:52:04 GMT"},"fingerprint":{"sha1":"C4:4F:9D:C9:09:9D:31:30:C3:4F:AE:A0:F3:18:7E:88:BF:F8:C7:B7","sha256":"81:05:CD:81:08:79:7C:F7:1F:83:1B:B5:4E:5C:E4:F8:F7:31:1C:F5:F7:00:A5:82:73:35:B8:D4:AB:52:95:7F"}}},"request":{"raw":"GET /ext/pre_6603839535.jpg HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13216\r\nlast-modified: Wed, 12 Jun 2024 00:22:42 GMT\r\netag: \"6668ea52-33a0\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13216,"size_decoded":13588,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"75fc694af7b679c93ae6a210896872a0","sha1":"1d13e808a925663273b31d9adf6d9353652dd3e8","sha256":"6bcb3d7cc697ad9c26d06fe476ca02f5370123f400858989e83dc2260aee7b3f","sha512":"3db34c7ace587ef2f1e22c3942a9a65b1392ff01c6e99e885b072b1e66ba4f7ac78dad1591b71c422d60ca2a5fc22a42e109f3b39636cc1d13d44d5a4c515ed3","ssdeep":"384:alcMSDCrzbhuiHQaYGWbQZwqzxNBlrg6brYJDt:agD2dtG/MZBTgz","tlshash":"8652b0e09f689d01dd9c857895a2a3bff472cfc0e153033a8840154a7b752eb8770c79","first_seen":"2024-12-08T19:40:55.553456Z","last_seen":"2026-10-11T21:28:40.030749Z","times_seen":105,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":65,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.jxjav.com/favicon.ico","fqdn":"www.jxjav.com","domain":"jxjav.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:53.322Z","timestamp":1791753953322,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.jxjav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.havzy1.com/pic/20210912/e06a71a4a58596a31b5ac98976d90145/1.jpg","fqdn":"pic.havzy1.com","domain":"havzy1.com","tld":"com"},"ip":{"addr":"172.67.181.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.466Z","timestamp":1791753938466,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"havzy1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 20:13:35 GMT","end":"Sun, 15 Nov 2026 21:12:14 GMT"},"fingerprint":{"sha1":"10:3E:8E:69:15:51:0C:8A:8A:32:BC:52:5E:83:49:CB:0A:28:81:F4","sha256":"5B:F4:2D:92:3C:AE:14:42:50:A4:43:D2:79:E0:A8:E6:8C:F4:A3:94:44:45:95:DF:47:74:C0:7A:5F:10:B2:60"}}},"request":{"raw":"GET /pic/20210912/e06a71a4a58596a31b5ac98976d90145/1.jpg HTTP/1.1\r\nHost: pic.havzy1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18642\r\nserver: cloudflare\r\nlast-modified: Sun, 12 Sep 2021 02:55:03 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,OPTIONS\r\naccess-control-allow-headers: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cHs f ])\r\nage: 2108843\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dSCmdtMSAz5BIHdN1XZks7ZQv0s1cOb6urrDlctXCG5sLDmX5cULIT9kO2t14Q%2Blz1XXsKZNkA%2BMYoYc0qzqoGQIGvxcmZnL52%2B3495qG4LZEimUDswafV9LnUW%2BxhgV1w%3D%3D\"}]}\r\ncf-ray: a490f0459c0f49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18642,"size_decoded":19485,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 832x831, segment length 16, comment: \"Lavc58.134.100\", baseline, precision 8, 554x416, components 3","md5":"458d70ba98aabb26a31aaebeb299cfd4","sha1":"ec9184af95b537c8c736fd0024f25a503d493a10","sha256":"9a008cafefa6c07a5540c63236202bc94919f48c28aa230f0924ecd1e48294ca","sha512":"22ac6cbaff2540da6fd98278631ccb91a1b82a8bb76649124e7ef1d641b3622246eadb3af00f3f129aa185a1a2a69cc5c35cb5344c2cd01d43d67047221fa308","ssdeep":"384:T2mdPZEKbr3exATLIpp3ikdTPpNruXRg9ZBJ1sICHORpjQhTX:iItoAHIDikpzKXRg9/F2TX","tlshash":"f582cfc00c9ed2596404fc1ce9de4eab634f152c6b865ebc11a9fbb03088850da7bdb6","first_seen":"2025-10-31T08:35:42.04531Z","last_seen":"2026-10-11T21:28:40.031632Z","times_seen":5,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":141,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.pornoperso.com/wp-content/uploads/2022/02/polly-fans.jpg","fqdn":"img.pornoperso.com","domain":"pornoperso.com","tld":"com"},"ip":{"addr":"94.23.76.64","port":443,"asn":16276,"as":"OVH SAS","country":"Portugal","country_code":"PT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:40.589Z","timestamp":1791753940589,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.pornoperso.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Oct 2026 07:17:21 GMT","end":"Sat, 02 Jan 2027 07:17:20 GMT"},"fingerprint":{"sha1":"84:8E:CE:9C:8C:DC:A8:23:39:BA:DE:A5:85:44:8C:4E:4C:29:52:86","sha256":"31:F1:59:5B:7C:AF:10:69:75:BB:4F:18:CA:56:C4:AE:95:68:20:C4:CF:AF:94:08:15:66:82:76:77:0F:CD:63"}}},"request":{"raw":"GET /wp-content/uploads/2022/02/polly-fans.jpg HTTP/1.1\r\nHost: img.pornoperso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://en.4us.asia/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:40 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 12 Feb 2022 07:45:27 GMT\r\netag: W/\"62076597-7587\"\r\nversion: MS26072801\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncloudflare-cdn-cache-control: public, max-age=120, stale-while-revalidate=60, stale-if-error=3600\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000;\r\nx-served-by: Mini-CDN-offshore\r\nx-cache-status: HIT\r\nx-cache-bypass: 0\r\ncache-control: public, max-age=2592000, immutable, stale-while-revalidate=60, stale-if-error=3600\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30087,"size_decoded":30745,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x337, components 3","md5":"7f17d5b89b50a4f51afb79f1fd357286","sha1":"91e5fbce4ec83cb969be6abcbe33cb1ba19b0900","sha256":"24d84763c8b532c1565a10aaa2b358df65941cbdda5a179175c5f4431164118a","sha512":"672b8cfc87bdaac9c6c49a504f1196a71a2fff477aac529a645907a0d3992c4482192e25b61b591437a471bb6f01ffc2282c18c53777cb58bf77c674c0af5a49","ssdeep":"768:7Wg9RPiMuwnnAuR/SKEzW0lSkkhJYFQQ8A/yG4oo/giFxu:7vRainAI6RzW0lKYFQ8Ehxu","tlshash":"f8d2e16642b774786d0bde5d8f86a2ee90d4881e3e7363b0db463536e7010cade4c4e9","first_seen":"2025-03-21T10:58:41.201357Z","last_seen":"2026-10-11T21:28:40.03246Z","times_seen":21,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":36,"send":0,"wait":49,"receive":0,"ssl":306},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornoperso.com/favicon.ico","fqdn":"pornoperso.com","domain":"pornoperso.com","tld":"com"},"ip":{"addr":"172.67.166.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.273Z","timestamp":1791753943273,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornoperso.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 22:01:41 GMT","end":"Sun, 03 Jan 2027 23:01:34 GMT"},"fingerprint":{"sha1":"59:B8:3B:55:B6:0C:4D:56:77:75:84:DD:64:A9:AF:6B:8C:CE:B1:53","sha256":"B6:A6:F4:88:0F:BC:D3:C3:C0:A8:A4:86:2B:F7:54:C6:A3:B1:AB:1D:4A:5B:AC:4A:A9:C3:54:87:94:F0:C6:FC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pornoperso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: text/html; charset=utf-8\r\nversion: MS26072801\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncdn-cache-control: no-store\r\nstrict-transport-security: max-age=31536000;\r\npriority: u=5,i\r\nsurrogate-control: no-store\r\nx-served-by: Mini-CDN-offshore\r\nx-cache-status: HIT\r\nx-cache-bypass: 0\r\ncache-control: no-store, no-cache, must-revalidate, private\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fWuuVtg%2BTycZpJTcF7pSNszwTcTULtG1isbaelT4SgfOqbjw%2B1U3EZnKMCk5efc7Adxhezj26zHferC380aJzEZbIgSA98vqUDnAemjtiHjcnYXXOw7agH2hSL7ELS%2F0FA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\ncf-ray: a490f061ccbe56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bad.news/favicon.ico","fqdn":"bad.news","domain":"bad.news","tld":"news"},"ip":{"addr":"172.67.73.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.527Z","timestamp":1791753943527,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bad.news","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 03:06:06 GMT","end":"Sat, 21 Nov 2026 04:06:02 GMT"},"fingerprint":{"sha1":"D5:13:50:E4:85:B8:41:6E:65:EA:DC:27:8C:6D:37:05:54:3C:42:D2","sha256":"3B:1E:5F:FD:0A:60:60:A0:23:94:32:33:C0:E7:3F:9E:ED:31:F7:6C:6A:22:C1:77:4E:27:F6:76:7E:B0:ED:63"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bad.news\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:50 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Sun, 04 Jan 2026 06:58:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KhMPG7vIuScnV9QEc9tt%2FIvjijvMkiLGZWIunpp%2B74Va4KuyH5Rcjvc4AdEYWiHIFuaJ6lBIamrFsIF%2Bw0ih7sxCSwQr5hTTVxXRqAVWYCxH7742NiEc0eFk\"}]}\r\netag: W/\"695a0f91-3c75\"\r\nage: 2500\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: a490f08bedad0883-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15477,"size_decoded":16122,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"66e8048ee48906402963843fcb37a29d","sha1":"59abbecb611a4fb0c35a634e5c6ff5b224cf42a5","sha256":"03519b2242f4217bd4ab8226f29bd4ff7659a3ab722cb30408e766a5d4b02f1a","sha512":"cf8f85baafd90d098a1536e4e8efb3cb13005ffe504ab84efcd544e410bd96627e00fddc37a7691d478d099c6358b8f5693983bbb628ae42f444804f5f16e272","ssdeep":"384:0BT5ldOOJ/EWh9kBBdakjnbUM27sYUJQzVE:sf/EWwBBd33b24JN","tlshash":"1d62c0df231c09615463fd36a730d83d3991c24a2c176b985627f8367c9bbb85a8cb62","first_seen":"2026-04-15T20:09:45.739747Z","last_seen":"2026-10-11T21:28:40.033182Z","times_seen":31,"resource_available":false,"data":null}},"time_used":6409,"timings":{"blocked":-1,"dns":2,"connect":3,"send":0,"wait":14,"receive":0,"ssl":6389},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xlecx.one/uploads/posts/2024-11/e5b6ef1108_dfthr65uhytj57i.webp","fqdn":"xlecx.one","domain":"xlecx.one","tld":"one"},"ip":{"addr":"104.21.25.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.223Z","timestamp":1791753938223,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xlecx.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 10:36:44 GMT","end":"Fri, 20 Nov 2026 11:36:26 GMT"},"fingerprint":{"sha1":"A2:58:87:B9:23:F3:8D:3B:C7:9D:FE:5C:37:C8:80:8A:F3:98:85:82","sha256":"52:F3:0E:03:16:09:A1:D2:A4:C6:6D:33:DA:44:72:B7:A9:D5:74:38:5A:3A:0E:01:13:EA:DD:4A:DA:E7:B3:4E"}}},"request":{"raw":"GET /uploads/posts/2024-11/e5b6ef1108_dfthr65uhytj57i.webp HTTP/1.1\r\nHost: xlecx.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8202\r\nserver: cloudflare\r\nlast-modified: Mon, 04 Nov 2024 10:46:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6728a61d-200a\"\r\naccept-ranges: bytes\r\nage: 5974\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RfS9gQMkGPN3JfsAaqfBJrBvxMcTUeVj5hkwQJ2lU69d9MAnc43mEsi%2Bi%2F8GVWVdjm3gU%2BRE7uDcWe3W%2FanSmXWCiLa%2FqExOgqul6ULNkCygmzcjVvAQGwxKHG0%3D\"}]}\r\ncf-ray: a490f042bbb8712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8202,"size_decoded":8875,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 150x171, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"70eb8151b2cfafce90fd165fda231627","sha1":"24acbdda06d6766347d2e64dd38523e1068be23f","sha256":"babdee37b0e3458851279f2a5135107f9a9bd63f49f1d486e913631c4bd593d1","sha512":"f331240f509df59955e64f4c4699cf41a8c221ef5d75e11782bb55d65d5647cfe215216e51de66aa65510102d65ba208fcf392d337d7a0e8a8c6f5d1539de980","ssdeep":"192:JToTZm1sV5/QN/9jUfu7erZ7xIibAe9OyPnVm:JE/U9AMer9xIi8sOv","tlshash":"1302bf8d78e2e5c9ded42b15b132bfe78a708b59168812fca96740f2c4d6d9c1600ff6","first_seen":"2026-10-11T21:28:40.037844Z","last_seen":"2026-10-11T21:28:40.037844Z","times_seen":1,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":1,"connect":4,"send":0,"wait":20,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toxicstream.com/favicon.ico","fqdn":"toxicstream.com","domain":"toxicstream.com","tld":"com"},"ip":{"addr":"104.21.55.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.641Z","timestamp":1791753943641,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toxicstream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Sep 2026 10:04:06 GMT","end":"Tue, 29 Dec 2026 11:01:40 GMT"},"fingerprint":{"sha1":"EF:3F:A9:75:19:57:F7:C4:85:4E:1A:3B:80:52:03:22:3C:7D:FE:39","sha256":"FC:0A:D9:EF:F2:64:04:44:44:CD:14:AB:D5:FB:1E:61:79:FD:AF:76:82:57:67:B6:DC:58:28:7B:33:40:98:E9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: toxicstream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Sat, 22 Aug 2026 14:37:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-apo-via: origin,no-cache\r\nage: 5260\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=13JfTOzxMZKF4IgBB20G5k3xD92QtihslSzivk4GBAqBZPwkX2W8w0zdO5vW0bYjQgtlRdLlcF4tqoLolZ9tDnkwT1hrojj%2FKsEtMrJfyGPEhRtzPjXpw%2FnpPiGMwYuCP70%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a490f0640b5a76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15342,"size_decoded":11069,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 8 bits/pixel, 32x32, 32 bits/pixel","md5":"c83eda4e17129c3393b102186539dd77","sha1":"8f90cc7736b3bbafcc33cee1e687637149cf6385","sha256":"bc7f7c31cd41b527334bf969fd7a0a03c0f638f8405d17af3c0e0cd1a2c19155","sha512":"156abc55236e56cf046edebefc04dd2eb55d74bfc9ac6aee60cb471009e33de8674a90c847c6ceb941f2a0246278fac5260ca798f46d5bf6cf410780df4f3129","ssdeep":"384:KxJrUPwiXF5uo1kEvgxx5hgINZ/hOq7nMv7H50Wp:YJrUPwiXqo16jhX/hwv7H","tlshash":"8e62d42926e7101ee5932cbd4f04d67cf269dd2da8ab551322e33e9ffe75ac55ac0040","first_seen":"2026-08-22T17:44:03.995559Z","last_seen":"2026-10-11T21:28:40.039353Z","times_seen":9,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeenite.com/favicon.ico","fqdn":"zeenite.com","domain":"zeenite.com","tld":"com"},"ip":{"addr":"141.95.145.234","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:53.305Z","timestamp":1791753953305,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeenite.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 23:03:42 GMT","end":"Wed, 11 Nov 2026 23:03:41 GMT"},"fingerprint":{"sha1":"0D:AF:57:FC:6A:4B:A1:07:7B:C0:03:11:00:F2:B5:F1:74:3F:0A:56","sha256":"D8:72:A4:FD:48:A5:B4:DC:35:6A:C5:49:61:DC:82:9A:5F:E3:CD:71:74:EC:E8:27:35:C2:1B:C9:F1:88:A9:37"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: zeenite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:53 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 15406\r\nlast-modified: Sat, 21 Feb 2026 21:07:40 GMT\r\netag: \"699a1e9c-3c2e\"\r\nstrict-transport-security: max-age=63072000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15406,"size_decoded":15680,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"5722db634d2bb57bf4d345aacbed1e2d","sha1":"6f8e7165c48a77593f6bdba6bd1d89fa47a1507b","sha256":"be98a1e555af020e1e2e8899264a4dad3dfdb25268458ba64d2ab4d73222b1a2","sha512":"f1960d6acaf8866881bf28ff0a1e097118087f56ea36a99504bb09177718d12005978f832b1f627a5736a80f67f87dfeebbf6228da75ef92f3c060b2e57dada0","ssdeep":"96:j0rWPNtWMfo46ZYNM2uov5dluxYutmDF:jJlo46Zq1wUD","tlshash":"3d62273c7b088085eaa9153c9e4de5c84407bed4eec8e57732d73b2c89f36689c9547a","first_seen":"2024-08-19T19:51:35.76239Z","last_seen":"2026-10-11T21:28:40.040015Z","times_seen":4,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":4,"connect":32,"send":0,"wait":30,"receive":30,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"le.lefhao20250923.top/upload/vod/20260209-1/787f3b01d46f1efd8f2b97e723846646.jpg","fqdn":"le.lefhao20250923.top","domain":"lefhao20250923.top","tld":"top"},"ip":{"addr":"172.66.145.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.506Z","timestamp":1791753938506,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lefhao20250923.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 02:50:39 GMT","end":"Sat, 12 Dec 2026 03:50:36 GMT"},"fingerprint":{"sha1":"E6:56:09:2C:29:E3:E8:39:85:B1:4D:FE:C4:B2:4D:53:A2:36:76:71","sha256":"13:97:FE:D3:E5:10:01:F3:33:DC:67:34:51:72:7B:30:F1:DA:42:52:52:4E:4D:CD:76:1B:03:90:FF:3E:66:DB"}}},"request":{"raw":"GET /upload/vod/20260209-1/787f3b01d46f1efd8f2b97e723846646.jpg HTTP/1.1\r\nHost: le.lefhao20250923.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncontent-type: image/jpeg\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\netag: \"6a9732f0-31300\"\r\nexpires: Thu, 29 Oct 2026 10:40:29 GMT\r\nlast-modified: Tue, 29 Sep 2026 10:40:29 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, disk\r\nserver-timing: cfExtPri\r\nage: 1018592\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D4Uxr9WndCOn8R%2F6Ts1yuQMnNqQ5Kjp0zb18ONHtEPbLIr8s4rJmxX2CyXdmEqJ8bzFJr74hRHmeQuGUk9QFbVyN6pjFOYSn199Bwb3ufjHWw5B9uOv%2B3xeanwubTwrDqnMdoAn%2Btjs%3D\"}]}\r\ncf-ray: a490f0447ed41ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 201472\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":201472,"size_decoded":202278,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x1080, components 3","md5":"6972fcf128a086c42f0da393a53dbde5","sha1":"fd02e1be74fb1ac2301b27d243c8541b4b71fda3","sha256":"3895ae723e6baaad8e98a2c38ae1300ea4554bf3e2dc5a014626a31f716d8e50","sha512":"5f71b36c3ac662699c7639fb69a775dac7c659e880e2a8ceb6bd097f1bea348fc17688850d09ae7914794068efa016c4ed8f303f45f49c85c9f5cb8aa7e8ec85","ssdeep":"3072:OzFchkKdJsiTrRC3uhzBed93dMREbxmgATvXWI1CR6oeY0L1BRWG2o4/fdKltL5:Oz+flRC31JxbAzXjL3YQ1Bd081","tlshash":"461422049841987fc47f07b0d18c226564b12d2daf8fe163b7eeae6168a7bd895134fc","first_seen":"2026-10-02T13:02:44.871088Z","last_seen":"2026-10-11T21:28:40.043291Z","times_seen":3,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":14,"connect":88,"send":0,"wait":9,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.xxibaocdn.com/video/m3u8/2026/01/14/e4_b9_b1_e4_bc_a6_e4_b8_ad_e5_87_ba/32448_cover_2026-01-14_011218.jpg","fqdn":"img.xxibaocdn.com","domain":"xxibaocdn.com","tld":"com"},"ip":{"addr":"162.209.190.196","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.552Z","timestamp":1791753938552,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.xxibaocdn.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 15:13:41 GMT","end":"Fri, 25 Dec 2026 15:13:40 GMT"},"fingerprint":{"sha1":"87:96:F8:C7:25:D2:6A:6F:2E:7C:8E:3D:E1:29:5D:1A:8B:AE:B8:8F","sha256":"6F:3D:C6:A4:68:5E:CD:E6:A1:A6:04:B5:67:00:56:EB:EF:03:FB:6F:FF:BA:5C:05:C5:B5:E2:76:B1:96:7C:33"}}},"request":{"raw":"GET /video/m3u8/2026/01/14/e4_b9_b1_e4_bc_a6_e4_b8_ad_e5_87_ba/32448_cover_2026-01-14_011218.jpg HTTP/1.1\r\nHost: img.xxibaocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 13 Jan 2026 17:17:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69667e23-a1b7\"\r\nexpires: Tue, 10 Nov 2026 21:25:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41399,"size_decoded":40856,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 620x416, components 3","md5":"cd1350e66c8a2a18af7ff0d5f6efce9a","sha1":"7af13492e7a518d40386bf17141e811ba0cf01b9","sha256":"50224c8d13d7c9c6cfe194fb11e39379ebe2434717f289519d40b302c6084003","sha512":"be584a6129a0592ba3347519ceef31ca1e45b63007db1d0d71c41cfb081e75be76e54d1ef5edb90e0515a5b596620f13d15174b6f6a60b82b9cc9951a98e5789","ssdeep":"768:TApVqBItbxT1VuO2R8xBDBpYoMxJ45KZIFACiq0uWQb:TAnttblflDxJJipq7Wu","tlshash":"a003f11549e7b963ed060f9e7b81775920806d18d51eb77ebb30a04397a0cb49323fb9","first_seen":"2026-04-09T12:33:46.786766Z","last_seen":"2026-10-11T21:28:40.044868Z","times_seen":8,"resource_available":false,"data":null}},"time_used":807,"timings":{"blocked":178,"dns":0,"connect":0,"send":0,"wait":629,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baraag.net/@KDE/image/png","fqdn":"baraag.net","domain":"baraag.net","tld":"net"},"ip":{"addr":"167.104.221.188","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:40.947Z","timestamp":1791753940947,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baraag.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 08:59:16 GMT","end":"Sun, 03 Jan 2027 08:59:15 GMT"},"fingerprint":{"sha1":"E8:48:C0:1D:66:22:1F:D0:0C:BF:92:E0:DA:3F:0F:8D:AF:FC:92:76","sha256":"62:29:B4:0B:4F:57:6C:22:CD:2F:F7:AD:6F:86:28:BA:F3:53:0E:E0:4D:59:B5:77:9F:59:FA:1F:16:A3:4A:40"}}},"request":{"raw":"GET /@KDE/image/png HTTP/1.1\r\nHost: baraag.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 11 Oct 2026 21:25:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding, Accept, Accept-Language, Cookie\r\nserver: Mastodon\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nreferrer-policy: same-origin\r\ncache-control: max-age=15, public, stale-while-revalidate=30, stale-if-error=86400\r\ncontent-security-policy: base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://baraag.net; img-src 'self' data: blob: https://baraag.net https://media.baraag.net; media-src 'self' data: https://baraag.net https://media.baraag.net; manifest-src 'self' https://baraag.net; form-action 'none'; child-src 'self' blob: https://baraag.net; worker-src 'self' blob: https://baraag.net; connect-src 'self' data: blob: https://baraag.net https://media.baraag.net wss://baraag.net; frame-src 'self' https:; style-src 'self' https://baraag.net 'nonce-kQ8Y//z6msB4JkHTlNYmwg=='; script-src 'self' https://baraag.net 'wasm-unsafe-eval' 'sha256-OgOg5CGI7D4Syg38sNIknJKO+3DCTdpfY1ciC+Bklaw='\r\nx-request-id: 843fb96d-f33e-4cda-9865-08a5693881b9\r\nx-runtime: 0.020267\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cached: HIT\r\ncontent-encoding: gzip\r\nx-cache-t: large\r\nx-varnish: 41608249685\r\nage: 0\r\nvia: 1.1 fe-nl-1 (Varnish/7.7)\r\nx-cache: MISS\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Mastodon","description":"Mastodon is a free and open-source self-hosted social networking service.","website":"https://joinmastodon.org","common_platform_enumeration":"","icon":"Mastodon.svg","categories":["Message boards"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fqjpg3.top/upload/vod/20250323-1/aadfe7f3fb8a115e3ab5f8d82e4dfb9d.jpg","fqdn":"fqjpg3.top","domain":"fqjpg3.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:40.975Z","timestamp":1791753940975,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20250323-1/aadfe7f3fb8a115e3ab5f8d82e4dfb9d.jpg HTTP/1.1\r\nHost: fqjpg3.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"fqjpg3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"googlemar.com/favicon.ico","fqdn":"googlemar.com","domain":"googlemar.com","tld":"com"},"ip":{"addr":"172.67.181.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.408Z","timestamp":1791753943408,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googlemar.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 23:03:35 GMT","end":"Thu, 10 Dec 2026 23:03:34 GMT"},"fingerprint":{"sha1":"4A:1C:3B:88:A5:F3:08:39:14:69:F9:F7:19:37:1E:B5:C3:EC:80:5C","sha256":"C7:B1:BD:E2:0A:D1:F2:42:7B:51:BD:73:4B:30:F3:E4:CF:89:DA:BA:92:38:51:5C:F6:D6:D7:DA:B4:6B:EE:CB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: googlemar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Thu, 09 Apr 2026 08:06:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3WxkK0RPXc%2FbkIfRmFWnjH77n%2ByGvd4Ua7Isjae%2FocIIipB0VHZYkvfF2MsPbU81Pvx8YRhcB%2Fdh4yGv82Bqr%2BrtuOu7K1QylALVeO1AkY%2BB6Dhv5U4N0KBf3COy4PVl\"}]}\r\nexpires: Sun, 22 Aug 2027 20:53:46 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=3600\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"69d75e0e-4276\"\r\nage: 4321957\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a490f062ff2c568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17014,"size_decoded":9314,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"cd6cd8f7d9af7267bf6b188d541291b4","sha1":"406bcab4e44f55cddba8f659d8be17c556d46d8a","sha256":"e47f1cd1409c2fc5dc18c4542b12d4e3777fe41137af62c112f059023e580a3e","sha512":"b5bab1c768b4e771c4981f75cd88ad8537828fb8ae988a7326099c81ed2979b502b577ae45e433b1ce647609bdbb14539a22f774cde6f3c645dd0f1f6b60dc02","ssdeep":"192:V/FSmX97q/jQYWDtwxt8ajnLm7JL28gBl9ffMephqQ/Uln813Y:twLQ1Dtwn61ilN/phj/o8m","tlshash":"82724c662aedf949c7860e3557a2612942b9cfe30c2d1b4bde6279e8be35fc43d81140","first_seen":"2026-04-16T16:55:58.986504Z","last_seen":"2026-10-11T21:28:39.798443Z","times_seen":60,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":1,"connect":2,"send":0,"wait":17,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagecdn.clips4sale.com/accounts99/91531/clip_images/previewlg_21540877.jpg","fqdn":"imagecdn.clips4sale.com","domain":"clips4sale.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.534Z","timestamp":1791753938534,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /accounts99/91531/clip_images/previewlg_21540877.jpg HTTP/1.1\r\nHost: imagecdn.clips4sale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.jwplatform.com/favicon.ico","fqdn":"content.jwplatform.com","domain":"jwplatform.com","tld":"com"},"ip":{"addr":"13.249.8.19","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.357Z","timestamp":1791753943357,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: content.jwplatform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncontent-length: 92\r\ndate: Sun, 11 Oct 2026 21:25:34 GMT\r\nx-cache: Error from cloudfront\r\nvia: 1.1 cf605369addb5ed57a33ca47f2e018fa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: -CRNoUqIxN7qtczTcUflif7WLhWEWt60yk9XjoJvn9uJ8Jtl8lKM6g==\r\nage: 15\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20250710-1/97351813294df62cad6ceda0e7f83547.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"23.140.236.1","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.600Z","timestamp":1791753938600,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbzytp.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 18:35:36 GMT","end":"Fri, 13 Nov 2026 18:35:35 GMT"},"fingerprint":{"sha1":"48:67:53:B8:D9:B0:E4:69:E7:6C:D8:14:FE:A6:61:9A:7E:D7:65:01","sha256":"97:1B:54:8D:56:AC:26:EE:C1:E1:75:88:2C:CC:66:6C:A5:6A:6A:68:EC:1E:AD:83:2A:F7:0D:F1:0D:41:65:1C"}}},"request":{"raw":"GET /upload/vod/20250710-1/97351813294df62cad6ceda0e7f83547.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 75291\r\nlast-modified: Thu, 10 Jul 2025 02:47:07 GMT\r\nvary: Accept-Encoding\r\netag: \"686f29ab-1261b\"\r\nexpires: Fri, 30 Oct 2026 13:03:57 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 980502\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":75291,"size_decoded":75711,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 500x281, components 3","md5":"ddeb31c993f04508c1adbd5f2fd89824","sha1":"466f59b789d81b4db2446f6b571a81047160988e","sha256":"87fe1ee933eabcad7f6832eec068bfa8ddec614e3c3a42f606856419267dc115","sha512":"6167f98fb2e1c20829204b57505d5fcc2501b6ca3698eaf554d62f11a0cc0b618c356656709c72ff57454ffa07833ba411b459b05a63feb94872bacb3fdc0d7a","ssdeep":"1536:zAGVNB11v8BaZuvzTxTqRuN78NXrnUPu4k0ZH1iezYdrqwn:b1vkfxTQ5rnUPu4k0ZH1zgH","tlshash":"6e7301d934fac7cd7e5709b746fc2c0196c468006512851ef9b2bd9ee70cfda2a1668c","first_seen":"2025-07-31T16:43:41.492691Z","last_seen":"2026-10-11T21:28:40.045777Z","times_seen":170,"resource_available":false,"data":null}},"time_used":1055,"timings":{"blocked":115,"dns":0,"connect":0,"send":0,"wait":588,"receive":352,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filmesporno.xxx/wp-content/uploads/2022/03/jovencita-omegle.jpg","fqdn":"filmesporno.xxx","domain":"filmesporno.xxx","tld":"xxx"},"ip":{"addr":"31.43.191.59","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.238Z","timestamp":1791753938238,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filmesporno.xxx","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 01:11:27 GMT","end":"Wed, 11 Nov 2026 01:11:26 GMT"},"fingerprint":{"sha1":"EE:76:F8:FD:B8:BF:B8:FA:57:BE:B1:62:EE:93:FE:50:17:17:9C:63","sha256":"8B:EE:DF:7C:73:8D:75:65:97:04:1A:05:72:CD:DD:12:D6:9D:F9:B3:BB:FF:97:E5:6F:D0:AA:8E:52:6C:39:D8"}}},"request":{"raw":"GET /wp-content/uploads/2022/03/jovencita-omegle.jpg HTTP/1.1\r\nHost: filmesporno.xxx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 10 Mar 2022 22:55:55 GMT\r\netag: W/\"622a81fb-4175\"\r\nversion: MS26072801\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000;\r\nx-served-by: Mini-CDN-offshore\r\nx-cache-status: HIT\r\nx-cache-bypass: 0\r\ncache-control: public, max-age=2592000, immutable, stale-while-revalidate=60, stale-if-error=3600\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16757,"size_decoded":16519,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 600x337, components 3","md5":"17f0028fc6a018d2e2200d67e65e7cd7","sha1":"a06bcf8b4f329a910d42b2752307f8a2db89c0f6","sha256":"9f60383c5caa79291342a32d186f9ae1df749f7cae8146583cba3e917aa9283f","sha512":"e6568f0dc69e02d254f541907b32e8f0bf0d2f05a0b13e2de321e6206ad61096f749c9e2e0a77038307de42892baf57886fb10d1a21a82046c7cd5c17e68b0d9","ssdeep":"192:7KAUwhrBhnCV5Sg0nREtLsVDxzh/IwXqZ+ZJ7D6eDYLlsuvP1BO1pqwh+wVlTg8Z:77rGkguWq//YhWCBOp8uzut3mpn","tlshash":"46729d0b6d248e63a02debb9ff030a7dab493c1d9586badf04350ec67f75204492d479","first_seen":"2024-08-20T01:50:05.780793Z","last_seen":"2026-10-11T21:28:40.04653Z","times_seen":9,"resource_available":false,"data":null}},"time_used":770,"timings":{"blocked":657,"dns":1,"connect":27,"send":0,"wait":47,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"daimgnai.imgdanaizi12-aaa.com:61129/videos/202601/18/696c88ac8c826bca168a25ed/poster2.jpg","fqdn":"daimgnai.imgdanaizi12-aaa.com","domain":"imgdanaizi12-aaa.com","tld":"com"},"ip":{"addr":"23.140.204.13","port":61129,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.274Z","timestamp":1791753938274,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daimgnai.imgdanaizi12-aaa.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:09:48 GMT","end":"Sun, 06 Dec 2026 09:09:47 GMT"},"fingerprint":{"sha1":"EC:44:F4:7B:24:8C:35:0A:EE:B2:9C:4B:5E:53:22:41:BC:61:A0:07","sha256":"9D:23:AC:73:0A:FF:B3:EB:7B:3B:1B:C3:FC:3F:F3:59:77:EE:BA:30:98:E9:83:AE:58:C8:59:34:D8:1E:9E:8D"}}},"request":{"raw":"GET /videos/202601/18/696c88ac8c826bca168a25ed/poster2.jpg HTTP/1.1\r\nHost: daimgnai.imgdanaizi12-aaa.com:61129\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 48520\r\ncross-origin-opener-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-headers: X-Requested-With, Content-Type\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nlast-modified: Wed, 24 Jun 2026 13:14:53 GMT\r\netag: W/\"bd88-19ef9c4f05c\"\r\nage: 2103636\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48520,"size_decoded":49324,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 600x338, components 3","md5":"4f361cd72eea8fc66b5b59fb811c3f39","sha1":"bbc54efcd498f2a5df21f41ce94b8a4b197bb46d","sha256":"615fa33cc76e66b26db16acabafd9b8f2528439741b300cc9812748e884b3a09","sha512":"cc1a30d9d2eed2124788ea7c4e324c9d52fd463ff4789fceadcaf1442586d465fbd2d47b06112dc4ee9ce585df4eaf7d8e51217a7da1ddda682ff76d23f31a02","ssdeep":"768:x8mpuzjELevgcpEjk67i16r4+R73lH7ZGVQzTnYS5H5p13aP1V9zjEor0jodpBl:BpufEyvgcpCDV7Vb57f3aP5c8RPn","tlshash":"c823f2873ad08294f0a1e0f14603f1b7ba32cdfa136abc1f597d6dd9df416a18686c61","first_seen":"2026-09-27T16:26:31.406217Z","last_seen":"2026-10-11T21:28:40.047266Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1231,"timings":{"blocked":305,"dns":3,"connect":159,"send":0,"wait":317,"receive":132,"ssl":315},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.tphsck.com/upload/vod/20250718-1/f47cfd85bfd07df92028f3f83401d64d.png","fqdn":"img.tphsck.com","domain":"tphsck.com","tld":"com"},"ip":{"addr":"104.21.24.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.532Z","timestamp":1791753938532,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tphsck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 16:01:24 GMT","end":"Wed, 23 Dec 2026 17:00:09 GMT"},"fingerprint":{"sha1":"EF:BC:74:DE:61:1F:DB:93:90:52:A0:17:5F:C5:6E:6F:B9:1C:71:9A","sha256":"D8:4C:12:84:05:60:56:0A:42:AA:62:3D:83:60:19:92:E0:3A:C9:FF:59:EB:2B:78:17:9A:60:7E:38:E5:7E:8D"}}},"request":{"raw":"GET /upload/vod/20250718-1/f47cfd85bfd07df92028f3f83401d64d.png HTTP/1.1\r\nHost: img.tphsck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/png\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\netag: W/\"6879fc87-106af\"\r\nexpires: Fri, 23 Oct 2026 23:50:57 GMT\r\nlast-modified: Mon, 27 Jul 2026 22:54:04 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, disk\r\nage: 1542725\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZymHYCDM9ugO60dN%2BGWyEazLsWcPOwwFgy3DIdr3dxCt6S2KT6xzbs3Cz7iLriuNwQgbzsreute5TnHKtCbrjjhQ1loyOg9pmL6QKYp%2FDgllGRWd0r6%2F6aJkEzDh7yg3FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a490f0463e3735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67247,"size_decoded":66677,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 854x480, components 3","md5":"54856c549c216420380d1c4625c41a53","sha1":"41f11a3a70e5605c7c1ea6ce896fd5a03dbcfe0d","sha256":"622fd5a5886f172b2535a13ff5afbab0e8f5a68ba7352c9a4891c5cf13230d8b","sha512":"6038e924ac9237035e88301e1440be2b60a5855384b87fc8d57490837971c5f1c9d237f1a09a53603d94933dc87a791031face2285da275208bb55d5ed603e0d","ssdeep":"1536:F9iSRVsXwO1V8q0qYw9utrb7osrfVyNA6oK12MI1vIRVF7qy:OSRVKl0qY6ADpy+6lQvoFWy","tlshash":"e36302633419d2224a3ee0a690e05c8c517b428a53fa7f14190efd5db7ecbbb45983f8","first_seen":"2025-11-24T22:22:58.842367Z","last_seen":"2026-10-11T21:28:40.048238Z","times_seen":34,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":141,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.redporn.video/favicon.ico","fqdn":"www.redporn.video","domain":"redporn.video","tld":"video"},"ip":{"addr":"104.21.23.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.639Z","timestamp":1791753943639,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redporn.video","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 07:01:44 GMT","end":"Wed, 02 Dec 2026 08:00:14 GMT"},"fingerprint":{"sha1":"01:CB:18:C9:18:41:EF:67:8C:AE:B4:23:1F:43:C1:94:74:05:27:E9","sha256":"29:EC:98:81:A4:BE:4B:E2:38:43:DE:16:41:CF:4E:11:50:A9:D1:C6:47:F0:A4:BF:75:96:58:E9:02:CE:4A:CE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.redporn.video\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 6476\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aqCvRq3jxYEfhpqmZBpB0A2e9nxbSgjSAcE%2BIPlZs2XMT%2BVtSXjVjj%2BVX6ps5WMR2ZlfP%2BNggDJ9Wo5jFP1ozGhOyOHBeMTbTgARVTYf9sGp%2BHXbyKHYowwpiSpC4rGbKaFwFQ%3D%3D\"}]}\r\nlast-modified: Mon, 19 Jan 2026 20:36:43 GMT\r\netag: \"3c2e-648c3a620f25a-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Sat, 31 Jul 2027 01:42:20 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 6291803\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a490f0640ab28be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":7322,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"4b9acdbb37bca3495205d16b27594d5e","sha1":"5bf1bdd80c1bddcd6ddf88de69875b0a365d8073","sha256":"95af67078ec0542ff45eefaab6b27f6a9af14b4dd54923ff1d0c0c2d9d5326a3","sha512":"c1a6bebcc1b523d2c7a1a4c321cfac3fbd9ac74cf669d6e7f82fa63632c63a4f097535c57d2a646e1fdcebb7787417c0158cebd80f93cc9a53b4fce78496ad8e","ssdeep":"192:27fE7mZA6O0UxIa1OSzj/nxN2ovccHMBNvUckTIn:WJZWZX1HPxN26zHMzI","tlshash":"1862f9d55600aca0c8256a3a4129eb78c45f6ff89460f59168f0bcb737b34d30afd8c6","first_seen":"2024-10-11T08:37:17.703981Z","last_seen":"2026-10-11T21:28:40.052655Z","times_seen":8,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filmesporno.xxx/wp-content/uploads/2021/08/sexo1-novinha-e5-homem.jpg","fqdn":"filmesporno.xxx","domain":"filmesporno.xxx","tld":"xxx"},"ip":{"addr":"31.43.191.59","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.304Z","timestamp":1791753938304,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filmesporno.xxx","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 01:11:27 GMT","end":"Wed, 11 Nov 2026 01:11:26 GMT"},"fingerprint":{"sha1":"EE:76:F8:FD:B8:BF:B8:FA:57:BE:B1:62:EE:93:FE:50:17:17:9C:63","sha256":"8B:EE:DF:7C:73:8D:75:65:97:04:1A:05:72:CD:DD:12:D6:9D:F9:B3:BB:FF:97:E5:6F:D0:AA:8E:52:6C:39:D8"}}},"request":{"raw":"GET /wp-content/uploads/2021/08/sexo1-novinha-e5-homem.jpg HTTP/1.1\r\nHost: filmesporno.xxx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 20 Aug 2021 03:21:43 GMT\r\netag: W/\"611f1fc7-4a17\"\r\nversion: MS26072801\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncloudflare-cdn-cache-control: public, max-age=120, stale-while-revalidate=60, stale-if-error=3600\r\nstrict-transport-security: max-age=31536000;\r\nx-served-by: Mini-CDN-offshore\r\nx-cache-status: HIT\r\nx-cache-bypass: 0\r\ncache-control: public, max-age=2592000, immutable, stale-while-revalidate=60, stale-if-error=3600\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18967,"size_decoded":19088,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 600x337, components 3","md5":"ec57efed333faaa7f5daaa2f349f0b3f","sha1":"b26a371f0e3f42fe48312dc55b87eb9f10622853","sha256":"072df0fe0519350207c0a4d48204aa0d6f389bb6155aef0984ed6d143dfd61eb","sha512":"f0691f2934d743b44cd1149d10e4a003ab8b7e1f07c5f1dff30914dc4bea814bacf75230ef6a4ef3583f9ec9a33855a00baebb5b0a671a17cf98784408872337","ssdeep":"384:7q8zUoT++VR3KynQUQhMcEab119qNL5Ji6wXi4NIXe3O8mmlZMIThc7NwODo1:RUoZ3K+QFhhEi0PWnNIXh8mf6cq","tlshash":"8882d01b6510e604e42e6f783c63003385cc6eb414ac37bfd02b628cb7af8f895824e9","first_seen":"2025-11-23T18:32:40.728799Z","last_seen":"2026-10-11T21:28:40.053437Z","times_seen":7,"resource_available":false,"data":null}},"time_used":728,"timings":{"blocked":627,"dns":2,"connect":19,"send":0,"wait":34,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.jkuntp.com/upload/vod/20241203-1/99b196b0596fe33399ca9ad380ce2570.jpg","fqdn":"www.jkuntp.com","domain":"jkuntp.com","tld":"com"},"ip":{"addr":"156.246.16.44","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.322Z","timestamp":1791753938322,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jkuntp.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Sat, 11 Apr 2026 04:32:20 GMT","end":"Tue, 27 Oct 2026 04:32:19 GMT"},"fingerprint":{"sha1":"CC:A2:E2:EF:B2:98:24:3C:B9:AF:A1:E1:07:87:08:A0:5C:D5:85:C3","sha256":"49:55:1E:17:AA:55:6C:E0:A5:04:4D:42:DA:24:A2:79:1D:25:3F:D2:FD:21:2E:D2:49:35:AE:D0:72:51:AF:AF"}}},"request":{"raw":"GET /upload/vod/20241203-1/99b196b0596fe33399ca9ad380ce2570.jpg HTTP/1.1\r\nHost: www.jkuntp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 11 Oct 2026 21:07:08 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 15744\r\nConnection: keep-alive\r\nLast-Modified: Tue, 03 Dec 2024 08:10:50 GMT\r\nVary: Accept-Encoding\r\nETag: \"674ebd0a-3d80\"\r\nExpires: Tue, 27 Oct 2026 14:54:08 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nCache-Control: max-age=2592000, public, max-age=15768000\r\nCache: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15744,"size_decoded":16184,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 400x225, components 3","md5":"9517b80fe0e52943263034e476530835","sha1":"4058734dba8f0fc4c2dd0dae6f428f4606bda2cd","sha256":"cd2ae1eb60545e4643928fb0c228712267b41fb3b79226c2d720aa476edc6679","sha512":"7cabb43e94552995bf121d018d87599faa2820118ff12d278078a8baa43d1220afc4aef37e2192ec712a8c3bcefe5ffb29179914a9dc3e1c8162e3b823fd3b31","ssdeep":"384:GZKkSnAGjpgdxmKyfkt8ctNKt7HCPE5quumW3HZQuS:GZeAndEzbf7uJuumWXyuS","tlshash":"a262c0eaf33551c39b1752aa446803667f9fe712772430b84d44ce42fab1cf9a12d61b","first_seen":"2026-04-22T17:26:51.472869Z","last_seen":"2026-10-11T21:28:40.054389Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1373,"timings":{"blocked":542,"dns":1,"connect":304,"send":0,"wait":209,"receive":0,"ssl":315},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asiananimalxxx.top/favicon.ico","fqdn":"asiananimalxxx.top","domain":"asiananimalxxx.top","tld":"top"},"ip":{"addr":"172.67.156.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.299Z","timestamp":1791753943299,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asiananimalxxx.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 29 Sep 2026 21:23:49 GMT","end":"Mon, 28 Dec 2026 22:23:46 GMT"},"fingerprint":{"sha1":"04:88:7D:8F:4F:EF:AB:E7:22:62:14:73:29:82:3A:FD:6C:B8:D7:DC","sha256":"68:42:0A:46:A3:77:C2:7A:EB:C1:2F:77:E2:78:C1:1B:D2:BA:B2:FF:C4:FF:1D:B3:B5:81:A2:99:19:E3:45:8E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: asiananimalxxx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: Accept-Encoding\r\npriority: u=5,i\r\nage: 172\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wjlGUFZ%2B4%2F2EpxVrH%2F5ciEiM%2Bp7cSUDcPndS26Thu75YegEAkS6FMOANt46NWPTDbPiAmcMMjlOmEsCTCqNmXtVK1k5whAyitU%2BaKNhO6dOtlb8Pom%2FGbzmAj6TUklSrRtx012g%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a490f061fd6b7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ansuko.net/favicon.ico","fqdn":"ansuko.net","domain":"ansuko.net","tld":"net"},"ip":{"addr":"172.67.138.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.493Z","timestamp":1791753943493,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ansuko.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 03:22:49 GMT","end":"Sun, 27 Dec 2026 04:22:39 GMT"},"fingerprint":{"sha1":"A0:10:86:46:2D:F7:1F:70:5D:3F:18:DA:F2:25:60:B7:95:52:91:51","sha256":"D1:40:2D:15:A1:99:35:EB:08:96:5E:08:6F:BD:B6:49:D2:71:03:06:C7:51:81:B3:9A:B0:AB:A4:2E:3C:B1:20"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ansuko.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UpY%2BzbKSDUS3YylHfBv0Rs34JIZqOUQKEysqctbHn7AWReKSJTX5wnmcxHPyAs93WTmOd4E2z9A2HGuJQ5bx9DORMp7cOMLwBGLuM3iZq8siHSK0I%2FhVaRAu17N%2B\"}]}\r\nlast-modified: Fri, 03 May 2024 11:54:45 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6634d085-1a8ab\"\r\nage: 440\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a490f062d9f32efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108715,"size_decoded":21838,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel","md5":"eccee4a16e8834e4cbcd866ab96a1d0b","sha1":"d69ba2eab2db04fb2840cd053799480af307f5bd","sha256":"7c952c600c0b8fad5538ae1a6be38ec5e4c852a3effdcf1747c26e416439724f","sha512":"91fe4cb92e975ded01e4d5eab9b173a617957a81965250c31ee154a106680e2576725bd3474f8fae70a33ac31d3677f9a4d8218fa0bf5dab6fdac81329a73a7f","ssdeep":"768:R7IG7eRN0CqZHV4BCYPDDcBFkDDf7sYK4BpFlUmL9brAT31:tIGKRN0CqwcyDL+mh/AT31","tlshash":"cfb30c3b7355a540d494f73c8e2ee8a11fabadf39a0140787e6c3f4c8af954219366c6","first_seen":"2024-12-10T06:27:49.11934Z","last_seen":"2026-10-11T21:28:40.056475Z","times_seen":51,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js?1","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:50.679Z","timestamp":1791753950679,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /ajax/libs/jquery/3.3.1/jquery.min.js?1 HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30399\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 09 Oct 2026 17:41:02 GMT\r\nexpires: Sat, 09 Oct 2027 17:41:02 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 186289\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86927,"size_decoded":31363,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-10-11T23:18:22.985666Z","times_seen":147525,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fqjpg3.top/upload/vod/20241123-1/8f09793c852f7b7766d987ab0e0c5db2.jpg","fqdn":"fqjpg3.top","domain":"fqjpg3.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:40.969Z","timestamp":1791753940969,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241123-1/8f09793c852f7b7766d987ab0e0c5db2.jpg HTTP/1.1\r\nHost: fqjpg3.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"fqjpg3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgsiwa.com:5278/cvjpg/HwAx6PMo.png","fqdn":"imgsiwa.com","domain":"imgsiwa.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.246Z","timestamp":1791753938246,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cvjpg/HwAx6PMo.png HTTP/1.1\r\nHost: imgsiwa.com:5278\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20250504-1/7fb7c8364460519229a698eb6c41101d.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"23.140.236.1","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.292Z","timestamp":1791753938292,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbzytp.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 18:35:36 GMT","end":"Fri, 13 Nov 2026 18:35:35 GMT"},"fingerprint":{"sha1":"48:67:53:B8:D9:B0:E4:69:E7:6C:D8:14:FE:A6:61:9A:7E:D7:65:01","sha256":"97:1B:54:8D:56:AC:26:EE:C1:E1:75:88:2C:CC:66:6C:A5:6A:6A:68:EC:1E:AD:83:2A:F7:0D:F1:0D:41:65:1C"}}},"request":{"raw":"GET /upload/vod/20250504-1/7fb7c8364460519229a698eb6c41101d.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 243739\r\nlast-modified: Sun, 04 May 2025 04:32:58 GMT\r\nvary: Accept-Encoding\r\netag: \"6816edfa-3b81b\"\r\nexpires: Tue, 01 Sep 2026 16:47:21 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 6064698\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":243739,"size_decoded":244161,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1039x519, components 3","md5":"9574cb27810662b417c809f2a4cc0311","sha1":"78272d8f15d23d9c8711c2c94226e9e4c3f4cdbd","sha256":"2344de17cb512a107f076e8f5678735c74e9d1f42dd69a571536a39911fb9c46","sha512":"cf49d9ea7205d31d5eb890d9732dc61ffe8d6a8a84193d8131b8b15537eef4ab216157e3fe1fe926c09c918d88696531f40b8658d367196f5cb62332bb9a807d","ssdeep":"6144:xN91p5+pVZVI27IVC3GvdVzE2LHdAjgTpXJvu5Zi:xxG3Eg3d2Lq8pXI5E","tlshash":"b13422d375248f08bf3998d309474949a4f2b59805b76e082bf469bede4df7e490b838","first_seen":"2023-05-21T10:12:10Z","last_seen":"2026-10-11T21:28:40.061344Z","times_seen":135,"resource_available":false,"data":null}},"time_used":1645,"timings":{"blocked":516,"dns":1,"connect":153,"send":0,"wait":648,"receive":2,"ssl":319},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v.qq.com/favicon.ico","fqdn":"v.qq.com","domain":"qq.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:53.270Z","timestamp":1791753953270,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: v.qq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapmove.com/favicon.ico","fqdn":"fapmove.com","domain":"fapmove.com","tld":"com"},"ip":{"addr":"185.73.220.217","port":443,"asn":32338,"as":"HOSTISERVER","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.336Z","timestamp":1791753943336,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: fapmove.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.4us.asia/p.sl1121.top/upload/vod/20251215-1/e19358e430d0bcbf98c874b9d123ed3e.jpg","fqdn":"en.4us.asia","domain":"4us.asia","tld":"asia"},"ip":{"addr":"172.67.207.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.418Z","timestamp":1791753938418,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4us.asia","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 18:49:41 GMT","end":"Fri, 01 Jan 2027 19:49:29 GMT"},"fingerprint":{"sha1":"C1:10:7B:90:5B:3F:81:FA:5F:C0:3E:F6:EC:C4:77:25:41:0C:34:96","sha256":"F9:2F:9D:0F:8C:E3:90:7C:C5:24:11:0C:4F:49:76:C3:FC:28:D6:D0:FE:B3:94:B3:45:5E:36:5D:DA:9C:49:7E"}}},"request":{"raw":"GET /p.sl1121.top/upload/vod/20251215-1/e19358e430d0bcbf98c874b9d123ed3e.jpg HTTP/1.1\r\nHost: en.4us.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bnxN%2Bzr0lB%2FJW%2BHhB02HriOAqaPQ5lpiT0XkDfqx3vZ5%2FJOTL3%2FuNI%2BbWAK0Hkek38vNFIfuRcbh%2FA4kUufD%2FV0Y73JrVBglQSggGR9jBOCRirc%2FvmQ90Z%2Bk28H9Cg%3D%3D\"}]}\r\npriority: u=5,i\r\npdojs-line8: host-en.4us.asia4.194.8.20-myhost-en.4us.asia.96.142.48/p.sl1121.top/upload/vod/20251215-1/e19358e430d0bcbf98c874b9d123ed3e.jpg\r\nphost: en.4us.asia\r\npdojs-line400: notjp-nojp-myhost-en.4us.asia-filteron-\r\npdojs-line1011: notjp-nojp-myhost-en.4us.asia-filteron-/p.sl1121.top/upload/vod/20251215-1/e19358e430d0bcbf98c874b9d123ed3e.jpg\r\nline1340: URI-/p.sl1121.top/upload/vod/20251215-1/e19358e430d0bcbf98c874b9d123ed3e.jpg-myhost-en.4us.asia-filteron-\r\ncache-control: public, max-age=92881\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\nx-proxy-cache-99502: HIT\r\nx-real-forw-ngx: 163.61.75.165-0172.69.246.182-166.153.161.141, 172.69.246.182\r\nxkey-192la: en.4us.asia/p.sl1121.top/upload/vod/20251215-1/e19358e430d0bcbf98c874b9d123ed3e.jpg--en.4us.asia-en.4us.asia-myzone---no\r\nx-proxy-cache-gjp: HIT\r\nxkey-g-jp: en.4us.asia/p.sl1121.top/upload/vod/20251215-1/e19358e430d0bcbf98c874b9d123ed3e.jpg--en.4us.asia--my_zone\r\nage: 3317\r\nlast-modified: Sun, 11 Oct 2026 20:30:21 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a490f0438d355684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6539,"size_decoded":4304,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1341), with CRLF, LF line terminators","md5":"3eb21c04f6374321d1cde676d79a04d2","sha1":"a5a2f82c06d7d6f811fa0a5c426cbeaae93c0ca1","sha256":"ba609f387fcf2e59ead5b488ac09d654effc97cde4b09f4fc59a0ddc797d433e","sha512":"6f9f39aefed48a989904691f72178338a2658ba731a57ce56b34f4a92b34c5c05e3e8bbf737932d5e097cf4996e3d023e2a3b58789eea2aadf69a85a7ee1104b","ssdeep":"192:pz95BTAk5Y1+G5KKkwaYylbFAztF1TMGYn4iyNpuwpQeFJLiCx:pzHbmoPzvGYn4iyNpuwpQxe","tlshash":"efd1876b7908652b23b2908bec733398c03722d796c91dc1f9654c7fb540b99ad232de","first_seen":"2026-10-11T20:34:31.142431Z","last_seen":"2026-10-11T21:28:40.007314Z","times_seen":2,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jsjs.jpg4.quest/index.php?js=av4\u0026advertisement\u0026","fqdn":"jsjs.jpg4.quest","domain":"jpg4.quest","tld":"quest"},"ip":{"addr":"172.67.182.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:50.301Z","timestamp":1791753950301,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jpg4.quest","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 20:54:45 GMT","end":"Sun, 13 Dec 2026 20:54:44 GMT"},"fingerprint":{"sha1":"00:A0:6A:26:D6:7D:EB:14:A8:1C:B7:4E:AC:00:F9:A6:8A:46:48:D0","sha256":"C1:DA:5E:7E:34:95:3D:ED:59:5B:1A:55:5C:B7:10:E7:34:BA:7B:13:88:AF:83:0A:14:EF:BC:AF:AC:65:7C:44"}}},"request":{"raw":"GET /index.php?js=av4\u0026advertisement\u0026 HTTP/1.1\r\nHost: jsjs.jpg4.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 11 Oct 2026 21:25:50 GMT\r\nserver: cloudflare\r\nimghost: 1729614248-h-jsjsjpg4qustmh--NO-rm1726420936/index.php?js=av4\u0026advertisement\u0026\r\n56nloadrate: 0.1771875\r\ncache-control: public, max-age=14400, s-max-age=1800\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kdnYAWowgkvLaeewOILUgkzEVQlfYoQJXpVeIvc3JWJeyf8tsyOMVAU0bFS2lp8MY7o2eCjAdz5JFpCFt1suuQrgs6QlijNAO1tZgfcBvhuadaPt2u%2Fb7zWXEFt48Lm3F74%3D\"}]}\r\ncontent-encoding: zstd\r\npriority: u=2,i=?0\r\ncontent-type: text/html; charset=UTF-8\r\nage: 689\r\nlast-modified: Sun, 11 Oct 2026 21:14:20 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a490f08d595fb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":194959,"size_decoded":48623,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6439), with CRLF line terminators","md5":"6b0037759d7ed4dae5ae5ca50baf4eb4","sha1":"21b5652c8be97f546cad3cceb5d37e5fb00aa1be","sha256":"b960d59ef41396e3c9dcd27dba070a2c0e62a18a69a5d47fa9acb089e3467925","sha512":"2a6304b6e2a52dfe9d108c8a5c2468805d4c2a9057228874110d2f70f7a4f8ba42ea561b456e5269b6ccd55aab3f6f5025281b77ce36abfc414e0a11a3944377","ssdeep":"3072:qhxyQprTgcm7U/RV/rIuvd14EOtsCtJNSI1z8A0djQNi:OxyQpAcm7U/Rquvq98A0djQNi","tlshash":"0114d7f73608502951f302a79a758688f833a02b99816884f91c6d751f78e7f197affc","first_seen":"2026-10-11T21:28:39.814917Z","last_seen":"2026-10-11T21:28:39.814917Z","times_seen":1,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hubetubex.com/favicon.ico","fqdn":"www.hubetubex.com","domain":"hubetubex.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:53.294Z","timestamp":1791753953294,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.hubetubex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jpxjpg5.top/upload/vod/20250814-1/e1b89f5260841ef6c0cddf58e6078fda.png","fqdn":"jpxjpg5.top","domain":"jpxjpg5.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.258Z","timestamp":1791753938258,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /upload/vod/20250814-1/e1b89f5260841ef6c0cddf58e6078fda.png HTTP/1.1\r\nHost: jpxjpg5.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jpxjpg5.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xjimg.cdn-xj.cc/upload/litpic/2025-03-31/1743430181_318.jpg","fqdn":"xjimg.cdn-xj.cc","domain":"cdn-xj.cc","tld":"cc"},"ip":{"addr":"138.199.37.232","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.430Z","timestamp":1791753938430,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xjimg.cdn-xj.cc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 10:02:56 GMT","end":"Mon, 28 Dec 2026 10:02:55 GMT"},"fingerprint":{"sha1":"C3:2B:25:ED:DB:3A:48:72:23:2D:AC:39:4B:2B:A2:3B:9D:31:0F:B7","sha256":"28:D4:8A:0A:FA:01:6B:06:FC:A8:31:EC:49:6D:F7:BF:AB:BD:50:EC:46:35:ED:9C:56:94:33:68:58:92:20:F7"}}},"request":{"raw":"GET /upload/litpic/2025-03-31/1743430181_318.jpg HTTP/1.1\r\nHost: xjimg.cdn-xj.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 44127\r\nserver: BunnyCDN-DE1-874\r\ncdn-pullzone: 5480810\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"daf2a5586107a25f48c487757a27c497\"\r\nlast-modified: Mon, 12 Jan 2026 13:35:44 GMT\r\nx-amz-id-2: 0x+gnUI6Kd26tLZ1UBFAVf6kn1J12GI2blCTuGtFGwtfvoWt2SeBZd+6qFFrrDtS1CSDyh2jwh7l\r\nx-amz-meta-mtime: 1743430181.192188366\r\nx-amz-request-id: B7BCEAC161B2FF7F:A\r\nx-wasabi-cm-reference-id: 1778144733 R104-U21.prod16.svy1 370021895:3567362:37\r\ncdn-proxyver: 1.58\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1047\r\ncdn-cachedat: 07/20/2026 12:08:41\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: f900daae30eb949e6df1d7c513c0dc58\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":44127,"size_decoded":45289,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 390x260, components 3","md5":"daf2a5586107a25f48c487757a27c497","sha1":"c1bd7c30cabb9e93658f445ee043b38caafb5a49","sha256":"87ebad663d98c2087ed82e71eed27086daa65bbda646aa7a92aacfcceaf8dd08","sha512":"0ddd45140c4bed698881cafe28f1bd5df4ca3b22f7f1be227751db88c14a0aa2be6b76470aafcfcf6f008d210a7d76cb8d06c5edf8c41ea27145ebb6097fbe7c","ssdeep":"768:Rp8/921p5Ou/WenEgsIEMWLA5PXdkmpDh4hhSkldxufa/Y09Aq/RASzhtUlaf0zF:Rpw921HXWeE87kmpDhgokldNf9Aq/RhY","tlshash":"53130265fa4234165e9d3cf708cae6e98d4446e2cfacfb124ac34c9d9894ac71368364","first_seen":"2026-09-10T01:12:54.776659Z","last_seen":"2026-10-11T21:28:40.062273Z","times_seen":11,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":475,"dns":0,"connect":0,"send":0,"wait":75,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"xjimg.cdn-xj.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"un.shayu260522.top/upload/vod/20210420-1/0f69e3fd66c66a9b8a3cfab8195e100d.jpg","fqdn":"un.shayu260522.top","domain":"shayu260522.top","tld":"top"},"ip":{"addr":"104.21.46.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.596Z","timestamp":1791753938596,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shayu260522.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:02:43 GMT","end":"Wed, 16 Dec 2026 11:02:42 GMT"},"fingerprint":{"sha1":"AB:C8:D3:7B:74:05:74:F6:3F:B4:7B:53:12:47:F6:07:9A:58:00:96","sha256":"86:F3:D8:BA:7E:03:2C:AF:B6:88:27:9C:FC:EB:6C:36:E0:9A:DE:85:65:49:4A:28:0D:1A:6F:E1:56:5E:45:3A"}}},"request":{"raw":"GET /upload/vod/20210420-1/0f69e3fd66c66a9b8a3cfab8195e100d.jpg HTTP/1.1\r\nHost: un.shayu260522.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9881\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\netag: \"69f32aff-2699\"\r\nexpires: Tue, 03 Nov 2026 19:31:32 GMT\r\nlast-modified: Fri, 04 Sep 2026 15:34:24 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\nage: 608216\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=USwwsMccn1FwHxTfs5ryRt%2FycyKUk1%2B55kekwj8De7mwI9XzLE6fd6YsEJLuWCL3PnfPKzlhkD9o9a2pAn%2FUt%2Bi5v%2BH6uGgJD7LTUn%2FWk2gcGKbpw%2FpDZcOBb%2FwJz4J5q%2FKphIE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a490f044aa6fb515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9881,"size_decoded":10646,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 320x240, components 3","md5":"fff93f2f8a5b918ac6bd7fe98b4e72c7","sha1":"22f444b53ab4af6db13312b11c2dbd58a304bc6c","sha256":"074808b4bf0c7a53bef7d5d03804b6eeed97606bd43732a67ffef741472c7d6f","sha512":"f8d608e3a1a9cdb4bd0987afadcbeaedc6ed8ecdbf03509cf159e910d76c6dce32ab0f1fc593ca86169035fb8d81a5773e278cbce7a8c54a4cebb7be526a9d73","ssdeep":"192:1EGXPSu10284TnmnenhmT5W0N4jCgS8GESEaqQ30irgUqbQVl+xMWfgSfiMgpwp0:1D/x9mnehE5WmkCgBGf30irfqbkl+xMr","tlshash":"c9129e9de93682a1c5a16d3dd029dc2b4b37fadec364863b84d9c2002519c8b4a726bd","first_seen":"2026-09-27T16:26:31.399511Z","last_seen":"2026-10-11T21:28:40.063623Z","times_seen":5,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"un.shayu260522.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.jkuntubrwjbe.com/upload/vod/20260406-19/3eb3ff8c64695a1056171fdca8636465.jpg","fqdn":"www.jkuntubrwjbe.com","domain":"jkuntubrwjbe.com","tld":"com"},"ip":{"addr":"64.112.76.43","port":443,"asn":6939,"as":"HURRICANE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.516Z","timestamp":1791753938516,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jkuntubrwjbe.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Sun, 02 Aug 2026 13:15:18 GMT","end":"Wed, 17 Feb 2027 13:15:17 GMT"},"fingerprint":{"sha1":"04:01:E8:9E:2B:62:5D:FE:0B:A9:53:D4:1F:E6:51:63:AB:C3:7D:D1","sha256":"4B:12:CA:BD:90:23:E5:0F:E8:4C:08:32:E1:DD:A0:12:78:9A:3B:AA:8E:9E:A8:7B:AD:F8:B1:73:52:4F:80:A9"}}},"request":{"raw":"GET /upload/vod/20260406-19/3eb3ff8c64695a1056171fdca8636465.jpg HTTP/1.1\r\nHost: www.jkuntubrwjbe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 11 Oct 2026 21:25:39 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 8285\r\nConnection: keep-alive\r\nLast-Modified: Mon, 06 Apr 2026 02:08:51 GMT\r\nVary: Accept-Encoding\r\nETag: \"69d315b3-205d\"\r\nExpires: Mon, 02 Nov 2026 05:41:39 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nCache-Control: max-age=2592000, public, max-age=15768000\r\nCache: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8285,"size_decoded":8724,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 320x427, segment length 16, comment: \"Lavc61.3.100\", baseline, precision 8, 240x320, components 3","md5":"ded71b223e2dea5d59b0226aa54c9fa1","sha1":"97936d9ebd03c16160d899f8de1c72af1bb917cc","sha256":"9656d7dafda0288c486e8b5e8d8dea7d67a49a9ad04517a522fa33a8485c245b","sha512":"5f6d151ce233e86f56d29f2ee77ce84b7488c89d252c3a1e36559aba9d8eadc1963fc7720d8086fa81b532facd403b201202a1a2a8930345187e462b8fa0cdb7","ssdeep":"192:zdHDNKh72m6MLn3XrIRbRjb0PjLatmo1jMitw4oZ+Nrr+:5HhKR3Ln3Qlb0PjLatTw0s","tlshash":"e402bfaf043a386efbf4523a49df05d806a67589039092fcb8936636bac45b748c094d","first_seen":"2026-09-27T16:26:31.312218Z","last_seen":"2026-10-11T21:28:40.06467Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1384,"timings":{"blocked":863,"dns":1,"connect":164,"send":0,"wait":179,"receive":0,"ssl":169},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"www.jkuntubrwjbe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xlecx.one/favicon.ico","fqdn":"xlecx.one","domain":"xlecx.one","tld":"one"},"ip":{"addr":"104.21.25.175","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.297Z","timestamp":1791753943297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xlecx.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 10:36:44 GMT","end":"Fri, 20 Nov 2026 11:36:26 GMT"},"fingerprint":{"sha1":"A2:58:87:B9:23:F3:8D:3B:C7:9D:FE:5C:37:C8:80:8A:F3:98:85:82","sha256":"52:F3:0E:03:16:09:A1:D2:A4:C6:6D:33:DA:44:72:B7:A9:D5:74:38:5A:3A:0E:01:13:EA:DD:4A:DA:E7:B3:4E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xlecx.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p5lQsvd%2FbHzhob8JYPoQsbtD7i7XToJy1rS%2FWKipzuGiEMi%2FUDxvNLEp6WqWPHjEVjlRFqSyXilsUaxSNAM5SN6enSd%2BDWVhE4TllVKCEykLV8NbdxjHRtXfhsQ%3D\"}]}\r\nlast-modified: Sat, 08 Mar 2025 14:04:20 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"67cc4e64-47e\"\r\nage: 3538\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a490f061f9b9723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":1250,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"70b19e09920177e519e113d91fa0352f","sha1":"66f83f6a868a9a88142098eb14381165070377ad","sha256":"50ee42ee80aa5e88de14f7d29d1f2511f4bbf5c057e669b39c4f57bbec1960e3","sha512":"f55fdb1f0164f5e920037f88243dc32ebc1c715f91e5e2b97f90181c1a55b8fd68f9a9998fe4809d2de1936ea3d5c4896313d2c109a21c1304e689500edbeffd","ssdeep":"","tlshash":"2f216b996506f938d8b93232cb46d8ff011def8ee40a822364917d73f4f61cb8825304","first_seen":"2026-09-27T16:26:31.430698Z","last_seen":"2026-10-11T21:28:40.066567Z","times_seen":3,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":4,"connect":42,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xgx.mobi/favicon.ico","fqdn":"xgx.mobi","domain":"xgx.mobi","tld":"mobi"},"ip":{"addr":"104.21.25.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.642Z","timestamp":1791753943642,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xgx.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 21:39:05 GMT","end":"Thu, 17 Dec 2026 22:36:49 GMT"},"fingerprint":{"sha1":"47:2F:EC:B8:7F:B3:D3:83:E5:74:22:D5:2F:C8:AD:E8:9F:49:68:B6","sha256":"24:F2:39:71:52:BA:02:B2:41:C9:89:B8:30:18:2B:45:D6:BF:1A:EC:15:7D:56:19:BC:01:29:64:99:EB:AD:3D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xgx.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 10 Nov 2026 21:25:43 GMT\r\nx-response-time: 0.002094\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3zmDelJ3YZn1fN6j3I7sWr9FFvdQMJ1BBG2lBdiZH9WkjhhGZYROXePJoUZbTo1Y6c7dmcNTZUwI9mknHrGCKxvgSNbHxeqYnhwstHbH1FLzBG7XROJFFo8YxQ%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a490f0640acc35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1540,"size_decoded":2157,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32 with PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"63eae9f2c7b578b20cf79aaaf2c4db13","sha1":"00e35ada8e3919fd315b99c4d7a3cbf13ce4c479","sha256":"f8091a3c37c07606c1bb288476b2cc9361980687b6bb7f46a162bbcb3be06201","sha512":"0906453099ee77646b156ba42486b474b6ba81d850d8818de257d74c3279d4e473883f1250d27850181d6a4e3e581d48e04ce072002dd66573c66aa8db894791","ssdeep":"","tlshash":"8f310a55860748f1c6d615943b6d20fccf3b24dc0a6329067812e788edcc92257f838a","first_seen":"2026-06-28T02:20:32.811361Z","last_seen":"2026-10-11T21:28:40.068434Z","times_seen":13,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/ext/pre_8935386530.jpg","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"141.227.152.51","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.275Z","timestamp":1791753938275,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 07:52:05 GMT","end":"Sat, 28 Nov 2026 07:52:04 GMT"},"fingerprint":{"sha1":"C4:4F:9D:C9:09:9D:31:30:C3:4F:AE:A0:F3:18:7E:88:BF:F8:C7:B7","sha256":"81:05:CD:81:08:79:7C:F7:1F:83:1B:B5:4E:5C:E4:F8:F7:31:1C:F5:F7:00:A5:82:73:35:B8:D4:AB:52:95:7F"}}},"request":{"raw":"GET /ext/pre_8935386530.jpg HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8726\r\nlast-modified: Wed, 12 Jun 2024 16:49:28 GMT\r\netag: \"6669d198-2216\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8726,"size_decoded":9097,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"66e84031d117b1d0a203463139de3702","sha1":"9971143204532ea7e0aae16040ade8212cbd977e","sha256":"9d9d1d58d909e7c76cbf21ef26ef72ab980d23c1b0743d49519f81aca4608fe8","sha512":"8ab99e36734e5e89b3d248bf8c35ad35e5fcd2e959c784f1687da4268e2c530743c48d7c6428b660ce8fafe8438e326c6a5dcfa332a6a837d2e5ed9bb55e3313","ssdeep":"192:ONX769WmTpmVOyp6778/bYVF4IJSaDXyJ37MM4+hENT:ONr2Lpmcyp6778EzTyJ3i+hEV","tlshash":"8f02ae543300ab53fb0f147a514086a67f2c2f43d68a412e49743bb75b3d0512eae4b9","first_seen":"2026-10-11T20:34:30.671838Z","last_seen":"2026-10-11T21:28:40.069781Z","times_seen":2,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":194,"dns":5,"connect":0,"send":0,"wait":122,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"un.shayu260522.top/papaduanpian-img/avid5a018c157401e.jpg","fqdn":"un.shayu260522.top","domain":"shayu260522.top","tld":"top"},"ip":{"addr":"104.21.46.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.313Z","timestamp":1791753938313,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shayu260522.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 11:02:43 GMT","end":"Wed, 16 Dec 2026 11:02:42 GMT"},"fingerprint":{"sha1":"AB:C8:D3:7B:74:05:74:F6:3F:B4:7B:53:12:47:F6:07:9A:58:00:96","sha256":"86:F3:D8:BA:7E:03:2C:AF:B6:88:27:9C:FC:EB:6C:36:E0:9A:DE:85:65:49:4A:28:0D:1A:6F:E1:56:5E:45:3A"}}},"request":{"raw":"GET /papaduanpian-img/avid5a018c157401e.jpg HTTP/1.1\r\nHost: un.shayu260522.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14041\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\netag: \"69f32ae4-36d9\"\r\nexpires: Tue, 03 Nov 2026 11:24:49 GMT\r\nlast-modified: Thu, 30 Apr 2026 10:11:48 GMT\r\nserver: cloudflare\r\nx-cache: BYPASS, write file cache failed: over disk size, current: 14380696129536, capacity: 14380706431385\r\nage: 583813\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yfD%2FFjJZfAU8z2jBvHa8ZOJf8GQ2RascizLV%2Fb8owfaWy%2F7wNxKIOeI7ohJBSX9TkY4KYnwq6cR5YHPUCR7DMwm6tGiQKTkcjvJjVEcJBqeZWPAHmfnSzI%2F1fgYuUXy3qKIO%2BSU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a490f043e9a3b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14041,"size_decoded":14880,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 388x576, components 3","md5":"66e6f1347ce2e6f4748ef4eeca3f7910","sha1":"1e8ee9375af8f488c5081a6a990475aae229c00c","sha256":"88f656d20932cd7f01384b11c7500f6ed1d64fdd5a9c72966f5fc2aec046ba7d","sha512":"192cc4b74078c54e2da65e45c9b3a76521a38647c9fa10788435aa352b3415a4ef1656352f4c11f5dfd7189bd8e20edc3cf049af13ceabe9ad0c41fb32147a6c","ssdeep":"384:FE1q+Yc0fkc67rTcOMmvdhRUJ0XyygpP7FZvZ5Hk:OQxBq3cGvd4aoBU","tlshash":"9252d17e9df655cd5c3f16fbb10650e9599a14cc70e32049b7a7a23bdc0036228adc76","first_seen":"2026-10-11T20:34:31.384885Z","last_seen":"2026-10-11T21:28:40.072453Z","times_seen":2,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":173,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"un.shayu260522.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mtd4u.com/favicon.ico","fqdn":"mtd4u.com","domain":"mtd4u.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.326Z","timestamp":1791753943326,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: mtd4u.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.jxjav.com/favicon.ico","fqdn":"www.jxjav.com","domain":"jxjav.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.528Z","timestamp":1791753943528,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.jxjav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fh260908.top/upload/vod/2024/02/lf4xpzsqtaj.jpg","fqdn":"fh260908.top","domain":"fh260908.top","tld":"top"},"ip":{"addr":"172.67.184.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.255Z","timestamp":1791753938255,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fh260908.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 02:07:25 GMT","end":"Mon, 07 Dec 2026 03:06:10 GMT"},"fingerprint":{"sha1":"C0:C9:EB:B9:D6:37:65:FD:91:6C:FD:04:07:FD:A3:47:FF:2A:2D:F4","sha256":"4A:E9:AB:F3:80:83:BD:68:54:B0:41:FA:39:A9:86:68:E9:AA:A0:D0:EB:59:5D:C9:4C:03:EA:EA:A9:70:1C:B9"}}},"request":{"raw":"GET /upload/vod/2024/02/lf4xpzsqtaj.jpg HTTP/1.1\r\nHost: fh260908.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\netag: W/\"66dfe519-27cb\"\r\nexpires: Tue, 27 Oct 2026 17:07:10 GMT\r\nlast-modified: Tue, 10 Sep 2024 06:20:09 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: BYPASS, ChunkedEncoding\r\nage: 1225107\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZTBldKnrpE5scwm02T1sB55b7jnLawL4LHDxmxpKdzfvuRmQRf7OOq16VJAhTnGYEMeg%2BAE%2B13IzHEuZ%2Ff3TR6Zq8LQU%2FZ6fbYyZhxAGP053QmbZ0hggdDRR2I5Wqvk%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a490f043cbed5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10187,"size_decoded":10996,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: \"Lavc57.89.100\", baseline, precision 8, 320x240, components 3","md5":"0988fc713990aa85bc9836f4a0c8d1cd","sha1":"a3f27c9fb2fc2b931a63bb9e49ebe6054155a6ad","sha256":"2d512a929aece48941ce37c6a4a07584142f5ac1114a9929be94b5779bb21c38","sha512":"33775812a81f2f8cd00cb34f398c400b1eb9f465a377c102d91271022a6555da3a11a9226ee9297acdcc5c3e86293d065961663b6ee8ebd194939e699d90b068","ssdeep":"192:RUAhwVpggWqPPX8buCAk749U2yqkTvwkTtQvnvNdADqd9RiOhU9HQo:Rpw6qX8d7KuNYtRA9HZ","tlshash":"5822b09b2769c401cfdd8fb1d111152deb1b93d597020147a0a29fbe6e6435b3dcb909","first_seen":"2026-10-11T21:28:40.074265Z","last_seen":"2026-10-11T21:28:40.074265Z","times_seen":1,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":18,"dns":13,"connect":111,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"fh260908.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/ext/pre_5370606755.jpg","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"141.227.152.51","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.480Z","timestamp":1791753938480,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 07:52:05 GMT","end":"Sat, 28 Nov 2026 07:52:04 GMT"},"fingerprint":{"sha1":"C4:4F:9D:C9:09:9D:31:30:C3:4F:AE:A0:F3:18:7E:88:BF:F8:C7:B7","sha256":"81:05:CD:81:08:79:7C:F7:1F:83:1B:B5:4E:5C:E4:F8:F7:31:1C:F5:F7:00:A5:82:73:35:B8:D4:AB:52:95:7F"}}},"request":{"raw":"GET /ext/pre_5370606755.jpg HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6551\r\nlast-modified: Fri, 14 Jun 2024 01:34:12 GMT\r\netag: \"666b9e14-1997\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6551,"size_decoded":6922,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"7fedae671337ff74e41e5a9255e87eed","sha1":"3064ee2fc01c17b05edf3e028b6aba99270223a3","sha256":"ab3618ac56b77bb6cf3a2a422f1d5c8bc4b2a7b24b6048064b41a11900680900","sha512":"515da9be232f8c027289075e4d149a63756ddd05422a0af9c32999ef339bd1170ea18df45c0ba784cbd82a175b5f1ffab68a2413058bb341cee9ddf469cb2106","ssdeep":"192:GFEP4bsKOjjsYT5oTkA0XKG8ok7OdhTTpe/:UbwPsYTGTkoY4/","tlshash":"fdd1aefeed540715daed25381afca217e3795a43b1b5068b36608d08a72dc7c8eec1c8","first_seen":"2024-12-06T08:18:00.309598Z","last_seen":"2026-10-11T21:28:40.078334Z","times_seen":10,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jsjs.jpg4.quest/index.php?js=very","fqdn":"jsjs.jpg4.quest","domain":"jpg4.quest","tld":"quest"},"ip":{"addr":"172.67.182.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:50.298Z","timestamp":1791753950298,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jpg4.quest","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 20:54:45 GMT","end":"Sun, 13 Dec 2026 20:54:44 GMT"},"fingerprint":{"sha1":"00:A0:6A:26:D6:7D:EB:14:A8:1C:B7:4E:AC:00:F9:A6:8A:46:48:D0","sha256":"C1:DA:5E:7E:34:95:3D:ED:59:5B:1A:55:5C:B7:10:E7:34:BA:7B:13:88:AF:83:0A:14:EF:BC:AF:AC:65:7C:44"}}},"request":{"raw":"GET /index.php?js=very HTTP/1.1\r\nHost: jsjs.jpg4.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 11 Oct 2026 21:25:50 GMT\r\nserver: cloudflare\r\nimghost: 1729614248-h-jsjsjpg4qustmh--NO-rm16215822272/index.php?js=very\r\n56nloadrate: 0.1859375\r\ncache-control: max-age=360000, private\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Hw7r16M4eCi%2FjK4dsoQ2eKz8Ao0IZSJHdagYTeIhC8ix5aJGvmWuNS%2B0%2B%2Bs8%2BUeEoGUtlHZpwK34Af2udwYcX%2BuiZazT8eU6kZOPzYVpmq8QO5yzCt0mB8aC5VWUDbdW08%3D\"}]}\r\ncontent-encoding: zstd\r\npriority: u=2,i=?0\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: BYPASS\r\ncf-ray: a490f08d595eb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87,"size_decoded":916,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"b233f841a00264f453c84a0133d40b73","sha1":"113b10d80e4239e059e0664e6a65c585d9d6f0a9","sha256":"5fc97199ad041b9b414b04b05ac5da6a028a0d38ab23e2e3df651fad33e484b8","sha512":"e9ed36b3674f82b79936412f2b94d85ea669a0e3ec1a55ab482cdc0c3430952cad6d6907d9379c7bbd50be8bd1b60ea6bcf47060bf1c1f386bda8055df015df3","ssdeep":"","tlshash":"66b01200f025cc3d7088152840d0485502c9b2c801c20f024780272648266c6a102070","first_seen":"2025-12-21T09:21:39.060054Z","last_seen":"2026-10-11T21:28:40.079287Z","times_seen":88,"resource_available":true,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fixedjs.av4me.xyz/av4usimage.png","fqdn":"fixedjs.av4me.xyz","domain":"av4me.xyz","tld":"xyz"},"ip":{"addr":"104.21.58.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:50.306Z","timestamp":1791753950306,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"av4me.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 14:10:35 GMT","end":"Wed, 25 Nov 2026 15:09:07 GMT"},"fingerprint":{"sha1":"19:B5:26:DD:47:83:AE:CD:BF:38:3A:53:2C:07:50:35:84:1C:D1:87","sha256":"F1:E1:7B:BB:79:FC:5B:67:DB:D2:43:34:0C:54:E4:2D:C0:2B:71:F7:F5:07:64:5A:D8:8F:E9:62:86:15:A7:6E"}}},"request":{"raw":"GET /av4usimage.png HTTP/1.1\r\nHost: fixedjs.av4me.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 11 Oct 2026 21:25:50 GMT\r\nserver: cloudflare\r\netag: \"a3b-6437702003080\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\ncache-control: public, max-age=360000\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n8LkVLof8KyEczHlgCSv6VTMxFegWJSjZ0AUzslNuQBpxEq0orDiN7fGT8izmitOjW%2B6xmA6%2FgcfMWMSOtmDUpEJrsC6ET7HLNPCfey%2BfckZmNx9iJeBQqdtCC79fToRStQyBw%3D%3D\"}]}\r\ncontent-type: image/png\r\nage: 171619\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a490f08d6e12712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2619,"size_decoded":3360,"mime_type":"image/png","magic":"PNG image data, 339 x 89, 8-bit/color RGB, non-interlaced","md5":"8267aaadeeeb8c9fa7482f2f9db2d4e3","sha1":"a2ef23d3b5f9d9bb3102c855a8ace072884ba60c","sha256":"998cf9d427c2e322904e89a056ba823b56078fb199b7395883f3eafabaadbea8","sha512":"719215d8ec70b8b36b24277a80e7876be2fa1afe3698c05bbff013b6a2936701f266e694c221756e7306d1a945013986a53e41af0bc90bdd4bbf0dcbe33f7637","ssdeep":"","tlshash":"f5513ccb05b2fdbc657d79976105a79ef3a896c72982b872565c38c14243a0096c1fe1","first_seen":"2025-11-13T21:07:01.541567Z","last_seen":"2026-10-11T21:28:39.817214Z","times_seen":455,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/hls.js/latest/hls.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:50.763Z","timestamp":1791753950763,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /hls.js/latest/hls.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.porn100.tv/thumbs/797/3721068341_0.jpg","fqdn":"www.porn100.tv","domain":"porn100.tv","tld":"tv"},"ip":{"addr":"104.21.37.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.444Z","timestamp":1791753938444,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /thumbs/797/3721068341_0.jpg HTTP/1.1\r\nHost: www.porn100.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nvary: referer\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uO3frnjQdBQR4PLx5i5uR0cU1098El8yfWOGzmwkhYaPDmGa%2BL%2FhS7ZW5pnc87Pm%2FZ40jQySXobAq6v8WUFpsfY%2F%2BSMQ%2FOhWDbpwp1QN2skvieoP%2FxsNkADNrIkMMH39yw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a490f044bf6d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/favicon.ico","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"141.227.152.51","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:44.029Z","timestamp":1791753944029,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 07:52:05 GMT","end":"Sat, 28 Nov 2026 07:52:04 GMT"},"fingerprint":{"sha1":"C4:4F:9D:C9:09:9D:31:30:C3:4F:AE:A0:F3:18:7E:88:BF:F8:C7:B7","sha256":"81:05:CD:81:08:79:7C:F7:1F:83:1B:B5:4E:5C:E4:F8:F7:31:1C:F5:F7:00:A5:82:73:35:B8:D4:AB:52:95:7F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://en.4us.asia/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:44 GMT\r\ncontent-length: 1406\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 11 Oct 2026 10:29:15 GMT\r\netag: W/\"1406-1791714555000\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1406,"size_decoded":2029,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel","md5":"8851a1b28ebe567b927c9ae6600a8fc6","sha1":"113da6a02dff45d4b9c0d3c9ae531445a8c7b687","sha256":"b545a5091485f5dd485f0e9d2abcd55a06b22f9359c6da8955b8da7b1d3c9212","sha512":"f438008028a354d1600c8af6a136e3991dcbaa188759f20c22a6c76a3170390c14578561d886272741f029f6f161b3711afb959385bbf49166ccf170e3edf95d","ssdeep":"","tlshash":"2121e1213397e353db451ef532244b944243d32906f79b9411e80685aa4f3301fbc373","first_seen":"2025-05-02T17:12:40.010154Z","last_seen":"2026-10-11T21:28:39.887263Z","times_seen":697,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googlemar.com/favicon.ico","fqdn":"googlemar.com","domain":"googlemar.com","tld":"com"},"ip":{"addr":"172.67.181.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:53.273Z","timestamp":1791753953273,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googlemar.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 23:03:35 GMT","end":"Thu, 10 Dec 2026 23:03:34 GMT"},"fingerprint":{"sha1":"4A:1C:3B:88:A5:F3:08:39:14:69:F9:F7:19:37:1E:B5:C3:EC:80:5C","sha256":"C7:B1:BD:E2:0A:D1:F2:42:7B:51:BD:73:4B:30:F3:E4:CF:89:DA:BA:92:38:51:5C:F6:D6:D7:DA:B4:6B:EE:CB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: googlemar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:53 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jw46aHfOXNHnr8XHVkH1VkxKp%2BAYWPY4mXPJiqpkIGcEptKRmTBXzo5aDh4G9hJoRhb7ofyOVvwi3AehgbII6PApqkkY3GFyaUlbl%2FxdYz6YX2xLQv6Ur94E5uaoyiSO\"}]}\r\nlast-modified: Thu, 09 Apr 2026 08:06:38 GMT\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 22 Aug 2027 20:53:46 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=3600\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"69d75e0e-4276\"\r\nage: 4321967\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a490f0a01da656b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17014,"size_decoded":9328,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"cd6cd8f7d9af7267bf6b188d541291b4","sha1":"406bcab4e44f55cddba8f659d8be17c556d46d8a","sha256":"e47f1cd1409c2fc5dc18c4542b12d4e3777fe41137af62c112f059023e580a3e","sha512":"b5bab1c768b4e771c4981f75cd88ad8537828fb8ae988a7326099c81ed2979b502b577ae45e433b1ce647609bdbb14539a22f774cde6f3c645dd0f1f6b60dc02","ssdeep":"192:V/FSmX97q/jQYWDtwxt8ajnLm7JL28gBl9ffMephqQ/Uln813Y:twLQ1Dtwn61ilN/phj/o8m","tlshash":"82724c662aedf949c7860e3557a2612942b9cfe30c2d1b4bde6279e8be35fc43d81140","first_seen":"2026-04-16T16:55:58.986504Z","last_seen":"2026-10-11T21:28:39.798443Z","times_seen":60,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xgx.mobi/preview/mother-and-son-ibcest.jpg","fqdn":"xgx.mobi","domain":"xgx.mobi","tld":"mobi"},"ip":{"addr":"104.21.25.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.537Z","timestamp":1791753938537,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xgx.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 21:39:05 GMT","end":"Thu, 17 Dec 2026 22:36:49 GMT"},"fingerprint":{"sha1":"47:2F:EC:B8:7F:B3:D3:83:E5:74:22:D5:2F:C8:AD:E8:9F:49:68:B6","sha256":"24:F2:39:71:52:BA:02:B2:41:C9:89:B8:30:18:2B:45:D6:BF:1A:EC:15:7D:56:19:BC:01:29:64:99:EB:AD:3D"}}},"request":{"raw":"GET /preview/mother-and-son-ibcest.jpg HTTP/1.1\r\nHost: xgx.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 30522\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 17 Oct 2026 10:12:35 GMT\r\nlast-modified: Sat, 28 Sep 2024 22:30:18 GMT\r\nx-response-time: 0.101701\r\nx-status: 0.000 HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yEH9A8rzGpZIPjopvvWlvSVjDbV2VnQoZy6YtibydUjsF%2BFHSb0UsjAWyG3XPIp1C0jevyb9RQNA7W%2FO3aiuaWUmV3zNG8dk548G2X40Ws6GEUaK1rin0%2FnbYQ%3D%3D\"}]}\r\ncf-ray: a490f0452a9835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30522,"size_decoded":31200,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"\"Mother And Son Ibcest\" saved from https://xgx.mobi\", baseline, precision 8, 564x317, components 3","md5":"82fa09d047c4cbd10631c82583be200a","sha1":"d1880e1c3ce501c85a1b452d8787517f290514ba","sha256":"d025eed4b2cc8c700c9b0d295a1a4d36cef1b15dbbc4c6bc5341885d4389949d","sha512":"d2c0871385baee8abf929fb3f003ffdf5484cac587d69c5283b605ded6259f5129ce610daea27e32cf0dca6899fad284b359e9b90d4b8769c7a80063284d30ca","ssdeep":"768:hPn7vnWPicSu03/8vePXNLOBsFOeabC/TUnogJY9KmAhm:hz9R8vgXpOaF6C/Iog88hm","tlshash":"92d2f184da21fc419fd659e5fb6add6cc75afa134313089eec94ae55793dc413000ee8","first_seen":"2025-09-16T14:18:17.065917Z","last_seen":"2026-10-11T21:28:40.080151Z","times_seen":11,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":7,"connect":13,"send":0,"wait":70,"receive":22,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"erota2.com/favicon.png","fqdn":"erota2.com","domain":"erota2.com","tld":"com"},"ip":{"addr":"104.26.5.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:53.443Z","timestamp":1791753953443,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"erota2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 08:05:35 GMT","end":"Sun, 15 Nov 2026 09:04:14 GMT"},"fingerprint":{"sha1":"8E:96:41:B2:60:47:EA:62:72:BF:A3:CC:B7:DC:5E:DE:C8:D3:31:08","sha256":"62:77:7A:A4:FD:B9:89:77:1B:DC:34:D3:D8:B7:33:1E:58:46:17:A4:FB:CB:B5:BF:4D:7B:00:77:48:57:D0:E7"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: erota2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 23 Jul 2024 10:36:28 GMT\r\netag: \"669f87ac-3907\"\r\nvary: accept-encoding\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\nage: 5276\r\ncache-control: max-age=691200\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gTMokElfyjFGvWNUsdoDZFx00S1e%2BzW83xYYM7ZfBTttVFVYoOwAPfh1lM0VmuD05mxqZ8ngnszwi9zODXRlkIXEYzQGtq7iTqLcDqcEKIfeNxukQI4hIsYXMIcV\"}]}\r\ncf-ray: a490f0a10b994c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14599\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14599,"size_decoded":15308,"mime_type":"image/png","magic":"PNG image data, 94 x 94, 8-bit colormap, non-interlaced","md5":"dec1a54b40f045fc2cb93094434fbf7f","sha1":"2a858a3a48d9576af9fb62f87a1e715599f23945","sha256":"9b5f95ac6282ffd8ded6605a9d52752d1640c9e75bcc4587a497e8db76164684","sha512":"461e80b7c61fd10867fb938fc7d50b1738cd8fd60a2cbd0127dded857f03baaaa5ff8f462e63b89c7089e15ec59d51ab11565bb0442e03df66ad0dea01d6f8f1","ssdeep":"384:4KnlrfUmJEVosgQnM1z7JzOgjIfKYyjx7GXD:4K9UmEVosvnWog8YGT","tlshash":"0f62ae49bf8664c2526cac3015ed600e1f574a5356c01ce9feeecf9a8f60be25599cc2","first_seen":"2026-08-05T05:55:10.285114Z","last_seen":"2026-10-11T21:28:40.084476Z","times_seen":8,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jsjs.jpg4.quest/index.php?js=very","fqdn":"jsjs.jpg4.quest","domain":"jpg4.quest","tld":"quest"},"ip":{"addr":"172.67.182.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.144Z","timestamp":1791753938144,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jpg4.quest","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 20:54:45 GMT","end":"Sun, 13 Dec 2026 20:54:44 GMT"},"fingerprint":{"sha1":"00:A0:6A:26:D6:7D:EB:14:A8:1C:B7:4E:AC:00:F9:A6:8A:46:48:D0","sha256":"C1:DA:5E:7E:34:95:3D:ED:59:5B:1A:55:5C:B7:10:E7:34:BA:7B:13:88:AF:83:0A:14:EF:BC:AF:AC:65:7C:44"}}},"request":{"raw":"GET /index.php?js=very HTTP/1.1\r\nHost: jsjs.jpg4.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\nserver: cloudflare\r\nimghost: 1729614248-h-jsjsjpg4qustmh--NO-rm16215822272/index.php?js=very\r\n56nloadrate: 0.176875\r\ncache-control: max-age=360000, private\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zv163hIe6tOeHl3aLGAkR5DIbkjCf7lV3qbTUvttejw3DWakNg7IUOMisTz%2F81usqKoo8at2ITtyuYw6GX8n9gRgnjNEEamgs0U409MlLXfgako%2Fs5brkyCQ%2Fac1NprVUFE%3D\"}]}\r\ncontent-encoding: zstd\r\npriority: u=2,i=?0\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: BYPASS\r\ncf-ray: a490f04199c5b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87,"size_decoded":909,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"b233f841a00264f453c84a0133d40b73","sha1":"113b10d80e4239e059e0664e6a65c585d9d6f0a9","sha256":"5fc97199ad041b9b414b04b05ac5da6a028a0d38ab23e2e3df651fad33e484b8","sha512":"e9ed36b3674f82b79936412f2b94d85ea669a0e3ec1a55ab482cdc0c3430952cad6d6907d9379c7bbd50be8bd1b60ea6bcf47060bf1c1f386bda8055df015df3","ssdeep":"","tlshash":"66b01200f025cc3d7088152840d0485502c9b2c801c20f024780272648266c6a102070","first_seen":"2025-12-21T09:21:39.060054Z","last_seen":"2026-10-11T21:28:40.079287Z","times_seen":88,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":9,"connect":23,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/ext/pre_9320246655.jpg","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"141.227.152.51","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.257Z","timestamp":1791753938257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 07:52:05 GMT","end":"Sat, 28 Nov 2026 07:52:04 GMT"},"fingerprint":{"sha1":"C4:4F:9D:C9:09:9D:31:30:C3:4F:AE:A0:F3:18:7E:88:BF:F8:C7:B7","sha256":"81:05:CD:81:08:79:7C:F7:1F:83:1B:B5:4E:5C:E4:F8:F7:31:1C:F5:F7:00:A5:82:73:35:B8:D4:AB:52:95:7F"}}},"request":{"raw":"GET /ext/pre_9320246655.jpg HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12017\r\nlast-modified: Wed, 12 Jun 2024 04:34:12 GMT\r\netag: \"66692544-2ef1\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12017,"size_decoded":12389,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"95f4a5aed77fbea82ae0e9879435f90e","sha1":"ee8dba62a88479a715ef79162ae21631db0ca6ea","sha256":"374e3be459e8a89234a14df3754e4abcc6338a0faf0c8a124cdb81eb3a980545","sha512":"10c135e6217b731f75f48d175b2582cff4454670fdb1c0d9744efb51f2f06f0adb1d7228143033db7f90191e010e6aa678aa6c395302d284e845509900306ae0","ssdeep":"192:l055ul7IAjRQVR/LE1awVYK6EI9f0myiPDnQnMougClhjA2+ywCjIHYuQ64agDLU:OmuACI1aFVBnyiPjqMoujj/+tOIHYuQ4","tlshash":"1642df229bb94c27ff6f1db1cbf18e41ad72fe011a723c9e9c53229557c45827a6009b","first_seen":"2025-06-02T14:12:54.974043Z","last_seen":"2026-10-11T21:28:40.086191Z","times_seen":3,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":302,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"media.porkytube.com/thumbs/5/a/3/7/1/5a370e9f757012%20boys%20fuck%20on%20couch%20%20GayBoysTube.mp4/5a370e9f757012%20boys%20fuck%20on%20couch%20%20GayBoysTube.mp4-7.jpg","fqdn":"media.porkytube.com","domain":"porkytube.com","tld":"com"},"ip":{"addr":"172.67.193.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.433Z","timestamp":1791753938433,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"porkytube.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 12:13:53 GMT","end":"Wed, 02 Dec 2026 13:13:27 GMT"},"fingerprint":{"sha1":"F6:E4:85:58:DB:7D:22:59:BB:59:E1:0D:1E:74:E9:4A:61:B2:6E:9D","sha256":"02:A3:10:63:8A:10:68:9D:58:0C:07:6D:6A:24:A7:E6:C7:65:A0:25:E6:DC:A6:D9:39:94:77:A7:63:64:A2:75"}}},"request":{"raw":"GET /thumbs/5/a/3/7/1/5a370e9f757012%20boys%20fuck%20on%20couch%20%20GayBoysTube.mp4/5a370e9f757012%20boys%20fuck%20on%20couch%20%20GayBoysTube.mp4-7.jpg HTTP/1.1\r\nHost: media.porkytube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 66470\r\nserver: cloudflare\r\nlast-modified: Wed, 09 Sep 2026 06:03:49 GMT\r\netag: \"103a6-65b069d762e99\"\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Mon, 11 Oct 2027 10:25:59 GMT\r\nvary: User-Agent\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oVIjfZtkNzB6XgG44UwYI%2B8rfA1Px8uxtXt2JzKJ6aJPmU8wm5GSMhVC3lUy5eljrjDBqv8bDY7v0TXIWSeGQgHRSuw9C1fnrAbrlTz%2Ftb0qPU275glPwyUDOxOgOtZA2yE6SU3Z\"}]}\r\nage: 39579\r\ncf-cache-status: HIT\r\ncf-ray: a490f04498ba56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66470,"size_decoded":67216,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=8], baseline, precision 8, 637x394, components 3","md5":"40c2e8337c884d23d8e5492bbf968fac","sha1":"09a1128d19a004f097827c580d91e1e250d9471a","sha256":"c1c4f4d0ea8671ad153265d76d2b50d01440dfa6e90a47d312d7c2d07d0a159b","sha512":"d7d99ae6e8ef5253d89ff758585fbe8c4086880f51b3cd019c9147df559836227d02e2d9a497e6bb4294d1317de23aa294d9708f44006d9f4aed12b2459c2730","ssdeep":"1536:QdL2YbHCMadoQCPNVEqJpSG8FRtGb8fswIh:aaJo5eqJ0pGb89Ih","tlshash":"2153f12447797aa9ebb596b5a4f10b0eb0b84507d200de0978dc66d32f06ff30e6760a","first_seen":"2024-05-16T01:10:47Z","last_seen":"2026-10-11T21:28:40.092149Z","times_seen":29,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":5,"dns":13,"connect":15,"send":0,"wait":49,"receive":12,"ssl":65},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"media.porkytube.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filmesporno.xxx/wp-content/uploads/2021/05/teen-novinha.jpg","fqdn":"filmesporno.xxx","domain":"filmesporno.xxx","tld":"xxx"},"ip":{"addr":"31.43.191.59","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.500Z","timestamp":1791753938500,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filmesporno.xxx","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 01:11:27 GMT","end":"Wed, 11 Nov 2026 01:11:26 GMT"},"fingerprint":{"sha1":"EE:76:F8:FD:B8:BF:B8:FA:57:BE:B1:62:EE:93:FE:50:17:17:9C:63","sha256":"8B:EE:DF:7C:73:8D:75:65:97:04:1A:05:72:CD:DD:12:D6:9D:F9:B3:BB:FF:97:E5:6F:D0:AA:8E:52:6C:39:D8"}}},"request":{"raw":"GET /wp-content/uploads/2021/05/teen-novinha.jpg HTTP/1.1\r\nHost: filmesporno.xxx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 14 May 2021 12:27:53 GMT\r\netag: W/\"609e6cc9-ee48\"\r\nversion: MS26072801\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000;\r\nx-served-by: Mini-CDN-offshore\r\nx-cache-status: HIT\r\nx-cache-bypass: 0\r\ncache-control: public, max-age=2592000, immutable, stale-while-revalidate=60, stale-if-error=3600\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61000,"size_decoded":61414,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1280x720, components 3","md5":"e7d739b256fa9fff10fe44354f1ab360","sha1":"a68a3ef59ebd6f935af904a17cf5371d5ccdfafd","sha256":"57620e3e8e6385092194c36836cc54203eb947f0db647dd2af65253af1ab004a","sha512":"b6a0a159a334ca8d135871314e1b4ba480dde2c2ba4553f68666135b4310aa71fda4935e94141347a100b1825b11c70e7cf2162e9e2f246023d69a8ac00f9b12","ssdeep":"1536:TNRaj8ER1XzVMt+ulFDrqkZZLK2hnXsedVleqZsxyKR3kAiv:wh1XxMFlFD5ZukcuxZnI3tiv","tlshash":"3453011d8a08db1e2f5e03778a51a7f54948822850c556fbbb4adef83388297c6f72d4","first_seen":"2025-03-12T03:12:27.450116Z","last_seen":"2026-10-11T21:28:40.093617Z","times_seen":18,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":372,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"page.phic4.top/myda.php","fqdn":"page.phic4.top","domain":"phic4.top","tld":"top"},"ip":{"addr":"172.239.194.103","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:41.036Z","timestamp":1791753941036,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /myda.php HTTP/1.1\r\nHost: page.phic4.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Sun, 11 Oct 2026 21:25:46 GMT\r\ncontent-type: text/html\r\ncache-control: no-store, max-age=0\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64\r\npermissions-policy: ch-ua=(self \"https://*.parklogic.com\"), ch-ua-arch=(self \"https://*.parklogic.com\"), ch-ua-bitness=(self \"https://*.parklogic.com\"), ch-ua-full-version=(self \"https://*.parklogic.com\"), ch-ua-full-version-list=(self \"https://*.parklogic.com\"), ch-ua-mobile=(self \"https://*.parklogic.com\"), ch-ua-model=(self \"https://*.parklogic.com\"), ch-ua-platform=(self \"https://*.parklogic.com\"), ch-ua-platform-version=(self \"https://*.parklogic.com\"), ch-ua-wow64=(self \"https://*.parklogic.com\")\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allxxxmovieclips.com/favicon.ico","fqdn":"allxxxmovieclips.com","domain":"allxxxmovieclips.com","tld":"com"},"ip":{"addr":"172.67.141.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.350Z","timestamp":1791753943350,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allxxxmovieclips.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 02:54:54 GMT","end":"Tue, 05 Jan 2027 03:52:27 GMT"},"fingerprint":{"sha1":"9A:2F:BB:D1:B4:8C:61:60:F2:C0:3A:97:7C:17:48:69:4C:27:63:61","sha256":"C9:16:B9:48:86:23:A8:8C:DE:A2:E9:6B:EC:40:19:3B:DD:92:C6:16:E9:FF:65:51:B9:8A:E8:53:33:D2:2F:8F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: allxxxmovieclips.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Thu, 09 Apr 2026 08:06:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UH1Mq%2FhJxlsrotX1P6%2BOBExziKXV%2BHdFKM8xdFgmNsyWM1m4lWcH6GKpypDQXyD9dUXpQcPR0rzAsnlZ8nspQqyvWeP7O5wuA3sFqFDaXaW4lx8vxN16dAnv40GdxXmbu%2BA4%2BKy7Bg%3D%3D\"}]}\r\nexpires: Sat, 04 Sep 2027 08:21:52 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=3600\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"69d75e0e-4276\"\r\nage: 3243886\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a490f062ab19b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17014,"size_decoded":9328,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"cd6cd8f7d9af7267bf6b188d541291b4","sha1":"406bcab4e44f55cddba8f659d8be17c556d46d8a","sha256":"e47f1cd1409c2fc5dc18c4542b12d4e3777fe41137af62c112f059023e580a3e","sha512":"b5bab1c768b4e771c4981f75cd88ad8537828fb8ae988a7326099c81ed2979b502b577ae45e433b1ce647609bdbb14539a22f774cde6f3c645dd0f1f6b60dc02","ssdeep":"192:V/FSmX97q/jQYWDtwxt8ajnLm7JL28gBl9ffMephqQ/Uln813Y:twLQ1Dtwn61ilN/phj/o8m","tlshash":"82724c662aedf949c7860e3557a2612942b9cfe30c2d1b4bde6279e8be35fc43d81140","first_seen":"2026-04-16T16:55:58.986504Z","last_seen":"2026-10-11T21:28:39.798443Z","times_seen":60,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":5,"send":0,"wait":40,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"abfrkjesk.com/20230425/dTAIySAy/1.jpg","fqdn":"abfrkjesk.com","domain":"abfrkjesk.com","tld":"com"},"ip":{"addr":"64.112.78.42","port":443,"asn":6939,"as":"HURRICANE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.413Z","timestamp":1791753938413,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atukjhesk.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Sat, 06 Dec 2025 20:15:08 GMT","end":"Tue, 05 Jan 2027 20:15:07 GMT"},"fingerprint":{"sha1":"E8:0C:C5:B3:2C:3B:92:95:9B:11:CB:30:AC:87:4F:41:A9:93:A7:B2","sha256":"AD:47:45:73:AA:EF:59:08:4F:30:1D:71:77:84:B7:62:4C:F8:4C:8A:0E:77:D7:1A:8A:11:9F:30:C4:68:F2:17"}}},"request":{"raw":"GET /20230425/dTAIySAy/1.jpg HTTP/1.1\r\nHost: abfrkjesk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5617\r\nlast-modified: Tue, 25 Apr 2023 09:46:35 GMT\r\netag: \"6447a17b-15f1\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: public, max-age=15768000\r\ncache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5617,"size_decoded":5968,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 240x320, components 3","md5":"09003eb049b18d294c9f61b17e898b7b","sha1":"47f655b2fb037d1ad0030f3daf624d44ab91d3d1","sha256":"0e9d84a408795c3f818e118994061ff27332480d96e4db8557a97200a5f3b4ce","sha512":"ccf2c327e1e99e686074fc864672f3a6bc317254f70ba927d88571f3f0d94fd4559e2974741f4e81f57dc2b75124a65fba3b5e0ab66d1f35a6d2bd2e5f28339a","ssdeep":"96:FmZzEiMxidCMUmLXgJ/6jQHp7MW7sfutU2a3YWwbxK3izWy9xIDWj8:FcVCMUFJiYp7MKwunBRVKyzWOwo8","tlshash":"d2c19e629f4dc23ad20bc1f464920715c5af61ee7dc67d9a36e5c3fb06a089028d1ee3","first_seen":"2026-10-11T09:53:13.492616Z","last_seen":"2026-10-11T21:28:40.096989Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1119,"timings":{"blocked":475,"dns":1,"connect":146,"send":0,"wait":171,"receive":0,"ssl":323},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"domain.expiring-soon.xyz/contents/videos_screenshots/33000/33663/preview.jpg","fqdn":"domain.expiring-soon.xyz","domain":"expiring-soon.xyz","tld":"xyz"},"ip":{"addr":"103.224.182.213","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.462Z","timestamp":1791753938462,"http_version":"HTTP/1","security_state":"","security_info":null,"request":{"raw":"GET /contents/videos_screenshots/33000/33663/preview.jpg HTTP/1.1\r\nHost: domain.expiring-soon.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.0 403 Forbidden\r\ncache-control: no-cache\r\ncontent-type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amateuranimalporn.art/tmbs/20/437_ideal-a-cunnilingus.jpg","fqdn":"amateuranimalporn.art","domain":"amateuranimalporn.art","tld":"art"},"ip":{"addr":"104.21.58.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.507Z","timestamp":1791753938507,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateuranimalporn.art","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 25 Sep 2026 14:48:53 GMT","end":"Thu, 24 Dec 2026 15:48:42 GMT"},"fingerprint":{"sha1":"B1:AA:4D:58:E1:63:F4:A8:7A:DE:D5:FC:35:AF:9D:64:D8:7F:E1:E5","sha256":"5C:07:A6:F6:C5:80:38:41:EB:D2:9C:CA:FF:A4:7F:31:CF:42:C6:9C:F7:0C:EC:56:F2:C7:58:27:99:D2:0E:7C"}}},"request":{"raw":"GET /tmbs/20/437_ideal-a-cunnilingus.jpg HTTP/1.1\r\nHost: amateuranimalporn.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14364\r\nserver: cloudflare\r\nlast-modified: Tue, 11 May 2021 21:35:57 GMT\r\netag: \"609af8bd-381c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-request-id: 069baccb46e0296677419d212fb4da95\r\naccept-ranges: bytes\r\nage: 5598689\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3sKm09sYegukZezGONJLWL4X1gz%2Fspt6bF54m2iYOIpAj4TQbCCl%2FQJJcun8iv64tCO1YR5rtKBv0yLZVRB4nG%2FMsDjfVOSHaKgp1qtBMgQZdDSO3s%2FJ3Pa11Lxa%2F6S4HrmujNtz67s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a490f04509d45fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14364,"size_decoded":15149,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 54x72, segment length 16, baseline, precision 8, 320x230, components 3","md5":"e9db74a0d90e548047dd9f70bb5021f8","sha1":"7d22972acc11099e6dd47c885388390d5a544a60","sha256":"e39d10c263f916e8adfbdeddc7632b992d03ea235d818aeb2db8d0d61b3f7fdd","sha512":"fc7865e8ced96aad49aaa4d815708406f52d06e5591e34e975178ac10b0b176ce91a42ca0d38e4f9c0f6aa74ef80113189ffd5592dde3d924db471f816531279","ssdeep":"384:pKDaC0QDu8J9E3RnKl/4Pcmwp+lNYf9hyt+yomy:pUaC0QDuiE3BKd4Pc/+lNic+8y","tlshash":"a752d1e6417d08aaa05f8ef6ef58308c799dd8903961e107714e8a8bcf93da7b51015e","first_seen":"2025-06-15T03:55:56.15015Z","last_seen":"2026-10-11T21:28:40.098439Z","times_seen":17,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":34,"dns":2,"connect":8,"send":0,"wait":12,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.ohsex.pro/movs/711/670_teen-schoolgirls-porn.jpg","fqdn":"images.ohsex.pro","domain":"ohsex.pro","tld":"pro"},"ip":{"addr":"172.67.140.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.518Z","timestamp":1791753938518,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsex.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 11:53:37 GMT","end":"Wed, 02 Dec 2026 12:51:11 GMT"},"fingerprint":{"sha1":"A6:AC:EF:EF:7E:20:3B:C0:A9:1B:FD:FE:F2:44:51:03:13:56:20:32","sha256":"CA:53:61:41:2D:C0:B8:B4:3B:89:E1:82:05:80:64:96:22:61:C8:B9:B0:88:C6:C0:E8:A8:35:75:C4:8A:95:F9"}}},"request":{"raw":"GET /movs/711/670_teen-schoolgirls-porn.jpg HTTP/1.1\r\nHost: images.ohsex.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11281\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Dec 2021 15:53:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"61ae31ef-2c11\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 6428576\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qon78NwKQEGFU6Kd0FPrEDOKrJyVZJ9CqDGU5BN5K8XKo9DOILIemMHMkSA8TPyLbgH%2BJriZnlpzYBsccb%2BLhQLf6DimEmalLL9m%2FiYrP3kEdA4JbbQyKHfiJuxMbJHvJKXI\"}]}\r\ncf-ray: a490f04539775690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11281,"size_decoded":12004,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x185, components 3","md5":"e7e7ab25e0e6a342cc994e46c6d4f50f","sha1":"2e158616b54f03ec0ca66b30fc6ecccec2cabf45","sha256":"46c90012b2271007f7c2a9f219a266a6a10c27c55c7e679ff4fb56fee156e107","sha512":"584b54ecf5001e282c103980b25ec86e1ed47b5a614364ba4a4cc7111f1bf2eb5db8fe5a11daf8aa91a1a531274a1a14dd053142bf5dba26aa0c07f77ab42cfb","ssdeep":"192:MwV41e9/rd1Ado3/P4JwUia8Yb35vfidti3jCZP4q73VHBpc77ihM:tYej1zwJl8YbEdtWjkPx7lHBO8M","tlshash":"8732cf50d644a1626f3ea8320bb1cb1294c12a74cd338af946b1507e77ad71b37f9b5c","first_seen":"2024-12-23T10:50:43.704827Z","last_seen":"2026-10-11T21:28:40.100306Z","times_seen":28,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":65,"dns":3,"connect":17,"send":0,"wait":39,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/favicon.ico","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"151.243.177.124","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.318Z","timestamp":1791753943318,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Oct 2026 23:41:24 GMT","end":"Fri, 08 Jan 2027 23:41:23 GMT"},"fingerprint":{"sha1":"29:D5:87:BD:C8:D5:0B:FF:C9:69:32:61:DE:51:13:C4:2F:10:AB:1D","sha256":"7B:70:32:04:DA:41:B9:78:31:C8:DE:04:94:81:62:66:38:B0:7D:D4:B4:60:88:35:CF:9D:AD:89:6E:BF:1C:0D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":132,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/favicon.ico","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"141.227.152.51","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.334Z","timestamp":1791753943334,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 07:52:05 GMT","end":"Sat, 28 Nov 2026 07:52:04 GMT"},"fingerprint":{"sha1":"C4:4F:9D:C9:09:9D:31:30:C3:4F:AE:A0:F3:18:7E:88:BF:F8:C7:B7","sha256":"81:05:CD:81:08:79:7C:F7:1F:83:1B:B5:4E:5C:E4:F8:F7:31:1C:F5:F7:00:A5:82:73:35:B8:D4:AB:52:95:7F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-length: 1406\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 11 Oct 2026 10:29:15 GMT\r\netag: W/\"1406-1791714555000\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1406,"size_decoded":2029,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel","md5":"8851a1b28ebe567b927c9ae6600a8fc6","sha1":"113da6a02dff45d4b9c0d3c9ae531445a8c7b687","sha256":"b545a5091485f5dd485f0e9d2abcd55a06b22f9359c6da8955b8da7b1d3c9212","sha512":"f438008028a354d1600c8af6a136e3991dcbaa188759f20c22a6c76a3170390c14578561d886272741f029f6f161b3711afb959385bbf49166ccf170e3edf95d","ssdeep":"","tlshash":"2121e1213397e353db451ef532244b944243d32906f79b9411e80685aa4f3301fbc373","first_seen":"2025-05-02T17:12:40.010154Z","last_seen":"2026-10-11T21:28:39.887263Z","times_seen":697,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.xxibaocdn.com/video/m3u8/2026/03/13/e5_9b_bd_e4_ba_a7_e7_9b_b4_e6_92_ad/38983_cover_2026-03-13_002337.jpg","fqdn":"img.xxibaocdn.com","domain":"xxibaocdn.com","tld":"com"},"ip":{"addr":"162.209.190.196","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.271Z","timestamp":1791753938271,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.xxibaocdn.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 15:13:41 GMT","end":"Fri, 25 Dec 2026 15:13:40 GMT"},"fingerprint":{"sha1":"87:96:F8:C7:25:D2:6A:6F:2E:7C:8E:3D:E1:29:5D:1A:8B:AE:B8:8F","sha256":"6F:3D:C6:A4:68:5E:CD:E6:A1:A6:04:B5:67:00:56:EB:EF:03:FB:6F:FF:BA:5C:05:C5:B5:E2:76:B1:96:7C:33"}}},"request":{"raw":"GET /video/m3u8/2026/03/13/e5_9b_bd_e4_ba_a7_e7_9b_b4_e6_92_ad/38983_cover_2026-03-13_002337.jpg HTTP/1.1\r\nHost: img.xxibaocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 12 Mar 2026 17:47:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b2fc1f-e55e\"\r\nexpires: Tue, 10 Nov 2026 21:25:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58718,"size_decoded":59076,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 718x404, components 3","md5":"f57d25e86f1edbb71ba63a241c00bd19","sha1":"25ebe6264b0af2d3ab6bce4210f04a10b09c6bca","sha256":"ee72d5f8ac2681d9fc4cac6bbb7e75bb484a08fa3420ded48155bbaaedd764ac","sha512":"8beb1e5488298cb34e7f13256c24a67bb35648b49926b61413a1aeecccb6195a9a164e5fd920ecd0a95a17fdf59ce244f77ec799b1d3b8aa26e9123ced3f42f0","ssdeep":"1536:NNP/4sqOs/Y8ZStoS8ktoBkc259KsYnlbwgxrd:Dn4sqrY6Cm0KsYnlRxx","tlshash":"714301a1935b91c1cfe937a4e323a04d5ae105b136a35c69c4f17e68bd93cb5f018bd2","first_seen":"2026-07-31T05:54:13.907736Z","last_seen":"2026-10-11T21:28:40.101305Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1402,"timings":{"blocked":480,"dns":0,"connect":162,"send":0,"wait":591,"receive":0,"ssl":167},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg5.com:3519/upload/vod/20260423-1/f7877ae724ed83e2003e88fa05f74e68.jpg","fqdn":"sbzytpimg5.com","domain":"sbzytpimg5.com","tld":"com"},"ip":{"addr":"23.140.236.1","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.410Z","timestamp":1791753938410,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbzytp.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 18:35:36 GMT","end":"Fri, 13 Nov 2026 18:35:35 GMT"},"fingerprint":{"sha1":"48:67:53:B8:D9:B0:E4:69:E7:6C:D8:14:FE:A6:61:9A:7E:D7:65:01","sha256":"97:1B:54:8D:56:AC:26:EE:C1:E1:75:88:2C:CC:66:6C:A5:6A:6A:68:EC:1E:AD:83:2A:F7:0D:F1:0D:41:65:1C"}}},"request":{"raw":"GET /upload/vod/20260423-1/f7877ae724ed83e2003e88fa05f74e68.jpg HTTP/1.1\r\nHost: sbzytpimg5.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 242655\r\nlast-modified: Thu, 23 Apr 2026 04:27:48 GMT\r\nvary: Accept-Encoding\r\netag: \"69e99fc4-3b3df\"\r\nexpires: Wed, 07 Oct 2026 06:20:29 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 2991910\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":242655,"size_decoded":243077,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 718x404, components 3","md5":"3d278242839a47c9c3d8a5ceb3690787","sha1":"248caa8238cba6e61a1b05f7b2d5d61cb1970348","sha256":"115603838fd17ae4cf52414c37ad8ff1ab9270e44284b4c9e854cf917a181476","sha512":"d8950232cd3456d5eba3431ae97e35e0383ddede035ef42e942960b160720f91762e27d150b06e4f3b35b059732ebc01a896eca4673ebcca3535174e0cacdab9","ssdeep":"6144:JefPxg+MP309L8YSjRN7SY526OuE3h8fuuWAL:AnCwL8FN92Nukh8aAL","tlshash":"b23422722d73f70e3a3880168b8080b5f54d07a4a95ff5db5dee538fe0a986e5939d80","first_seen":"2026-08-08T21:47:57.587663Z","last_seen":"2026-10-11T21:28:40.10475Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1516,"timings":{"blocked":-1,"dns":14,"connect":193,"send":0,"wait":488,"receive":458,"ssl":338},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"la.lashayu.com/20240827/fPfQjFQi/1.jpg","fqdn":"la.lashayu.com","domain":"lashayu.com","tld":"com"},"ip":{"addr":"192.198.185.34","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.476Z","timestamp":1791753938476,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"la.lashayu.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 15:25:32 GMT","end":"Mon, 02 Nov 2026 15:25:31 GMT"},"fingerprint":{"sha1":"50:E0:56:F6:93:07:EA:2A:00:86:E7:BE:F7:BE:61:34:19:B6:E4:C1","sha256":"8C:30:C8:B8:74:8D:D9:E5:AE:CB:6A:8D:37:6E:FF:95:B6:F9:82:CB:10:DC:6D:C0:35:A2:C0:91:91:C9:2A:FE"}}},"request":{"raw":"GET /20240827/fPfQjFQi/1.jpg HTTP/1.1\r\nHost: la.lashayu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: : true\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\ncontent-type: image/jpeg\r\ndate: Sun, 11 Oct 2026 11:58:46 GMT\r\netag: \"66cd26ba-1cf7b\"\r\nexpires: Tue, 10 Nov 2026 11:58:46 GMT\r\nlast-modified: Sun, 11 Oct 2026 21:19:46 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, memory\r\ncontent-length: 118651\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":118651,"size_decoded":119079,"mime_type":"image/png","magic":"PNG image data, 718 x 404, 8-bit colormap, non-interlaced","md5":"e66ce20aade8bce8b3e35696481edbbb","sha1":"0649f6627e8f9670416c695aa0576b620cebd3ea","sha256":"e021c69f077e05c8839f95ef76f6d36604085ea1dd906ec95034f0b379fe0465","sha512":"e3a75c7e23dcf14f26a415d81b2f4df16d1c745e9298df7c7a95340c515075059c99f1013864d9646cf5bbad3ff079060d05a6e538e53c48c3eb9dfa0aaa0060","ssdeep":"3072:iFMov6eD6SOesPn4iL9WG0u+HpKSwTC4Z:iFMovQSynwtu+JK5GO","tlshash":"f3c3126f85dcd25db32282c1a96b96e419ba74873754c7ce204652af42091f382f9ffc","first_seen":"2026-06-28T18:40:42.633296Z","last_seen":"2026-10-11T21:28:40.108681Z","times_seen":9,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":5,"connect":31,"send":0,"wait":27,"receive":69,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"domain.expiring-soon.xyz/contents/videos_screenshots/33000/33669/preview.jpg","fqdn":"domain.expiring-soon.xyz","domain":"expiring-soon.xyz","tld":"xyz"},"ip":{"addr":"103.224.182.213","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.478Z","timestamp":1791753938478,"http_version":"HTTP/1","security_state":"","security_info":null,"request":{"raw":"GET /contents/videos_screenshots/33000/33669/preview.jpg HTTP/1.1\r\nHost: domain.expiring-soon.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.0 403 Forbidden\r\ncache-control: no-cache\r\ncontent-type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"da.da15525716.com/20240929/5S70GKl3/1.jpg","fqdn":"da.da15525716.com","domain":"da15525716.com","tld":"com"},"ip":{"addr":"103.224.182.214","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:40.983Z","timestamp":1791753940983,"http_version":"HTTP/1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keywordresearchinc.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 18:07:59 GMT","end":"Thu, 24 Dec 2026 18:07:58 GMT"},"fingerprint":{"sha1":"B2:31:99:32:AF:FD:BB:10:1F:F8:6B:39:F8:7F:8B:C3:0B:54:B8:C8","sha256":"A5:7A:C3:13:7E:D0:8D:64:72:DD:CE:D9:DF:04:28:D3:D1:DB:FF:45:C8:38:DB:93:A0:CA:26:FA:91:16:E4:6C"}}},"request":{"raw":"GET /20240929/5S70GKl3/1.jpg HTTP/1.1\r\nHost: da.da15525716.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.0 403 Forbidden\r\ncache-control: no-cache\r\ncontent-type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"da.da15525716.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fqjpg10.top/upload/vod/20260727-1/b2b11b58412c4c07f30b3cd0d187eaf3.png","fqdn":"fqjpg10.top","domain":"fqjpg10.top","tld":"top"},"ip":{"addr":"23.134.76.191","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.285Z","timestamp":1791753938285,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fqjpg10.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 05:27:48 GMT","end":"Mon, 02 Nov 2026 05:27:47 GMT"},"fingerprint":{"sha1":"CE:28:80:B0:05:19:5C:8B:0B:3B:EC:8F:4D:FB:7C:6A:9C:16:0E:51","sha256":"92:80:CD:0C:A7:99:7A:96:A5:ED:DE:0F:9F:7B:C6:04:F5:36:1A:01:69:60:53:9D:3B:8F:14:E8:BF:FA:4B:29"}}},"request":{"raw":"GET /upload/vod/20260727-1/b2b11b58412c4c07f30b3cd0d187eaf3.png HTTP/1.1\r\nHost: fqjpg10.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 11 Oct 2026 21:25:39 GMT\r\nContent-Type: image/png\r\nContent-Length: 150791\r\nConnection: keep-alive\r\nLast-Modified: Sun, 26 Jul 2026 19:37:40 GMT\r\nETag: \"6a666204-24d07\"\r\nExpires: Sat, 17 Oct 2026 18:43:13 GMT\r\nX-Cache-Status: HIT\r\nCache-Control: max-age=2592000, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":150791,"size_decoded":151146,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 820x462, components 3","md5":"98ae0568a5773cfa24eef27c5a34f188","sha1":"f7d30973e2007bddf13feaf8975ba739eb15b680","sha256":"2e08d73f71a6e596daacd0ec9b803c6e80da3de742dac20e5f89e782803da456","sha512":"9f96497c61dc8c724a457f797893f6a621e0fd8b719f016e496d0225d33377e7963026434503438b61064d0b13af2aefb050286458f0a43609c398c7edc838df","ssdeep":"3072:i2jo1DnrJWe1/NkeBvi0wVjzlHk2fCLW4DUjS5I:i2j+ngy/Nxj6oLWJjS5I","tlshash":"38e3124c33402620b74b67f6ee8a6f5c46dd24666f3a023969fb0d94c66ad503d80e7d","first_seen":"2026-09-27T16:26:31.260703Z","last_seen":"2026-10-11T21:28:40.110676Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1402,"timings":{"blocked":683,"dns":3,"connect":95,"send":0,"wait":127,"receive":293,"ssl":200},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"fqjpg10.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/ext/pre_8182576502.jpg","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"141.227.152.51","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.492Z","timestamp":1791753938492,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 07:52:05 GMT","end":"Sat, 28 Nov 2026 07:52:04 GMT"},"fingerprint":{"sha1":"C4:4F:9D:C9:09:9D:31:30:C3:4F:AE:A0:F3:18:7E:88:BF:F8:C7:B7","sha256":"81:05:CD:81:08:79:7C:F7:1F:83:1B:B5:4E:5C:E4:F8:F7:31:1C:F5:F7:00:A5:82:73:35:B8:D4:AB:52:95:7F"}}},"request":{"raw":"GET /ext/pre_8182576502.jpg HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14723\r\nlast-modified: Wed, 12 Jun 2024 04:07:05 GMT\r\netag: \"66691ee9-3983\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14723,"size_decoded":15095,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 10x11, segment length 16, progressive, precision 8, 300x226, components 3","md5":"076cb99edf34342974d1c0539578e2ef","sha1":"a074afd4515b4ad691c41e2a9290078105630828","sha256":"ae289380eddd866102a8dd8bc7396c6c3f820c16617cedf8b7307cfcc25aaec5","sha512":"b0e6cdd4d7c561aaee70ccbed6ca6477e517bac76f73ac30355f6d22d2d12a5c28fdbd11280b13caabd7da524adb8c1582b2c830df9c6b3c8838b5d93e512b07","ssdeep":"384:v/6rvgZuUDj3aUwGE2ihetpm6DV9I7CmZIU1Zt8PncSU9mq:KrvgZuUDj3jwGE3aEsI7pZTZaPcX8q","tlshash":"7d62c0f33381ee02f0bf2633490623214bbc99259759910f1da6ace0a7bc4fd2916bd5","first_seen":"2026-03-03T14:10:03.977228Z","last_seen":"2026-10-11T21:28:40.112854Z","times_seen":7,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rottweilerchat.com/favicon.ico","fqdn":"rottweilerchat.com","domain":"rottweilerchat.com","tld":"com"},"ip":{"addr":"104.21.31.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.500Z","timestamp":1791753943500,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rottweilerchat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 09:08:39 GMT","end":"Thu, 19 Nov 2026 10:08:34 GMT"},"fingerprint":{"sha1":"9A:3B:48:18:2C:8D:AF:9E:22:9A:BD:A8:17:BC:81:7F:F5:39:54:43","sha256":"C7:8A:91:82:7A:78:A8:8D:E2:7E:AA:6B:FE:D8:86:C7:69:A3:AC:13:1D:1F:C5:0F:03:51:64:EF:CD:3C:2D:73"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rottweilerchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DjzxJx28Cwug7877CdxY%2F9xUlMgIH4iNz0AuApaQgDfWpKSNxcPtRSP0j2HsvFP4%2BNztxFfPCvaAvWVcFDOeTJ8VexXMDkdX%2FeT%2FuEQe0j5iKG28Yfj1ggY0PQij20g2%2BgMaQfU%3D\"}]}\r\nlast-modified: Thu, 25 Jun 2026 19:59:27 GMT\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 27 Jun 2027 05:54:47 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=3600\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"6a3d889f-4276\"\r\nage: 9214308\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a490f063fb8d0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17014,"size_decoded":9344,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"cd6cd8f7d9af7267bf6b188d541291b4","sha1":"406bcab4e44f55cddba8f659d8be17c556d46d8a","sha256":"e47f1cd1409c2fc5dc18c4542b12d4e3777fe41137af62c112f059023e580a3e","sha512":"b5bab1c768b4e771c4981f75cd88ad8537828fb8ae988a7326099c81ed2979b502b577ae45e433b1ce647609bdbb14539a22f774cde6f3c645dd0f1f6b60dc02","ssdeep":"192:V/FSmX97q/jQYWDtwxt8ajnLm7JL28gBl9ffMephqQ/Uln813Y:twLQ1Dtwn61ilN/phj/o8m","tlshash":"82724c662aedf949c7860e3557a2612942b9cfe30c2d1b4bde6279e8be35fc43d81140","first_seen":"2026-04-16T16:55:58.986504Z","last_seen":"2026-10-11T21:28:39.798443Z","times_seen":60,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sexsex10.com/favicon.ico","fqdn":"sexsex10.com","domain":"sexsex10.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:53.272Z","timestamp":1791753953272,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sexsex10.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lb260401.top/upload/vod/20260423-1/bd00c54eb2c4dfb6bdda4996bee06db7.jpg","fqdn":"lb260401.top","domain":"lb260401.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:40.987Z","timestamp":1791753940987,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20260423-1/bd00c54eb2c4dfb6bdda4996bee06db7.jpg HTTP/1.1\r\nHost: lb260401.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"lb260401.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets-jpcust.jwpsrv.com/thumbnails/5jdh8fd8-720.jpg","fqdn":"assets-jpcust.jwpsrv.com","domain":"jwpsrv.com","tld":"com"},"ip":{"addr":"151.101.194.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:49.098Z","timestamp":1791753949098,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R46 DV TLS CA 2026 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 20 Aug 2026 15:05:17 GMT","end":"Sun, 07 Mar 2027 14:05:17 GMT"},"fingerprint":{"sha1":"6D:98:F8:F7:20:0F:23:B5:CD:18:AD:2C:A7:BE:08:87:67:DC:A1:F3","sha256":"EE:31:0C:95:06:35:EF:36:EC:B6:C0:13:BD:FB:D9:6C:75:7B:C0:74:D8:8C:03:44:B9:48:42:9F:26:BB:F9:4A"}}},"request":{"raw":"GET /thumbnails/5jdh8fd8-720.jpg HTTP/1.1\r\nHost: assets-jpcust.jwpsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://en.4us.asia/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sat, 28 Oct 2017 06:36:15 GMT\r\netag: \"f3b4a071901545e669c57389b38c8be2\"\r\naccess-control-allow-headers: accept-encoding, cache-control, origin, dnt, accept-language\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\ncache-control: max-age=900\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\ndate: Sun, 11 Oct 2026 21:25:49 GMT\r\nage: 777\r\nx-served-by: cache-iad-kcgs7200125-IAD, cache-bma-essb1270053-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 33833, 2\r\nx-timer: S1791753949.099276,VS0,VE0\r\nvary: Accept-Encoding\r\nserver: nginx\r\ncontent-length: 45713\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45790,"size_decoded":46346,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.24.102\", baseline, precision 8, 720x406, components 3","md5":"f3b4a071901545e669c57389b38c8be2","sha1":"df65eb35c3a000ea2e61d00971c73ba52fb49ba7","sha256":"97ac5272d8aee08ebd82ad25d464f6918e8e04c05353a7bff0fd9f906c272a16","sha512":"64ea492dbae28ca154913875f894fe53324bd915a7ca4b0f1569a5edecbac869c20715687dde7a82789b8cd92456e02b34ddfd871eceddd6b0a62444204bd079","ssdeep":"768:AGWGFTFxh3c6OyqxUNiUtBQ5Lp0ehyOl5lc0pFyTA5JB9EXJg:AGWUssqeVtsbVzAM5riC","tlshash":"d323f27dd31e166562a33cf3b4b007f72616e50b1c584788cff4ec78994ea89d6b09a1","first_seen":"2024-09-19T21:52:36.922986Z","last_seen":"2026-10-11T21:28:40.113997Z","times_seen":9,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"domain.expiring-soon.xyz/contents/videos_screenshots/33000/33663/preview.jpg","fqdn":"domain.expiring-soon.xyz","domain":"expiring-soon.xyz","tld":"xyz"},"ip":{"addr":"103.224.182.213","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:40.989Z","timestamp":1791753940989,"http_version":"HTTP/1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--kcrx11m.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 23:22:29 GMT","end":"Thu, 10 Dec 2026 23:22:28 GMT"},"fingerprint":{"sha1":"FD:2D:97:14:15:9F:0B:69:C2:0E:F7:E9:35:60:69:3D:D1:94:3B:1D","sha256":"5E:51:6C:A9:6E:AD:79:2B:D2:20:83:37:B8:9A:83:5E:AF:05:48:A7:F1:21:95:31:1E:7D:60:33:42:5C:27:6C"}}},"request":{"raw":"GET /contents/videos_screenshots/33000/33663/preview.jpg HTTP/1.1\r\nHost: domain.expiring-soon.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.0 403 Forbidden\r\ncache-control: no-cache\r\ncontent-type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.twi-videos.net/favicon.ico","fqdn":"www.twi-videos.net","domain":"twi-videos.net","tld":"net"},"ip":{"addr":"104.21.75.202","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.467Z","timestamp":1791753943467,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twi-videos.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 14:22:48 GMT","end":"Tue, 05 Jan 2027 15:21:33 GMT"},"fingerprint":{"sha1":"D0:DE:F6:EE:53:C1:13:F3:3D:D5:75:FF:C9:0A:10:66:EB:4C:6F:A0","sha256":"FC:7F:DA:F2:1E:29:BB:91:72:C1:AD:B5:CC:29:AA:78:71:91:13:CB:7D:DB:AA:56:55:5C:E5:A1:F6:98:54:02"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.twi-videos.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://www.twi-dl.net/favicon.ico\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3aocfTQf%2FB5MfTQSPOzYCCBkI9eYZPvqK%2BmLXiG1zL%2FyVOwf0uclsT8ikhwAV9q7e5%2BdW1apiFhx%2FYxyIb52W%2F6cfaotr0mo%2BxigCHveC7xsjMfHhf6fjL5vdR06Quah63MJvAg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a490f0632c7949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":7,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filmesporno.xxx/favicon.ico","fqdn":"filmesporno.xxx","domain":"filmesporno.xxx","tld":"xxx"},"ip":{"addr":"31.43.191.59","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:53.297Z","timestamp":1791753953297,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filmesporno.xxx","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 01:11:27 GMT","end":"Wed, 11 Nov 2026 01:11:26 GMT"},"fingerprint":{"sha1":"EE:76:F8:FD:B8:BF:B8:FA:57:BE:B1:62:EE:93:FE:50:17:17:9C:63","sha256":"8B:EE:DF:7C:73:8D:75:65:97:04:1A:05:72:CD:DD:12:D6:9D:F9:B3:BB:FF:97:E5:6F:D0:AA:8E:52:6C:39:D8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: filmesporno.xxx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:53 GMT\r\ncontent-type: text/html; charset=utf-8\r\nversion: MS26072801\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncloudflare-cdn-cache-control: no-store\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: br\r\nsurrogate-control: no-store\r\nx-served-by: Mini-CDN-offshore\r\nx-cache-status: HIT\r\nx-cache-bypass: 0\r\ncache-control: no-store, no-cache, must-revalidate, private\r\ncdn-cache-control: no-store\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"css.jpg4.quest/mycss/av4.css?33","fqdn":"css.jpg4.quest","domain":"jpg4.quest","tld":"quest"},"ip":{"addr":"172.67.182.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:40.597Z","timestamp":1791753940597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jpg4.quest","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 20:54:45 GMT","end":"Sun, 13 Dec 2026 20:54:44 GMT"},"fingerprint":{"sha1":"00:A0:6A:26:D6:7D:EB:14:A8:1C:B7:4E:AC:00:F9:A6:8A:46:48:D0","sha256":"C1:DA:5E:7E:34:95:3D:ED:59:5B:1A:55:5C:B7:10:E7:34:BA:7B:13:88:AF:83:0A:14:EF:BC:AF:AC:65:7C:44"}}},"request":{"raw":"GET /mycss/av4.css?33 HTTP/1.1\r\nHost: css.jpg4.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 11 Oct 2026 21:25:40 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"103e-64a9e7eafc2c0\"\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Cake\r\ncache-control: public, max-age=360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aYXou2o5DfgWl86LDKdZs2S2Z5OEyF40k2daL2SUMZa3U4L80%2FY10t5rHD8vMV6KjePWay11sFJ0uO64VpNFRhyPNOKrrPjRLzaiy1Mjwy5i4X7aq3Lv1jQqGdSBuAvfYA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: text/css\r\nage: 352338\r\ncf-cache-status: HIT\r\ncf-ray: a490f050ccfdb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4158,"size_decoded":2208,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"dd56b99e7c72af5788d4266a03316037","sha1":"8697fdaac63bad819857274499128aa50ef83bd1","sha256":"837545e3d48b9ca9f6b9911d45fe5d44402cb4e41a78265f2664232c77da3c9a","sha512":"c0cff2c2d2a8ceed1fa132ec5b0962b83ce69ccb44c7029a9baff08cee014141504f6e085a07527f01beed319d95a13809b8eb79d7bc266f6681cccfb1156765","ssdeep":"96:Uq6qw2a3Alqiqq7rShmo3Nx5AFrQH+42+F2fFB:+eYXih/SMoH5AFkHL2+F2fFB","tlshash":"3b813f729b550141b51b92946f62b79123369013d90bcf79bafa2178cf891ec21e2f4e","first_seen":"2026-02-12T18:09:56.846179Z","last_seen":"2026-10-11T21:28:40.115343Z","times_seen":148,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":12,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.sexsex61.com/favicon.ico","fqdn":"www.sexsex61.com","domain":"sexsex61.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:53.276Z","timestamp":1791753953276,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.sexsex61.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"karsing.com/favicon.ico","fqdn":"karsing.com","domain":"karsing.com","tld":"com"},"ip":{"addr":"172.67.167.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:53.300Z","timestamp":1791753953300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karsing.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 21:31:15 GMT","end":"Sun, 29 Nov 2026 22:31:03 GMT"},"fingerprint":{"sha1":"2E:73:E5:5B:53:8F:F3:0F:92:08:54:96:8F:91:1F:DA:0E:2B:0E:8B","sha256":"FE:1C:6C:24:78:3E:F9:3D:F3:DF:65:78:A6:3F:BE:55:6A:27:1B:36:82:A3:CA:62:B2:01:C2:58:F0:5C:34:59"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: karsing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:53 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=52LTPX%2BXvHVWMCtzu%2Fg0iiT%2BuoMNwaD0v343fcXz%2FPdj623oAewibNj%2BBnSXLuXGBdF7ZSvYf8J8ZvvQ3OiaiAmJo6Iwytv85g6N1DUVqN9MKc1ad4EMg%2Bq5jv379Q%3D%3D\"}]}\r\nlast-modified: Fri, 02 Oct 2026 05:11:59 GMT\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 02 Oct 2027 13:20:00 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=3600\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"6abf3d1f-4276\"\r\nage: 806753\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a490f0a03fcfb515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17014,"size_decoded":9339,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"cd6cd8f7d9af7267bf6b188d541291b4","sha1":"406bcab4e44f55cddba8f659d8be17c556d46d8a","sha256":"e47f1cd1409c2fc5dc18c4542b12d4e3777fe41137af62c112f059023e580a3e","sha512":"b5bab1c768b4e771c4981f75cd88ad8537828fb8ae988a7326099c81ed2979b502b577ae45e433b1ce647609bdbb14539a22f774cde6f3c645dd0f1f6b60dc02","ssdeep":"192:V/FSmX97q/jQYWDtwxt8ajnLm7JL28gBl9ffMephqQ/Uln813Y:twLQ1Dtwn61ilN/phj/o8m","tlshash":"82724c662aedf949c7860e3557a2612942b9cfe30c2d1b4bde6279e8be35fc43d81140","first_seen":"2026-04-16T16:55:58.986504Z","last_seen":"2026-10-11T21:28:39.798443Z","times_seen":60,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"karsing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.lourmel.nl/20240328014.webp","fqdn":"images.lourmel.nl","domain":"lourmel.nl","tld":"nl"},"ip":{"addr":"104.21.10.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.261Z","timestamp":1791753938261,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lourmel.nl","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Oct 2026 04:08:05 GMT","end":"Wed, 06 Jan 2027 05:04:23 GMT"},"fingerprint":{"sha1":"7D:02:05:2F:1E:81:10:B9:E1:F3:03:A0:6D:8D:9C:E0:68:AE:13:45","sha256":"92:A4:08:93:2D:10:58:3A:D2:25:08:63:9D:0A:46:33:C3:57:F4:2B:A4:D4:DA:F2:53:46:BC:8A:08:D8:A7:7C"}}},"request":{"raw":"GET /20240328014.webp HTTP/1.1\r\nHost: images.lourmel.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18406\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8pNa%2FB228d1LWoPUxeQAQXn1uhtKswgyhsRYxFVAiXfaUU%2BT9eYpuwwpFXhaEYr5j3kIP1Bk25lbXuuXwlfJjplxwTf99MyFIiXvADE7LbSWAcj1xrPN9wJUO%2F9yasdy4kYVLw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=63072000\r\nage: 6233548\r\nlast-modified: Fri, 31 Jul 2026 23:57:07 GMT\r\ncache-control: max-age=31536000\r\ncf-ray: a490f04398687127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18406,"size_decoded":19161,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 700x700, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"019be1cd754bad16ad85649ec1e97845","sha1":"47e70899cc2f007bf14c5ad9bbcf0f0814bea580","sha256":"525a72d5d530cfed97322baffc9bc3313151b9039cab68cd86f00d114afe9dba","sha512":"e71b578776a67bca11aefcb728b290d3a5642ea8bb2cbdbfb751d7a5f9c5a0ab413bead49d002fe966a72a97980afdd0d999499bc5c2dd75a75fef08374fc694","ssdeep":"384:xEEzMnURoCveExt4hhPFvxaWdHDbGEkPGkOySMur8r9644hbLs9pMo0J:W7nURt/OLvxH13oGTy748YDbF","tlshash":"c982e12c2de3367751e363efdf33135c80b475d4e99029233025cae985d4ea7a688992","first_seen":"2025-02-12T05:22:47.492037Z","last_seen":"2026-10-11T21:28:40.116264Z","times_seen":48,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":133,"dns":4,"connect":7,"send":0,"wait":24,"receive":0,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fh260908.top/upload/vod/2022/10/32qnv5hbkq5.jpg","fqdn":"fh260908.top","domain":"fh260908.top","tld":"top"},"ip":{"addr":"172.67.184.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.436Z","timestamp":1791753938436,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fh260908.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 02:07:25 GMT","end":"Mon, 07 Dec 2026 03:06:10 GMT"},"fingerprint":{"sha1":"C0:C9:EB:B9:D6:37:65:FD:91:6C:FD:04:07:FD:A3:47:FF:2A:2D:F4","sha256":"4A:E9:AB:F3:80:83:BD:68:54:B0:41:FA:39:A9:86:68:E9:AA:A0:D0:EB:59:5D:C9:4C:03:EA:EA:A9:70:1C:B9"}}},"request":{"raw":"GET /upload/vod/2022/10/32qnv5hbkq5.jpg HTTP/1.1\r\nHost: fh260908.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\netag: W/\"66dfe7a9-1b2d\"\r\nexpires: Thu, 29 Oct 2026 01:54:12 GMT\r\nlast-modified: Tue, 10 Sep 2024 06:31:05 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: BYPASS, ChunkedEncoding\r\nage: 1107086\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2RqDH3nLzM4XjOuZ6bO%2FYEsx%2BBc4VwmvQanDYV4IR%2BYnFa6gUo08jdTBXLM0OUb6OHXm2pYQxbuj%2FJmmQq%2BL1rxQruRNxcfXAQUNkG5thQ9LKQb%2FYzavf0YyWtYQ%2FVw%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a490f043cbee5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6957,"size_decoded":7772,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 3x4, segment length 16, comment: \"Lavc57.89.100\", baseline, precision 8, 240x320, components 3","md5":"739178b4e5c5339c809aded97d63e554","sha1":"166607cadec0a5dcc49f84bf3999fd5f8aeee3f8","sha256":"3c3253d6848329af5dc900dfc0b62675c49bbefa151c261583bedf602309afd3","sha512":"c69ac5fb1d798608682858c90ab96fe1153b443317ebf88c02e16b1783caa28ed40844dc8487da79d225592f49c7714a375020cdad4b1969bb69f49ded5a4828","ssdeep":"192:pTKE+eDlnJcIezV8qhANuZ2WeE7Q6wmtfQ:puUpnJyNAAp7bq","tlshash":"8fe1af2ee0da73d2894c70310fd711da280e8e16aec716262712637240e4ded2ba54aa","first_seen":"2026-10-11T21:28:40.117026Z","last_seen":"2026-10-11T21:28:40.117026Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"fh260908.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fm.fhpicpic.com/upload/vod/20241227-1/a65278972f4a0ff782540e9dc3344f67.jpg","fqdn":"fm.fhpicpic.com","domain":"fhpicpic.com","tld":"com"},"ip":{"addr":"172.67.160.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:40.915Z","timestamp":1791753940915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fhpicpic.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 06:54:33 GMT","end":"Thu, 10 Dec 2026 07:53:03 GMT"},"fingerprint":{"sha1":"7C:78:7A:F1:99:58:57:21:47:0F:58:CC:49:DA:B1:D7:FD:D9:DE:83","sha256":"26:07:ED:15:66:24:21:BD:C3:41:0F:E7:B7:66:0F:48:04:03:E2:28:F4:B2:42:FA:77:50:57:CA:BD:5D:F6:84"}}},"request":{"raw":"GET /upload/vod/20241227-1/a65278972f4a0ff782540e9dc3344f67.jpg HTTP/1.1\r\nHost: fm.fhpicpic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 521 \r\nretry-after: 120\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 11 Oct 2026 21:25:41 GMT\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-ray: a490f052bcb6783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6987\r\n\r\n","headers":null,"cookies":null,"status_code":"521","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjimg.cdn-xj.cc/upload/litpic/2025-03-30/1743312130_505.jpg","fqdn":"xjimg.cdn-xj.cc","domain":"cdn-xj.cc","tld":"cc"},"ip":{"addr":"138.199.37.232","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.298Z","timestamp":1791753938298,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xjimg.cdn-xj.cc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 10:02:56 GMT","end":"Mon, 28 Dec 2026 10:02:55 GMT"},"fingerprint":{"sha1":"C3:2B:25:ED:DB:3A:48:72:23:2D:AC:39:4B:2B:A2:3B:9D:31:0F:B7","sha256":"28:D4:8A:0A:FA:01:6B:06:FC:A8:31:EC:49:6D:F7:BF:AB:BD:50:EC:46:35:ED:9C:56:94:33:68:58:92:20:F7"}}},"request":{"raw":"GET /upload/litpic/2025-03-30/1743312130_505.jpg HTTP/1.1\r\nHost: xjimg.cdn-xj.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 54596\r\nserver: BunnyCDN-DE1-874\r\ncdn-pullzone: 5480810\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"45c6a8ef8bf03dfd1001d6d52a58b7af\"\r\nlast-modified: Mon, 12 Jan 2026 13:18:00 GMT\r\nx-amz-id-2: P4FoQiwCgc3JRJvMc2UZLJhiauS8NV6xTh6FdVknzok8DTfROJsHpL8CPJnOkcKDsVb1kajI3vXB\r\nx-amz-meta-mtime: 1743312130.699556005\r\nx-amz-request-id: 3A0D962217EF7DC5:A\r\nx-wasabi-cm-reference-id: 1778144565 R119-U21.prod16.svy1 365390593:3498533:52\r\ncdn-proxyver: 1.52\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1054\r\ncdn-cachedat: 05/07/2026 09:21:58\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: aedb7bd1e087ee66ae9f7117c141f24b\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":54596,"size_decoded":55758,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 390x260, components 3","md5":"45c6a8ef8bf03dfd1001d6d52a58b7af","sha1":"4c0b7dd3f9f08955baae4f4f8d22921c50744bd3","sha256":"a0e9d7501a17ba3f244f0bd5d251b13f52fb774de630c293e14e731d187db85c","sha512":"38a71bb92c71a3ca651aaa917c2efad8d60b21246090a78f8154958aa799de842db5e71937f885df7dad6b9a7a2829af06101f9643232b9e6d012b9136f29d9f","ssdeep":"1536:RUHQbw36c0TB/2QyVBJvjlqpWErwzPle8m0vj:qHijcM2QylvcpXrmY8F7","tlshash":"653302dfdd1b8fe15585b5b0ac2020787517823e83649339ab978a80afecb850203e9d","first_seen":"2026-09-08T05:20:11.371971Z","last_seen":"2026-10-11T21:28:40.11959Z","times_seen":10,"resource_available":false,"data":null}},"time_used":924,"timings":{"blocked":590,"dns":104,"connect":130,"send":0,"wait":24,"receive":45,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"xjimg.cdn-xj.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.mubicdn.net/images/film/39808/cache-29735-1745490268/image-w1280.jpg","fqdn":"images.mubicdn.net","domain":"mubicdn.net","tld":"net"},"ip":{"addr":"151.101.2.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.540Z","timestamp":1791753938540,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.mubicdn.net","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 24 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8F:6D:FC:34:29:0B:65:D6:55:B0:8C:42:8C:B6:9D:F6:E1:5C:D6:64","sha256":"09:F1:4D:64:AA:66:9C:00:6F:14:D8:76:FA:C5:F5:32:A3:BC:A2:65:26:61:34:58:2F:52:BB:0A:29:D5:CC:3C"}}},"request":{"raw":"GET /images/film/39808/cache-29735-1745490268/image-w1280.jpg HTTP/1.1\r\nHost: images.mubicdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=604800,public\r\ncontent-type: image/webp\r\netag: \"b380f6bf4ac77946cbe43e9a3b3db72943c15e4b\"\r\nserver: nginx\r\nx-frame-options: SAMEORIGIN\r\nx-hiring: Looking for a job? Visit mubi.com/jobs\r\nvia: 1.1 varnish, 1.1 varnish\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\nx-served-by: cache-iad-kcgs7200080-IAD, cache-bma-essb1270064-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 2, 0\r\nvary: Accept\r\nage: 0\r\nstrict-transport-security: max-age=31557600\r\ncontent-length: 88178\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88178,"size_decoded":88807,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"741973558d30a00c9c4d487a42ab2673","sha1":"b380f6bf4ac77946cbe43e9a3b3db72943c15e4b","sha256":"306b36ebfc8dc69c6a60144e95d9fa1348bb1f90d71470c491d89305910c2aae","sha512":"595e29b5d6ff075a400498b1eaa0152572a63dbb47df769de8a9bcc5ace6bb72278ed45534754923efc67f759b1ec051edf97837092d2840df81886067b198e4","ssdeep":"1536:W6DGToht2sJZVOxYpr9ipnLQe/qU/PGeb0f4iJkLMhNYhOGCcgPz9Au:W6DGTqJbZ99WL1/qR6s4iqYSOGZu","tlshash":"388312e1e52e3808417ce3745ac9e97b1a3a37af76404d393bcf8560f19e68d226f152","first_seen":"2025-06-07T18:11:44.780072Z","last_seen":"2026-10-11T21:28:40.120324Z","times_seen":63,"resource_available":false,"data":null}},"time_used":991,"timings":{"blocked":860,"dns":1,"connect":28,"send":0,"wait":17,"receive":15,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lsbzytp.com:3519/upload/vod/20231108-1/0431b97cabf1bfd5357849a2c830e755.jpg","fqdn":"lsbzytp.com","domain":"lsbzytp.com","tld":"com"},"ip":{"addr":"23.140.236.1","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.287Z","timestamp":1791753938287,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbzytp.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 18:35:36 GMT","end":"Fri, 13 Nov 2026 18:35:35 GMT"},"fingerprint":{"sha1":"48:67:53:B8:D9:B0:E4:69:E7:6C:D8:14:FE:A6:61:9A:7E:D7:65:01","sha256":"97:1B:54:8D:56:AC:26:EE:C1:E1:75:88:2C:CC:66:6C:A5:6A:6A:68:EC:1E:AD:83:2A:F7:0D:F1:0D:41:65:1C"}}},"request":{"raw":"GET /upload/vod/20231108-1/0431b97cabf1bfd5357849a2c830e755.jpg HTTP/1.1\r\nHost: lsbzytp.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18749\r\nlast-modified: Wed, 22 Nov 2023 12:50:13 GMT\r\nvary: Accept-Encoding\r\netag: \"655df905-493d\"\r\nexpires: Sat, 31 Oct 2026 05:37:23 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 920896\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18749,"size_decoded":19168,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 400x224, components 3","md5":"9b176588e3912f8e19e8c5f9939753e8","sha1":"8277feb8d53f1664aa335b5949f50621e2ba106f","sha256":"aa4d6704d4ae985972fb25eff4135be8f48c3dca152d288d26d89ada4e2cac38","sha512":"4a410fa0dc4d57014d3b6bfc22622a1182543333dd8ddb919b9e20551147e43926f8739921aa6b8ad60ef4785f35a963682753639a2d2e6973197a4002aa01a3","ssdeep":"384:cybKZI1YOo72Hd6AxcWhFEGWcTHKOcMB5YyalbakxjHDbMhI+3TCE0z1:vKBj1UcWhqGWceLG5Slb5PbOA1","tlshash":"8d82d0def7489bc2f9701b71d4134d5a37c7a464f8819cae7dce3828e4146daaf25201","first_seen":"2023-10-17T01:50:56Z","last_seen":"2026-10-11T21:28:40.12308Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1632,"timings":{"blocked":368,"dns":1,"connect":160,"send":0,"wait":543,"receive":234,"ssl":324},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fqjpg3.top/upload/vod/20241105-1/0f3cde723faa7d797ce0d7090b72386e.jpg","fqdn":"fqjpg3.top","domain":"fqjpg3.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.508Z","timestamp":1791753938508,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20241105-1/0f3cde723faa7d797ce0d7090b72386e.jpg HTTP/1.1\r\nHost: fqjpg3.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"fqjpg3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.getvr.us/favicon.ico","fqdn":"www.getvr.us","domain":"getvr.us","tld":"us"},"ip":{"addr":"104.21.61.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.652Z","timestamp":1791753943652,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvr.us","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:32:46 GMT","end":"Sat, 28 Nov 2026 17:31:25 GMT"},"fingerprint":{"sha1":"E2:7C:73:8D:D2:DA:7D:42:96:F7:C0:8C:32:0A:50:61:85:2F:91:25","sha256":"36:F0:EC:6C:BC:DF:04:4D:74:45:22:E2:85:01:A5:F3:A4:4B:A7:56:8E:39:7A:22:51:11:D8:E2:9E:60:8E:2F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.getvr.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Aug 2023 05:27:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\netag: W/\"64c897b6-ca0\"\r\nexpires: Tue, 10 Nov 2026 21:25:43 GMT\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=boWzrduNkgfFGjauKXAV35dBUqro76a%2F%2B4ARVQlBLp3bdjkCWRlyr4TYeV1Ay3NetZW5BV4FYaboB%2BDt5dpy0EXcfEs4ta7eIRHYDlACM6Mk%2Fb%2FPaas4wv5iMwOEAf8%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a490f06429e30daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3232,"size_decoded":4003,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"26fd56b9e950c06f08a9d6176389284e","sha1":"a466b44f8655382bc77ac5f33cd97f367aeec12e","sha256":"8d444e19097bdc7ab6263469340ea875cdbf1b8c1d2b26f5cf64748354f046df","sha512":"a50a15004f4119db6997461ac4f98e7e015d4ca5f0a966b3f053756665905ff78a20525bcae850bd7f7814bf83206b226a5c05e32dd015a7379f3ecd3bf8ca8a","ssdeep":"","tlshash":"ed615b91132698bacc0ee146ffef92d71431223769244d35aca523b44dc8a4fad99184","first_seen":"2024-02-12T17:59:41Z","last_seen":"2026-10-11T21:28:40.124195Z","times_seen":57,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/original/2X/9/97a460e6b7ca46dcbd401b7ed81c52a30d8944e9.png","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.266Z","timestamp":1791753938266,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /uploads/default/original/2X/9/97a460e6b7ca46dcbd401b7ed81c52a30d8944e9.png HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/2X/9/9b58e6bd9b79cef8991d11580875b0b107ce9274_2_590x1024.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.435Z","timestamp":1791753938435,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /uploads/default/optimized/2X/9/9b58e6bd9b79cef8991d11580875b0b107ce9274_2_590x1024.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amateuranimalporn.art/favicon.ico","fqdn":"amateuranimalporn.art","domain":"amateuranimalporn.art","tld":"art"},"ip":{"addr":"104.21.58.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.612Z","timestamp":1791753943612,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amateuranimalporn.art","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 25 Sep 2026 14:48:53 GMT","end":"Thu, 24 Dec 2026 15:48:42 GMT"},"fingerprint":{"sha1":"B1:AA:4D:58:E1:63:F4:A8:7A:DE:D5:FC:35:AF:9D:64:D8:7F:E1:E5","sha256":"5C:07:A6:F6:C5:80:38:41:EB:D2:9C:CA:FF:A4:7F:31:CF:42:C6:9C:F7:0C:EC:56:F2:C7:58:27:99:D2:0E:7C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: amateuranimalporn.art\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 152\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vQjFf0AFRQ5lrwgnRh50%2Fz7JlbJ3TQPJX9tQ8zTzN0GFZIKI1DndEe3k41RAkfgnRMVvaAN4H8jKuZFHJqUZ%2F0Cx6f58r3YWdoIQdCQq9wla3%2BRWuqo5yXS12EZTISQXWBJbu2cfR80%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a490f063e9ed5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jpxjpg5.top/upload/vod/20260331-1/c9569f6684fa85367b647bba0f2a7a0a.png","fqdn":"jpxjpg5.top","domain":"jpxjpg5.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.234Z","timestamp":1791753938234,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /upload/vod/20260331-1/c9569f6684fa85367b647bba0f2a7a0a.png HTTP/1.1\r\nHost: jpxjpg5.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jpxjpg5.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"q.da251109.top/upload/vod/2020-01-18/157930485418.jpg","fqdn":"q.da251109.top","domain":"da251109.top","tld":"top"},"ip":{"addr":"172.67.131.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.319Z","timestamp":1791753938319,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"da251109.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 12:46:16 GMT","end":"Mon, 30 Nov 2026 13:44:47 GMT"},"fingerprint":{"sha1":"D3:AB:48:E8:F6:0F:9E:0B:FE:94:95:F3:54:3D:86:10:C5:D2:9B:C6","sha256":"DF:9E:A3:3B:AD:3D:E2:C3:F1:B4:CD:B3:92:63:9E:C3:AE:A9:01:E9:37:D1:CB:6B:5F:AB:78:E6:1D:AC:46:74"}}},"request":{"raw":"GET /upload/vod/2020-01-18/157930485418.jpg HTTP/1.1\r\nHost: q.da251109.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Fri, 17 Jan 2020 23:47:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"5e224796-2221\"\r\nexpires: Fri, 30 Oct 2026 14:22:41 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-credentials: : true\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 975777\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0HQJTXQjiN6yDWtEVTG93VHmg5jwgrwqUOslcYOFzbdgfsGAHktnRqPLd40pVaGjsCJBs6SRkvTOBWt7jormkPof6r4OA6KKC3nJVJHmx6%2BESRIA7enflAOAGTf7%2B2W34Q%3D%3D\"}]}\r\ncf-ray: a490f04408cd5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8737,"size_decoded":9432,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 320x240, components 3","md5":"d7828747278efc7f7c4b298ea076bfc4","sha1":"23ee19756c8adceb72c257ef1c8f3871f5a81ef7","sha256":"c70f351c9b2c63a46b8534252ca2ca044a852826c4075c81d57f72ee03a0bd4a","sha512":"5958013d612b49b7aebad68f0d803eb384583ac21f20e2ddf2148bdbddca4ac8e9675559e8c98f429bacee5cd85d43bc5e40a65fd7074de55ce11c63b5f87c72","ssdeep":"192:FOqc0EPMCGSKxQ1wviKfgavbRVz75hwsT1vdh:FOd9yfg4NTz/h","tlshash":"d0029df6d0831a22e62262f6760b50ad4131e3256dd40fdad242f6b095aedce18cd76a","first_seen":"2026-10-11T20:34:30.991699Z","last_seen":"2026-10-11T21:28:40.12491Z","times_seen":2,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":179,"dns":15,"connect":13,"send":0,"wait":14,"receive":0,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"johndalysoccercamp.com/favicon.ico","fqdn":"johndalysoccercamp.com","domain":"johndalysoccercamp.com","tld":"com"},"ip":{"addr":"104.21.16.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.370Z","timestamp":1791753943370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"johndalysoccercamp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 04:43:35 GMT","end":"Tue, 17 Nov 2026 05:43:16 GMT"},"fingerprint":{"sha1":"AB:EE:70:45:B3:00:C1:63:53:8A:31:4E:F6:8E:37:65:C0:99:3F:84","sha256":"46:1E:88:64:21:5E:5D:86:67:AC:D9:E2:C2:AE:D0:E0:76:1B:C9:7E:8C:82:C7:9E:29:EA:BD:31:A4:E6:C8:D2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: johndalysoccercamp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LsZX31XadVpVIAJTsfxGdLWOaDdBfEAG5nEYkIIGH8opIcKT4YAs8BeurOxLWF0Fbbg8%2BZaWkMrgIyknVF%2Fm%2FGdMOednS%2FvLXVhLq87bNOUhSgCiJYp%2BHSVxp0YjyAKX5f1%2BSv7FW7aF\"}]}\r\nlast-modified: Thu, 09 Apr 2026 08:06:38 GMT\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 04 Sep 2027 05:52:48 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=3600\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"69d75e0e-4276\"\r\nage: 3252891\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a490f06279c72efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17014,"size_decoded":9348,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"cd6cd8f7d9af7267bf6b188d541291b4","sha1":"406bcab4e44f55cddba8f659d8be17c556d46d8a","sha256":"e47f1cd1409c2fc5dc18c4542b12d4e3777fe41137af62c112f059023e580a3e","sha512":"b5bab1c768b4e771c4981f75cd88ad8537828fb8ae988a7326099c81ed2979b502b577ae45e433b1ce647609bdbb14539a22f774cde6f3c645dd0f1f6b60dc02","ssdeep":"192:V/FSmX97q/jQYWDtwxt8ajnLm7JL28gBl9ffMephqQ/Uln813Y:twLQ1Dtwn61ilN/phj/o8m","tlshash":"82724c662aedf949c7860e3557a2612942b9cfe30c2d1b4bde6279e8be35fc43d81140","first_seen":"2026-04-16T16:55:58.986504Z","last_seen":"2026-10-11T21:28:39.798443Z","times_seen":60,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":8,"connect":40,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oporno.net/favicon.ico","fqdn":"oporno.net","domain":"oporno.net","tld":"net"},"ip":{"addr":"95.85.6.34","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.498Z","timestamp":1791753943498,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oporno.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 23:23:17 GMT","end":"Thu, 12 Nov 2026 23:23:16 GMT"},"fingerprint":{"sha1":"E4:5B:91:17:04:FE:AB:CA:48:E2:20:E6:9C:41:0A:42:22:5D:77:9F","sha256":"FE:B6:BA:C4:4B:43:1D:DA:33:B3:9F:BD:34:4A:2D:D8:93:2B:4E:52:69:B7:6A:1C:77:76:FF:14:A6:47:4C:BF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: oporno.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 21:25:43 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Thu, 26 Oct 2023 08:53:04 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1887\r\nCache-Control: max-age=3024000, public\r\nExpires: max-age=A10368000, public\r\nConnection: keep-alive, Keep-Alive\r\nKeep-Alive: timeout=5, max=100\r\nContent-Type: image/vnd.microsoft.icon\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1887,"size_decoded":2249,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 28x33, components 3","md5":"da247cb4249a5b10fc9c66e3d8f7847f","sha1":"ff733d4b468c5b30763488326456531679c186a9","sha256":"374f43cd86857576f773aaff9eaad40347c2a677cb54472aa463be6a30f53628","sha512":"a64ab464c15cec7d45562ab57cbe49b3dd294a8e6f954cd362e99e96eb8f207aec543252c16ff23c0b394c3c0fbfbb77547b73f4a3f1a50093d9136fd25a1d18","ssdeep":"","tlshash":"14410b6d534267508c1380f955b912e7e3cdb1a23d64a3087735d2c0d664bd5978d26e","first_seen":"2026-08-08T09:04:00.32205Z","last_seen":"2026-10-11T21:28:40.127218Z","times_seen":4,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":2,"connect":29,"send":0,"wait":30,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"porkytube.com/favicon.ico","fqdn":"porkytube.com","domain":"porkytube.com","tld":"com"},"ip":{"addr":"172.67.193.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.533Z","timestamp":1791753943533,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"porkytube.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 12:13:53 GMT","end":"Wed, 02 Dec 2026 13:13:27 GMT"},"fingerprint":{"sha1":"F6:E4:85:58:DB:7D:22:59:BB:59:E1:0D:1E:74:E9:4A:61:B2:6E:9D","sha256":"02:A3:10:63:8A:10:68:9D:58:0C:07:6D:6A:24:A7:E6:C7:65:A0:25:E6:DC:A6:D9:39:94:77:A7:63:64:A2:75"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: porkytube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 905\r\nserver: cloudflare\r\ncontent-security-policy: upgrade-insecure-requests;\r\nlast-modified: Fri, 04 Mar 2016 22:16:03 GMT\r\netag: \"47e-52d4075ea4ec0-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Mon, 11 Oct 2027 10:25:57 GMT\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=38MLzUooe4BG3v6CNn3rHg2I0t96AIQqIf6gpbrZfrB7O99ypn2HUpf8lXTwomvTg2mYh30mPZGAbFUr6tn1AvDAr1kd%2FYz5eEjviwwMozzQ%2FLfIUNNVge3%2BvUmKuyHN\"}]}\r\nage: 39586\r\ncf-cache-status: HIT\r\ncf-ray: a490f063ac8b56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":1741,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"f981e3fb6d0a6613248a51dc34c3e361","sha1":"a40b6e731290d9f9f5e6fc869c6808b01a98a90f","sha256":"1edf8425c8de02894d84c40d73f803b9c0436f06a12ce2e238c20c485b9b4af6","sha512":"899705fc92f42daa4e9a855cd72b3b116b94a6c308e9f10ccf7195ed7a53f81c4d2dabc58c4ae911f7109d5b2f1f4124a979183b761aa2240a0ec437a90170c8","ssdeep":"","tlshash":"602161863192e1a8d169b4f6f99336f500a28c37e9b02a8f08993dcc3a70600642aa24","first_seen":"2024-08-19T19:45:08.661023Z","last_seen":"2026-10-11T21:28:40.129561Z","times_seen":14,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"porkytube.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.dreamstime.com/favicon.ico","fqdn":"www.dreamstime.com","domain":"dreamstime.com","tld":"com"},"ip":{"addr":"158.176.70.101","port":443,"asn":36351,"as":"SOFTLAYER","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.649Z","timestamp":1791753943649,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dreamstime.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 13:04:48 GMT","end":"Tue, 05 Jan 2027 13:04:47 GMT"},"fingerprint":{"sha1":"7F:CC:8B:BE:BC:21:EA:7F:61:89:1E:8E:2E:62:65:FE:3F:54:BD:E8","sha256":"93:4F:CA:24:78:63:14:2A:DD:DF:92:28:CE:60:49:C7:27:FB:C0:6D:70:05:EC:68:E4:C7:E5:E0:94:04:F5:5A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.dreamstime.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:44 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Wed, 23 Sep 2026 06:42:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab374d7-47e\"\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self';\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=15552000\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1150,"size_decoded":790,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"c8f7ac5ce2af8eb079cacca4071dbc10","sha1":"d52f3ea438f70daa0fb0d2fb44df7e9557f9c88c","sha256":"78515c507986185ba0cca90c228173b8b572aca048426b38fa94219750ec355a","sha512":"d0f8dd24ab017c7150e69934c53365416ca9632b734400911e09e3ce3c40134c8464fee315e971a14a6e190632be86205879ef93a53952b55445be6cff89c2b1","ssdeep":"","tlshash":"52218083a5577405c910537d4503eafead433bd974e387f25886a0b33a332681b978c2","first_seen":"2025-12-30T14:05:04.970227Z","last_seen":"2026-10-11T21:28:40.130818Z","times_seen":19,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":18,"send":0,"wait":249,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xvideosporno.blog.br/wp-content/uploads/sogro-fodendo-a-nora-safadinha.jpg","fqdn":"xvideosporno.blog.br","domain":"xvideosporno.blog.br","tld":"blog.br"},"ip":{"addr":"104.26.11.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.279Z","timestamp":1791753938279,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xvideosporno.blog.br","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 04 Sep 2026 15:47:34 GMT","end":"Thu, 03 Dec 2026 15:47:33 GMT"},"fingerprint":{"sha1":"97:83:BC:33:19:12:B2:40:A5:8C:A2:BA:C2:61:2C:1A:19:40:39:B2","sha256":"DD:42:0A:D1:C8:C6:7D:1A:6D:D8:6B:A5:9F:BD:73:01:2F:BA:5D:0C:0E:51:3C:18:25:4E:E4:93:79:0D:44:54"}}},"request":{"raw":"GET /wp-content/uploads/sogro-fodendo-a-nora-safadinha.jpg HTTP/1.1\r\nHost: xvideosporno.blog.br\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 119278\r\nserver: cloudflare\r\nlast-modified: Thu, 21 Sep 2023 20:32:48 GMT\r\netag: \"650ca870-222a2\"\r\nexpires: Sun, 08 Nov 2026 05:52:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-cacheable: YES:Forced\r\nx-varnish: 182729566 164303319\r\nvary: accept, accept-encoding\r\nvia: 1.1 varnish (Varnish/6.6)\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=prjeaiwxa2t%2ByAW%2BXJx9aXHkgVttmeW2V5%2Bz1LHtM0ofMFCxmCkDYG%2FGndm%2FFax%2BPUyrFgh3%2FMPmpZLVSxI35I5NEfTrZOJn6rcQDeYQckjXWOzq78Dgu%2BAYW3te7Ze%2BS5RTXzfZ\"}]}\r\npriority: u=1;i=?0,cf-chb=(261;u=3;i=?0 16438;u=5;i=?0 73993;u=6;i=?0)\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: ok, orig_size=139938\r\nage: 206078\r\ncf-cache-status: HIT\r\ncf-ray: a490f0455e52568d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish:6.6","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":119278,"size_decoded":120311,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c172751de29e9b1766c7065f63f69dbf","sha1":"2086b392e34536d4d2c112a0c35a3647cd3fc9ee","sha256":"2f29e39a9678d7bb96873e38ca9a3fd4744638f99ffccf13b81cb3fb198aa75b","sha512":"34b93c85efdeaf519c11ce2d97279018c857ac0c3c0504fedae999cac1f4278f240e706073a5858ad3248e0df1f618203b6188e4ced845e47ea13c98f65fbb95","ssdeep":"3072:uTQ0uP7GmP5X+7z5MvbLn01cZpMzvfNtdkbBsCvtBlWUB0hG2H:uDur01oMzfdc2ChW40hB","tlshash":"dac3137f50213b479ab06b328706b91dd49e01b27e42f0c42d5ea06eb6a72c7dc471de","first_seen":"2026-08-13T11:42:22.728562Z","last_seen":"2026-10-11T21:28:40.132002Z","times_seen":5,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":334,"dns":2,"connect":22,"send":0,"wait":18,"receive":9,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornoperso.com/wp-content/uploads/2021/06/familynude.jpg","fqdn":"pornoperso.com","domain":"pornoperso.com","tld":"com"},"ip":{"addr":"172.67.166.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.299Z","timestamp":1791753938299,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pornoperso.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 22:01:41 GMT","end":"Sun, 03 Jan 2027 23:01:34 GMT"},"fingerprint":{"sha1":"59:B8:3B:55:B6:0C:4D:56:77:75:84:DD:64:A9:AF:6B:8C:CE:B1:53","sha256":"B6:A6:F4:88:0F:BC:D3:C3:C0:A8:A4:86:2B:F7:54:C6:A3:B1:AB:1D:4A:5B:AC:4A:A9:C3:54:87:94:F0:C6:FC"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/familynude.jpg HTTP/1.1\r\nHost: pornoperso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://img.pornoperso.com/wp-content/uploads/2021/06/familynude.jpg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CmTDJApVvorx7TSKMU4zt2g7JoNrzERFIVP1UOiRsJyzT9ecD0BWoMO08%2B2Onvmd4ih5zRGlIA9ESedZWs1weO7sSeHk21WJk0cPOb9I7z%2FBIjaE255uRoVFZh45wtXjPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a490f042bb93b50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":1,"connect":4,"send":0,"wait":7,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jpxjpg5.top/upload/vod/20250915-1/33f5ae816d1b44fe7f5d5f147c113778.png","fqdn":"jpxjpg5.top","domain":"jpxjpg5.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.504Z","timestamp":1791753938504,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /upload/vod/20250915-1/33f5ae816d1b44fe7f5d5f147c113778.png HTTP/1.1\r\nHost: jpxjpg5.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jpxjpg5.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jpxjpg5.top/upload/vod/20260409-1/907516fd60781e96493fe5463326e1c3.jpg","fqdn":"jpxjpg5.top","domain":"jpxjpg5.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.510Z","timestamp":1791753938510,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /upload/vod/20260409-1/907516fd60781e96493fe5463326e1c3.jpg HTTP/1.1\r\nHost: jpxjpg5.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jpxjpg5.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"abfrkjesk.com/20221004/okI2qcKj/1.jpg","fqdn":"abfrkjesk.com","domain":"abfrkjesk.com","tld":"com"},"ip":{"addr":"64.112.78.42","port":443,"asn":6939,"as":"HURRICANE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.531Z","timestamp":1791753938531,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atukjhesk.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Sat, 06 Dec 2025 20:15:08 GMT","end":"Tue, 05 Jan 2027 20:15:07 GMT"},"fingerprint":{"sha1":"E8:0C:C5:B3:2C:3B:92:95:9B:11:CB:30:AC:87:4F:41:A9:93:A7:B2","sha256":"AD:47:45:73:AA:EF:59:08:4F:30:1D:71:77:84:B7:62:4C:F8:4C:8A:0E:77:D7:1A:8A:11:9F:30:C4:68:F2:17"}}},"request":{"raw":"GET /20221004/okI2qcKj/1.jpg HTTP/1.1\r\nHost: abfrkjesk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5534\r\nlast-modified: Wed, 05 Oct 2022 07:31:33 GMT\r\netag: \"633d32d5-159e\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: public, max-age=15768000\r\ncache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5534,"size_decoded":5885,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 320x240, components 3","md5":"27bb19adc8de1a6cdfc6ed53d742da46","sha1":"fa65abdfde6564f9bab990f8720aa6ec296a841d","sha256":"b7c82805226ed2f8e8fbf930c120f7dee1bb1d1f4aed02757f2f336b74a118f0","sha512":"24d9cb49158d8e901908336e99a7b33f8f078737bb5da8bb00b657b24a1fe49bc89e5ea5684c7e747ed4e14fd0bba08ad6864e2fbb735b6872ab421cbf26597f","ssdeep":"96:F1zEjgqHZa45vSt2dfD7GwJrwg7+yJczhsqlorLsQ1pPPmk5s:F9hqHZxv22d+wB5Rc1sqGD1pPA","tlshash":"dcb18e575c7f12ebdfa3d5d87003299b72d9315dbab40822597b2b40f625217b20d21d","first_seen":"2026-10-05T12:31:28.778219Z","last_seen":"2026-10-11T21:28:40.132761Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1022,"timings":{"blocked":834,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asiananimalxxx.top/tmbs/59/941_awesome-is-bestiality.jpg","fqdn":"asiananimalxxx.top","domain":"asiananimalxxx.top","tld":"top"},"ip":{"addr":"172.67.156.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.224Z","timestamp":1791753938224,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asiananimalxxx.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 29 Sep 2026 21:23:49 GMT","end":"Mon, 28 Dec 2026 22:23:46 GMT"},"fingerprint":{"sha1":"04:88:7D:8F:4F:EF:AB:E7:22:62:14:73:29:82:3A:FD:6C:B8:D7:DC","sha256":"68:42:0A:46:A3:77:C2:7A:EB:C1:2F:77:E2:78:C1:1B:D2:BA:B2:FF:C4:FF:1D:B3:B5:81:A2:99:19:E3:45:8E"}}},"request":{"raw":"GET /tmbs/59/941_awesome-is-bestiality.jpg HTTP/1.1\r\nHost: asiananimalxxx.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12673\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 12 May 2021 10:19:51 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YWT%2BS5sFgxwn8ohGgZ0EuZWbQH6r0SYWZRhRqiIkp1jQBXVjvcJ4AO9Eye9JNbmMpEhl5rwAeOvLPUaDLfPP1%2FiFjpbtl6EtU%2F2%2BKtMcTM12qO43ediDMr3X4Z1uupiAXSSQRXw%3D\"}]}\r\netag: \"609babc7-3181\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-request-id: d743509fec5c23f9f9567d03c39cada0\r\naccept-ranges: bytes\r\nage: 6428655\r\ncf-cache-status: HIT\r\ncf-ray: a490f0435a8eb4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12673,"size_decoded":13452,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x230, components 3","md5":"f97f044d16752bd53e2676d1ab8b613a","sha1":"d1cf41e6ab037837fa9431319268bb802e620fd4","sha256":"a45566b5acf7e8f06d4585ebfb5be8b4ba254811f18cd88293491d3ba456e27b","sha512":"531d62c5650d60aec89f7ea8875e3c005dcf617b85c6bbd77973aacf7104b2e521fcd17bc540ea9f14ee6ff9431f8d269d0c1cdfc79fcd48b05b3120015262a4","ssdeep":"384:o1a64LDY/CQtkIBg+sSnPkOPVy/LSDr3JbNXK:ow64AtO+5dPVWSv3J5XK","tlshash":"5d42c037a06840a2e62fef6386d517c663497e1debb157a002677a39373e3c6c901345","first_seen":"2024-08-19T19:45:07.460415Z","last_seen":"2026-10-11T21:28:40.13377Z","times_seen":17,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":95,"dns":8,"connect":9,"send":0,"wait":40,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/2X/c/ce0e6f82ff81e0b50c0ca0cb18eb5cdb537d2052_2_580x1024.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.465Z","timestamp":1791753938465,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Oct 2026 23:41:24 GMT","end":"Fri, 08 Jan 2027 23:41:23 GMT"},"fingerprint":{"sha1":"29:D5:87:BD:C8:D5:0B:FF:C9:69:32:61:DE:51:13:C4:2F:10:AB:1D","sha256":"7B:70:32:04:DA:41:B9:78:31:C8:DE:04:94:81:62:66:38:B0:7D:D4:B4:60:88:35:CF:9D:AD:89:6E:BF:1C:0D"}}},"request":{"raw":"GET /uploads/default/optimized/2X/c/ce0e6f82ff81e0b50c0ca0cb18eb5cdb537d2052_2_580x1024.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdocac.jpg4.quest/av4usimage.png","fqdn":"pdocac.jpg4.quest","domain":"jpg4.quest","tld":"quest"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.962Z","timestamp":1791753943962,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /av4usimage.png HTTP/1.1\r\nHost: pdocac.jpg4.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fixedjs.av4me.xyz/?vidjs=51qxezx","fqdn":"fixedjs.av4me.xyz","domain":"av4me.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:50.685Z","timestamp":1791753950685,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /?vidjs=51qxezx HTTP/1.1\r\nHost: fixedjs.av4me.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ansuko.net/wp-content/uploads/2024/12/qtxsbzkz_header.jpg","fqdn":"ansuko.net","domain":"ansuko.net","tld":"net"},"ip":{"addr":"172.67.138.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.309Z","timestamp":1791753938309,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ansuko.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 03:22:49 GMT","end":"Sun, 27 Dec 2026 04:22:39 GMT"},"fingerprint":{"sha1":"A0:10:86:46:2D:F7:1F:70:5D:3F:18:DA:F2:25:60:B7:95:52:91:51","sha256":"D1:40:2D:15:A1:99:35:EB:08:96:5E:08:6F:BD:B6:49:D2:71:03:06:C7:51:81:B3:9A:B0:AB:A4:2E:3C:B1:20"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/qtxsbzkz_header.jpg HTTP/1.1\r\nHost: ansuko.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QpuVYCbykwhLaOiIpfMLxsreRe9lLk9Hx2aMJC5swUvKAtTdCfdFDvS0rwgj6u8%2FAmPs7msrfZtX1%2Fx6HxJ2a26CYEZ9lXNZ2WGH%2FXHkpIsFvShgWy0xXaw%2Fyjgk\"}]}\r\npriority: u=5,i\r\nage: 13183\r\nlast-modified: Sun, 11 Oct 2026 17:45:54 GMT\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a490f043e89f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42279,"size_decoded":42907,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 270x380, components 3","md5":"2746dc9fadc289681e50a68e403029dc","sha1":"717c8fad066546411e1b2fc2283dd79ab1e7bbec","sha256":"dcb4770dc0eb1451a3a894173660ddc8710d743725429378e132e653fcccd81c","sha512":"0f3cdbfcb233cf623fe8e2fc3567397c583c30f038cfb1f10f94b2225e8f76f443c69fcb3e13e45c323c1a2ceea5933896e4c110509090a55f364dadba657bad","ssdeep":"768:RlxQr+pCe7YC/ikRxq5ReisZiEcC/WNQ5/NMR8ixt8du1koBC5yu:R4r+pCY/DzjfpuQ5t9dQkoI5r","tlshash":"1013f15f2f5362e9744224c262e7aee017d8264112d83dacb78b23b47acbcb7643519d","first_seen":"2025-08-14T16:14:38.853094Z","last_seen":"2026-10-11T21:28:40.136647Z","times_seen":5,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":11,"dns":12,"connect":140,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"da.da15525716.com/upload/vod/2019-11-15/15737715092.jpg","fqdn":"da.da15525716.com","domain":"da15525716.com","tld":"com"},"ip":{"addr":"103.224.182.214","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:40.948Z","timestamp":1791753940948,"http_version":"HTTP/1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keywordresearchinc.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 18:07:59 GMT","end":"Thu, 24 Dec 2026 18:07:58 GMT"},"fingerprint":{"sha1":"B2:31:99:32:AF:FD:BB:10:1F:F8:6B:39:F8:7F:8B:C3:0B:54:B8:C8","sha256":"A5:7A:C3:13:7E:D0:8D:64:72:DD:CE:D9:DF:04:28:D3:D1:DB:FF:45:C8:38:DB:93:A0:CA:26:FA:91:16:E4:6C"}}},"request":{"raw":"GET /upload/vod/2019-11-15/15737715092.jpg HTTP/1.1\r\nHost: da.da15525716.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.0 403 Forbidden\r\ncache-control: no-cache\r\ncontent-type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"da.da15525716.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image/","fqdn":"image","domain":"image","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:41.180Z","timestamp":1791753941180,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: image\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Storage-Access: none\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filmesporno.xxx/wp-content/uploads/2021/05/porno-adolecente.jpg","fqdn":"filmesporno.xxx","domain":"filmesporno.xxx","tld":"xxx"},"ip":{"addr":"31.43.191.59","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.276Z","timestamp":1791753938276,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filmesporno.xxx","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 01:11:27 GMT","end":"Wed, 11 Nov 2026 01:11:26 GMT"},"fingerprint":{"sha1":"EE:76:F8:FD:B8:BF:B8:FA:57:BE:B1:62:EE:93:FE:50:17:17:9C:63","sha256":"8B:EE:DF:7C:73:8D:75:65:97:04:1A:05:72:CD:DD:12:D6:9D:F9:B3:BB:FF:97:E5:6F:D0:AA:8E:52:6C:39:D8"}}},"request":{"raw":"GET /wp-content/uploads/2021/05/porno-adolecente.jpg HTTP/1.1\r\nHost: filmesporno.xxx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 15 May 2021 03:46:14 GMT\r\netag: W/\"609f4406-8b13\"\r\nversion: MS26072801\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000;\r\nx-served-by: Mini-CDN-offshore\r\nx-cache-status: HIT\r\nx-cache-bypass: 0\r\ncache-control: public, max-age=2592000, immutable, stale-while-revalidate=60, stale-if-error=3600\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35603,"size_decoded":32850,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1280x720, components 3","md5":"02dcfc665a79a3c0de46bc38e302e3e2","sha1":"7623af5ffe4cb25663a47fe2be300f7d05c0b84c","sha256":"12898f87a6caaaf8e47220c7443dfb0efb764b1bb3de2c78082ecbc7c1c28e89","sha512":"1cd2dbf895328b9ba1d5f360b8d26cc2c6f298ddb1c58785efae7c0d0fd37215152cb5cd37e7fbd823374f9d2163b50ba9e4123f687a220bbdf843e383b606e1","ssdeep":"768:9YfY2Od3tLRuJGHjPeE2b5OvBDF1v7mo0xbn+NfjY6:WfAfLRu4L2b5OvBDDmo0s+6","tlshash":"52f2e1588b25e580e80fcfb18cb50761b15b6f9e1e91a567d0ee78e463dee327c118e0","first_seen":"2024-11-02T04:49:17.932992Z","last_seen":"2026-10-11T21:28:40.137631Z","times_seen":25,"resource_available":false,"data":null}},"time_used":753,"timings":{"blocked":642,"dns":0,"connect":21,"send":0,"wait":45,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.effedupmovies.com/2013-mdpope-1/Image:","fqdn":"www.effedupmovies.com","domain":"effedupmovies.com","tld":"com"},"ip":{"addr":"185.8.237.6","port":443,"asn":0,"as":"","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:40.997Z","timestamp":1791753940997,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"effedupmovies.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 05:32:15 GMT","end":"Thu, 10 Dec 2026 05:32:14 GMT"},"fingerprint":{"sha1":"6D:40:FD:BA:34:C7:A1:7E:D4:84:E0:0F:8A:93:54:64:5E:32:E9:B3","sha256":"28:30:27:00:78:6C:DC:D6:56:F2:32:B2:74:36:1B:BF:A8:69:09:D0:1F:F8:CB:FF:A9:7B:FE:10:B6:D1:20:EF"}}},"request":{"raw":"GET /2013-mdpope-1/Image: HTTP/1.1\r\nHost: www.effedupmovies.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.5.11\r\nvary: Accept-Encoding,Cookie\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\nlink: \u003chttps://www.effedupmovies.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private, private\r\ncontent-encoding: br\r\nx-provider: WEDOS - WE DO Security (WEDOS.com)\r\nx-cdn-provider: WEDOS Global CDN (WEDOS.delivery)\r\nx-protected-by: WEDOS Global Protection (WEDOS.protection)\r\nx-dns-by: WEDOS anycast DNS servers as a service (WEDOS.zone)\r\nx-status-page: WEDOS Status (WEDOS.status.online)\r\nx-monitored-by: WEDOS Online Monitoring (WEDOS.online)\r\nx-tagline: Built in Europe / EU, securing the future and safety worldwide.\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"PHP:8.5.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"www.effedupmovies.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xxxzooporn.net/favicon.ico","fqdn":"xxxzooporn.net","domain":"xxxzooporn.net","tld":"net"},"ip":{"addr":"104.21.31.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.488Z","timestamp":1791753943488,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxxzooporn.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Oct 2026 00:20:05 GMT","end":"Sat, 09 Jan 2027 01:20:02 GMT"},"fingerprint":{"sha1":"89:B4:8A:93:3B:A6:F9:C2:59:38:42:14:89:CC:73:B5:27:8F:53:33","sha256":"54:C1:87:AB:7C:50:B5:26:4C:35:B9:F8:C9:41:BB:32:BB:63:41:61:D0:36:8C:44:FC:BE:5E:F1:7D:60:FD:10"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xxxzooporn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hT5SFzWgIvq4FN8CjseAF5rNv6HOr%2FIdMA8g9bHo67iqwmrphhMagwL0JdP0tQusEdJheM%2FL32dxn7KW4ELAYGOrXTI%2BoVshQXca%2B1%2FJqoNGradoLywBlG7UsqVPpMNc6A%3D%3D\"}]}\r\nlast-modified: Thu, 14 Sep 2023 05:56:31 GMT\r\netag: W/\"1cee-6054b567035b1\"\r\nx-request-id: 96bb2aaeb59126bad24479ebcd182dc7\r\nage: 5843\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a490f06358881525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7406,"size_decoded":3446,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 8 bits/pixel, 32x32, 8 bits/pixel","md5":"e0aff74108426d33bda430cf82818b37","sha1":"2a85ea03d1e41217c1a8b729fb95480a7aa6bfe4","sha256":"1194a6ad64a634d3d376bfd3d9e46a9e4bafdc1ea73f6c898921a77a6eb8a1dd","sha512":"f48634eb1818f3b42cae332fddf2718ea5694233f8f3a30f0293d14b450a569bece58e0ddd69d266bfdab87385cdb657bac8ed46a116720cded98392feed5b8e","ssdeep":"96:DlYkJMr5z4IwwOR+Pmze5ZaYmpyGyKPR:Dly11bOoPSh","tlshash":"cce11fc600cb7d5cc1440d37c99d33bdcad3368ae1ea3662882dbdb05ead695086af95","first_seen":"2026-06-25T11:17:56.867769Z","last_seen":"2026-10-11T21:28:40.138823Z","times_seen":11,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":4,"send":0,"wait":12,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sichuanganxi.com/favicon.ico","fqdn":"sichuanganxi.com","domain":"sichuanganxi.com","tld":"com"},"ip":{"addr":"172.67.170.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:53.268Z","timestamp":1791753953268,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sichuanganxi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 01:10:34 GMT","end":"Wed, 23 Dec 2026 02:08:15 GMT"},"fingerprint":{"sha1":"56:47:E8:A5:50:67:16:A1:B1:4F:B2:D6:67:36:BE:B0:BE:DC:01:56","sha256":"FB:C4:3A:8F:E7:E0:EC:22:11:35:AE:C4:E7:41:77:B5:2E:6A:A9:40:65:49:CF:74:EB:B9:B2:B0:C9:64:2E:F0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sichuanganxi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:53 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ALinEHCIN4aDcrNmuv1hRX2H0pxlaKAMH%2B%2F4Nl3PNI%2FAI1UjI0yaziV4SNoj9ernXhkTeMYgOVwVU2M3L1iy1%2F93H%2FqcYXja1vZIb65CHZw5aIdq01YNI%2FOMkdlpnpTXeB%2Fc\"}]}\r\nlast-modified: Thu, 09 Apr 2026 08:06:38 GMT\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 30 Jul 2027 23:51:02 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=3600\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"69d75e0e-4276\"\r\nage: 6298506\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a490f09fef91b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17014,"size_decoded":9342,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"cd6cd8f7d9af7267bf6b188d541291b4","sha1":"406bcab4e44f55cddba8f659d8be17c556d46d8a","sha256":"e47f1cd1409c2fc5dc18c4542b12d4e3777fe41137af62c112f059023e580a3e","sha512":"b5bab1c768b4e771c4981f75cd88ad8537828fb8ae988a7326099c81ed2979b502b577ae45e433b1ce647609bdbb14539a22f774cde6f3c645dd0f1f6b60dc02","ssdeep":"192:V/FSmX97q/jQYWDtwxt8ajnLm7JL28gBl9ffMephqQ/Uln813Y:twLQ1Dtwn61ilN/phj/o8m","tlshash":"82724c662aedf949c7860e3557a2612942b9cfe30c2d1b4bde6279e8be35fc43d81140","first_seen":"2026-04-16T16:55:58.986504Z","last_seen":"2026-10-11T21:28:39.798443Z","times_seen":60,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aniru.org/favicon.ico","fqdn":"aniru.org","domain":"aniru.org","tld":"org"},"ip":{"addr":"172.67.135.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:53.312Z","timestamp":1791753953312,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aniru.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 16:57:12 GMT","end":"Fri, 13 Nov 2026 17:54:57 GMT"},"fingerprint":{"sha1":"F4:1D:D2:69:A2:87:50:97:42:8F:D8:C8:F6:F7:49:1E:17:E2:F2:35","sha256":"4C:50:59:AC:E7:10:51:A1:00:21:81:C2:70:79:FF:E9:E2:74:0C:97:44:F8:46:C4:F0:3E:F2:EC:91:38:62:BB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: aniru.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:53 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlocation: https://aniru.org/wp-includes/images/w-logo-blue-white-bg.png\r\nlink: \u003chttps://aniru.org/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-redirect-by: WordPress\r\nexpires: Sat, 17 Oct 2026 00:05:29 GMT\r\ncache-control: max-age=604800\r\nage: 163224\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RXuWWgmaIt8qZCeptjWq6em8hK48EX%2FtF25%2BPCsIewJW3fjQlCzcob%2BC8U6yrtAuwp8tHrQybdx8p1%2FyPbzn5GzGT79%2Fpsq%2Bmkni6GrnKQQgMG30a9bd%2FNioco0%3D\"}]}\r\npriority: u=4,i\r\ncf-ray: a490f0a0981556bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":9,"connect":46,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p.sl1121.top/upload/vod/20251215-1/e19358e430d0bcbf98c874b9d123ed3e.jpg","fqdn":"p.sl1121.top","domain":"sl1121.top","tld":"top"},"ip":{"addr":"104.21.46.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.447Z","timestamp":1791753938447,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sl1121.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 10:04:31 GMT","end":"Sat, 12 Dec 2026 11:04:16 GMT"},"fingerprint":{"sha1":"0E:3A:C5:57:BA:BF:9A:76:09:8D:11:E1:81:28:53:98:F1:4C:17:F0","sha256":"69:C9:7A:38:5E:B1:96:B9:4B:C9:8E:68:D8:A2:D9:43:72:D1:BF:24:89:B5:7A:13:46:53:06:B5:77:3D:EF:06"}}},"request":{"raw":"GET /upload/vod/20251215-1/e19358e430d0bcbf98c874b9d123ed3e.jpg HTTP/1.1\r\nHost: p.sl1121.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\netag: W/\"6956ab7e-7806\"\r\nexpires: Thu, 05 Nov 2026 14:15:31 GMT\r\nlast-modified: Thu, 01 Jan 2026 17:14:38 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: BYPASS, ChunkedEncoding\r\nage: 457806\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=07KFjzSmXL4floZM%2F%2FMDqJJrKRRbSiWd4zRKJEUB6fuEvHjD3EBLadUzoCFq0dIfWRpRDUY3cRrStOChPVzsaD0biGMuzcBeeoBEAR7hmheG3WlcyGkwg0CSC%2Fcafww%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a490f0442b29120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30726,"size_decoded":31476,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 500x281, components 3","md5":"9d3db9127af16711d86d8a623ca856ab","sha1":"44a3f542d76ced6fc726bc90a5aa834272fe4300","sha256":"8720dee8271a04dff5a0107341badd054de1cb86c056e699c0a0f5e9db7b58d0","sha512":"d1a6ad2b2673d4af1814c6056cd9657c82b7da5694c9dbfd58b3eacf69ce7e9a413c447125e8a9ac0a118f075abd0780fb4ddcfb19c96d10f726ee9a8e3d3751","ssdeep":"768:WQHcAJdeWz12XbjkEjxjkogkxjIG/36pwPNt:nctWz1jixjkoV2436A","tlshash":"77d2e16f39732f9060ddf33341b70948d74b2d865cb1a52f655361d8ac23c6988e268b","first_seen":"2026-10-11T09:53:13.786849Z","last_seen":"2026-10-11T21:28:40.139599Z","times_seen":3,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":20,"connect":70,"send":0,"wait":12,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sex8sex811.com/20250806/7e2S7fIb/1.jpg","fqdn":"sex8sex811.com","domain":"sex8sex811.com","tld":"com"},"ip":{"addr":"192.198.185.50","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.468Z","timestamp":1791753938468,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sex8sex811.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 15:33:50 GMT","end":"Sun, 20 Dec 2026 15:33:49 GMT"},"fingerprint":{"sha1":"E1:C4:6E:23:EA:0C:88:3C:1A:91:6D:71:BB:A9:D7:5D:BC:E8:60:58","sha256":"E9:76:78:90:17:C2:7A:EF:73:7B:26:01:27:3E:FC:BF:9D:E1:34:9A:B3:58:D5:34:05:47:1D:A2:68:C0:2C:51"}}},"request":{"raw":"GET /20250806/7e2S7fIb/1.jpg HTTP/1.1\r\nHost: sex8sex811.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-headers: Range,Origin,Accept,Accept-Encoding,Content-Type,If-Modified-Since,If-None-Match,Cache-Control,X-Requested-With\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length,Content-Range,Accept-Ranges,Content-Type\r\naccess-control-max-age: 86400\r\ncache-control: max-age=2592000\r\ncontent-type: image/jpeg\r\ndate: Sun, 11 Oct 2026 19:54:49 GMT\r\netag: \"68bcf84a-1afa\"\r\nexpires: Tue, 10 Nov 2026 19:54:49 GMT\r\nlast-modified: Sun, 11 Oct 2026 19:54:49 GMT\r\nserver: openresty/1.27.1.2\r\nx-cache: HIT, policy, disk\r\ncontent-length: 6906\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.27.1.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6906,"size_decoded":7589,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 272x184, components 3","md5":"713f79ae1befb971e61b01fb261a499f","sha1":"1adec6e761ddfbbbd721f756e9e2e6e3fbd9686d","sha256":"cf20ff88906e5f05a2e96aba94f64cc6b78d6c6b8b9896db21517abb10b239e9","sha512":"d3fd342ea14aacbbd1c5112fc5f122aff532720e861c56c4cd8e0b0e82ff778790e84011bf38e9650a04257962f72a63beede8ceeb28b7a2aac3b371df8c1397","ssdeep":"96:whVECsPbk954kPZ1L008zHHbZDfeHR82YTpJcPPz6G1k82gtLB2zOYeeMH+PLJf0:WVBRZpkznbZDWxj8slk8LQv+ofxX3e","tlshash":"e4e19e76dc9ab2206ff3808bd91960b313145a0be80e1e3215d9cdf85b36cb59030a4b","first_seen":"2023-12-01T05:28:10Z","last_seen":"2026-10-11T21:28:40.140526Z","times_seen":7,"resource_available":false,"data":null}},"time_used":762,"timings":{"blocked":670,"dns":0,"connect":20,"send":0,"wait":20,"receive":3,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fqjpg10.top/upload/vod/20251228-1/18b80b8af5cec5bb71211832c7185076.png","fqdn":"fqjpg10.top","domain":"fqjpg10.top","tld":"top"},"ip":{"addr":"23.134.76.191","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.487Z","timestamp":1791753938487,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fqjpg10.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 05:27:48 GMT","end":"Mon, 02 Nov 2026 05:27:47 GMT"},"fingerprint":{"sha1":"CE:28:80:B0:05:19:5C:8B:0B:3B:EC:8F:4D:FB:7C:6A:9C:16:0E:51","sha256":"92:80:CD:0C:A7:99:7A:96:A5:ED:DE:0F:9F:7B:C6:04:F5:36:1A:01:69:60:53:9D:3B:8F:14:E8:BF:FA:4B:29"}}},"request":{"raw":"GET /upload/vod/20251228-1/18b80b8af5cec5bb71211832c7185076.png HTTP/1.1\r\nHost: fqjpg10.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 11 Oct 2026 21:25:39 GMT\r\nContent-Type: image/png\r\nContent-Length: 311081\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Mar 2026 13:31:43 GMT\r\nETag: \"69b411bf-4bf29\"\r\nExpires: Sat, 17 Oct 2026 18:46:13 GMT\r\nX-Cache-Status: HIT\r\nCache-Control: max-age=2592000, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":311081,"size_decoded":311436,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3","md5":"ea7a14be039cd044fad66b790468f2e2","sha1":"f710bad6d94750155f95cfd1409f14a5656ea5ed","sha256":"6d2968c7c768cf1c2bccc3ce4d5cee20c026bdf26469d89591ccfb34add462f1","sha512":"a723c7b927b38f9bb28a696a3badb87dfb4c537ee9f4ac7510021bebab87267fc5739131ebc462c2d8673d22769ee0e4c3554ebac36c588ebf52eadc0c0f68d0","ssdeep":"6144:395QTsgzTZDYMisXRfVPq1qYayVyhq3eSQjiW58Sjmn6xrdjF+K:MDDpiuRV4FayYs3eS0iu8H6xrdgK","tlshash":"a76423dd4b245042ecfe6e7e7b7f4b2c1bba4519e61d18e92316e6b404b71c4022c6eb","first_seen":"2026-04-15T09:55:46.568737Z","last_seen":"2026-10-11T21:28:40.14263Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1543,"timings":{"blocked":755,"dns":0,"connect":102,"send":0,"wait":199,"receive":352,"ssl":127},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"fqjpg10.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.javwind.com/favicon.ico","fqdn":"www.javwind.com","domain":"javwind.com","tld":"com"},"ip":{"addr":"172.67.199.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.566Z","timestamp":1791753943566,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"javwind.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 19:38:09 GMT","end":"Wed, 23 Dec 2026 20:35:46 GMT"},"fingerprint":{"sha1":"92:06:FC:1E:04:77:B2:12:38:E5:9B:8B:94:30:4C:39:3F:02:6E:AD","sha256":"13:7C:D7:20:8C:01:64:50:ED:7D:B7:B1:63:3B:D6:28:AD:0B:9A:7F:6F:7A:24:70:83:FE:13:91:9F:DE:1B:D1"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.javwind.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/x-icon\r\netag: W/\"62f9d6a3-423e\"\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Server,range,Content-Length,Content-Range\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nhttp_cf_ipcountry: \r\nlast-modified: Sat, 22 Aug 2026 22:45:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-cache: HIT, policy, disk\r\nage: 5584\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tWlWbrCvPstFeCPZi4GOusWm%2F8eYCQ2HwfvXjeN3MrXhCZio%2B9RS3ysUesyVwA8OR8NyjPo3UzRnCwGD7UH%2FVVhEWB4CI6W%2FltSNP2MvrH8nWW%2F8YCAk1x2v%2FqQBTmZR9ms%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a490f063ccb332fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16958,"size_decoded":2342,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"5284f8209fd9e3f01ce582fc498a05f0","sha1":"d0df846932749baedddae1233e0e82d813c70df7","sha256":"b39e0b237636de66cad096c2f260c00fb42934f3b15ad0823f0150752990b77b","sha512":"549dc5611f192a413663b99ee15d7c80eb3f1a5cfa815bbee87868f436682a005b85c66a2c0ee1c2e36b55d0287f8673a5de404058740aaa23373fea42358065","ssdeep":"48:vHRw7atIYK4tuTJh/Xy3kLsckDQ+noJCaYfl8r6+:Jw7a2YK4tgJBi3CJk8hCtff+","tlshash":"1872731d3251f005c45b1df31c42c65166a87d4cd90286ff2a9bbe0b387eac6af0627b","first_seen":"2023-07-07T07:28:08Z","last_seen":"2026-10-11T21:28:40.143842Z","times_seen":306,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":17,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ic.155250214.top/20260304/xWs6tUTf/1.jpg","fqdn":"ic.155250214.top","domain":"155250214.top","tld":"top"},"ip":{"addr":"104.26.14.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.272Z","timestamp":1791753938272,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"155250214.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Oct 2026 12:07:51 GMT","end":"Wed, 06 Jan 2027 13:06:32 GMT"},"fingerprint":{"sha1":"2A:C6:5E:1E:DF:CC:E5:FB:56:23:37:15:C0:B5:DB:3A:78:F5:1B:1E","sha256":"AC:A1:4C:26:03:41:C8:39:EC:EA:B8:06:4C:7D:BE:E2:6C:3C:E1:DF:EB:FF:64:D6:E6:FF:C6:B1:59:9A:D8:BA"}}},"request":{"raw":"GET /20260304/xWs6tUTf/1.jpg HTTP/1.1\r\nHost: ic.155250214.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 30275\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\netag: \"69cd8996-7643\"\r\nexpires: Thu, 05 Nov 2026 10:56:02 GMT\r\nlast-modified: Tue, 06 Oct 2026 10:56:01 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, disk\r\nage: 395594\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FJmzCWpKr9YFvypDqQT7N9zcdnVLq1z4YBqBa7NSBUxVAbj2bMC9BwbhaxKp%2B1YfWafozrS5jAIeOQD0n43HdpQl5s2rpDzCf2Y10rNrty9pM6UF47Txer3IUZjdh%2Bl9ZwF%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a490f0438c0b568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30275,"size_decoded":31048,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 720x405, components 3","md5":"f8d5856ceb16db01e7c777cc2ec5a522","sha1":"ae35b4189b1911cd033578cf95df43ebe726e7a7","sha256":"38b2a3e5890dcd8a12a5dce0a74288a5cd851623603c296b29b32ab4a7edcfbb","sha512":"38c6d0c2ac8780f989319e3ba493cefa6b6bc0523a6d6bacb5caab8da7cfd6d4dd7a6d11e846802ccdf0c66403bb4f2b41548a14aae10768ab1fc2b0504ca5b1","ssdeep":"768:gwtMqTsUAgJjGQiwkF8hKBCTOf6t89GDtArwiN4UEaOYkw3XQHm:RtMms6jri8KBBfu0etq4ATkw3gG","tlshash":"e9d2e1283a9690f8b0a1a0308f7dded87ee5c1c124fdcc854c8ae651bc3b96a5b62485","first_seen":"2026-10-11T20:34:31.578881Z","last_seen":"2026-10-11T21:28:40.144658Z","times_seen":2,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":16,"dns":13,"connect":6,"send":0,"wait":30,"receive":0,"ssl":80},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"ic.155250214.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.effedupmovies.com/2013-mdpope-1/Image:","fqdn":"www.effedupmovies.com","domain":"effedupmovies.com","tld":"com"},"ip":{"addr":"185.8.237.6","port":443,"asn":0,"as":"","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.469Z","timestamp":1791753938469,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /2013-mdpope-1/Image: HTTP/1.1\r\nHost: www.effedupmovies.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.5.11\r\nvary: Accept-Encoding,Cookie\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\nlink: \u003chttps://www.effedupmovies.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private, private\r\ncontent-encoding: br\r\nx-provider: WEDOS - WE DO Security (WEDOS.com)\r\nx-cdn-provider: WEDOS Global CDN (WEDOS.delivery)\r\nx-protected-by: WEDOS Global Protection (WEDOS.protection)\r\nx-dns-by: WEDOS anycast DNS servers as a service (WEDOS.zone)\r\nx-status-page: WEDOS Status (WEDOS.status.online)\r\nx-monitored-by: WEDOS Online Monitoring (WEDOS.online)\r\nx-tagline: Built in Europe / EU, securing the future and safety worldwide.\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.5.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"www.effedupmovies.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/favicon.ico","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"151.243.177.124","port":443,"asn":58224,"as":"Iran Telecommunication Company PJS","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:53.316Z","timestamp":1791753953316,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Oct 2026 23:41:24 GMT","end":"Fri, 08 Jan 2027 23:41:23 GMT"},"fingerprint":{"sha1":"29:D5:87:BD:C8:D5:0B:FF:C9:69:32:61:DE:51:13:C4:2F:10:AB:1D","sha256":"7B:70:32:04:DA:41:B9:78:31:C8:DE:04:94:81:62:66:38:B0:7D:D4:B4:60:88:35:CF:9D:AD:89:6E:BF:1C:0D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:53 GMT\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":132,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":2184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fm.lbtup2025.com/upload/vod/2020/01-12/13/1zkg2t2hruu13161zkg2t2hruu59459.jpg","fqdn":"fm.lbtup2025.com","domain":"lbtup2025.com","tld":"com"},"ip":{"addr":"172.67.152.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.227Z","timestamp":1791753938227,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lbtup2025.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Oct 2026 06:19:42 GMT","end":"Mon, 04 Jan 2027 07:18:25 GMT"},"fingerprint":{"sha1":"9C:F4:15:D3:BE:45:5D:C1:34:63:4B:DD:44:A8:DC:D3:F8:B2:09:2F","sha256":"CD:27:1B:F3:73:7B:34:5D:EE:D3:9C:5C:ED:35:7D:37:E1:1B:16:92:10:3E:04:1A:E1:91:8C:ED:FB:81:60:F7"}}},"request":{"raw":"GET /upload/vod/2020/01-12/13/1zkg2t2hruu13161zkg2t2hruu59459.jpg HTTP/1.1\r\nHost: fm.lbtup2025.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 10 Sep 2024 06:08:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UKs4YNDan1GpCltLSHVFDmshvmRidtxlqpZlctmMnM%2BL3qP9ogvFDlr9GdsGCR%2B7id3mbWBfl%2FFANAeR7Kp8c8UVdcAOD1FAtVOPHXv%2B1Igl7oVTUOcuUXAzqRGljsFva91B\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: \"66dfe274-37cc\"\r\nexpires: Tue, 27 Oct 2026 06:57:36 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1261682\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a490f043ceb51ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14284,"size_decoded":15059,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: \"Lavc57.89.100\", baseline, precision 8, 320x240, components 3","md5":"a06cbe2b01ec0f47a520a45c39be6751","sha1":"0247f02b00d4a875478771c8781ed209ff632e50","sha256":"510e241f14a6286e8773ca8617844003ef8773d802bffc8e41b65a9c7d36f0bf","sha512":"48a1196b7b8de48b15229c429dc26142d936acf276526012b91087708346b4d45d3d8cfb770d1911bba344569a8b2be529b7e5157db19a0187ee55ca66bf995b","ssdeep":"384:RCEmRKvwIwCLOq50nk1kGb7H7eNjQDVaBlg/aTHjfTw:Vmep6q50n07HlaB6GHjfs","tlshash":"1452d039b7f00e117fa62b3d775faa11898353380a8ff6125bb5fb92d7198c1005862a","first_seen":"2026-08-14T22:06:37.24868Z","last_seen":"2026-10-11T21:28:40.147212Z","times_seen":7,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":20,"dns":15,"connect":111,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"da.da15525716.com/upload/vod/2019-11-15/15737715092.jpg","fqdn":"da.da15525716.com","domain":"da15525716.com","tld":"com"},"ip":{"addr":"103.224.182.214","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.283Z","timestamp":1791753938283,"http_version":"HTTP/1","security_state":"","security_info":null,"request":{"raw":"GET /upload/vod/2019-11-15/15737715092.jpg HTTP/1.1\r\nHost: da.da15525716.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.0 403 Forbidden\r\ncache-control: no-cache\r\ncontent-type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"da.da15525716.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"da.da15525716.com/uptu/20240619/xlzmoYWH/1.jpg","fqdn":"da.da15525716.com","domain":"da15525716.com","tld":"com"},"ip":{"addr":"103.224.182.214","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.467Z","timestamp":1791753938467,"http_version":"HTTP/1","security_state":"","security_info":null,"request":{"raw":"GET /uptu/20240619/xlzmoYWH/1.jpg HTTP/1.1\r\nHost: da.da15525716.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.0 403 Forbidden\r\ncache-control: no-cache\r\ncontent-type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"da.da15525716.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sexsex10.com/favicon.ico","fqdn":"sexsex10.com","domain":"sexsex10.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.654Z","timestamp":1791753943654,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sexsex10.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"erota2.com/favicon.ico","fqdn":"erota2.com","domain":"erota2.com","tld":"com"},"ip":{"addr":"104.26.5.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:53.309Z","timestamp":1791753953309,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"erota2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 08:05:35 GMT","end":"Sun, 15 Nov 2026 09:04:14 GMT"},"fingerprint":{"sha1":"8E:96:41:B2:60:47:EA:62:72:BF:A3:CC:B7:DC:5E:DE:C8:D3:31:08","sha256":"62:77:7A:A4:FD:B9:89:77:1B:DC:34:D3:D8:B7:33:1E:58:46:17:A4:FB:CB:B5:BF:4D:7B:00:77:48:57:D0:E7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: erota2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\nserver: cloudflare\r\nlocation: /favicon.png\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 456\r\ncache-control: max-age=691200\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2rgOtYn4YWT5Pz8Sy1E%2FdlCg1U4ksApKg0HKiX5BiXXIbJgj1iApE16piBwnyCMx5awdp3T%2BKeS%2BZggvEBQJimcf4I2Hkx6rZwMhlBBrpkmKqv1zVc9ZuaR7vYqD\"}]}\r\npriority: u=4,i\r\ndate: Sun, 11 Oct 2026 21:25:53 GMT\r\ncf-ray: a490f0a08b494c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":5,"connect":44,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fm.fhpicpic.com/upload/vod/20241227-1/a65278972f4a0ff782540e9dc3344f67.jpg","fqdn":"fm.fhpicpic.com","domain":"fhpicpic.com","tld":"com"},"ip":{"addr":"172.67.160.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.221Z","timestamp":1791753938221,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /upload/vod/20241227-1/a65278972f4a0ff782540e9dc3344f67.jpg HTTP/1.1\r\nHost: fm.fhpicpic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 521 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6987\r\nretry-after: 120\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: a490f042bb65b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"521","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"daimgnai.imgdanaizi12-aaa.com:61129/videos/202605/13/6a03540e9b597bca07368c83/poster2.jpg","fqdn":"daimgnai.imgdanaizi12-aaa.com","domain":"imgdanaizi12-aaa.com","tld":"com"},"ip":{"addr":"23.140.204.13","port":61129,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.528Z","timestamp":1791753938528,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daimgnai.imgdanaizi12-aaa.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:09:48 GMT","end":"Sun, 06 Dec 2026 09:09:47 GMT"},"fingerprint":{"sha1":"EC:44:F4:7B:24:8C:35:0A:EE:B2:9C:4B:5E:53:22:41:BC:61:A0:07","sha256":"9D:23:AC:73:0A:FF:B3:EB:7B:3B:1B:C3:FC:3F:F3:59:77:EE:BA:30:98:E9:83:AE:58:C8:59:34:D8:1E:9E:8D"}}},"request":{"raw":"GET /videos/202605/13/6a03540e9b597bca07368c83/poster2.jpg HTTP/1.1\r\nHost: daimgnai.imgdanaizi12-aaa.com:61129\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 50248\r\ncross-origin-opener-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-headers: X-Requested-With, Content-Type\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nlast-modified: Mon, 22 Jun 2026 08:15:01 GMT\r\netag: W/\"c448-19eee65abbb\"\r\nage: 459185\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50248,"size_decoded":51051,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 600x338, components 3","md5":"b01b8c9ec88dec25ba24034ce035626d","sha1":"7256bd01aa9137125884f648a1a4689fb96c22b8","sha256":"23fb6033d41fc1ddb682f8370964499c62d112039b0ad9d15a0d64d095b76df5","sha512":"5b6e26f796bf2f6e8e6f9260f9049bf700491cc32431a4b3493afece591053f8f35e518f2e7a4697345eacb95278467011c1274d4711e30ddd287a6a28824414","ssdeep":"768:8pgNSAoqJmO+KwkmyD/r5C/A2xfsiAD1bUqUc6dMpd8FE3BAy219Sl4PFLg1qqD8:VAHqBJR9clOiADCqUc6dMgKFiglw","tlshash":"a3330197327b2c9eda4e5bb9be54710c56da3d089da1be2913508cd5843c2b4dfb08cb","first_seen":"2026-10-11T20:34:31.661653Z","last_seen":"2026-10-11T21:28:40.149397Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1022,"timings":{"blocked":413,"dns":0,"connect":0,"send":0,"wait":513,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-97b3682e3af64300bc04b2cd7f162f85.r2.dev/a7067d47_84388056_137e.png","fqdn":"pub-97b3682e3af64300bc04b2cd7f162f85.r2.dev","domain":"pub-97b3682e3af64300bc04b2cd7f162f85.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.555Z","timestamp":1791753938555,"http_version":"HTTP/1.1","security_state":"","security_info":null,"request":{"raw":"GET /a7067d47_84388056_137e.png HTTP/1.1\r\nHost: pub-97b3682e3af64300bc04b2cd7f162f85.r2.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 451 Unavailable For Legal Reasons\r\nDate: Sun, 11 Oct 2026 21:25:39 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReferrer-Policy: same-origin\r\nX-Frame-Options: SAMEORIGIN\r\nServer: cloudflare\r\nCF-RAY: a490f04c2f71b500-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"451","status_text":"Unavailable For Legal Reasons","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ag7692.com/favicon.ico","fqdn":"ag7692.com","domain":"ag7692.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:53.292Z","timestamp":1791753953292,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ag7692.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"ag7692.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/ext/pre_3660493195.jpg","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"141.227.152.51","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.302Z","timestamp":1791753938302,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 07:52:05 GMT","end":"Sat, 28 Nov 2026 07:52:04 GMT"},"fingerprint":{"sha1":"C4:4F:9D:C9:09:9D:31:30:C3:4F:AE:A0:F3:18:7E:88:BF:F8:C7:B7","sha256":"81:05:CD:81:08:79:7C:F7:1F:83:1B:B5:4E:5C:E4:F8:F7:31:1C:F5:F7:00:A5:82:73:35:B8:D4:AB:52:95:7F"}}},"request":{"raw":"GET /ext/pre_3660493195.jpg HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8006\r\nlast-modified: Wed, 20 Nov 2024 18:44:05 GMT\r\netag: \"673e2df5-1f46\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8006,"size_decoded":8377,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x226, components 3","md5":"ea22c188fc03b379816633a5bb130d84","sha1":"ac3102ac551ae9cfb56328f930589c9f81f7f73d","sha256":"3d388b359585af3ad5f033f84b7c1335975e7e989616745d861d3f32a71c32b5","sha512":"5c82642b7ae5f22c75729fb1f271dd0aaca6352400797a85ce69de2461b750fd60178055e74add02885aaf0e4d25ab6bf5f0a694c4d7271c7019f73cd24365c8","ssdeep":"192:L3QR4cxGlJjRupiJgpSq3cCLYXru7w5Nc+grFGrI8lEEI1r6zu:TS44KJ1uMg4qIXrpNcc+EI1+y","tlshash":"43f19d1342af5610cf114254e06b713d638edf638e11bd76ad4a8a21be73eb14960bde","first_seen":"2026-03-01T22:30:17.209296Z","last_seen":"2026-10-11T21:28:40.154117Z","times_seen":6,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":297,"dns":0,"connect":0,"send":0,"wait":122,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slaman.sakura.ne.jp/main/wp-content/uploads/2022/03/6c4b07805396a24e18e9a2daa3c10be0.png","fqdn":"slaman.sakura.ne.jp","domain":"slaman.sakura.ne.jp","tld":"sakura.ne.jp"},"ip":{"addr":"49.212.180.77","port":443,"asn":9371,"as":"SAKURA Internet Inc.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.440Z","timestamp":1791753938440,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sakura.ne.jp","organization":""},"issuer":{"commonName":"Gehirn RSA Domain Validation Secure Server CA 2","organization":"Gehirn Inc."},"validity":{"start":"Fri, 01 May 2026 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"99:E6:4E:9A:7B:62:8E:1F:18:6F:A0:A1:AC:0B:E9:87:0A:AB:B2:49","sha256":"20:8B:45:5C:89:E5:E1:D9:7F:00:4E:6D:D4:EE:4C:04:64:10:5E:FD:25:B2:53:F0:22:2B:3E:C2:CD:07:CC:95"}}},"request":{"raw":"GET /main/wp-content/uploads/2022/03/6c4b07805396a24e18e9a2daa3c10be0.png HTTP/1.1\r\nHost: slaman.sakura.ne.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 18 Mar 2022 04:40:36 GMT\r\netag: \"132501-5da76bf6ad900-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Tue, 10 Nov 2026 21:25:40 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1254657,"size_decoded":1254990,"mime_type":"image/png","magic":"PNG image data, 1000 x 750, 8-bit/color RGB, non-interlaced","md5":"ecba6c64f92218a3d9f64d966ee8e6cf","sha1":"d0e4dad3fc082fe1f4560f180f1c5281752499db","sha256":"b1ec53a857107a28f6cf00cb4710426ea09f34a0614b75bbee0e7c8936dbcb76","sha512":"dd1bb2488ff8243303f8343817673d88a26124589af5c32ebd6ca46586dbba540b79b80a308e6301f89e65cf2989661a5e4fff603920297fde6ebad80b5ebe36","ssdeep":"24576:yBLApBEwHeq9zf+fvtH8fYUS5rFw7LCSbUhm2gp8hL:yApBJHp68w7dFw7LCSbEm58hL","tlshash":"54253388afac9e02f450d3ffaa8dadf24949a38a0c34464124c57643fe37165dd873da","first_seen":"2026-08-13T21:31:29.171888Z","last_seen":"2026-10-11T21:28:40.154971Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2549,"timings":{"blocked":549,"dns":3,"connect":265,"send":0,"wait":1187,"receive":0,"ssl":544},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/ext/pre_8181574619.jpg","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"141.227.152.51","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.228Z","timestamp":1791753938228,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 07:52:05 GMT","end":"Sat, 28 Nov 2026 07:52:04 GMT"},"fingerprint":{"sha1":"C4:4F:9D:C9:09:9D:31:30:C3:4F:AE:A0:F3:18:7E:88:BF:F8:C7:B7","sha256":"81:05:CD:81:08:79:7C:F7:1F:83:1B:B5:4E:5C:E4:F8:F7:31:1C:F5:F7:00:A5:82:73:35:B8:D4:AB:52:95:7F"}}},"request":{"raw":"GET /ext/pre_8181574619.jpg HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10590\r\nlast-modified: Wed, 12 Jun 2024 14:02:03 GMT\r\netag: \"6669aa5b-295e\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10590,"size_decoded":10962,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"7aa2e5aa8abcb561900daccdd6232dd0","sha1":"57d23dc1ec923193542ce638e1a4d34a70af728b","sha256":"0ef5fd598ff244e9aba05186526999e004378abc386d5ef5b78c0fd23c406400","sha512":"ac7e3a599828a3a97d01e4f4bfaf72c8c56b8ea67fb8e4a18da723a0e25f1ce2cf66e781e27efcd617d5e686d92e5ddf3e9d393eec9a75ceccf34486229ca978","ssdeep":"192:llu7KDZXW4qLxgG4VpggU+vxZ8ymJXcKRjWhKe3z:qb4qVYFvsXJMKBWhK+","tlshash":"1122c0563faa682cd08d9cf69a7afa628343fc919500970f35b339c2374654c49f5bd8","first_seen":"2025-07-27T03:07:11.926444Z","last_seen":"2026-10-11T21:28:40.155978Z","times_seen":8,"resource_available":false,"data":null}},"time_used":462,"timings":{"blocked":376,"dns":3,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"liangthd.com/favicon.ico","fqdn":"liangthd.com","domain":"liangthd.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.378Z","timestamp":1791753943378,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: liangthd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"liangthd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fixedjs.av4me.xyz/av4usimage.png","fqdn":"fixedjs.av4me.xyz","domain":"av4me.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:50.773Z","timestamp":1791753950773,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /av4usimage.png HTTP/1.1\r\nHost: fixedjs.av4me.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Storage-Access: none\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.jkuntubrwjbe.com/upload/vod/20231026-1/aabbf8fea7cf5b3a4269f23ca240d7ac.jpg","fqdn":"www.jkuntubrwjbe.com","domain":"jkuntubrwjbe.com","tld":"com"},"ip":{"addr":"64.112.76.43","port":443,"asn":6939,"as":"HURRICANE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.477Z","timestamp":1791753938477,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jkuntubrwjbe.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Sun, 02 Aug 2026 13:15:18 GMT","end":"Wed, 17 Feb 2027 13:15:17 GMT"},"fingerprint":{"sha1":"04:01:E8:9E:2B:62:5D:FE:0B:A9:53:D4:1F:E6:51:63:AB:C3:7D:D1","sha256":"4B:12:CA:BD:90:23:E5:0F:E8:4C:08:32:E1:DD:A0:12:78:9A:3B:AA:8E:9E:A8:7B:AD:F8:B1:73:52:4F:80:A9"}}},"request":{"raw":"GET /upload/vod/20231026-1/aabbf8fea7cf5b3a4269f23ca240d7ac.jpg HTTP/1.1\r\nHost: www.jkuntubrwjbe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 11 Oct 2026 21:25:40 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 43802\r\nConnection: keep-alive\r\nLast-Modified: Thu, 26 Oct 2023 06:44:04 GMT\r\nVary: Accept-Encoding\r\nETag: \"653a0ab4-ab1a\"\r\nExpires: Mon, 12 Oct 2026 23:54:23 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nCache-Control: max-age=2592000, public, max-age=15768000\r\nCache: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43802,"size_decoded":44242,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 639x640, segment length 16, comment: \"Lavc57.89.100\", baseline, precision 8, 640x1136, components 3","md5":"4f49662679637eced595c24762c3187f","sha1":"aadb6c95235b28e9cc62440768aa03a415b0e914","sha256":"4a686fddef6d182a592784612591c841d64a8efb7f1720fd48ea17af602f9683","sha512":"77296b8baa4f8ec9e6d439b75f1fd00e529e4bf3a9b7991ce1b3033ca0aa806e6c0ff2ef2dc070529bbb2b24fee4fa120d1aa698e1fa83387c10c5da655d3143","ssdeep":"768:e7CHR3QF9WNBTz/IKWNTMQvot4B20NNwUFqBGS6NldKPsq8/PR9+aSgbiC:e7g3QF9ABf/Infot62e6UFqBbudkWPR1","tlshash":"d513f134723b20ca8da4c5a4765c6fdb91994bb4b8108deb1028bb0b7db953147caa5e","first_seen":"2025-11-29T14:10:53.005586Z","last_seen":"2026-10-11T21:28:40.157334Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2301,"timings":{"blocked":694,"dns":0,"connect":150,"send":0,"wait":201,"receive":184,"ssl":1072},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"www.jkuntubrwjbe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fqjpg10.top/upload/vod/20260520-1/bcb6f72fd2280cc4a31aa0405a8b677a.png","fqdn":"fqjpg10.top","domain":"fqjpg10.top","tld":"top"},"ip":{"addr":"23.134.76.191","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.549Z","timestamp":1791753938549,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fqjpg10.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 05:27:48 GMT","end":"Mon, 02 Nov 2026 05:27:47 GMT"},"fingerprint":{"sha1":"CE:28:80:B0:05:19:5C:8B:0B:3B:EC:8F:4D:FB:7C:6A:9C:16:0E:51","sha256":"92:80:CD:0C:A7:99:7A:96:A5:ED:DE:0F:9F:7B:C6:04:F5:36:1A:01:69:60:53:9D:3B:8F:14:E8:BF:FA:4B:29"}}},"request":{"raw":"GET /upload/vod/20260520-1/bcb6f72fd2280cc4a31aa0405a8b677a.png HTTP/1.1\r\nHost: fqjpg10.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 11 Oct 2026 21:25:39 GMT\r\nContent-Type: image/png\r\nContent-Length: 132193\r\nConnection: keep-alive\r\nLast-Modified: Tue, 19 May 2026 17:55:28 GMT\r\nETag: \"6a0ca410-20461\"\r\nExpires: Sat, 17 Oct 2026 18:44:28 GMT\r\nX-Cache-Status: HIT\r\nCache-Control: max-age=2592000, public, max-age=31536000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":132193,"size_decoded":132548,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x1920, components 3","md5":"c52999016e4a82af29a307fc3fbd5635","sha1":"1aa0c9d4376d60e776489f79d3c5cc0c78e85985","sha256":"5c831e91c1a47161c58c57d0646c70ffbd74d2512307ede0e0bad83375317d14","sha512":"265626e3c1bfe1b71797959147ffaec04ff96b732d03bb626aa67619cfb392cbb3084e32fc9e25a046dc4487d8a4ac0d7e98ea53a5fbec374868ad3c506c66b8","ssdeep":"3072:4VzZIo8rbMV5/r6EbtMfcK2hosW8qdKLQWoQ9:QZv8rWtbOfc/qcca","tlshash":"a1d3121307421ffbebf8827286cf4e866a660364a1bd7940f6e489c5d7b7560c9dcda0","first_seen":"2026-07-04T09:53:55.893209Z","last_seen":"2026-10-11T21:28:40.158298Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1126,"timings":{"blocked":970,"dns":0,"connect":0,"send":0,"wait":110,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"fqjpg10.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pizdauz.cc/files/uzbekskiy_seks/video_parnyu_1/screen.jpg","fqdn":"pizdauz.cc","domain":"pizdauz.cc","tld":"cc"},"ip":{"addr":"194.146.127.68","port":443,"asn":207728,"as":"EUROHOSTER Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:40.055Z","timestamp":1791753940055,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pizdauz.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 23:16:57 GMT","end":"Mon, 04 Jan 2027 23:16:56 GMT"},"fingerprint":{"sha1":"4E:83:B0:F8:ED:2B:C0:6D:93:80:2E:FE:90:94:5F:C2:62:4B:06:0B","sha256":"75:5B:98:81:50:CC:D8:FD:EE:F1:0C:88:A5:B9:55:28:BD:27:CF:69:87:38:33:3C:CE:D0:CB:BB:2E:3D:E1:FE"}}},"request":{"raw":"GET /files/uzbekskiy_seks/video_parnyu_1/screen.jpg HTTP/1.1\r\nHost: pizdauz.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Storage-Access: none\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 11 Oct 2026 21:25:40 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 13708\r\nLast-Modified: Thu, 02 Jul 2020 15:20:56 GMT\r\nConnection: keep-alive\r\nETag: \"5efdfb58-358c\"\r\nExpires: Mon, 12 Oct 2026 21:25:40 GMT\r\nCache-Control: max-age=86400\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13708,"size_decoded":14059,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 480x360, components 3","md5":"61f49b1358cf59a06c9f4401093b350d","sha1":"9924b4257b97e0d9f9c0187da3ac0fc18de8c58e","sha256":"2fac6621ed02426fa41615dfd9fc3c8ba6dc75f9d3615b9590e961e5baf63db7","sha512":"64811f2576b55985d0ca5083f2232a8c3364537637ceba2d6b5b933e9bbdc0a3084ad59a6f5a671deacfaa27705d8bb91788d7de17f1e540a12ad7e10dd01614","ssdeep":"192:wc3npQmXM8fTspuVDH/q0P4mWfJhbgHTz97/Dj9qtmKOJk39FwAwTqHNsuf4UBpV:j3npPtfxS0rWfJhbgND9Ez9i2lf7DoG","tlshash":"4e52af6ba2849502d27e6030c0c94715560edbaf1c45a31a686bf7ba9b1ccdb94d6cf8","first_seen":"2025-03-25T21:53:49.726737Z","last_seen":"2026-10-11T21:28:40.159128Z","times_seen":3,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":2,"connect":23,"send":0,"wait":46,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.com/favicon.ico","fqdn":"www.9188porn.com","domain":"9188porn.com","tld":"com"},"ip":{"addr":"104.21.17.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.302Z","timestamp":1791753943302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9188porn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 09:17:44 GMT","end":"Wed, 23 Dec 2026 10:15:30 GMT"},"fingerprint":{"sha1":"56:38:B7:B6:49:E8:A4:E3:4E:6A:33:3A:A9:E4:C2:9C:3E:55:0E:0E","sha256":"BF:18:B9:5E:BB:6F:AF:4C:90:E7:A0:54:0E:47:DC:6D:E0:5C:48:FA:94:13:C9:53:D5:F4:89:0E:A2:22:AE:42"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.9188porn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aTLBWtl7BU18oz8C0xcN8kRYZ5O3%2BJjEVhWEzetXS488CPdhEsUgWkjK5thQElyGENN785esskUV4VSbiBKCUOqFtQvOmV8MNA0sHPbXPif8VlXad5eLd2kbYZ4n8F3dadK5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-ray: a490f061b8290b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oedy9.com/favicon.ico","fqdn":"oedy9.com","domain":"oedy9.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.522Z","timestamp":1791753943522,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: oedy9.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"oedy9.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jpxjpg5.top/upload/vod/20250814-1/1bbad67cd5ee42594a0c3649041002c3.png","fqdn":"jpxjpg5.top","domain":"jpxjpg5.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.551Z","timestamp":1791753938551,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /upload/vod/20250814-1/1bbad67cd5ee42594a0c3649041002c3.png HTTP/1.1\r\nHost: jpxjpg5.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jpxjpg5.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.jkuntp.com/upload/vod/20230814-1/357bad30d0afcd3b78def460a222309a.jpg","fqdn":"www.jkuntp.com","domain":"jkuntp.com","tld":"com"},"ip":{"addr":"156.246.16.44","port":443,"asn":139646,"as":"HONG KONG Megalayer Technology Co.,Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.204Z","timestamp":1791753938204,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jkuntp.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Sat, 11 Apr 2026 04:32:20 GMT","end":"Tue, 27 Oct 2026 04:32:19 GMT"},"fingerprint":{"sha1":"CC:A2:E2:EF:B2:98:24:3C:B9:AF:A1:E1:07:87:08:A0:5C:D5:85:C3","sha256":"49:55:1E:17:AA:55:6C:E0:A5:04:4D:42:DA:24:A2:79:1D:25:3F:D2:FD:21:2E:D2:49:35:AE:D0:72:51:AF:AF"}}},"request":{"raw":"GET /upload/vod/20230814-1/357bad30d0afcd3b78def460a222309a.jpg HTTP/1.1\r\nHost: www.jkuntp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 11 Oct 2026 21:07:08 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 59723\r\nConnection: keep-alive\r\nLast-Modified: Mon, 14 Aug 2023 04:06:31 GMT\r\nVary: Accept-Encoding\r\nETag: \"64d9a847-e94b\"\r\nExpires: Thu, 29 Oct 2026 15:14:40 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nCache-Control: max-age=2592000, public, max-age=15768000\r\nCache: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59723,"size_decoded":60163,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 980x550, components 3","md5":"a399136fbef92b74f7094020e7ef6dd8","sha1":"698f4228e5a02ca4f005cb17191713eece1391fa","sha256":"3812e04daaba40df8f0a9904a207445ea3816422b1909d87828e3137b52d3f01","sha512":"56d91476c5094136199efa6ca2794fe24abe172db75e46945bb7d3a139ac2d8d2d27f0fdc706bf20d8b4c554b0a882f5420909d65ac8a838e8e088b4654d3a50","ssdeep":"1536:rfF9KEpkj4i/oL/XI5qXpPEhbbYVjKHrEjHJq1Q:xRkb/47pcheaIjH8Q","tlshash":"f04302835bc5ce1954bb842cd8fe01e244d4751f43f0e5a306ae1da2aada15daf52ccb","first_seen":"2025-05-20T07:09:21.254715Z","last_seen":"2026-10-11T21:28:39.852889Z","times_seen":43,"resource_available":false,"data":null}},"time_used":1651,"timings":{"blocked":572,"dns":1,"connect":304,"send":0,"wait":207,"receive":249,"ssl":317},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dogsanimalxxx.club/tmbs/11/920_pony.jpg","fqdn":"dogsanimalxxx.club","domain":"dogsanimalxxx.club","tld":"club"},"ip":{"addr":"172.67.160.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.320Z","timestamp":1791753938320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dogsanimalxxx.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 10:00:08 GMT","end":"Thu, 12 Nov 2026 10:57:49 GMT"},"fingerprint":{"sha1":"F2:52:3D:7E:95:7F:9A:2B:EF:71:55:69:3D:38:A5:6A:84:28:CD:51","sha256":"67:2E:00:9F:49:00:30:8F:88:73:F8:DB:79:BE:7E:B3:70:AE:55:30:DC:EF:A6:98:59:9C:C5:7C:DE:B0:C4:9D"}}},"request":{"raw":"GET /tmbs/11/920_pony.jpg HTTP/1.1\r\nHost: dogsanimalxxx.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 11 May 2021 12:34:02 GMT\r\netag: \"609a79ba-47b2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-request-id: 8c87368145e5d7dfd3b751d0d473f4d6\r\naccept-ranges: bytes\r\nage: 5690990\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1cMPkE75R2%2B4fDjc1B7luI6inSXjY16DTxrxqc%2B1%2BuUZ2J9CvfcrsT%2FNngJbj0XoRCHJsa5VUL7iojaCIxJD8MqL5W4vDfmgf%2FcTGDBtnZwZiK77hdsxrQMBYROOdGidM1b3Nxo%3D\"}]}\r\ncf-ray: a490f0474ba2569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18354\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18354,"size_decoded":19157,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x230, components 3","md5":"4514462ea127a5843be2d664baca262e","sha1":"4626613d7e27eaa191f1df04b668c268f5755e67","sha256":"6a4697d8846fa51cccc6944f64e7d833aa713486ae7da4449edadf83fe019639","sha512":"c94832e16db0d333ee83072eeff6f4a75e16ef10cd55b8252a4406e0e3a68cbec6da362025fc847a5251710d85278ad3d0bbb272016701a031efbf206ff879d6","ssdeep":"384:214FooA0QMHlXV+myPqBLAS5VUKQ4eQXv1tPQzL+HrWf3CGh:2qFoL1MFXkRCNN5zbvXPQeHqhh","tlshash":"6982c091e5d938a8c45c462e3bfe110e73552f24b8729a6598cd75308b683f79e848f1","first_seen":"2025-08-10T08:21:55.566227Z","last_seen":"2026-10-11T21:28:40.160175Z","times_seen":5,"resource_available":false,"data":null}},"time_used":699,"timings":{"blocked":662,"dns":4,"connect":11,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornolomka.com/uploads/posts/2018-06/medium/1529524794_00-01-14.jpg","fqdn":"pornolomka.com","domain":"pornolomka.com","tld":"com"},"ip":{"addr":"91.194.110.16","port":443,"asn":213166,"as":"UA-Hosting SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.479Z","timestamp":1791753938479,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pornolomka.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 10:27:36 GMT","end":"Sun, 03 Jan 2027 10:27:35 GMT"},"fingerprint":{"sha1":"28:1C:91:A0:84:6C:D4:E4:E4:4F:FF:C5:77:B5:65:CB:1C:E9:29:EE","sha256":"04:D4:D0:74:D1:B4:D8:BE:AB:0F:2A:AB:2D:69:67:74:D4:21:23:A7:84:9D:5E:D1:FF:CE:62:33:07:68:D9:6B"}}},"request":{"raw":"GET /uploads/posts/2018-06/medium/1529524794_00-01-14.jpg HTTP/1.1\r\nHost: pornolomka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.10.3\r\ndate: Sun, 11 Oct 2026 21:23:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 91163\r\nlast-modified: Sun, 30 Aug 2020 17:03:15 GMT\r\netag: \"5f4bdbd3-1641b\"\r\nexpires: Tue, 10 Nov 2026 21:23:02 GMT\r\ncache-control: max-age=2592000, public, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":91163,"size_decoded":91489,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 450x337, components 3","md5":"a9653669ab991314b01436ba90c4d4f8","sha1":"f8e174221dc719100ea60afb3fde9770375be5e8","sha256":"488bd1e33a7e5718acb73ac788ca6d7a55f49e35dbf367502560d1d836ee9115","sha512":"710374dc6697b1794782e12c8f26d2b901d226009d8fb10ddd0a7b1fe397c23b1e89592cf005302770226c39c80da943fdc247dc0e4739f8f6430a04b3922560","ssdeep":"1536:lXGbxnsxe1m/7e8QkU5vQNzXgduFgOvo2ZFRFzPU/EYvXTNsYYLYoLh3vOg:QIA/P75vkMdaFdZwsYWXV35","tlshash":"0a930290c835f6d39d92c9a75481c6441a00f8f2ba5906c25f62a9eacc3ef5fcf58c72","first_seen":"2024-05-01T09:21:16Z","last_seen":"2026-10-11T21:28:40.162315Z","times_seen":5,"resource_available":false,"data":null}},"time_used":896,"timings":{"blocked":619,"dns":0,"connect":0,"send":0,"wait":86,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-1.ggjav.com/media/video/large_275359.jpg","fqdn":"cdn-1.ggjav.com","domain":"ggjav.com","tld":"com"},"ip":{"addr":"51.161.116.102","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.525Z","timestamp":1791753938525,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cdn-1.ggjav.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 00:10:59 GMT","end":"Sat, 21 Nov 2026 00:10:58 GMT"},"fingerprint":{"sha1":"01:BC:C1:CB:80:B7:5A:D2:47:89:F5:3A:78:42:9A:83:65:50:32:AA","sha256":"17:BE:4A:29:E4:AF:36:32:53:D9:4C:19:19:0E:E8:7B:83:E1:4D:41:B7:D8:1C:8C:28:40:B9:12:C4:8C:FE:8E"}}},"request":{"raw":"GET /media/video/large_275359.jpg HTTP/1.1\r\nHost: cdn-1.ggjav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sun, 11 Oct 2026 21:25:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 55886\r\nlast-modified: Sat, 26 Oct 2024 05:12:11 GMT\r\netag: \"671c7a2b-da4e\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":55886,"size_decoded":56129,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x562, components 3","md5":"772ddc5bb6e594573bd6b385c2019522","sha1":"dda9f2f6351fb9b358af5055b16f0b172a0044fe","sha256":"d1f08511242025ff7a36b25f576f711bcc79554915f95659a44b0cc20dd8d98f","sha512":"c14d1f19fdb88aea25583631f9efe3d3afe9dcdee0a9392403503420ba8ba003203b93571f90457bdc4dbdb5e34d06c62c6221f8af4e6b4f9951a2bcb3b8cec1","ssdeep":"1536:fY0BX0SuQoC5oGajjl1cdT4boDSwBpahACwP7SZPUPVO:g0BNuQoCSGwfcFNDSwJCXPUVO","tlshash":"3c4302adb517162fa70970c72f81084e8c68a0f7f900a0dd78e70d291dc5cb6ee7958a","first_seen":"2026-10-11T20:34:31.527646Z","last_seen":"2026-10-11T21:28:40.165929Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1631,"timings":{"blocked":848,"dns":1,"connect":118,"send":0,"wait":106,"receive":317,"ssl":234},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjimg.cdn-xj.cc/upload/litpic/2025-03-28/1743166934_834.jpg","fqdn":"xjimg.cdn-xj.cc","domain":"cdn-xj.cc","tld":"cc"},"ip":{"addr":"138.199.37.232","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.601Z","timestamp":1791753938601,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xjimg.cdn-xj.cc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 10:02:56 GMT","end":"Mon, 28 Dec 2026 10:02:55 GMT"},"fingerprint":{"sha1":"C3:2B:25:ED:DB:3A:48:72:23:2D:AC:39:4B:2B:A2:3B:9D:31:0F:B7","sha256":"28:D4:8A:0A:FA:01:6B:06:FC:A8:31:EC:49:6D:F7:BF:AB:BD:50:EC:46:35:ED:9C:56:94:33:68:58:92:20:F7"}}},"request":{"raw":"GET /upload/litpic/2025-03-28/1743166934_834.jpg HTTP/1.1\r\nHost: xjimg.cdn-xj.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 58704\r\nserver: BunnyCDN-DE1-874\r\ncdn-pullzone: 5480810\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"feb2f99d57cc5fadbecd5cf7ed4c5547\"\r\nlast-modified: Mon, 12 Jan 2026 13:29:13 GMT\r\nx-amz-id-2: LXesCa8JylKXbngNK8xO0SgRHmurkDoj5Nhed1dWwc2gZf30g9eRXvPQS3C/VHJxVJf4sE/dfRRd\r\nx-amz-meta-mtime: 1743166934.556101876\r\nx-amz-request-id: 67E0D7F0B41852C4:B\r\nx-wasabi-cm-reference-id: 1778144722 R119-U21.prod16.svy1 365404360:3453544:70\r\ncdn-proxyver: 1.52\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1333\r\ncdn-cachedat: 05/07/2026 12:22:45\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 56cf4a417c9ac46797928cd0af9da796\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":58704,"size_decoded":59866,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 390x260, components 3","md5":"feb2f99d57cc5fadbecd5cf7ed4c5547","sha1":"1595120049b746599df1f216591892088f8fc4bd","sha256":"0ce11a8d0ff4db7e91b3549406b052f2c5d24ad5ca9c9d4ce9dcd183d3662b5a","sha512":"f86add66bb34be742661d8c1199ef122994910e671628454eb042edc1c1b03d48b1e1f3263bb23213141dedbde9b6e28c3f67e96c5b5ce6f24fdf133011bbf8c","ssdeep":"1536:R/+G+7W83VyGeK2PqA5vF57xJWzlurxlXQ+YlREfW:5+f7WE4fKYD5vPxJWzg/XQ+YIu","tlshash":"e24302fbe52b906336450ee906b3012ac74ac8cff5e10a887519ff09ad7e2d45097e9d","first_seen":"2026-09-27T16:26:31.238723Z","last_seen":"2026-10-11T21:28:40.168636Z","times_seen":4,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":167,"dns":0,"connect":0,"send":0,"wait":101,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"xjimg.cdn-xj.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tubetubetube.com/tubes/javfinder/remu.hayami/video6400/1.jpg","fqdn":"tubetubetube.com","domain":"tubetubetube.com","tld":"com"},"ip":{"addr":"104.21.65.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:40.719Z","timestamp":1791753940719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tubetubetube.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 07:53:54 GMT","end":"Sat, 05 Dec 2026 08:53:42 GMT"},"fingerprint":{"sha1":"E7:5A:8A:91:A0:BD:55:FA:3D:B4:74:A0:13:5F:04:2C:E8:A9:C2:74","sha256":"82:DC:10:75:E4:23:3A:DB:3E:07:3E:DD:20:A2:60:0F:F7:57:E2:1E:12:25:76:BC:A9:DA:05:AE:79:D5:61:D8"}}},"request":{"raw":"GET /tubes/javfinder/remu.hayami/video6400/1.jpg HTTP/1.1\r\nHost: tubetubetube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://en.4us.asia/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:40 GMT\r\ncontent-type: text/html\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D6cO0ZRSiocMxiRx6wCQEIbmqAQ0HQRS%2F%2Fl%2FM4iyiEz41KbHO6xs830tq4SdD8qDBKAO4pNTpVOzGWtMgiclPmd8B3KXL5ABNOS5rIKHxHMlsbPjVlLQb0ds51oiQB%2FelCTu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlocation: https://g.uuu.cam/movie/javfinder/remu.hayami/video6400/1.jpg\r\nage: 205\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\ncf-ray: a490f051996d568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":4,"connect":9,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baraag.net/@KDE/image/png","fqdn":"baraag.net","domain":"baraag.net","tld":"net"},"ip":{"addr":"167.104.221.188","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.282Z","timestamp":1791753938282,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /@KDE/image/png HTTP/1.1\r\nHost: baraag.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding, Accept, Accept-Language, Cookie\r\nserver: Mastodon\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nreferrer-policy: same-origin\r\ncache-control: max-age=15, public, stale-while-revalidate=30, stale-if-error=86400\r\ncontent-security-policy: base-uri 'none'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://baraag.net; img-src 'self' data: blob: https://baraag.net https://media.baraag.net; media-src 'self' data: https://baraag.net https://media.baraag.net; manifest-src 'self' https://baraag.net; form-action 'none'; child-src 'self' blob: https://baraag.net; worker-src 'self' blob: https://baraag.net; connect-src 'self' data: blob: https://baraag.net https://media.baraag.net wss://baraag.net; frame-src 'self' https:; style-src 'self' https://baraag.net 'nonce-kQ8Y//z6msB4JkHTlNYmwg=='; script-src 'self' https://baraag.net 'wasm-unsafe-eval' 'sha256-OgOg5CGI7D4Syg38sNIknJKO+3DCTdpfY1ciC+Bklaw='\r\nx-request-id: 843fb96d-f33e-4cda-9865-08a5693881b9\r\nx-runtime: 0.020267\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cached: HIT\r\ncontent-encoding: gzip\r\nx-cache-t: large\r\nx-varnish: 41529937125\r\nage: 0\r\nvia: 1.1 fe-nl-1 (Varnish/7.7)\r\nx-cache: MISS\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Mastodon","description":"Mastodon is a free and open-source self-hosted social networking service.","website":"https://joinmastodon.org","common_platform_enumeration":"","icon":"Mastodon.svg","categories":["Message boards"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"filtradas.com/uploads/default/optimized/2X/6/6de56563a38abad3b3e381d35449d46426ddeae4_2_580x1024.jpeg","fqdn":"filtradas.com","domain":"filtradas.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.493Z","timestamp":1791753938493,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"filtradas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Oct 2026 23:41:24 GMT","end":"Fri, 08 Jan 2027 23:41:23 GMT"},"fingerprint":{"sha1":"29:D5:87:BD:C8:D5:0B:FF:C9:69:32:61:DE:51:13:C4:2F:10:AB:1D","sha256":"7B:70:32:04:DA:41:B9:78:31:C8:DE:04:94:81:62:66:38:B0:7D:D4:B4:60:88:35:CF:9D:AD:89:6E:BF:1C:0D"}}},"request":{"raw":"GET /uploads/default/optimized/2X/6/6de56563a38abad3b3e381d35449d46426ddeae4_2_580x1024.jpeg HTTP/1.1\r\nHost: filtradas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pizdauz.cc/favicon.ico","fqdn":"pizdauz.cc","domain":"pizdauz.cc","tld":"cc"},"ip":{"addr":"194.146.127.68","port":443,"asn":207728,"as":"EUROHOSTER Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.485Z","timestamp":1791753943485,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pizdauz.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 23:16:57 GMT","end":"Mon, 04 Jan 2027 23:16:56 GMT"},"fingerprint":{"sha1":"4E:83:B0:F8:ED:2B:C0:6D:93:80:2E:FE:90:94:5F:C2:62:4B:06:0B","sha256":"75:5B:98:81:50:CC:D8:FD:EE:F1:0C:88:A5:B9:55:28:BD:27:CF:69:87:38:33:3C:CE:D0:CB:BB:2E:3D:E1:FE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pizdauz.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 11 Oct 2026 21:25:43 GMT\r\nContent-Type: image/vnd.microsoft.icon\r\nContent-Length: 1150\r\nConnection: keep-alive\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Thu, 02 Jul 2020 15:02:35 GMT\r\nETag: \"47e-5a976b2dd6000\"\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=60\r\nStrict-Transport-Security: max-age=31536000;\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1150,"size_decoded":1504,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"0177fe6e0018eb853a8c8dc0613fcbb1","sha1":"a0cf2ed70318f4dec7eb983782dd7e5dfe382b9c","sha256":"d873fcd96aba0179c8773f6211afb165635a69b81ea5a3c801599ef192dbc7b5","sha512":"f6441ffa67efe1dd8c6658da97af8864dd87414a1d7317d9ab4e7c840669d388ca1e195dc8d8add52ab4210f7df64a919b6587e639c95d20daadde9b92979fd3","ssdeep":"","tlshash":"ce2141517be9d08cec685b30e5131ff90482be83c9a0694b141bbf1a363519608a8061","first_seen":"2023-05-04T22:30:41Z","last_seen":"2026-10-11T21:28:40.169464Z","times_seen":335,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beastiality.tv/favicon.ico","fqdn":"beastiality.tv","domain":"beastiality.tv","tld":"tv"},"ip":{"addr":"172.67.186.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.288Z","timestamp":1791753943288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"beastiality.tv","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 12:55:45 GMT","end":"Sat, 05 Dec 2026 13:55:32 GMT"},"fingerprint":{"sha1":"CC:E3:A5:51:13:20:60:3C:14:6D:69:6F:2F:46:C4:3F:09:62:24:8E","sha256":"23:91:3B:40:56:3F:41:8E:11:A6:B5:E4:D8:63:15:9A:F8:43:93:7F:AE:D9:CD:AE:6D:73:DE:B4:16:4B:2D:96"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: beastiality.tv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0udMBOem33igkoHYEkWHQAcu93Dr%2BQUwJS8pIrvelusCfJMIMajeFLJ6JtB7RPqqs1FMo4ozXEd0pv0DmKl7OJdRVEIyE4dusoQUrXgKPdSjavmQ47rVeXDPGoQFTQfoFA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\nlast-modified: Thu, 14 Sep 2023 05:48:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"3aee-6054b39593be1\"\r\nx-request-id: 49a1c1a5f00ff11246e832310d31d34c\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a490f061edff5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15086,"size_decoded":5425,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"bdbad03075ba19845a35a226d1f77e96","sha1":"b0ad70000a9f01d2a32028f7975416fbb1bd7e32","sha256":"8ddc4137a5caba56cbdc1674807cb32d9ff165e0b8e98888cf1d02261b89fcfa","sha512":"319814582cfac239b5d5d397c29cecd63b86afa1a3359141d5ff4429382ca8fd369a778286bc1b19885ea913b9fa7fb16a73949d89245a4eb918d9ca210d9056","ssdeep":"384:jU6pNXaqsgg+gg5lRzJloXp5rcnRTc+jpvEX:I6/lRzJloXp5rcnRTcspsX","tlshash":"5362ac502f7ccd80e1d198fca009a794fdb7e02617d9e941d5aa1ceed4ec6973ac9283","first_seen":"2023-07-02T04:56:52Z","last_seen":"2026-10-11T21:28:40.170149Z","times_seen":9,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":8,"connect":50,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luolix9.com/favicon.ico","fqdn":"www.luolix9.com","domain":"luolix9.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:53.282Z","timestamp":1791753953282,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.luolix9.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornolomka.com/favicon.ico","fqdn":"pornolomka.com","domain":"pornolomka.com","tld":"com"},"ip":{"addr":"91.194.110.16","port":443,"asn":213166,"as":"UA-Hosting SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:53.307Z","timestamp":1791753953307,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pornolomka.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 10:27:36 GMT","end":"Sun, 03 Jan 2027 10:27:35 GMT"},"fingerprint":{"sha1":"28:1C:91:A0:84:6C:D4:E4:E4:4F:FF:C5:77:B5:65:CB:1C:E9:29:EE","sha256":"04:D4:D0:74:D1:B4:D8:BE:AB:0F:2A:AB:2D:69:67:74:D4:21:23:A7:84:9D:5E:D1:FF:CE:62:33:07:68:D9:6B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pornolomka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx/1.10.3\r\ndate: Sun, 11 Oct 2026 21:23:16 GMT\r\ncontent-type: text/html\r\ncontent-length: 169\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stickamvids.net/photos/2019/08/10680_0_300.jpg","fqdn":"stickamvids.net","domain":"stickamvids.net","tld":"net"},"ip":{"addr":"80.209.253.45","port":443,"asn":204196,"as":"Abelohost BV","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.501Z","timestamp":1791753938501,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stickamvids.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 04:23:12 GMT","end":"Wed, 02 Dec 2026 04:23:11 GMT"},"fingerprint":{"sha1":"98:67:FB:F7:A6:17:7D:FB:15:4F:64:5B:81:34:26:16:5C:F4:8C:E9","sha256":"C2:93:B8:02:1D:86:AD:4D:AA:D4:7A:F8:C0:5D:51:5F:BE:5C:6A:D3:E4:9C:E9:19:28:88:39:D8:B8:92:B8:97"}}},"request":{"raw":"GET /photos/2019/08/10680_0_300.jpg HTTP/1.1\r\nHost: stickamvids.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5055\r\nlast-modified: Wed, 14 Feb 2024 17:08:40 GMT\r\netag: \"65ccf398-13bf\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5055,"size_decoded":5401,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 230x172, components 3","md5":"7a386ce31a9184efd68e8021b7091752","sha1":"4575143b184fdbce1795ed8643fcb52dbb4fbded","sha256":"ba8ad6a0be3e4397e7064f22bb5e24341271080c8b64b64bd0a77c1b6bad3f2a","sha512":"47cb7a9aa9ee904a2f83e44de3fa7c83e6ee16ac1f321f536e7e8c833349fe4b6a0165662b1bbc7fb602ca6feaf09cdb9ff4568a7f5f7aba56d59ba4385a24cb","ssdeep":"96:LahQESkvOv6ZUBCbstMHFE86Ug5CVV4e5jnl5opmWFpbODLD6o2sl:LQQVkvOv6ZUBsvpPVV1jUgiYXetsl","tlshash":"d6a17e02c73135526f3795be45237d63fe1d9ab638983a3a62121c3595e7f360a9821c","first_seen":"2026-10-11T20:34:31.485005Z","last_seen":"2026-10-11T21:28:40.1719Z","times_seen":2,"resource_available":false,"data":null}},"time_used":496,"timings":{"blocked":459,"dns":0,"connect":0,"send":0,"wait":27,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornohlam.com/favicon.ico","fqdn":"pornohlam.com","domain":"pornohlam.com","tld":"com"},"ip":{"addr":"91.194.110.9","port":443,"asn":213166,"as":"UA-Hosting SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.341Z","timestamp":1791753943341,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pornohlam.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 10:23:43 GMT","end":"Sun, 03 Jan 2027 10:23:42 GMT"},"fingerprint":{"sha1":"DE:9B:AC:02:B4:C4:E1:6F:9E:D8:94:22:B2:81:3B:F6:54:21:64:FE","sha256":"63:A8:55:1D:9D:10:29:52:AD:42:E8:DB:AA:F8:00:BF:0F:D8:34:07:1D:C3:84:59:20:37:E8:7C:0F:4D:C6:A4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pornohlam.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx/1.10.3\r\ndate: Sun, 11 Oct 2026 21:23:06 GMT\r\ncontent-type: text/html\r\ncontent-length: 169\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.9188porn.com/","fqdn":"www.9188porn.com","domain":"9188porn.com","tld":"com"},"ip":{"addr":"104.21.17.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.226Z","timestamp":1791753938226,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.9188porn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h%2FL6vHeuJIBORHrkicmBeXltZhiGXK9J67LtKD0Zj8n8ju0nAsO5BBb%2B%2FQvprXrfLgjq1pA7XKfukL3YcEqxmky4NqYOHwpWMSvLuuehJkidWN3fIBmdbjG7j3VKCOHXpoEt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a490f04318c8c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luolix9.com/favicon.ico","fqdn":"www.luolix9.com","domain":"luolix9.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.331Z","timestamp":1791753943331,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.luolix9.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jpgjingpinx1.top/upload/vod/20250808-1/01c646b4ec38ca6edd434378c53664ee.png","fqdn":"jpgjingpinx1.top","domain":"jpgjingpinx1.top","tld":"top"},"ip":{"addr":"157.90.33.71","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:41.038Z","timestamp":1791753941038,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"jpgjingpinx1.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 23:15:35 GMT","end":"Sat, 21 Nov 2026 23:15:34 GMT"},"fingerprint":{"sha1":"28:B5:E1:A6:7A:7B:F3:64:1D:3C:EA:46:2F:2C:4B:3C:B2:EE:81:3F","sha256":"80:EC:3B:64:B5:1D:A2:D1:60:95:F3:60:42:C0:88:AB:90:94:4D:22:7A:8E:EB:AD:5D:AB:0C:11:12:A0:26:09"}}},"request":{"raw":"GET /upload/vod/20250808-1/01c646b4ec38ca6edd434378c53664ee.png HTTP/1.1\r\nHost: jpgjingpinx1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: Angie\r\ndate: Sun, 11 Oct 2026 21:25:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-security-policy: script-src 'nonce-GNH1sQ0L6VRwenvDIMEb3w=='; style-src 'unsafe-inline'\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jpgjingpinx1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pornohub24.ru/favicon.ico","fqdn":"pornohub24.ru","domain":"pornohub24.ru","tld":"ru"},"ip":{"addr":"89.105.223.48","port":443,"asn":24875,"as":"NovoServe B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.372Z","timestamp":1791753943372,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ero-scen.sex","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 21:41:17 GMT","end":"Wed, 06 Jan 2027 21:41:16 GMT"},"fingerprint":{"sha1":"0A:0D:93:10:FC:EB:66:8F:A6:C3:57:D0:A1:20:DB:7C:91:94:28:99","sha256":"D2:F4:84:2C:48:06:A1:3A:5D:04:1B:CF:AF:20:DA:C1:02:C8:F0:E3:9A:55:DB:9C:7A:06:66:64:05:D0:55:6A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pornohub24.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nserver: nginx/1.24.0\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 322\r\nlocation: https://ero-sceny.site/favicon.ico\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":5,"connect":20,"send":0,"wait":26,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"karsing.com/favicon.ico","fqdn":"karsing.com","domain":"karsing.com","tld":"com"},"ip":{"addr":"172.67.167.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.383Z","timestamp":1791753943383,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"karsing.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 21:31:15 GMT","end":"Sun, 29 Nov 2026 22:31:03 GMT"},"fingerprint":{"sha1":"2E:73:E5:5B:53:8F:F3:0F:92:08:54:96:8F:91:1F:DA:0E:2B:0E:8B","sha256":"FE:1C:6C:24:78:3E:F9:3D:F3:DF:65:78:A6:3F:BE:55:6A:27:1B:36:82:A3:CA:62:B2:01:C2:58:F0:5C:34:59"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: karsing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bBSM2kFftB3A3l%2BmABkrP%2FtPTBunohpIKTFHCaeLX6th2%2FTqcioZ3rjy5mpgYqKM%2FH%2FX9d8Z8D9nGwEVqETkkiH34peTsvlNAj%2BWrWLGdzMM5%2BiGX0Val%2Fp6bniyUg%3D%3D\"}]}\r\nlast-modified: Fri, 02 Oct 2026 05:11:59 GMT\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 02 Oct 2027 13:20:00 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=3600\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"6abf3d1f-4276\"\r\nage: 806743\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a490f0627b5bb515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17014,"size_decoded":9343,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"cd6cd8f7d9af7267bf6b188d541291b4","sha1":"406bcab4e44f55cddba8f659d8be17c556d46d8a","sha256":"e47f1cd1409c2fc5dc18c4542b12d4e3777fe41137af62c112f059023e580a3e","sha512":"b5bab1c768b4e771c4981f75cd88ad8537828fb8ae988a7326099c81ed2979b502b577ae45e433b1ce647609bdbb14539a22f774cde6f3c645dd0f1f6b60dc02","ssdeep":"192:V/FSmX97q/jQYWDtwxt8ajnLm7JL28gBl9ffMephqQ/Uln813Y:twLQ1Dtwn61ilN/phj/o8m","tlshash":"82724c662aedf949c7860e3557a2612942b9cfe30c2d1b4bde6279e8be35fc43d81140","first_seen":"2026-04-16T16:55:58.986504Z","last_seen":"2026-10-11T21:28:39.798443Z","times_seen":60,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":4,"connect":32,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"karsing.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pornolomka.com/favicon.ico","fqdn":"pornolomka.com","domain":"pornolomka.com","tld":"com"},"ip":{"addr":"91.194.110.16","port":443,"asn":213166,"as":"UA-Hosting SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.526Z","timestamp":1791753943526,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pornolomka.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 10:27:36 GMT","end":"Sun, 03 Jan 2027 10:27:35 GMT"},"fingerprint":{"sha1":"28:1C:91:A0:84:6C:D4:E4:E4:4F:FF:C5:77:B5:65:CB:1C:E9:29:EE","sha256":"04:D4:D0:74:D1:B4:D8:BE:AB:0F:2A:AB:2D:69:67:74:D4:21:23:A7:84:9D:5E:D1:FF:CE:62:33:07:68:D9:6B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pornolomka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx/1.10.3\r\ndate: Sun, 11 Oct 2026 21:23:06 GMT\r\ncontent-type: text/html\r\ncontent-length: 169\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bfjkuncdn.com/20261009/UoK3btd2/10115kb/hls/Ywq5JAZW.ts","fqdn":"bfjkuncdn.com","domain":"bfjkuncdn.com","tld":"com"},"ip":{"addr":"23.226.76.18","port":443,"asn":53755,"as":"IOFLOOD","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:52.233Z","timestamp":1791753952233,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bfaskcdn.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Mon, 20 Apr 2026 04:55:18 GMT","end":"Thu, 05 Nov 2026 04:55:17 GMT"},"fingerprint":{"sha1":"D6:82:7D:DF:63:3E:DC:A1:A0:39:27:3E:70:45:A2:74:4F:75:9D:06","sha256":"97:11:CD:ED:49:51:3C:4C:41:64:37:13:37:C0:DF:54:D3:BE:BB:6E:A1:54:63:37:61:0F:3F:67:96:D4:54:56"}}},"request":{"raw":"GET /20261009/UoK3btd2/10115kb/hls/Ywq5JAZW.ts HTTP/1.1\r\nHost: bfjkuncdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://en.4us.asia\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:52 GMT\r\ncontent-type: video/mp2t\r\ncontent-length: 755584\r\nlast-modified: Fri, 09 Oct 2026 06:59:25 GMT\r\netag: \"6ac890cd-b8780\"\r\nx-server: y178\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nset-cookie: d=;path=/;samesite=None;httponly;secure;\r\ncache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"d","value":"","quoted":false,"path":"/","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"d=;path=/;samesite=None;httponly;secure;"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":755584,"size_decoded":755967,"mime_type":"video/mp2t","magic":"data","md5":"ccd1d76945653c4a5871d19e854d82f4","sha1":"0302d5070e814bffa13d2b55ee9e8ed123fdd842","sha256":"2a5100f878c093d209e405f94fe812744b72986386a3ba4c3a7a397313577b17","sha512":"b1375cca4183de8c65f1388356c497a46873e43cc76e5c2999a18f143f0b35c7954b8b58c19bc90419094c2c197fd3f56f71088968ed39b2bf359eb45df11a5a","ssdeep":"12288:Kz+F1GAvSdwb7t4kimE1UyOLWXAF96Y505pgmU+4CTolPw9dT6LtO0UC:Kz+FQAv/sICwF96Y0rU+4A2MBC","tlshash":"24f4330c4f14d965b04ce2fa169462ca3066f9ad597c8dafa6ffc7e0c5d6c04a8cb748","first_seen":"2026-10-11T21:28:40.174906Z","last_seen":"2026-10-11T21:28:40.174906Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1027,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":371,"receive":656,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornolomka.com/uploads/posts/2021-12/medium/1640190737_00-06-51.jpg","fqdn":"pornolomka.com","domain":"pornolomka.com","tld":"com"},"ip":{"addr":"91.194.110.16","port":443,"asn":213166,"as":"UA-Hosting SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.420Z","timestamp":1791753938420,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pornolomka.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 10:27:36 GMT","end":"Sun, 03 Jan 2027 10:27:35 GMT"},"fingerprint":{"sha1":"28:1C:91:A0:84:6C:D4:E4:E4:4F:FF:C5:77:B5:65:CB:1C:E9:29:EE","sha256":"04:D4:D0:74:D1:B4:D8:BE:AB:0F:2A:AB:2D:69:67:74:D4:21:23:A7:84:9D:5E:D1:FF:CE:62:33:07:68:D9:6B"}}},"request":{"raw":"GET /uploads/posts/2021-12/medium/1640190737_00-06-51.jpg HTTP/1.1\r\nHost: pornolomka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.10.3\r\ndate: Sun, 11 Oct 2026 21:23:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 82722\r\nlast-modified: Wed, 22 Dec 2021 16:30:57 GMT\r\netag: \"61c352c1-14322\"\r\nexpires: Tue, 10 Nov 2026 21:23:02 GMT\r\ncache-control: max-age=2592000, public, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":82722,"size_decoded":83048,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 450x252, components 3","md5":"a39858e195ec422f33fdbf12899af94c","sha1":"2c97858b349c0bdb383555b741d85d8d65470a0c","sha256":"1396bbfff2d18193bf1f09690e8cdf4ebedb980c2e4507abcf7f28f00001fd7a","sha512":"ded83066614cca83b54d7c57b27338bc953a55ba7b577bce0e5305fa77e7d6167f343e145dfd976c62e01465f16e1b3e70deb1360a0d70ff688aa9bd406b4036","ssdeep":"1536:XJc6zICQssIXl+pfxGdYbkFShaCwDyc2g++qz4LnkzVrWzA5uoHLR:5/RQrIYlQNUPwycR+bzskzVrWOHLR","tlshash":"428312d97eb6a339fcb330f24c768b2aef504621b9493f68a531581dd80f455d14c8ca","first_seen":"2024-05-11T02:24:43Z","last_seen":"2026-10-11T21:28:40.177805Z","times_seen":19,"resource_available":false,"data":null}},"time_used":1001,"timings":{"blocked":484,"dns":0,"connect":24,"send":0,"wait":59,"receive":110,"ssl":322},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chezcathy.com/ext/pre_6697174862.jpg","fqdn":"chezcathy.com","domain":"chezcathy.com","tld":"com"},"ip":{"addr":"141.227.152.51","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.490Z","timestamp":1791753938490,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chezcathy.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 07:52:05 GMT","end":"Sat, 28 Nov 2026 07:52:04 GMT"},"fingerprint":{"sha1":"C4:4F:9D:C9:09:9D:31:30:C3:4F:AE:A0:F3:18:7E:88:BF:F8:C7:B7","sha256":"81:05:CD:81:08:79:7C:F7:1F:83:1B:B5:4E:5C:E4:F8:F7:31:1C:F5:F7:00:A5:82:73:35:B8:D4:AB:52:95:7F"}}},"request":{"raw":"GET /ext/pre_6697174862.jpg HTTP/1.1\r\nHost: chezcathy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10636\r\nlast-modified: Tue, 11 Jun 2024 18:14:07 GMT\r\netag: \"666893ef-298c\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10636,"size_decoded":11008,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x226, components 3","md5":"8ea490ccf3ed738c1af0bf9119bdbf4b","sha1":"bc4d29b5c50dcc793bebc27f5d720c66f330f757","sha256":"5acd552b1fa31501bc9157ccbaafc63c47a078d3a1945f3ea28b8f754e316e39","sha512":"b15bcd441c74420d69e61ef22741a696e432964aabb4393ff8d1c7eeb11d08d1b21e089752d9b121041e76d001a086ff713840da7d543a513082bb5307762a18","ssdeep":"192:TYvWSvNicV9w8dcT8e+p4tlmyDgD4cnjitHMYhLt/hLraCr9obE7IUebHlLL6XZG:kvWuYcV+6SDmymj6HMYhLtcCamI/B6JG","tlshash":"1f22b042bb5a7898d47c17f48029716cba1b4d0539299b8bf116ee141bb91f0c3e8299","first_seen":"2025-01-08T02:31:20.591837Z","last_seen":"2026-10-11T21:28:40.179719Z","times_seen":82,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":11,"connect":41,"send":0,"wait":70,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jpgjingpinx1.top/upload/vod/20250809-1/fa51aed872038d03ad90745f66f87c2f.png","fqdn":"jpgjingpinx1.top","domain":"jpgjingpinx1.top","tld":"top"},"ip":{"addr":"157.90.33.71","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.535Z","timestamp":1791753938535,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /upload/vod/20250809-1/fa51aed872038d03ad90745f66f87c2f.png HTTP/1.1\r\nHost: jpgjingpinx1.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: Angie\r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-security-policy: script-src 'nonce-Z0Sj9lEZKHysACSbmSaIsw=='; style-src 'unsafe-inline'\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"jpgjingpinx1.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:40.592Z","timestamp":1791753940592,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30399\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 09 Oct 2026 17:24:16 GMT\r\nexpires: Sat, 09 Oct 2027 17:24:16 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 187284\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86927,"size_decoded":31383,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-10-11T23:18:22.985666Z","times_seen":147525,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":15,"receive":16,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huttonsrv.com/favicon.ico","fqdn":"huttonsrv.com","domain":"huttonsrv.com","tld":"com"},"ip":{"addr":"104.21.37.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.266Z","timestamp":1791753943266,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"huttonsrv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 07:51:21 GMT","end":"Wed, 23 Dec 2026 08:49:56 GMT"},"fingerprint":{"sha1":"AA:8F:80:5C:BB:70:FC:E8:3C:1E:D1:BF:18:EA:35:6B:AB:69:1B:A0","sha256":"45:00:D7:71:86:3F:9B:1D:5D:52:6E:49:70:1C:1F:35:46:69:A6:94:D0:BC:4E:AD:BC:2A:47:85:3A:09:E5:70"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: huttonsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xiZS9Ye%2FzGTA3vbJgCcXqs32cH0KlAsQjXUlPWZl%2BEKbrfzBl%2FiY%2BOOMjM9LWPjNBvwc%2FCLkQEsMYx%2FNcTxeL1WPytZtw%2B1G8wrLK6MWsSXzKHT4G9HCqppa3l8LpORM\"}]}\r\nlast-modified: Thu, 09 Apr 2026 08:06:38 GMT\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 29 Aug 2027 02:13:07 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=3600\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"69d75e0e-4276\"\r\nage: 3784403\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a490f061ccc356b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17014,"size_decoded":9338,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"cd6cd8f7d9af7267bf6b188d541291b4","sha1":"406bcab4e44f55cddba8f659d8be17c556d46d8a","sha256":"e47f1cd1409c2fc5dc18c4542b12d4e3777fe41137af62c112f059023e580a3e","sha512":"b5bab1c768b4e771c4981f75cd88ad8537828fb8ae988a7326099c81ed2979b502b577ae45e433b1ce647609bdbb14539a22f774cde6f3c645dd0f1f6b60dc02","ssdeep":"192:V/FSmX97q/jQYWDtwxt8ajnLm7JL28gBl9ffMephqQ/Uln813Y:twLQ1Dtwn61ilN/phj/o8m","tlshash":"82724c662aedf949c7860e3557a2612942b9cfe30c2d1b4bde6279e8be35fc43d81140","first_seen":"2026-04-16T16:55:58.986504Z","last_seen":"2026-10-11T21:28:39.798443Z","times_seen":60,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":2,"connect":43,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deanesmachines.com/favicon.ico","fqdn":"deanesmachines.com","domain":"deanesmachines.com","tld":"com"},"ip":{"addr":"104.21.94.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.376Z","timestamp":1791753943376,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deanesmachines.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 12:52:34 GMT","end":"Wed, 25 Nov 2026 13:52:21 GMT"},"fingerprint":{"sha1":"9B:B9:08:D4:F6:64:17:32:E3:52:95:FA:6D:B6:FF:3F:25:7E:EB:8E","sha256":"69:CF:C7:76:7E:53:F8:D8:07:22:33:42:85:02:39:07:64:CB:2E:AA:94:E6:12:01:E5:7F:27:10:DF:52:12:86"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: deanesmachines.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Thu, 09 Apr 2026 08:06:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ro0N0rWRnQV1zKFT9DNPg4aXURtMkYW0crjEYdvk2DmfHQLyWrUde0q0bQTp7%2F9RQRqj3W%2FOKMZ26N%2Bu6uN5WHwRW24r%2FrzYRLXm6Ttc0fEiuRKJMRX%2Fn%2FrOBI3uXYNvYNpTTxI%3D\"}]}\r\nexpires: Sat, 31 Jul 2027 23:55:27 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=3600\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"69d75e0e-4276\"\r\nage: 6211856\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a490f062ed9b5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17014,"size_decoded":9324,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"cd6cd8f7d9af7267bf6b188d541291b4","sha1":"406bcab4e44f55cddba8f659d8be17c556d46d8a","sha256":"e47f1cd1409c2fc5dc18c4542b12d4e3777fe41137af62c112f059023e580a3e","sha512":"b5bab1c768b4e771c4981f75cd88ad8537828fb8ae988a7326099c81ed2979b502b577ae45e433b1ce647609bdbb14539a22f774cde6f3c645dd0f1f6b60dc02","ssdeep":"192:V/FSmX97q/jQYWDtwxt8ajnLm7JL28gBl9ffMephqQ/Uln813Y:twLQ1Dtwn61ilN/phj/o8m","tlshash":"82724c662aedf949c7860e3557a2612942b9cfe30c2d1b4bde6279e8be35fc43d81140","first_seen":"2026-04-16T16:55:58.986504Z","last_seen":"2026-10-11T21:28:39.798443Z","times_seen":60,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":5,"connect":1,"send":0,"wait":14,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"deanesmachines.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"missvid.com/favicon.ico","fqdn":"missvid.com","domain":"missvid.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:53.303Z","timestamp":1791753953303,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: missvid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.xxibaocdn.com/video/m3u8/2026/01/14/e8_90_9d_e8_8e_89_e5_b0_91_e5_a5_b3/51210_cover_2026-01-14_111833.jpg","fqdn":"img.xxibaocdn.com","domain":"xxibaocdn.com","tld":"com"},"ip":{"addr":"162.209.190.196","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.224Z","timestamp":1791753938224,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.xxibaocdn.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 15:13:41 GMT","end":"Fri, 25 Dec 2026 15:13:40 GMT"},"fingerprint":{"sha1":"87:96:F8:C7:25:D2:6A:6F:2E:7C:8E:3D:E1:29:5D:1A:8B:AE:B8:8F","sha256":"6F:3D:C6:A4:68:5E:CD:E6:A1:A6:04:B5:67:00:56:EB:EF:03:FB:6F:FF:BA:5C:05:C5:B5:E2:76:B1:96:7C:33"}}},"request":{"raw":"GET /video/m3u8/2026/01/14/e8_90_9d_e8_8e_89_e5_b0_91_e5_a5_b3/51210_cover_2026-01-14_111833.jpg HTTP/1.1\r\nHost: img.xxibaocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:39 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 14 Jan 2026 03:25:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69670ca0-13abf\"\r\nexpires: Tue, 10 Nov 2026 21:25:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80575,"size_decoded":78196,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3","md5":"6a4f642912726fc8a3a74a33a6380745","sha1":"67eee5ab4d322a7c1307bf9b798dad3b19000d51","sha256":"7a9a858da0019e3845ddf2bb906312201508b5069d3bbbbeae97f9c3c65ce676","sha512":"0f4063efde2248fe0a608e5695ed6b51c662d22898c359c1a7a8f5fb3366e64d8a54ee9baabb4211446eb64398a8811c890607bfdecbe8800111985157e216ab","ssdeep":"1536:T2al14dprAlfBbrQl//hvWqhhLG2EiBByYiySqhl+Jlf6KRusWB41CtoGjaz:iq2dpUfn2HhphhK4nFSqHEiKQuxGez","tlshash":"a0731265f2c8a381011f66ebf8da3f6ec1a6136839cb4f0751991fa8f1b89d51f8c116","first_seen":"2026-10-11T20:34:31.196878Z","last_seen":"2026-10-11T21:28:40.180695Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1406,"timings":{"blocked":470,"dns":0,"connect":164,"send":0,"wait":601,"receive":0,"ssl":169},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fm.sl25914.com/upload/vod/20230913-1/505990801af0b2304ae2ad3cc173af0c.jpg","fqdn":"fm.sl25914.com","domain":"sl25914.com","tld":"com"},"ip":{"addr":"104.21.74.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.311Z","timestamp":1791753938311,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sl25914.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 00:56:38 GMT","end":"Fri, 04 Dec 2026 01:56:35 GMT"},"fingerprint":{"sha1":"99:87:D0:77:D4:A6:13:47:5B:F8:EC:5F:0E:A4:E3:F6:EE:5E:6B:85","sha256":"F9:14:A6:84:FD:F8:73:FD:7C:53:75:27:A5:7F:27:10:7C:A3:6B:EC:32:DF:E9:0F:45:E7:B8:32:6F:96:87:39"}}},"request":{"raw":"GET /upload/vod/20230913-1/505990801af0b2304ae2ad3cc173af0c.jpg HTTP/1.1\r\nHost: fm.sl25914.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\netag: W/\"66dfb51a-206f\"\r\nexpires: Tue, 03 Nov 2026 19:58:48 GMT\r\nlast-modified: Tue, 10 Sep 2024 02:55:22 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: BYPASS, ChunkedEncoding\r\nage: 610010\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m2EyZxjAzkb3zrD4M1YmwF4XCia4zPQczHx8VBFMXYy3F6D58I%2Bshy%2BhoHkyaE30PYhyZC3wlWKWcgoor5O%2FFbYE8cSSi6j%2BdJSEhoZDjg15CXUkq1Wfk7KuZZaQoFbFcg%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a490f04398ec1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8303,"size_decoded":9079,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 427x320, segment length 16, comment: \"Lavc57.89.100\", baseline, precision 8, 320x240, components 3","md5":"12c5f76b6db5721d1b4d177caf79868e","sha1":"e3d8af9771a3c5cae763202a3ae8a82cf895c665","sha256":"4eeb0e1e53f5930d1292c848bb916fe747c0f8653299b510947a4ad8a08af1c2","sha512":"62f59fbf41fc13bd06ccd08f96eea531590ac45ebc945cfbe6ce3cb217dd4999af90e1cb95750847021ed9059fa3eda0b58555b7aabbe57570cfa36224559bb4","ssdeep":"192:VGQWU9KRiZedbFiUTDaw0CuKNhonUs3nhv6:VyU9fedRiIuw0TKNhuUs3F6","tlshash":"4902bfd2275b4eb7b94870f37b14160b4eb1737a0a91eeec6139c2b56eb10c9c002575","first_seen":"2026-10-02T13:02:44.628247Z","last_seen":"2026-10-11T21:28:40.183993Z","times_seen":4,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":11,"dns":14,"connect":96,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eroshorts.site/erosceny/screen/malchik-trahaet-i-konchaet-v-staruyu-prostitutku-0.jpg","fqdn":"eroshorts.site","domain":"eroshorts.site","tld":"site"},"ip":{"addr":"89.105.223.48","port":443,"asn":24875,"as":"NovoServe B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.427Z","timestamp":1791753938427,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"eroshorts.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 21:41:19 GMT","end":"Fri, 27 Nov 2026 21:41:18 GMT"},"fingerprint":{"sha1":"B5:0C:F0:B7:71:8E:6F:24:32:E5:4B:D7:54:83:B2:4B:67:72:48:77","sha256":"2A:20:C1:C3:6F:15:DB:F1:33:9D:16:19:BA:58:E0:27:E6:43:BE:6B:3E:82:BD:F3:48:2F:FB:50:0F:30:20:16"}}},"request":{"raw":"GET /erosceny/screen/malchik-trahaet-i-konchaet-v-staruyu-prostitutku-0.jpg HTTP/1.1\r\nHost: eroshorts.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 02 Mar 2026 18:51:47 GMT\r\netag: W/\"69a5dc43-3768\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14184,"size_decoded":14370,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x240, components 3","md5":"484bfaaef55cb99f25836aae427f32d4","sha1":"00db8fcd7c587d7111926261d6c23931ab256012","sha256":"198e69068f79f29f941785c8e724197c098a823bb536daa66257a9defc647d6a","sha512":"47364b4867894c3e00260e83cf1260ac543b475f73dc3c7a31f8f556f07d63fbfdd59ad4a3d13bfd187f74251b287a2a850e6a8b95e5a6122e47de173da8e863","ssdeep":"384:hsezILB0Epxy7XoAZW6yg86Vs1ots4A1mLWln:C4IPpo7XoAf1TlSV","tlshash":"be52dfafb51ba898e9f9cd7cd1a816d340c498c84372d5a7d03e0f5ce5837930e592ba","first_seen":"2026-09-15T22:08:54.871701Z","last_seen":"2026-10-11T21:28:40.186265Z","times_seen":4,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":187,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/yandex-metrica-watch/watch.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:40.601Z","timestamp":1791753940601,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/yandex-metrica-watch/watch.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 1.452.0\r\nx-jsd-version-type: version\r\netag: W/\"3823c-5Ge/O+V7HcMKNnL0Scu6mh4y87U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 11 Oct 2026 21:25:40 GMT\r\nage: 32930\r\nx-served-by: cache-fra-eddf8230067-FRA, cache-bma-essb1270033-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 90069\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":229948,"size_decoded":90848,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (653)","md5":"cc5609ba804dd8e3954b1b0602f42a28","sha1":"633777e92f6a417c5fd5840f17e26e77600dac06","sha256":"a73c7e7935af2259021c125b542780c68aeb887651cc70d0603bc451e1020fe5","sha512":"6edbab0a607f19bdb4af707afa47cfe705d7d54763e06aef7df04fc359f0a6bbc95ea7931274745ba8967afe8fb40ffb4e76ad08c795f00ef5d79d693855f2db","ssdeep":"6144:mPYNBbuH7KXTakStdQ8O5ZctVmMwxZ/np8y:7u7K+Q8O5ut+J8y","tlshash":"3e24d7d976927072937334b4902f010f72bea8a6f14cc954f18ad9d93e789a89137f6c","first_seen":"2026-08-14T22:06:37.35977Z","last_seen":"2026-10-11T21:28:40.187344Z","times_seen":83,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":4,"connect":11,"send":0,"wait":9,"receive":15,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bfjkuncdn.com/20261009/UoK3btd2/10115kb/hls/key.key","fqdn":"bfjkuncdn.com","domain":"bfjkuncdn.com","tld":"com"},"ip":{"addr":"23.226.76.18","port":443,"asn":53755,"as":"IOFLOOD","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:52.231Z","timestamp":1791753952231,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bfaskcdn.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Mon, 20 Apr 2026 04:55:18 GMT","end":"Thu, 05 Nov 2026 04:55:17 GMT"},"fingerprint":{"sha1":"D6:82:7D:DF:63:3E:DC:A1:A0:39:27:3E:70:45:A2:74:4F:75:9D:06","sha256":"97:11:CD:ED:49:51:3C:4C:41:64:37:13:37:C0:DF:54:D3:BE:BB:6E:A1:54:63:37:61:0F:3F:67:96:D4:54:56"}}},"request":{"raw":"GET /20261009/UoK3btd2/10115kb/hls/key.key HTTP/1.1\r\nHost: bfjkuncdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://en.4us.asia\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:52 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 16\r\nlast-modified: Fri, 09 Oct 2026 06:59:25 GMT\r\ncontent-disposition: attachment; filename=\"key.key\"\r\netag: \"6ac890cd-10\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\ncache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16,"size_decoded":447,"mime_type":"application/octet-stream","magic":"ASCII text, with no line terminators","md5":"d90a1f240151ec473ccdd55f283b53f6","sha1":"dcc8eebf41043eb7fe7d5079cdf0d110c96dc200","sha256":"18c4628cb734cc44c46995d7b72ae40ff2b9cc1eadc7c278bc346bb3eedfe691","sha512":"90643b03dfda9225b3d5b2d6c9341fe4aef9c70f06a602ace90069d71e3a446c4a7ca9a58839962be89d0cf621dd42f86647c74678eb0fb99e3b098be98ce3f0","ssdeep":"","tlshash":"ff6000cf033003030300000c00c003000000c0330c03cffc00ccc000300cfc00c00030","first_seen":"2026-10-11T21:28:40.189444Z","last_seen":"2026-10-11T21:28:40.189444Z","times_seen":1,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clariontoday.com/favicon.ico","fqdn":"clariontoday.com","domain":"clariontoday.com","tld":"com"},"ip":{"addr":"104.21.4.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.251Z","timestamp":1791753943251,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clariontoday.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 16 Sep 2026 23:48:13 GMT","end":"Wed, 16 Dec 2026 00:46:47 GMT"},"fingerprint":{"sha1":"2F:B7:00:8A:A9:4E:5A:82:02:57:5B:EA:9F:87:50:AD:37:43:BE:14","sha256":"E4:6A:74:34:32:92:48:9D:5B:3C:16:FC:35:D6:B2:81:67:3F:BA:E6:DF:C2:7C:ED:F2:77:6B:5E:DD:97:C3:53"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: clariontoday.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mcMpd5NfOLJuJ83ar1ZVcC88FQPhxdeE5xSNL8sRtlzi0EPx0tM5kzFo1yGM8fyG9hKLxiMihP3aP9vmXJDGSJ8gPnPNnbCbjniaxasp24aGM0Fsh1x925kO4zElMgnSVaEM\"}]}\r\nlast-modified: Wed, 23 Sep 2026 08:12:46 GMT\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 24 Sep 2027 04:55:22 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=3600\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"6ab389fe-4276\"\r\nage: 1528220\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a490f0619ae65694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17014,"size_decoded":9328,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"cd6cd8f7d9af7267bf6b188d541291b4","sha1":"406bcab4e44f55cddba8f659d8be17c556d46d8a","sha256":"e47f1cd1409c2fc5dc18c4542b12d4e3777fe41137af62c112f059023e580a3e","sha512":"b5bab1c768b4e771c4981f75cd88ad8537828fb8ae988a7326099c81ed2979b502b577ae45e433b1ce647609bdbb14539a22f774cde6f3c645dd0f1f6b60dc02","ssdeep":"192:V/FSmX97q/jQYWDtwxt8ajnLm7JL28gBl9ffMephqQ/Uln813Y:twLQ1Dtwn61ilN/phj/o8m","tlshash":"82724c662aedf949c7860e3557a2612942b9cfe30c2d1b4bde6279e8be35fc43d81140","first_seen":"2026-04-16T16:55:58.986504Z","last_seen":"2026-10-11T21:28:39.798443Z","times_seen":60,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":7,"connect":31,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"clariontoday.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fm.lbtup2025.com/upload/vod/2023/04/fnzkfuojk1c.jpg","fqdn":"fm.lbtup2025.com","domain":"lbtup2025.com","tld":"com"},"ip":{"addr":"172.67.152.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.209Z","timestamp":1791753938209,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lbtup2025.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Oct 2026 06:19:42 GMT","end":"Mon, 04 Jan 2027 07:18:25 GMT"},"fingerprint":{"sha1":"9C:F4:15:D3:BE:45:5D:C1:34:63:4B:DD:44:A8:DC:D3:F8:B2:09:2F","sha256":"CD:27:1B:F3:73:7B:34:5D:EE:D3:9C:5C:ED:35:7D:37:E1:1B:16:92:10:3E:04:1A:E1:91:8C:ED:FB:81:60:F7"}}},"request":{"raw":"GET /upload/vod/2023/04/fnzkfuojk1c.jpg HTTP/1.1\r\nHost: fm.lbtup2025.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Sep 2024 06:02:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"66dfe0f3-20be\"\r\nexpires: Thu, 05 Nov 2026 07:10:13 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 483325\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8vmAIV6gDWdWJRT1DhBSZNnw7AQcD75fYJmqschCLZPqrEetyP19qNS%2BTaDJCuqF2yGLrDHQbcRJRcNvyl%2FqgDGsg1etecwRsVouwoq6J%2BypNRV1ZD1jUJbiVjj3MwDPJFsR\"}]}\r\ncf-ray: a490f04258978deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8382,"size_decoded":9132,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.89.100\", baseline, precision 8, 240x320, components 3","md5":"812a5106dae9cfe5779f5a9d3465aca7","sha1":"c0e7f77ed8582c9f8b57ac4f075eab3ab71fff63","sha256":"c1e34a10d07e64534efbac1d99ec8601dfb5f27722ab6bd4519bb3f43516918f","sha512":"8a1ccde3eb4bfc8d240f3477b772dc860a8365667689cd884b9a7adf5b2b17fedccbb2245ab9482043bed1aa4468467bb4654a29c77d2dfc31b2915ac3b27561","ssdeep":"192:H2TXD/2RddwSG6bMWWCfCnNkb7hfW/utL4BRy1FqzFbTwkfVH2nhKLsyxO:HwT2BwSG6bLZfCNkb7hfW/utsaqBzxkB","tlshash":"58028d7b0fdee95aeff20035655c0230734634ad9ea2c8f6b08397621859d9c1afb12d","first_seen":"2026-09-27T16:26:31.348338Z","last_seen":"2026-10-11T21:28:40.193342Z","times_seen":3,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":3,"send":0,"wait":13,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.fapmove.com/thumbs/1236/890_--.jpg","fqdn":"images.fapmove.com","domain":"fapmove.com","tld":"com"},"ip":{"addr":"172.67.129.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.242Z","timestamp":1791753938242,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapmove.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 21 Sep 2026 21:02:56 GMT","end":"Sun, 20 Dec 2026 22:00:32 GMT"},"fingerprint":{"sha1":"CF:E8:4A:29:57:8C:B3:AA:A3:8A:93:58:03:D2:0F:94:58:53:74:2D","sha256":"DF:B9:80:B8:57:6D:E1:7B:02:CD:BB:D4:2E:38:81:5C:9E:8D:44:AE:EE:F3:7A:C6:F0:8E:10:71:16:31:9A:25"}}},"request":{"raw":"GET /thumbs/1236/890_--.jpg HTTP/1.1\r\nHost: images.fapmove.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16849\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Nov 2021 11:10:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"61826e13-41d1\"\r\nexpires: Mon, 12 Oct 2026 14:26:26 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 543551\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kZhoH0WTFdIOHOyZ1hqp3%2BzrqyIbQItqJQ9orWNHfeK0sOuVNqoClMvj1lGeE2zYT6ygwQb37AJFp0XOLlIm7IDYMA2QdMpMeQEjVSyIMOoU8BfI5nuY%2BUuIIy3nx3m8S9wXNIg%3D\"}]}\r\ncf-ray: a490f0439b9f8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16849,"size_decoded":17572,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 85\", baseline, precision 8, 320x180, components 3","md5":"bec394cae869227dab7ece91a60591f6","sha1":"79b72e8a276d65a100d504593061364d07bb1361","sha256":"c17f4ea8dcb713b6d1f8d2a9308429daa151a989d39cfdc6ae537a4646bebc8a","sha512":"ced11195baad40009379831d2fd66d4d9ab6f58342520f67f20fb5348b8cec9943369933d454207d3edbd6450992d35f9b21d9658d6fc4068e52477ad866b373","ssdeep":"384:7FQ6m3mmLDt4auUeQXv55PiMfY9Ahzm6n5c9Y0xBRRee5OWOtkBMPip:7CFL5PXPiUY9AhT5cvBRxOSBMPip","tlshash":"0f72d09014125f0ec86f4ae9e74eba06cf75d5fa5337a20ea06d51fe976c02a90478ec","first_seen":"2025-03-21T10:58:41.28214Z","last_seen":"2026-10-11T21:28:40.194156Z","times_seen":13,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":135,"dns":7,"connect":8,"send":0,"wait":47,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg5.com:3519/upload/vod/20260414-1/99d126afb527920c489931c1cf087886.jpg","fqdn":"sbzytpimg5.com","domain":"sbzytpimg5.com","tld":"com"},"ip":{"addr":"23.140.236.1","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.483Z","timestamp":1791753938483,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbzytp.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 18:35:36 GMT","end":"Fri, 13 Nov 2026 18:35:35 GMT"},"fingerprint":{"sha1":"48:67:53:B8:D9:B0:E4:69:E7:6C:D8:14:FE:A6:61:9A:7E:D7:65:01","sha256":"97:1B:54:8D:56:AC:26:EE:C1:E1:75:88:2C:CC:66:6C:A5:6A:6A:68:EC:1E:AD:83:2A:F7:0D:F1:0D:41:65:1C"}}},"request":{"raw":"GET /upload/vod/20260414-1/99d126afb527920c489931c1cf087886.jpg HTTP/1.1\r\nHost: sbzytpimg5.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 101352\r\nlast-modified: Tue, 14 Apr 2026 06:34:36 GMT\r\nvary: Accept-Encoding\r\netag: \"69dddffc-18be8\"\r\nexpires: Mon, 12 Oct 2026 18:06:09 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 2517569\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":101352,"size_decoded":101774,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 720x405, components 3","md5":"ab5a5ad72db1f6f2e9665dee8dedd4cd","sha1":"ea86c4aee3d182280c4a6e4bc853212d2e363df5","sha256":"fcd8943177a265e22d1c1a3e00fcdcc6dea3033dbaa07a180a0acd9ab8efc731","sha512":"ea8591224d014268842f7d121dae77a89852f0cef82e986c3b810c7f6c8b855872796952b1538e2b0e4a32aae3f59d06ae6b3ca81d0f6553262a5c90938c440f","ssdeep":"3072:ES7v63q7SuLjvVeDfoVr5OEnx+9tuJZI6pvgBaMy6jXut3:ES7y3eP9eg+9tuJlbt6jet","tlshash":"a3a31209fb7028cee13198fa4f816cda6687422784ef4e585781b3e1a01cc5779ee376","first_seen":"2024-10-11T09:04:27.351635Z","last_seen":"2026-10-11T21:28:40.195001Z","times_seen":28,"resource_available":false,"data":null}},"time_used":797,"timings":{"blocked":246,"dns":0,"connect":0,"send":0,"wait":290,"receive":261,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.jkuntupiaxxzz.com/upload/vod/20260614-53/965adb2a546c4fb7dbf13a15eda5a8e8.jpg","fqdn":"www.jkuntupiaxxzz.com","domain":"jkuntupiaxxzz.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:41.015Z","timestamp":1791753941015,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20260614-53/965adb2a546c4fb7dbf13a15eda5a8e8.jpg HTTP/1.1\r\nHost: www.jkuntupiaxxzz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"css.jpg4.quest/mycss/av4.css?33","fqdn":"css.jpg4.quest","domain":"jpg4.quest","tld":"quest"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://en.4us.asia/v/s://www.video01.org/mp4/ok0YVp/title/Jinhua%20is%20a%20senior%20girl%20in%20high%20school.%20The%20college%20entrance%20examination%20is%20over%20and%20her%20cousin%20has%20an%20incestuous%20room%20opening.%20She%20has%20a%20strong%20oral%20sex%20-%20selfies%20and%20candid%20shots%20-%20online%20adult%20porn%20videos%20and%20AV%20movies%20for%20free%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20[16:10x1080p]","date":"2026-10-11T21:25:50.684Z","timestamp":1791753950684,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /mycss/av4.css?33 HTTP/1.1\r\nHost: css.jpg4.quest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fm.lbtup2025.com/upload/vod/2020/02-27/19/i3ykd2mypus1956i3ykd2mypus312861.jpg","fqdn":"fm.lbtup2025.com","domain":"lbtup2025.com","tld":"com"},"ip":{"addr":"172.67.152.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.219Z","timestamp":1791753938219,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lbtup2025.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Oct 2026 06:19:42 GMT","end":"Mon, 04 Jan 2027 07:18:25 GMT"},"fingerprint":{"sha1":"9C:F4:15:D3:BE:45:5D:C1:34:63:4B:DD:44:A8:DC:D3:F8:B2:09:2F","sha256":"CD:27:1B:F3:73:7B:34:5D:EE:D3:9C:5C:ED:35:7D:37:E1:1B:16:92:10:3E:04:1A:E1:91:8C:ED:FB:81:60:F7"}}},"request":{"raw":"GET /upload/vod/2020/02-27/19/i3ykd2mypus1956i3ykd2mypus312861.jpg HTTP/1.1\r\nHost: fm.lbtup2025.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Sep 2024 06:07:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"66dfe208-18f2\"\r\nexpires: Thu, 29 Oct 2026 23:59:26 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1027571\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GD7w4stat7E5JLAeLG%2BQLxB5%2FGgrAx1%2BsHjG%2FOt36t58PxnzazWyXVJfkBduFXpINRwIVKNHOP7je2lzLMxyfgbq8HYm%2BehQHiUnw%2BtVeWOIErhl62C8CrYU8ra58lHrkD4U\"}]}\r\ncf-ray: a490f04299438deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6386,"size_decoded":7143,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.89.100\", baseline, precision 8, 320x240, components 3","md5":"b285e963e6939cdfa243da492d65b211","sha1":"4bd8c6d01184479f854e55b47cf092e992fec42e","sha256":"2040eb0da8b3a9e16b5c5602aa9b0ac4c595fbe37ffdcd0cf4d09929eda9fcbb","sha512":"1addb1fecca807b0820d91b05a151628bbb8cdf666ec1e290db2fb409e0e8a480f1154aaf2e73729714cdb86d4cc4efcac0622d8ae189c8453e65e71577159c3","ssdeep":"96:HksWDt6iIHrDTS1a6Gtd4qYJ8qq4bJApj6bAHeYMZvpNs4eCZY5zW4lBXVCzJETq:Hk/EiCDTS1antF5IA+9tXUPHUlYkBU8","tlshash":"eed16b208152d026da0d5d38eb0edc1a826dbeb2779ec10bb497b353492f7da4e54939","first_seen":"2026-06-25T11:17:56.449388Z","last_seen":"2026-10-11T21:28:40.197821Z","times_seen":8,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xvideosrei.com/wp-content/uploads/2021/07/belinda-aka-bely.jpg","fqdn":"xvideosrei.com","domain":"xvideosrei.com","tld":"com"},"ip":{"addr":"31.43.191.59","port":443,"asn":210848,"as":"Telkom Internet LTD","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.243Z","timestamp":1791753938243,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xvideosrei.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 01:17:53 GMT","end":"Wed, 11 Nov 2026 01:17:52 GMT"},"fingerprint":{"sha1":"FA:9F:42:41:98:A3:99:B6:53:5B:8F:03:0B:2C:0A:D0:2E:D4:F5:BA","sha256":"65:6F:A7:6D:EC:C1:A6:0A:05:F0:50:8E:73:D4:37:FC:F3:1A:4F:6A:A0:DD:E6:A9:89:71:57:A4:F3:A3:78:4B"}}},"request":{"raw":"GET /wp-content/uploads/2021/07/belinda-aka-bely.jpg HTTP/1.1\r\nHost: xvideosrei.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 05 Jul 2021 21:59:27 GMT\r\netag: W/\"60e380bf-5bd4\"\r\nversion: MS26072801\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncloudflare-cdn-cache-control: public, max-age=120, stale-while-revalidate=60, stale-if-error=3600\r\nstrict-transport-security: max-age=31536000;\r\nx-served-by: Mini-CDN-offshore\r\nx-cache-status: HIT\r\nx-cache-bypass: 0\r\ncache-control: public, max-age=2592000, immutable, stale-while-revalidate=60, stale-if-error=3600\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23508,"size_decoded":23686,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85\", baseline, precision 8, 600x337, components 3","md5":"b121f43aabf22aebcf6b43fac86149c9","sha1":"6022eae20a1cc7c60b763c57656bf2baf704a13e","sha256":"7f8d42fecd0969e198af559e5a4f7b0340ec0f2a50987aed9af8786cb755a03d","sha512":"522dff801b4e609ffb329bee05914ff8a89dbb33a43fa9a540fbd5715ee3aaf52da63cc7d820baa831d67056657f94c8ed1f05402ca81e296249e9a25e01b731","ssdeep":"384:qw1m7Ujicyr4ER90xPxxnv+P33a1POjlGpxLmJwEIXQ7KCLW9vn5NLQoHBha8j:qwE7UZyhcznvg3qQq02XMKCinfMUdj","tlshash":"3cb2cf17dd0c5248852d95ba394b0a366f8a2b0dfdc378eb4961aec327d05234daf0ed","first_seen":"2025-02-15T18:15:16.913868Z","last_seen":"2026-10-11T21:28:40.201415Z","times_seen":42,"resource_available":false,"data":null}},"time_used":614,"timings":{"blocked":494,"dns":0,"connect":23,"send":0,"wait":40,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"da.da15525716.com/uptu/20240619/xlzmoYWH/1.jpg","fqdn":"da.da15525716.com","domain":"da15525716.com","tld":"com"},"ip":{"addr":"103.224.182.214","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:40.995Z","timestamp":1791753940995,"http_version":"HTTP/1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keywordresearchinc.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 18:07:59 GMT","end":"Thu, 24 Dec 2026 18:07:58 GMT"},"fingerprint":{"sha1":"B2:31:99:32:AF:FD:BB:10:1F:F8:6B:39:F8:7F:8B:C3:0B:54:B8:C8","sha256":"A5:7A:C3:13:7E:D0:8D:64:72:DD:CE:D9:DF:04:28:D3:D1:DB:FF:45:C8:38:DB:93:A0:CA:26:FA:91:16:E4:6C"}}},"request":{"raw":"GET /uptu/20240619/xlzmoYWH/1.jpg HTTP/1.1\r\nHost: da.da15525716.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.0 403 Forbidden\r\ncache-control: no-cache\r\ncontent-type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T23:43:31.959321Z","times_seen":19040688,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"da.da15525716.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ohsex.pro/favicon.ico","fqdn":"ohsex.pro","domain":"ohsex.pro","tld":"pro"},"ip":{"addr":"185.73.221.135","port":443,"asn":32338,"as":"HOSTISERVER","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:43.637Z","timestamp":1791753943637,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ohsex.pro","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 05:15:29 GMT","end":"Mon, 04 Jan 2027 05:15:28 GMT"},"fingerprint":{"sha1":"57:86:E9:05:B5:CF:53:D5:DE:97:76:B0:22:BB:48:0C:D4:EE:D5:02","sha256":"E7:94:19:16:13:58:23:19:4B:91:3F:45:1E:1F:91:13:E7:2D:1E:DC:9C:BE:D8:68:6A:8D:4B:24:FF:7F:0B:1A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ohsex.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:43 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 1406\r\nlast-modified: Fri, 29 Mar 2019 14:33:31 GMT\r\netag: \"5c9e2cbb-57e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=63072000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1406,"size_decoded":1753,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16","md5":"d2f0fb9f04ad069d589ab7b8624ffecc","sha1":"7be10cb96ac10edb887c960df743f3b738f77e95","sha256":"5800d50fcad968ecef621130cfb5c77aec5576fde628aa192906f4a40153827e","sha512":"fce389656494d212608536b999e36801b9682f49a27e48be76969f1b7de10a00062a76f732f9f19066b90aa651ca10b3f3dc463865d033506655a7b012a33cf3","ssdeep":"","tlshash":"58215c467ad18d40cf045e37f564d16433517c1c9797563740650e137e110e702685a6","first_seen":"2024-10-13T01:25:34.646959Z","last_seen":"2026-10-11T21:28:40.205765Z","times_seen":71,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":32,"send":0,"wait":30,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"im4.mediacont.net/zscc/act/52/259_hot-with-nice.jpg","fqdn":"im4.mediacont.net","domain":"mediacont.net","tld":"net"},"ip":{"addr":"93.113.203.4","port":443,"asn":208949,"as":"Hbing Limited","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.463Z","timestamp":1791753938463,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mediacont.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 22:02:32 GMT","end":"Sat, 14 Nov 2026 22:02:31 GMT"},"fingerprint":{"sha1":"48:1A:6F:19:8D:BA:DF:AC:BB:0E:EC:8B:3A:D4:9E:E4:2B:56:60:F8","sha256":"EB:39:9C:FC:7C:06:F4:89:DD:85:E9:95:3D:30:D6:21:59:D9:29:C1:58:4D:BF:D2:6B:FE:AE:14:BB:D2:07:8C"}}},"request":{"raw":"GET /zscc/act/52/259_hot-with-nice.jpg HTTP/1.1\r\nHost: im4.mediacont.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 21:25:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17868\r\nlast-modified: Thu, 03 Nov 2022 18:32:14 GMT\r\netag: \"6364092e-45cc\"\r\nexpires: Sat, 09 Jan 2027 21:25:38 GMT\r\ncache-control: max-age=7776000\r\nx-request-id: 820e05d78393ce50e02033fc360860c6\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17868,"size_decoded":18215,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x166, components 3","md5":"7d0586d1115b52f3faca6e0ef9414a4d","sha1":"a6919514fda9a240d68b449c567a2e53aeda1a66","sha256":"ef0e39689c8ed1bae07fde6087975cd3f9c920bd5aa78bc528cbff11156cd1a6","sha512":"0861a0189e782d10f1f302b53a5d7b9dc2cdcf58c21eabdc24ad73e4b73c08e4b2b599f70f842158b849168228e7611e410e9546762aab1485fcf575c3be63c3","ssdeep":"384:NkwjiJoQy4zL2j5CDyJKq6xM+RizZNarjShYQ/eEdHaJqj5u8sHohslU:N0JoVeLa5C+Jl6xfRMPRp5Zj5u8QkslU","tlshash":"c582d0c2a09e4d61c90d5ee9d12f63dfba52c175c360ac82bc91254bb32a25b29fcd05","first_seen":"2026-10-11T21:28:40.208181Z","last_seen":"2026-10-11T21:28:40.208181Z","times_seen":1,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":188,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pornodrochka.club/uploads/posts/2019-03/medium/1551949929_00-16-21.jpg","fqdn":"pornodrochka.club","domain":"pornodrochka.club","tld":"club"},"ip":{"addr":"91.194.110.9","port":443,"asn":213166,"as":"UA-Hosting SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://en.4us.asia/","date":"2026-10-11T21:25:38.598Z","timestamp":1791753938598,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pornodrochka.club","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 10:22:50 GMT","end":"Sun, 03 Jan 2027 10:22:49 GMT"},"fingerprint":{"sha1":"A5:57:FF:5A:5F:87:1F:83:F5:C8:D0:D9:64:4D:29:C8:49:ED:49:77","sha256":"6B:29:DB:0C:F5:C6:58:74:64:A7:AA:61:61:84:95:DA:0A:41:32:D5:D4:71:E8:C1:18:0F:44:B9:F0:51:34:97"}}},"request":{"raw":"GET /uploads/posts/2019-03/medium/1551949929_00-16-21.jpg HTTP/1.1\r\nHost: pornodrochka.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://en.4us.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.10.3\r\ndate: Sun, 11 Oct 2026 21:23:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 86937\r\nlast-modified: Sat, 29 Aug 2020 17:59:00 GMT\r\netag: \"5f4a9764-15399\"\r\nexpires: Sun, 18 Oct 2026 21:23:02 GMT\r\ncache-control: max-age=604800\r\nstrict-transport-security: max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.10.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86937,"size_decoded":87288,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 450x253, components 3","md5":"86f036d35dadbc2b52b4c9c27155e124","sha1":"21714370c41e0e044490150df45d0eafb7555956","sha256":"24a29497562fe3eb01762d7ec3946cc09700e1489d365f087944646fb3e894ae","sha512":"da4e6b5c413ab2c08e026f9ccb7b2b0ef682bb92e9a6a6fb0ca86c791820a31dcbf1c08d02f00c77f2de98562e52a9a92f15e5b57c5d13db4bc4961e6636aed0","ssdeep":"1536:ODDS9nVOV4wQjH0Bz60Kgg7ct6+1R/4NPgSjEIOedZ3lcf52Ck7tWelZEiu+ZLHV:d0rQjUJ60Kgp9MNHfOo3lc4C4oezfu+n","tlshash":"cb8312397839d5b9a61b5aa36b0f807d501c6b3c5b96f37065b14439f0efb83748288e","first_seen":"2024-09-19T22:22:48.667182Z","last_seen":"2026-10-11T21:28:40.211897Z","times_seen":7,"resource_available":false,"data":null}},"time_used":947,"timings":{"blocked":794,"dns":2,"connect":55,"send":0,"wait":97,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}