{"report_id":"2b80274b-a58c-430e-a53c-9d259362f51d","version":6,"status":"done","tags":[],"date":"2025-08-19T17:39:52Z","url":{"schema":"http","addr":"www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","fqdn":"www.girlsdump.com","domain":"girlsdump.com","tld":"com"},"ip":{"addr":"169.62.37.218","port":0,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","fqdn":"www.girlsdump.com","domain":"girlsdump.com","tld":"com"},"title":"NANNYSPY BRAVE Nanny TRIES TO FIT Bosses GIANT DICk"},"submit":{"url":{"schema":"http","addr":"www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","fqdn":"www.girlsdump.com","domain":"girlsdump.com","tld":"com"},"ip":{"addr":"169.62.37.218","port":0,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-23T17:39:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-19","alert":"Sinkholed","trigger":"milletappliancejeopardize.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-19","alert":"Sinkholed","trigger":"easiercampaignworkshop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-19","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-19","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-19","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.girlsdump.com","ip":{"addr":"169.62.37.218","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"domain_registered":"2007-04-08","domain_rank":1277340,"first_seen":"2012-07-24T00:11:37Z","last_seen":"2025-08-16T11:58:12.930946Z","alert_count":0,"request_count":24,"received_data":762290,"sent_data":18121,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"ExoClick","description":"ExoClick is a Barcelona-based online advertising company, which provides online advertising services to both advertisers and publishers.","website":"https://www.exoclick.com","common_platform_enumeration":"","icon":"ExoClick.png","categories":["Advertising"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]}]},{"fqdn":"cdn.show-sb.com","ip":{"addr":"104.21.95.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":187612,"first_seen":"2024-08-31T03:46:04Z","last_seen":"2025-08-16T06:17:17.841362Z","alert_count":0,"request_count":1,"received_data":1925,"sent_data":500,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"tubes.fuckyoucash.com","ip":{"addr":"3.167.2.91","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2006-02-16","domain_rank":0,"first_seen":"2014-04-04T17:03:39Z","last_seen":"2025-08-17T18:00:35.821635Z","alert_count":0,"request_count":2,"received_data":202206,"sent_data":997,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"flushpersist.com","ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"domain_registered":"2025-07-01","domain_rank":23810,"first_seen":"2025-07-08T10:43:12.76905Z","last_seen":"2025-08-12T21:41:35.299966Z","alert_count":0,"request_count":2,"received_data":992,"sent_data":1538,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn-images.r1.cdn.pornpros.com","ip":{"addr":"64.210.135.118","port":443,"asn":30361,"as":"SWIFTWILL2","country":"United States","country_code":"US"},"domain_registered":"2000-04-04","domain_rank":0,"first_seen":"2020-10-31T19:23:20Z","last_seen":"2025-08-16T11:58:13.1305Z","alert_count":0,"request_count":1,"received_data":123323,"sent_data":541,"comment":"","tags":null,"fingerprints":null},{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2025-08-12T21:41:35.260887Z","alert_count":0,"request_count":2,"received_data":171926,"sent_data":830,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-08-13T15:14:14.224423Z","alert_count":0,"request_count":1,"received_data":17441,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.storageimagedisplay.com","ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":170153,"first_seen":"2024-09-13T12:56:32Z","last_seen":"2025-08-15T06:04:37.392161Z","alert_count":0,"request_count":6,"received_data":573595,"sent_data":2936,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.profitabledisplaycontent.com","ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2020-10-14","domain_rank":2021852,"first_seen":"2020-10-16T02:07:47Z","last_seen":"2025-08-17T18:00:35.953927Z","alert_count":0,"request_count":3,"received_data":15210,"sent_data":6989,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"creative-sb1.com","ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-01","domain_rank":22211,"first_seen":"2025-08-08T09:32:32.509707Z","last_seen":"2025-08-15T09:36:32.728712Z","alert_count":0,"request_count":4,"received_data":91171,"sent_data":1934,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-08-13T15:12:46.750635Z","alert_count":0,"request_count":1,"received_data":383306,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"professionaltrafficmonitor.com","ip":{"addr":"18.198.116.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-01-23","domain_rank":16376,"first_seen":"2025-01-25T08:56:07.448138Z","last_seen":"2025-08-15T14:27:45.733953Z","alert_count":0,"request_count":4,"received_data":1704,"sent_data":1828,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.highperformanceformat.com","ip":{"addr":"192.243.59.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"domain_registered":"2024-10-15","domain_rank":366864,"first_seen":"2024-10-23T18:32:34.138968Z","last_seen":"2025-08-15T04:26:53.557127Z","alert_count":1,"request_count":1,"received_data":33806,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-08-13T15:10:36.82984Z","alert_count":0,"request_count":3,"received_data":98105,"sent_data":1629,"comment":"","tags":null,"fingerprints":null},{"fqdn":"milletappliancejeopardize.com","ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-07-31","domain_rank":0,"first_seen":"2025-08-19T17:39:54.539461Z","last_seen":"2025-08-19T17:39:54.539461Z","alert_count":9,"request_count":9,"received_data":25384,"sent_data":15007,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-08-13T15:13:32.045252Z","alert_count":0,"request_count":4,"received_data":89507,"sent_data":2562,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn-videos.r1.cdn.pornpros.com","ip":{"addr":"64.210.135.144","port":443,"asn":30361,"as":"SWIFTWILL2","country":"United States","country_code":"US"},"domain_registered":"2000-04-04","domain_rank":0,"first_seen":"2021-02-12T21:57:53Z","last_seen":"2025-08-16T11:58:13.080264Z","alert_count":0,"request_count":1,"received_data":1771108,"sent_data":654,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-08-13T15:25:32.413099Z","alert_count":0,"request_count":7,"received_data":3372444,"sent_data":3350,"comment":"","tags":null,"fingerprints":null},{"fqdn":"easiercampaignworkshop.com","ip":{"addr":"192.243.59.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"domain_registered":"2025-07-02","domain_rank":1848382,"first_seen":"2025-07-12T12:14:33.236276Z","last_seen":"2025-08-17T18:00:35.837827Z","alert_count":3,"request_count":3,"received_data":211670,"sent_data":1381,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"skinnycrawlinglax.com","ip":{"addr":"192.243.61.225","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"domain_registered":"2024-09-01","domain_rank":38609,"first_seen":"2025-07-09T22:28:05.771371Z","last_seen":"2025-08-13T23:56:15.218302Z","alert_count":8,"request_count":8,"received_data":12350,"sent_data":7815,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"ay.tubeprnlist.online","ip":{"addr":"15.197.197.46","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2024-09-18","domain_rank":0,"first_seen":"2024-09-18T23:10:42Z","last_seen":"2025-08-16T11:58:13.115218Z","alert_count":0,"request_count":2,"received_data":10366,"sent_data":1412,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"rashcolonizeexpand.com","ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-01","domain_rank":31106,"first_seen":"2025-06-27T17:12:36.133274Z","last_seen":"2025-08-16T10:16:04.881717Z","alert_count":1,"request_count":1,"received_data":499,"sent_data":502,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"weirdopt.com","ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":37519,"first_seen":"2025-07-08T12:55:47.272157Z","last_seen":"2025-08-13T04:13:28.842908Z","alert_count":0,"request_count":1,"received_data":377,"sent_data":420,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.girlsdump.com/templates/defboot/js/all.min.js?t=1587436278","fqdn":"www.girlsdump.com","domain":"girlsdump.com","tld":"com"},"ip":{"addr":"169.62.37.218","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f591af509d034b9237e59fd07b3b31c1","sha1":"cd1ebbfaa683098d751ce9c29a3e4977da699fc7","sha256":"020bb8db0c8d664359d827ca49000e45d72d991b457b78a00a1ad154e8edd590","sha512":"d4f9faeffd2b10cd86193e6a9afaa245b495f36cb1d852a77194710175f7202556b44d5e5523c58f403709abde13386f972b5b94b4cf07e8e9aeec77b10f721c","ssdeep":"768:ESdqC36Lk3cjPxodvP8kMi9/+0UKKruPccSH:Q26LjPxodvP8kMEYudSH","tlshash":"5013fb89bb50395381ff22fb015b170762365ede86098418a07eded41e70e64a7ebf1e","size":44230,"data":"","first_seen":"2023-03-13T14:21:38Z","last_seen":"2026-05-24T18:48:27.091556Z","times_seen":198,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.girlsdump.com/sandbox%20eval%20code","fqdn":"www.girlsdump.com","domain":"girlsdump.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-05-27T17:18:58.479968Z","times_seen":904308,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-05-27T17:18:58.538539Z","times_seen":902650,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LeHdnEUAAAAAFiyGpf5SpsponjLpsUZOs1_ybgg\u0026co=aHR0cHM6Ly93d3cuZ2lybHNkdW1wLmNvbTo0NDM.\u0026hl=en\u0026v=07cvpCr3Xe3g2ttJNUkC6W0J\u0026theme=dark\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=4z2ukbqqd4yz","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c1411e9d0fbf958763ee0b8698e0b2c1","sha1":"02c0647329e93021c110a30d4df09629ecfd6439","sha256":"e7efadfc279723ba0cf9d1cf2eddfcba10bdfe78d5973ae7692f1c38d7792174","sha512":"2be834654c10df6a98b74a32984519dfde265210ac73c04771b1bf2f4cc6190c69181943e63c9abbbae41110a87fb364fd53750742374f9b67c1ad9df6c0f459","ssdeep":"384:eO6u+s9Fg5j2P3nGwhufYK2HGLGWh7DypKDzOKnaexZKuuQqHXlLAbNb:eCBzghWefYK2c7DypKXOgaeaJHX1AbNb","tlshash":"00b2e9a5f1a1b5659173b0f048bf020aa1bf3a55f8053c1cf195c5e53e38b8a506ffaa","size":25118,"data":"","first_seen":"2025-08-19T17:40:01.692048Z","last_seen":"2025-08-19T17:40:01.692048Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","fqdn":"www.girlsdump.com","domain":"girlsdump.com","tld":"com"},"ip":{"addr":"169.62.37.218","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"54d3ad970029fec86da4db2be16645e3","sha1":"a7fd903f98d17b74abdc5955d95a2bb1c6d09aa0","sha256":"721098d1b416f250eff8304d691cbcf95b1cf997d5720bd9fdeac18d326cc536","sha512":"8f71ae19c598daf0b37e262cbc947ca8b7daa6269be1283ef13bd2ff9a042160fc50777cad38b3e3885fefb773c672196a001416da776e3af7e8c92fd8a261a2","ssdeep":"","tlshash":"1ac04c8c211a5cb155a626808b7fb644b442321494956a25495963449d21e17e754954","size":153,"data":"","first_seen":"2025-03-19T06:27:36.727116Z","last_seen":"2026-05-24T18:48:27.159755Z","times_seen":134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easiercampaignworkshop.com/65d324063c68920c60940e7e5b63ab81/invoke.js","fqdn":"easiercampaignworkshop.com","domain":"easiercampaignworkshop.com","tld":"com"},"ip":{"addr":"192.243.59.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"introduction_type":"scriptElement","is_inline":false,"md5":"cfb8c2cc8190b2ddeaffb05f6ab9a5c5","sha1":"72d1f42a1bce1e6a7d2f4b6982bb206805876d38","sha256":"202aef5eb276d057b80b9f1303da1e8a9e233da41874629dc868c02d09a93969","sha512":"72974af62ffc9fb17543e1eab8cf9490a9b2de5fd757a62774af747649142533f836a87296eda5243e5865fd2681eddf05b4f3d6da3787dc62fbc63c965afb71","ssdeep":"768:5d8JfLHR9wJi/57czDGD1urnJEOlhPm+7:iLHR7afzf7","tlshash":"afd2d7db7f10b37c129b9473263f440ae3391d02f5c8c75dd977d6962a8c30a896a6e8","size":31064,"data":"","first_seen":"2025-08-19T17:40:01.68976Z","last_seen":"2025-08-19T17:40:01.68976Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85386,"data":"","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"86fb63c367d5ef05b9eb14ecb58010a2","sha1":"a3ea4deeaa5a552cfa1533a3bf2204239cf2eedc","sha256":"227737dcae707886e3da3d45bd86e2abc442ed740e1e4989c21d07035ba3e47b","sha512":"444559679116ac1d6ecf2a5bb45360baf10fa0aaa470b59f2a991a4e88dc9b0fcab53a7e36c4642768a365f8d8416e4e884efab503e7aacfdc7b47ea3e819ea9","ssdeep":"","tlshash":"a7310a703969aad4a092f00f941202b4eed13d45e7a90b5606dd41d4a7b78340e246f0","size":1572,"data":"","first_seen":"2025-08-19T17:40:01.694061Z","last_seen":"2025-08-19T17:40:01.694061Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LeHdnEUAAAAAFiyGpf5SpsponjLpsUZOs1_ybgg\u0026co=aHR0cHM6Ly93d3cuZ2lybHNkdW1wLmNvbTo0NDM.\u0026hl=en\u0026v=07cvpCr3Xe3g2ttJNUkC6W0J\u0026theme=dark\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=4z2ukbqqd4yz","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-05-27T17:18:09.819579Z","times_seen":454347,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","fqdn":"www.girlsdump.com","domain":"girlsdump.com","tld":"com"},"ip":{"addr":"169.62.37.218","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"89a5d5a8b30bb341952324d28dbf5e30","sha1":"6391b4ddae23e56de4966db709031a1682886311","sha256":"1a2f239d053592c9eff81f92bb638bc0c19826f257a116491dba5080f9076f35","sha512":"420a18894223e9bcec31e177aa9de9b7e52eb0f2f65d0a5dd370e7d152c7965f9bf75b7c24191a5846730c075702a19fd84da050099a5dd0a74330f39ee32e0e","ssdeep":"","tlshash":"5ec02bed8400f7588072cc110cbcf180d3108c502d2d141b32d01832428044187913dd","size":140,"data":"","first_seen":"2025-08-07T09:51:10.731716Z","last_seen":"2026-05-24T18:48:27.173047Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","fqdn":"www.girlsdump.com","domain":"girlsdump.com","tld":"com"},"ip":{"addr":"169.62.37.218","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2fd88266d497c93e87e3192f4e279dc0","sha1":"5f4b6bd04b977df8b62a5ea58756fc452627df01","sha256":"9512c6701fa50b1d08569536bffd84d84796d148afeb57979e6264ed8e4a979b","sha512":"8468f5a5c16c20ba12aef59286aa2602e87cc7587370f526cefb26ebe5733e34ebc3bc3fd88435701fe37c5a716e39c47fef01867222ae778b730528a43bec9d","ssdeep":"","tlshash":"01d012764124f0434142d1e3dc19eb1946737a2c8ac4adc0885b98252a070b62973d27","size":204,"data":"","first_seen":"2024-08-20T18:18:35.193561Z","last_seen":"2026-05-24T18:48:27.176175Z","times_seen":129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"9690cbea2671fd851c999e275725ec69","sha1":"bc6c84f989d8c09e0503bfbc20af2757645786eb","sha256":"f3011dd30bc704c5dff8ec10f49f124de7a995569c554b3618ef58ebab735e7f","sha512":"fb44f59a855284b148b040695c6eadbc0a9fed992c2b658a41e32c23318e8b31bf3e6adf34fe49c456446f6ba4f58510799d3707d0a183db6f705a9fbc2b8a54","ssdeep":"","tlshash":"fe410b75397a75b0a493f46b644123e07eb0b9851f580bc63ccd43d467ba87c0b39e95","size":2050,"data":"","first_seen":"2025-08-19T17:40:01.697079Z","last_seen":"2025-08-19T17:40:01.697079Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85386,"data":"","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d70bec600477165b18d888345bf62f34","sha1":"83b5de9d5b805ed9835faf868f93b77ec2a74133","sha256":"f91605fa7c1bb8739ed6acf1cb686b0161f3c661ef0924dc9e7093e92493afe2","sha512":"eeb11b56b00c203399fc9d12c1887c6f57d1107eb131904d5648ad77c046b82e2bb0e03cd97b5746cec158f86ea84e1863b07969b419f9a90ef23e71f64481b0","ssdeep":"","tlshash":"df014c6035b843b89693d9d1ffcbbf5d93182046c0028907702c3ec65f7171dd2a258b","size":659,"data":"","first_seen":"2025-08-16T11:58:16.905961Z","last_seen":"2025-08-31T17:43:23.227924Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LeHdnEUAAAAAFiyGpf5SpsponjLpsUZOs1_ybgg\u0026co=aHR0cHM6Ly93d3cuZ2lybHNkdW1wLmNvbTo0NDM.\u0026hl=en\u0026v=07cvpCr3Xe3g2ttJNUkC6W0J\u0026theme=dark\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=4z2ukbqqd4yz","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b8ac6c3362a259c00243df87d9667543","sha1":"630e123df1ef80eccc6fa5e756bdf4f391584f09","sha256":"63c58ce4f8710830d7c4beb7cce2f14f79b975b89529e610e859abe3e75e473a","sha512":"0dc3518dd5a711dc71804b4c798fe740c96975d3a07328e0d249bedb4101689cc46b7618d32bd05b294cd3f742eeb48871e84d6ae2cb44ddadbc427b7656bf3b","ssdeep":"","tlshash":"45700008ac08a0028022303200ab000e80220000a0008802028a00802e3200b000ac0a","size":22,"data":"","first_seen":"2025-08-11T08:09:28.642631Z","last_seen":"2025-08-19T20:48:50.607676Z","times_seen":653,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"be8f16d18bb6ef3cb03b370f33ee1640","sha1":"35357bb2c8e001490c5fdcf6748ed1cad68d76de","sha256":"f2586eabafdde47daf8ad905490c2297ea924380ef752a530f92606e550c251e","sha512":"64eb363468e23ea2cf9756350b774b8a1017033665e45275a60b49d36fc4b713d9befee24fdeb5dc997d3b3b5c3057dbc21eac8a21dc63d6782c846326c78717","ssdeep":"","tlshash":"b01102b71a08e0350f3209e1f2ffcab5e592741cf11845e8a511ea881e6acc7ce08589","size":1017,"data":"","first_seen":"2025-08-07T15:32:25.575827Z","last_seen":"2025-10-15T08:09:54.83212Z","times_seen":4438,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.girlsdump.com/misc/bootstrap/js/bootstrap.min.js","fqdn":"www.girlsdump.com","domain":"girlsdump.com","tld":"com"},"ip":{"addr":"169.62.37.218","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5869c96cc8f19086aee625d670d741f9","sha1":"430a443d74830fe9be26efca431f448c1b3740f9","sha256":"53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef","sha512":"8b3b64a1bb2f9e329f02d4cd7479065630184ebaed942ee61a9ff9e1ce34c28c0eecb854458977815cf3704a8697fa8a5d096d2761f032b74b70d51da3e37f45","ssdeep":"768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ","tlshash":"b6f28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","size":37045,"data":"","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-05-27T16:41:05.981611Z","times_seen":88355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.girlsdump.com/misc/jquery/jquery.min.js","fqdn":"www.girlsdump.com","domain":"girlsdump.com","tld":"com"},"ip":{"addr":"169.62.37.218","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85578,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-05-27T17:17:29.761675Z","times_seen":281503,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","fqdn":"www.girlsdump.com","domain":"girlsdump.com","tld":"com"},"ip":{"addr":"169.62.37.218","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"42bd0f9beb106b93387e0f5039bc3403","sha1":"d6949c26d82e93ab3a595f682634edfdd69da5de","sha256":"ba4b7f8ea4eabb396abcfa8ef23c5a6f0441209bc50ad6245a3951910e5e7ad3","sha512":"877eea352b06e8dbcdc57daa1289d6b061d395d79d91bb05a871755d164ea6dd1bd39c0c533a17409e0206646a923f9c532bb137d05677587e347bcca411eb2c","ssdeep":"96:FI7KhkAPvKJa2EaMvanZyap5HZ7z9SANHtN38W:FJia/aNZyap557XqW","tlshash":"eeb1dc14bcb6096682bf34ae1d6f99113d2145879a04df00b59e2be08f4876cf6b1bdb","size":5307,"data":"","first_seen":"2023-03-07T13:55:54Z","last_seen":"2026-05-24T18:48:27.177204Z","times_seen":211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/07cvpCr3Xe3g2ttJNUkC6W0J/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef9df0b24b3cd0b880dc214fe644af53","sha1":"3033e1c344b264a84506fc97c7cf46c3c6f42ec8","sha256":"242f090a7ea07bfdf6504310f582ab368d95f6a673e38ac71e3b921b7bdc8abc","sha512":"65b9f85959c2eb1cb43ef8639b1ec6777b8a710f6b6b4055ce63d753522b35707657c4a2f700a71108cf90660890b3b1acaa793e783f7279a5d6ce254643eeaa","ssdeep":"12288:8SVAUZNkYzZaJ5TxKGvfuS8gUxeNu5nLcan75Av:F5dzYJiGnuSDO+nan0","tlshash":"95055ce4700a74b99362b0fb44bb104da3fec516d80c0d5db1a9d8f02bb944da57aeb7","size":800792,"data":"","first_seen":"2025-08-07T15:32:25.571794Z","last_seen":"2026-05-25T17:50:02.566933Z","times_seen":11032,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LeHdnEUAAAAAFiyGpf5SpsponjLpsUZOs1_ybgg\u0026co=aHR0cHM6Ly93d3cuZ2lybHNkdW1wLmNvbTo0NDM.\u0026hl=en\u0026v=07cvpCr3Xe3g2ttJNUkC6W0J\u0026theme=dark\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=4z2ukbqqd4yz","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"33b855e34cb49a4a04b6c23b526f5a51","sha1":"a91b674d8ba978c4149582aa0caa4986a8a9e645","sha256":"83d68e607bb643214c8829ff4d3425627e1cc8da04c9f5528fe566b16f5a90c9","sha512":"35e9e972db6ebd17252a4542de3ceb1477a129a6fb7f7908c0e21599ca523c14ff7400b3a9a4832e80899d064bbae08ff4b2ce14af0be9407aea58bd8e23b9df","ssdeep":"","tlshash":"f1700008ac08a00280223022203b008e00220000a0008802028a00802e3282b000ac0a","size":22,"data":"","first_seen":"2025-08-11T08:09:28.638903Z","last_seen":"2025-08-19T20:48:50.608727Z","times_seen":653,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a087223fc265090f4a4465d69e6dfc1","sha1":"406efba699d3331f7baa4bdf61df28686d0223f3","sha256":"61c7e69c5f3a988b4bcffc71c505f2964945277923af5cee6555a78487b37acc","sha512":"465053b6c27e8c8ad0e041f3d10d35ae2f380a18f9ffe01398b5ceedab9dcb67c8c7408641369954aac0200bdca3315ab10d7c0b19980e9fed50203fff0662cc","ssdeep":"96:ilozv12nsZyYIlSrzNfjQd9uZyYIlSrzNfjQW1/DuCfMEDaH:iSzv0sZYkrZfIMZYkrZf5buCkCaH","tlshash":"34a128b53da5e5b06453f46f20226294be60a40a6a148f467dccc2d45fb6e780f78ee4","size":4811,"data":"","first_seen":"2025-08-19T17:40:01.700807Z","last_seen":"2025-08-19T17:40:01.700807Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=07cvpCr3Xe3g2ttJNUkC6W0J\u0026k=6LeHdnEUAAAAAFiyGpf5SpsponjLpsUZOs1_ybgg\u0026bft=0dAFcWeA4hdXGcvrYLfnOSlb1bVDRISkx_MyNLiYR9aApeNG1QhvlgMZqjcyTKQLP29ViWUqHaM9qapW-XAp2GpWbO5GYv0LOeBA","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-05-27T17:18:09.819579Z","times_seen":454347,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easiercampaignworkshop.com/13/1e/ee/131eeed32817b6fc0a9e0816881611df.js","fqdn":"easiercampaignworkshop.com","domain":"easiercampaignworkshop.com","tld":"com"},"ip":{"addr":"192.243.59.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"introduction_type":"scriptElement","is_inline":false,"md5":"752b544c62ed269b43a515be70b2e105","sha1":"d5bed78068cc433b2785cd1a0468ddc4520c2934","sha256":"373ccdcba1ccc1a117fb0912f1e7f653f4539e1aac0f7f2502e689517307956b","sha512":"03272a9caf65d0ea17386973cb90f1afa634a6c07b094bf628895d11fca74ca15996a59cf6e6f3e0e417092e1398273aa18c9dee3c5d20a4bc2edd4d2144706a","ssdeep":"3072:H0i5L6Tj23Zrs61f/f7EqERB6ns6HsXuhqQPw4CTR2b3i:HF0q3i","tlshash":"7ea3d78c7a82f49e42666032222f540ef1d91e99144ca468db97f5fc1f3d71ba938bb4","size":105467,"data":"","first_seen":"2025-08-19T17:40:01.651826Z","last_seen":"2025-08-19T17:40:01.651826Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.highperformanceformat.com/9e5c0b9f77173ca4b1dd6cce2774d640/invoke.js","fqdn":"www.highperformanceformat.com","domain":"highperformanceformat.com","tld":"com"},"ip":{"addr":"192.243.59.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"introduction_type":"scriptElement","is_inline":false,"md5":"640690a569f36344ac969340a70252b5","sha1":"ba70d4c183fc426a6d5e869c661cc9da0120d747","sha256":"2ba26512d2279dbd295db12e329801148080ed7083145267a25c5d9ef262a40c","sha512":"ec82c12392286020f46c995765995fec5ef7949d7e51ed8750f1bc9112ce1a608c450d871f6494269453a1697c3fc09eda51558780fcbca100e059c45a873111","ssdeep":"384:euHnDzIpmAf19PXm2bBdMLlAwH3KQsjmTOlXqel+rn2NrL0uAfdtiOmuBc8Fg:ZjzSfpbULz3KQQmTO5qel+qL0PFcWg","tlshash":"f6e209883f70b44d1376303b322f856ef9b5cd555488d88cd287ac952ab9b1ee437e0a","size":32985,"data":"","first_seen":"2025-08-07T09:51:10.714666Z","last_seen":"2025-08-19T17:40:01.672644Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tubes.fuckyoucash.com/js/app.js?id=69af81cefea91532992c","fqdn":"tubes.fuckyoucash.com","domain":"fuckyoucash.com","tld":"com"},"ip":{"addr":"3.167.2.91","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"69af81cefea91532992c98cc9ce7b8e9","sha1":"aa99e58d8de7b3b98eca03438c9362670e52511e","sha256":"34d001fa7f567a5bb24a0cd2a8fff787d224b229f8adcbbff642eed356d72159","sha512":"97e2e614128602233af9ec84c28b462bf4a9f41d1ea9bd014c621664189c7344af729ffd47363d55025d84abb91fe9a68df298b505eed3f0c7bc1a3be9a6bf20","ssdeep":"3072:zFUTE//p7Y1eNGhXsirFYaafQaqQPJtLJ+5HOnD:2K/JY1eNWpWQaqsRJ+1K","tlshash":"f914e88d72d5b07247ab7076807f450bb23a689d680ea018f299d4dd2d7cd8a6237f3d","size":199095,"data":"","first_seen":"2023-11-22T17:01:51Z","last_seen":"2026-05-24T18:48:27.149513Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4e9e51ab8588252edbcb92ab528a8f1","sha1":"9136b6e465d61c554999e053a7ceb1c354324928","sha256":"a24a0bde7954b0a0b2c8b48e6acf41eaec2bad3f39a275eb97e6c8c564924c1c","sha512":"00866eb3771685afe6adac06b8663343e70d90812ebe40a5bf2c749d48566a9494e470d741f49c5389c9f5cbb4e660ad0b61e725dceae30709048449db5c50be","ssdeep":"","tlshash":"1fc08ccc1f00bd22b9213c9f520233c0aac10296ad327e0a6a884050a4c203a47500c8","size":145,"data":"","first_seen":"2025-08-07T09:51:10.730016Z","last_seen":"2026-05-24T18:48:27.165343Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LeHdnEUAAAAAFiyGpf5SpsponjLpsUZOs1_ybgg\u0026co=aHR0cHM6Ly93d3cuZ2lybHNkdW1wLmNvbTo0NDM.\u0026hl=en\u0026v=07cvpCr3Xe3g2ttJNUkC6W0J\u0026theme=dark\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=4z2ukbqqd4yz","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cfce8fcc441cef70c51b465878aa62b8","sha1":"5c99322ce011c465dc8a2156459032711a31220a","sha256":"e47484e9734a24fcbbfd35a45b7e251553a420a4398507c2b5f2b3ae8cf98b9b","sha512":"9bc85878d6c24908d2f642cfb321d22107e8b23dcad663be79c656127150823c755965868fbb1d1a54aa9d0c251b1a57011eaee69262a25af5c0ee6c42a8be3d","ssdeep":"1536:SnA8Q7ciOpLnKf+yySlza8Mq8wwRMu9VWHVav5Z:SA8A6iz3MFDMOv5Z","tlshash":"b263cf2fe7a334fecf7e9b418be1bbd9117e604b404256ec59a704c50a2dc9a66712cc","size":68108,"data":"","first_seen":"2025-08-19T17:40:01.702819Z","last_seen":"2025-08-19T17:40:01.702819Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=07cvpCr3Xe3g2ttJNUkC6W0J\u0026k=6LeHdnEUAAAAAFiyGpf5SpsponjLpsUZOs1_ybgg\u0026bft=0dAFcWeA4hdXGcvrYLfnOSlb1bVDRISkx_MyNLiYR9aApeNG1QhvlgMZqjcyTKQLP29ViWUqHaM9qapW-XAp2GpWbO5GYv0LOeBA","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"de5e448e5cbadd5f1d657c7a9173b703","sha1":"4e2222367455abb0ecd7b75357fc134aae415462","sha256":"cc66f6ec840b456dc6468f6bdeb1745df45dc7728757734479829740aaea5337","sha512":"da41ac251394d0de135656f17b2f3fdcd7a70cf05df628f5860009449f0f5db022eb6679cdc9ff77531c7f8f2d612c13ae32b110b20cb4c6f989674b63dfc079","ssdeep":"","tlshash":"a5e0a9a3a2023df2cc15aca5081a409b3ccc0837a056c7f07acdbc883fa0d493a00e6c","size":296,"data":"","first_seen":"2025-03-19T06:27:21.471331Z","last_seen":"2025-08-24T15:15:18.998214Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/07cvpCr3Xe3g2ttJNUkC6W0J/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef9df0b24b3cd0b880dc214fe644af53","sha1":"3033e1c344b264a84506fc97c7cf46c3c6f42ec8","sha256":"242f090a7ea07bfdf6504310f582ab368d95f6a673e38ac71e3b921b7bdc8abc","sha512":"65b9f85959c2eb1cb43ef8639b1ec6777b8a710f6b6b4055ce63d753522b35707657c4a2f700a71108cf90660890b3b1acaa793e783f7279a5d6ce254643eeaa","ssdeep":"12288:8SVAUZNkYzZaJ5TxKGvfuS8gUxeNu5nLcan75Av:F5dzYJiGnuSDO+nan0","tlshash":"95055ce4700a74b99362b0fb44bb104da3fec516d80c0d5db1a9d8f02bb944da57aeb7","size":800792,"data":"","first_seen":"2025-08-07T15:32:25.571794Z","last_seen":"2026-05-25T17:50:02.566933Z","times_seen":11032,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-K272QG5WTS","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9cfb2eed14c7475e577f198e8138bebd","sha1":"431300ae6a8671b76d80813d9a2d5f0ca600ed8d","sha256":"06929ec06839a57938e8a527ee8ae501f63ae2574fe4712ca2106289fc58f6c0","sha512":"57a55365684506a315e6f24b8ebb2b35f41d28973349211174c5fd93a89b4600f8ad11e22c3fee7afcf0e1bd6b0d030c4b461806c8e3b3ea263b45dc299a6e92","ssdeep":"6144:sukldUcWer7tSvzLwQrDlUKB3IKRILuwNXTODrp6q9:3klqcr7tSvzLwQrDlVYZOrF9","tlshash":"5b8418cd73d674629396b478503f018ba57b28a2f44cc899f189cde42e74a9a4237f7c","size":382305,"data":"","first_seen":"2025-08-19T17:40:01.654727Z","last_seen":"2025-08-19T17:40:01.654727Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ay.tubeprnlist.online/js/t.js","fqdn":"ay.tubeprnlist.online","domain":"tubeprnlist.online","tld":"online"},"ip":{"addr":"15.197.197.46","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ecfa96bbde42a40a76f587214f8d1db","sha1":"8a6c6ba777fa713ad66bd910a8602d555492e2c2","sha256":"40dc5d12e66f68818c56da1a9e66d204e6129bead83b149e99fbd0b6ce32e668","sha512":"264776dd23b7e08900b5fb464c790a922fe1a12fac07a5e4b439915c288cd6c101c4bf855f733e2c5fdd5f3a5cc0c0b2e83a9b09dda1d979d4026acf19e48272","ssdeep":"192:8llhRmuba1+mX92HYCMprbQ7uAyd8Q3kFSeYCmt9pZHhKB1s1mPd2kWLv:8jhRmu+Me2HLMdbQC5z3kFVo9pZHhKBi","tlshash":"4a12e6d17150283965d325659abf340eb1b35c48fc8c8140e821e8e26d78faa17ffe6c","size":9240,"data":"","first_seen":"2025-08-12T11:33:57.511338Z","last_seen":"2026-05-24T18:48:27.098128Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","fqdn":"www.girlsdump.com","domain":"girlsdump.com","tld":"com"},"ip":{"addr":"169.62.37.218","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0989bf5cc4696db0f1bf3b95f1dc5048","sha1":"6fb4e8793ab729dd82770c71e4ffead126c9f34a","sha256":"07f973df0c7e317de63d2c267e5e8f9124907540ef83517171555b9d3e692709","sha512":"f290e3acf0423e11a91c6691dd9ed13760cb8a50fce705c5269c3e615e7cd3bd72aef64cfc6c244a9eea9b2caf49da60d5292c28620eb62a7a13950c646ff226","ssdeep":"","tlshash":"bec02b24f07cd750403bb06c407bdd242732343013021700a1002e0e181c208614b483","size":132,"data":"","first_seen":"2024-08-20T18:18:35.194929Z","last_seen":"2026-05-24T18:48:27.17775Z","times_seen":161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LeHdnEUAAAAAFiyGpf5SpsponjLpsUZOs1_ybgg\u0026co=aHR0cHM6Ly93d3cuZ2lybHNkdW1wLmNvbTo0NDM.\u0026hl=en\u0026v=07cvpCr3Xe3g2ttJNUkC6W0J\u0026theme=dark\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=4z2ukbqqd4yz","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"fc608dd9a8b2b0dbcb03f450ec0fb6c8","sha1":"82149bd93b62a597fefccede1326244d793afb61","sha256":"2cfbf80ab5f58768c8224cebc58d9c0b7a934a3540bfef807706ce97295b069c","sha512":"43e50642f90ad1d6f2f468aafbf48624058ed0db167be6b5cffda779ea7c11c90abfe769472734c43010541bca07ed2162488f5520a7b251db7e45efe66bee7d","ssdeep":"","tlshash":"04a022c3bc0bb8028302388a0cb3800080bb0203f0203c00808283c20b3ba0882038ca","size":64,"data":"","first_seen":"2025-08-11T08:09:28.550948Z","last_seen":"2025-08-19T20:48:50.621902Z","times_seen":653,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easiercampaignworkshop.com/de/21/fb/de21fbaed972e35daf58964d69ff178d.js","fqdn":"easiercampaignworkshop.com","domain":"easiercampaignworkshop.com","tld":"com"},"ip":{"addr":"192.243.59.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"introduction_type":"scriptElement","is_inline":false,"md5":"53c11a8753cfc4137203bf79a308afdb","sha1":"27b7473485ac0c82c1cc45642c21924421924efa","sha256":"dba9e4cdb7230eea9bb289d97a894f3379b02f98bc4b748b85fa309f2d17da1c","sha512":"003c9b92174ace257ec909f43893c6a9338236a074a1487bcba4abdf07dfe1eb078f24845c1175b0a7021d08c92b7e8150b3413393467566dc22a9a1d4c5c2e1","ssdeep":"768:Y2WnYMmNjGqw648+QhS8u+Jcj/XcdNjNEmOdY08kUbTehzbcepw6f:Y2WnMl4x5O+jvc6dY0U3fE","tlshash":"b463c7483f51b27802e6b8fa712fa61af0265c0195d8e4d8f503f4ddae66719f036f25","size":72561,"data":"","first_seen":"2025-08-19T17:40:01.650848Z","last_seen":"2025-08-19T17:40:01.650848Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/07cvpCr3Xe3g2ttJNUkC6W0J/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef9df0b24b3cd0b880dc214fe644af53","sha1":"3033e1c344b264a84506fc97c7cf46c3c6f42ec8","sha256":"242f090a7ea07bfdf6504310f582ab368d95f6a673e38ac71e3b921b7bdc8abc","sha512":"65b9f85959c2eb1cb43ef8639b1ec6777b8a710f6b6b4055ce63d753522b35707657c4a2f700a71108cf90660890b3b1acaa793e783f7279a5d6ce254643eeaa","ssdeep":"12288:8SVAUZNkYzZaJ5TxKGvfuS8gUxeNu5nLcan75Av:F5dzYJiGnuSDO+nan0","tlshash":"95055ce4700a74b99362b0fb44bb104da3fec516d80c0d5db1a9d8f02bb944da57aeb7","size":800792,"data":"","first_seen":"2025-08-07T15:32:25.571794Z","last_seen":"2026-05-25T17:50:02.566933Z","times_seen":11032,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LeHdnEUAAAAAFiyGpf5SpsponjLpsUZOs1_ybgg\u0026co=aHR0cHM6Ly93d3cuZ2lybHNkdW1wLmNvbTo0NDM.\u0026hl=en\u0026v=07cvpCr3Xe3g2ttJNUkC6W0J\u0026theme=dark\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=4z2ukbqqd4yz","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"926fee04e0289ff9b21c81e115b1cd85","sha1":"b46f3c04a407c352cccf561f93707c37c5494706","sha256":"9386a0016435941f36b4b768ad69c78853921274a529c0a9c8f29951625f6228","sha512":"05e6d4455a9f1032cdf5531725e7d6ca11f27d4e74165a06d8d99010123776ddc0ed05a608f02949b69bac620af424fb3cdc41b6a1f179f890e1d1ad0720b89e","ssdeep":"384:SO6u+s9Fg5j2P3nGwhufYK2HGLGWh7DypKDzOKnaexZKuuQqHXlLAbN7:SCBzghWefYK2c7DypKXOgaeaJHX1AbN7","tlshash":"6d82e9a5b1a1b5659173b0f048bf020aa1bf3a55b8053c18f195c5e53e38b8e507ffae","size":18890,"data":"","first_seen":"2025-08-11T08:09:28.630473Z","last_seen":"2025-08-19T20:48:50.605086Z","times_seen":654,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"milletappliancejeopardize.com/impr.gif?sid=H4sIAAAAAAAC_1RSMYwbRRQdX1xBQYgQRSqXICHfrnfts0kREUJQxJGE3KErqGZndn2Tm91ZZna9PkugEydFKY2gIFRzz76cgIBCAw1IyIeE0ElI5-6KXAEVBaEApaBC61gyfGne_3_ejPT-m7m9l58SDzk9ufGmGggp6XKz7tRe2BAJV4WpXVuvuU7duVDbEEnLv1Drl6B7L7ueX3derL0esi213HBcx3Edt3ZF6DBS_eUZC5He77j1jlP3G3W36aOv_9-bvAJDK-C9U3IOgk-f-S16B4JNkMQPLodmK1PpS6_FuaSZ0ujxg7eTrUQVCeJFGekKouRgfhrKTAn5ZAkqOZhPANUblxMgEFOy9PxDBMnBXCaC3v4TpYFEmCDgT6PoTRDKCQSdgKldCH5MAMZx7TqS-N41pQu6_YSlJTsl1cd_QRRTUn34HJL4q0tS9GtrSuaZUIlBP7IQ_QlEd4I0P0Q2WIIoDsGyDyD4L2T58SqSeHzdSAXB7Wx6EU1ATQV5uUQFeVRBnlYQ85Oa77R95lKvFXU4W3F86vs8DJxOu-E4tMNWkLNS1hBZOgSTQzC9g1TvYEt8eNw8B53_ALNpYXgFJpuSyls76HGLIiQoDEFBCQpBUGQERc_uc2kaxt7j0uSBO8-NefbsSGXdPbqvsm6YEFA9hOZ2LNJ3zS5YdmY0iAwfqRJokNkRDbjdS0_JszPjfv_7PLbCk1qryb2G77Q81mp3Gg5rOR3fCVfCZtDyaNB2YYSFMEszTwZiSioHj5CWeX0VAT2EkYdg4ixo7oIWFnTTYpB82RVaGp7HaZ2pGFxZpFkV2XZlT56S8zMJa7cfIWRHF_sfZd_dev8fMG2Raotb4keCrrwzuqkKMr6pCkO-vp5mIhYDWr7rWkaz8Mznb4TbhdL86mUz_OwVVhJleX89NNkqTbhIuoZ8cUlwHuorSrOQfH_VbITBjdxsXsp1kqerN169cjVOdWiMUMkEVEwJufsATEzJ2Z_em_3Z-rdDCD2Bzi3i_IjMAyzdgUkX2o0i0HLBB-kZFLkd6Uaw2JSCQIaLngYW5j99sKhHmpa3qbB75g66ugqa7SKJLXraoictqBzC5E-NslQfXfz5bhmfIpDVUSB1dRxILT8uLf6zhF9nZpfwB4w4qUVe2GCO015puV47Cl3P5yxqtv0Ob1HH80JkZro5_ub43wAAAP__cQE43qAEAAA=","fqdn":"milletappliancejeopardize.com","domain":"milletappliancejeopardize.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:29.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"milletappliancejeopardize.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 31 Jul 2025 08:36:21 GMT","end":"Wed, 29 Oct 2025 08:36:20 GMT"},"fingerprint":{"sha1":"EA:64:64:B0:BA:DC:E1:5D:06:7D:52:B8:2C:0B:86:7F:CE:4B:A1:74","sha256":"DB:07:0A:AC:70:F7:AC:62:69:99:4F:53:5A:A1:10:05:D2:07:FB:2B:9A:EE:E7:F4:1A:BB:3C:3C:C1:27:DB:31"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSMYwbRRQdX1xBQYgQRSqXICHfrnfts0kREUJQxJGE3KErqGZndn2Tm91ZZna9PkugEydFKY2gIFRzz76cgIBCAw1IyIeE0ElI5-6KXAEVBaEApaBC61gyfGne_3_ejPT-m7m9l58SDzk9ufGmGggp6XKz7tRe2BAJV4WpXVuvuU7duVDbEEnLv1Drl6B7L7ueX3derL0esi213HBcx3Edt3ZF6DBS_eUZC5He77j1jlP3G3W36aOv_9-bvAJDK-C9U3IOgk-f-S16B4JNkMQPLodmK1PpS6_FuaSZ0ujxg7eTrUQVCeJFGekKouRgfhrKTAn5ZAkqOZhPANUblxMgEFOy9PxDBMnBXCaC3v4TpYFEmCDgT6PoTRDKCQSdgKldCH5MAMZx7TqS-N41pQu6_YSlJTsl1cd_QRRTUn34HJL4q0tS9GtrSuaZUIlBP7IQ_QlEd4I0P0Q2WIIoDsGyDyD4L2T58SqSeHzdSAXB7Wx6EU1ATQV5uUQFeVRBnlYQ85Oa77R95lKvFXU4W3F86vs8DJxOu-E4tMNWkLNS1hBZOgSTQzC9g1TvYEt8eNw8B53_ALNpYXgFJpuSyls76HGLIiQoDEFBCQpBUGQERc_uc2kaxt7j0uSBO8-NefbsSGXdPbqvsm6YEFA9hOZ2LNJ3zS5YdmY0iAwfqRJokNkRDbjdS0_JszPjfv_7PLbCk1qryb2G77Q81mp3Gg5rOR3fCVfCZtDyaNB2YYSFMEszTwZiSioHj5CWeX0VAT2EkYdg4ixo7oIWFnTTYpB82RVaGp7HaZ2pGFxZpFkV2XZlT56S8zMJa7cfIWRHF_sfZd_dev8fMG2Raotb4keCrrwzuqkKMr6pCkO-vp5mIhYDWr7rWkaz8Mznb4TbhdL86mUz_OwVVhJleX89NNkqTbhIuoZ8cUlwHuorSrOQfH_VbITBjdxsXsp1kqerN169cjVOdWiMUMkEVEwJufsATEzJ2Z_em_3Z-rdDCD2Bzi3i_IjMAyzdgUkX2o0i0HLBB-kZFLkd6Uaw2JSCQIaLngYW5j99sKhHmpa3qbB75g66ugqa7SKJLXraoictqBzC5E-NslQfXfz5bhmfIpDVUSB1dRxILT8uLf6zhF9nZpfwB4w4qUVe2GCO015puV47Cl3P5yxqtv0Ob1HH80JkZro5_ub43wAAAP__cQE43qAEAAA= HTTP/1.1\r\nHost: milletappliancejeopardize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl15332378=1; nlec65d324063c68920c60940e7e5b63ab81=[5474031,5474018,5474030,5474029]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 19 Aug 2025 17:39:29 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: iprc_l+fb70b23f6781b5934a3ae466393c455c=5474030; expires=Wed, 20 Aug 2025 17:39:29 GMT; path=/; secure; SameSite=None\niprc_l:5474030=1; expires=Wed, 20 Aug 2025 17:39:29 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 2\r\nHost: milletappliancejeopardize.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 90a14549320db8a0798d54e9945d52dd\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":595,"timings":{"blocked":311,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":186},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-19","alert":"Sinkholed","trigger":"milletappliancejeopardize.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.girlsdump.com/favicon.ico","fqdn":"www.girlsdump.com","domain":"girlsdump.com","tld":"com"},"ip":{"addr":"169.62.37.218","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:30.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"girlsdump.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Jul 2025 10:50:10 GMT","end":"Sat, 11 Oct 2025 10:50:09 GMT"},"fingerprint":{"sha1":"B5:15:42:21:A4:14:A1:91:37:AA:0C:41:AC:D4:5F:B8:C4:2C:A9:74","sha256":"40:55:21:6B:C6:50:EC:F7:B1:50:34:10:8D:F8:CE:5C:6F:F6:25:68:34:D0:63:3E:B3:57:0F:C6:AE:80:6F:DE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.girlsdump.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}\r\nCookie: _ga_K272QG5WTS=GS2.1.s1755625168$o1$g0$t1755625168$j60$l0$h0; _ga=GA1.1.1942031897.1755625169; mc_vid=meitwa5p9olm81w5j52c; mc_clid=meitwa5p9olm81w5j52c7n34xd; dom3ic8zudi28v8lr6fgphwffqoz0j6c=98c497cb-ecfa-4039-8dff-41d26e087c9b%3A2%3A1; sb_main_de21fbaed972e35daf58964d69ff178d=1; sb_count_de21fbaed972e35daf58964d69ff178d=1; pp_main_131eeed32817b6fc0a9e0816881611df=1; m5a4xojbcp2nx3gptmm633qal3gzmadn=milletappliancejeopardize.com; pbpr0tpuw4isk85t8yg3jb2lj5vqf=skinnycrawlinglax.com\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 19 Aug 2025 17:39:30 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 15406\r\nLast-Modified: Sat, 04 Dec 2021 15:33:10 GMT\r\nConnection: keep-alive\r\nETag: \"61ab8a36-3c2e\"\r\nExpires: Thu, 18 Sep 2025 17:39:30 GMT\r\nCache-Control: max-age=2592000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"110827fcb14bffbd5f5123ce65c1fff8","sha1":"1183e3494f78db107f6c9c419e56d13d4ed6b72f","sha256":"47029f8bba40af3e3eb14617eb367e19728637b91fcc600c647eec2a836d9a30","sha512":"45f77836ef8662a22af1d38d5de3342f6aeb38cb1db1bf3a34a799012e06345b41f095470c93d85214c66c51e168647931f1e9b9f3f0b72fc2b549b2409fc215","ssdeep":"192:S5TQQInLqBEuvi70M/8KblvAgjwt4Q1JxBsR9K1R39tUD:S5TQQIn2Hvih/nJ1O11R3i","tlshash":"e8622887fa68c842c8215074a917cbf6ffa2bc1c8801c6873be7ef67bc019565d8b255","first_seen":"2023-11-22T17:01:52Z","last_seen":"2026-05-24T18:48:27.125677Z","times_seen":133,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/au/d3/55/fb/d355fb06fa4f4907609b7d285fa07f7a/1664530003.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"104.21.95.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:30.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 11:11:15 GMT","end":"Sat, 08 Nov 2025 12:08:40 GMT"},"fingerprint":{"sha1":"46:26:78:BD:18:7A:95:15:D4:B3:89:73:FE:7E:99:33:18:7F:21:3E","sha256":"AD:6B:6A:10:54:38:33:B9:BB:A6:FD:B7:B0:1B:2E:9D:62:B8:47:35:C4:E6:7B:F6:4A:92:AA:75:B0:29:F7:F3"}}},"request":{"raw":"GET /sb/au/d3/55/fb/d355fb06fa4f4907609b7d285fa07f7a/1664530003.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.girlsdump.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 17:39:30 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 30 Sep 2022 09:26:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S%2BOyTAML7oDNDIKLMGAiiS7cCgMwifSVQMpNe8qtoyLuKqHMZewZ%2FCGMGyUlDXVp0WCIC6oR1mSEEuKUKfT5cs7SX0Su12wybX%2BJ%2FzbJYQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 971b6e4159c0b79a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1175,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"4cadfafa63acfac77d51a9e8d602fd56","sha1":"59d686d83b171e39e607a1223cd6dced146a785a","sha256":"51ce9d4f3e78c378cf86521d43deafdb23e01a4c859b72e2ca7bef73736ceaac","sha512":"51c92a795bf48cd528dd5805f58ee2fd93afce26668870d4111c359c03b3b51df12f88314d4f82c51891689ba83ae73bad80f87359c73f506034f94d35df046b","ssdeep":"","tlshash":"6d213d516ee9c537029350c07b706f2be881d583894e9d407bbc49588fd5ec1c967407","first_seen":"2023-04-05T23:50:36Z","last_seen":"2026-04-12T05:56:34.356483Z","times_seen":710,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":50,"dns":20,"connect":8,"send":0,"wait":122,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=07cvpCr3Xe3g2ttJNUkC6W0J","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LeHdnEUAAAAAFiyGpf5SpsponjLpsUZOs1_ybgg\u0026co=aHR0cHM6Ly93d3cuZ2lybHNkdW1wLmNvbTo0NDM.\u0026hl=en\u0026v=07cvpCr3Xe3g2ttJNUkC6W0J\u0026theme=dark\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=4z2ukbqqd4yz","date":"2025-08-19T17:39:31.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=07cvpCr3Xe3g2ttJNUkC6W0J HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LeHdnEUAAAAAFiyGpf5SpsponjLpsUZOs1_ybgg\u0026co=aHR0cHM6Ly93d3cuZ2lybHNkdW1wLmNvbTo0NDM.\u0026hl=en\u0026v=07cvpCr3Xe3g2ttJNUkC6W0J\u0026theme=dark\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=4z2ukbqqd4yz\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Tue, 19 Aug 2025 17:39:31 GMT\r\ndate: Tue, 19 Aug 2025 17:39:31 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncross-origin-resource-policy: same-site\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"783188df68f5e246e8fd9a1650bb4d3d","sha1":"db2be3db02b6c77c861a42f78c1b0325852e6be4","sha256":"69877d38d55faaa76fdd8e89085b5b5e5617d99d1fb52712ede2dfcb35c91230","sha512":"5db5cc078149148d4881b3326a5da1652e622cac65f6231d8bba5b52e0a3b14f57942b74738ce5428050b8fb27e55b1c594155bc9b94c320916718e4485ce480","ssdeep":"","tlshash":"b1b012630a10c8181c000103e56f97bce0124038db7090f041652fe942112b38801400","first_seen":"2025-08-07T15:32:25.569473Z","last_seen":"2026-05-23T15:58:38.888227Z","times_seen":7791,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.girlsdump.com/misc/bootstrap/css/bootstrap.min.css","fqdn":"www.girlsdump.com","domain":"girlsdump.com","tld":"com"},"ip":{"addr":"169.62.37.218","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"girlsdump.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Jul 2025 10:50:10 GMT","end":"Sat, 11 Oct 2025 10:50:09 GMT"},"fingerprint":{"sha1":"B5:15:42:21:A4:14:A1:91:37:AA:0C:41:AC:D4:5F:B8:C4:2C:A9:74","sha256":"40:55:21:6B:C6:50:EC:F7:B1:50:34:10:8D:F8:CE:5C:6F:F6:25:68:34:D0:63:3E:B3:57:0F:C6:AE:80:6F:DE"}}},"request":{"raw":"GET /misc/bootstrap/css/bootstrap.min.css HTTP/1.1\r\nHost: www.girlsdump.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 19 Aug 2025 17:39:28 GMT\r\nContent-Type: text/css\r\nContent-Length: 121200\r\nLast-Modified: Mon, 25 Jul 2016 12:53:28 GMT\r\nConnection: keep-alive\r\nETag: \"57960bc8-1d970\"\r\nExpires: Thu, 18 Sep 2025 17:39:28 GMT\r\nCache-Control: max-age=2592000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":121200,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65371)","md5":"ec3bb52a00e176a7181d454dffaea219","sha1":"6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68","sha256":"f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c","sha512":"e8c5daf01eae68ed7c1e277a6e544c7ad108a0fa877fb531d6d9f2210769b7da88e4e002c7b0be3b72154ebf7cbf01a795c8342ce2dad368bd6351e956195f8b","ssdeep":"768:Vy3Gxw/Vc/QWlJxtQOIuiHlq5mzI4X8OAduFKbv2ctg2Bd8JP7ecQVvH1FS:nw/a1fIuiHlq5mN8lDbNmPbh","tlshash":"2cc3c7a0f21031ea7333c55a75d0ed872219a153e56a4fb7f22f25d88f845ca1673f1a","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-05-27T17:13:43.596001Z","times_seen":66039,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":185,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.girlsdump.com/templates/defboot/css/all.min.css?t=1587436278","fqdn":"www.girlsdump.com","domain":"girlsdump.com","tld":"com"},"ip":{"addr":"169.62.37.218","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"girlsdump.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Jul 2025 10:50:10 GMT","end":"Sat, 11 Oct 2025 10:50:09 GMT"},"fingerprint":{"sha1":"B5:15:42:21:A4:14:A1:91:37:AA:0C:41:AC:D4:5F:B8:C4:2C:A9:74","sha256":"40:55:21:6B:C6:50:EC:F7:B1:50:34:10:8D:F8:CE:5C:6F:F6:25:68:34:D0:63:3E:B3:57:0F:C6:AE:80:6F:DE"}}},"request":{"raw":"GET /templates/defboot/css/all.min.css?t=1587436278 HTTP/1.1\r\nHost: www.girlsdump.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 19 Aug 2025 17:39:28 GMT\r\nContent-Type: text/css\r\nContent-Length: 59789\r\nLast-Modified: Thu, 21 Mar 2024 05:52:08 GMT\r\nConnection: keep-alive\r\nETag: \"65fbcb08-e98d\"\r\nExpires: Thu, 18 Sep 2025 17:39:28 GMT\r\nCache-Control: max-age=2592000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":59789,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (59789), with no line terminators","md5":"e2529bc7b9801ebffb15b21c36eff1ca","sha1":"b3e7f876faf25f7d2f93aae0d8ac3bb8d2512a21","sha256":"7471cab6c766d65f6cf18b0ce6918e476fa3631fb89d76b68da2368057cd111d","sha512":"4e60d31ee81cf0fccf77e96d460d9a95d0723db995bc539e4ca7187168061760d01bb59a9e700f1be35b26d47f7e7e726151b7ea61ea432e08017c71ce63114c","ssdeep":"1536:DgU9q741YFbYp7PtsoU9vBUHJzgR61E61Sca1S2o1Sk81SrR1CF:VTT7qd9vSHJzgR61E61Sca1S2o1Sk81R","tlshash":"6a43d962d964203eb077932579c1abdd31398505f3178bb5e86a2c3dc6cb4c926f3b89","first_seen":"2023-11-22T17:01:51Z","last_seen":"2026-05-24T18:48:27.078412Z","times_seen":138,"resource_available":false,"data":null}},"time_used":651,"timings":{"blocked":173,"dns":1,"connect":93,"send":0,"wait":186,"receive":95,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-videos.r1.cdn.pornpros.com/content/videos/1/0/7/107304da-cf0d-4afb-88a3-a66195ef4623/mp4_720.mp4?validfrom=1755624423\u0026validto=1787161323\u0026hash=3RN5V39Np2ZscrlG3dnnTe6u2xo%3D","fqdn":"cdn-videos.r1.cdn.pornpros.com","domain":"pornpros.com","tld":"com"},"ip":{"addr":"64.210.135.144","port":443,"asn":30361,"as":"SWIFTWILL2","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tubes.fuckyoucash.com/embed/66593","date":"2025-08-19T17:39:29.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"r1.cdn.pornpros.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 22:41:11 GMT","end":"Mon, 10 Nov 2025 22:41:10 GMT"},"fingerprint":{"sha1":"A2:9C:38:F6:3F:85:E5:A1:3E:51:FD:8F:B4:0D:EB:31:95:50:8F:3E","sha256":"57:C1:36:FC:EA:F2:0D:BC:A6:A3:2F:64:39:85:8F:A9:16:C4:A9:2D:D6:BA:88:81:0B:84:E7:D3:9A:D0:72:36"}}},"request":{"raw":"GET /content/videos/1/0/7/107304da-cf0d-4afb-88a3-a66195ef4623/mp4_720.mp4?validfrom=1755624423\u0026validto=1787161323\u0026hash=3RN5V39Np2ZscrlG3dnnTe6u2xo%3D HTTP/1.1\r\nHost: cdn-videos.r1.cdn.pornpros.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tubes.fuckyoucash.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Tue, 19 Aug 2025 17:39:29 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 191417840\r\nlast-modified: Mon, 13 Nov 2017 19:13:33 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: HEAD, POST, GET, OPTIONS\r\naccess-control-allow-headers: Content-Type, Origin, Accept, Range, Cache-Control\r\np3p: CP=\"ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI\"\r\ncache-control: max-age=86401\r\naccess-control-max-age: 600\r\naccess-control-expose-headers: Content-Range, Date, Etag, Cache-Control, Last-Modified\r\naccept-ranges: bytes\r\ncontent-range: bytes 0-191417839/191417840\r\nx-cdn-diag: ams5-7736-2-2870430-h-0-0---;6296-18-1455251----0-1-1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":null,"data":{"size":1770316,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"6b0f6e7b4903e55e090861b73ba92fb9","sha1":"41ce88e743214718156e9c74e4ee606d92945660","sha256":"46a68562633cc8fe22ae575e0394f4057c996e4d2756597eeb1f7e9f338eddda","sha512":"6ab0e6da7eca89f37bef2cf6a7e51a5a68a5204b8f6c9bf8f3af67ccd595f569901d763818044122378b9a2816fb325bf681d88512e88a1b8ccee05fd91b3ff5","ssdeep":"24576:K1EXzbwwt2Qgz9uK74Pke4iWoiza+Db7PuaA:/bw62Qiz48e4iFmbLe","tlshash":"3b258df6a3321920c8b17821edd097341570bacd5a9a460fd3d9ee3620760e94fd9dfa","first_seen":"2025-08-07T09:51:10.633729Z","last_seen":"2026-05-24T18:48:27.147491Z","times_seen":146,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":107,"dns":91,"connect":17,"send":0,"wait":19,"receive":148,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/si/e3/fe/5d/e3fe5d9c947fc63c4f611ff952cc0c27/1723680007.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:29.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Jul 2025 02:33:11 GMT","end":"Wed, 08 Oct 2025 02:33:10 GMT"},"fingerprint":{"sha1":"06:D8:07:0F:AB:BF:D8:7F:C5:38:82:AC:A7:8A:20:4D:83:6C:EA:C9","sha256":"CF:05:58:46:C3:07:3F:B6:A6:8D:42:F2:3B:3D:91:36:93:10:CB:D5:89:47:A3:62:26:D2:F3:BA:AC:51:0E:B7"}}},"request":{"raw":"GET /si/e3/fe/5d/e3fe5d9c947fc63c4f611ff952cc0c27/1723680007.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 17:39:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 148047\r\nserver: nginx/1.21.6\r\nlast-modified: Thu, 15 Aug 2024 00:00:09 GMT\r\netag: \"66bd4509-2424f\"\r\nexpires: Thu, 21 Aug 2025 17:39:29 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: ah0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":148047,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 240, 8-bit/color RGBA, non-interlaced","md5":"9e78e667e70a61f520b72b037ab6c574","sha1":"be19430b97835edc1778bfdf4856342eb75837b2","sha256":"ff12f12c7e8bab231a396118ec50a7aad9d176d0b776929554af094f5a4d1546","sha512":"2a22b06b1a9f1ce04c452a92bddcba5553d528152133e3ab7cd4d00cf52173545022080ce598bda86413ad2162af254e7a659dd54359761f1220c3b5550b27b6","ssdeep":"3072:OM0DJlnyu84z0G5Amgn+W0dZoz8lrEQneF8yE1DYwM+eA+GXPwPo3N1SgCXYPHmE:gDjyu8eAtyZqQQ4JvXPMKggXPm81","tlshash":"e0e312b62a730775a40a92ed96a6c03b019f1fe10860541fc7409e572dfef8b516efb2","first_seen":"2024-08-21T10:19:04.46524Z","last_seen":"2025-09-22T08:44:52.84854Z","times_seen":286,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":156,"dns":28,"connect":70,"send":0,"wait":71,"receive":49,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.girlsdump.com/media/videos/tmb/000/005/871/1.jpg","fqdn":"www.girlsdump.com","domain":"girlsdump.com","tld":"com"},"ip":{"addr":"169.62.37.218","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"girlsdump.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Jul 2025 10:50:10 GMT","end":"Sat, 11 Oct 2025 10:50:09 GMT"},"fingerprint":{"sha1":"B5:15:42:21:A4:14:A1:91:37:AA:0C:41:AC:D4:5F:B8:C4:2C:A9:74","sha256":"40:55:21:6B:C6:50:EC:F7:B1:50:34:10:8D:F8:CE:5C:6F:F6:25:68:34:D0:63:3E:B3:57:0F:C6:AE:80:6F:DE"}}},"request":{"raw":"GET /media/videos/tmb/000/005/871/1.jpg HTTP/1.1\r\nHost: www.girlsdump.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 19 Aug 2025 17:39:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 13251\r\nLast-Modified: Sat, 30 Jul 2022 17:56:45 GMT\r\nConnection: keep-alive\r\nETag: \"62e570dd-33c3\"\r\nExpires: Thu, 18 Sep 2025 17:39:28 GMT\r\nCache-Control: max-age=2592000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":13251,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 47x47, segment length 16, baseline, precision 8, 300x226, components 3","md5":"595369a874cc467462d1b6bb8ffc1d95","sha1":"675ad625b51ffa6aa907d7b0558710d1b6b0b01e","sha256":"57987b960c078b6d30e2e1bc89dbeb890f3f1f981d5d1dd9e90488eb70ab1b9b","sha512":"30b8a2e4d91863f1e3797edfaa63aa1773f68fafcd7f84d1c28f53c07f0cb569870e00a875d220ac66e1d5eeddaee9bc6d985924d15f80be0dea2128dea2608f","ssdeep":"384:BAh1FRvjICF72dwOdtkteidMa5+3t7iqJJRp:BA1d8CF72dwOgXdho35iyJRp","tlshash":"6952cfc31aba2fcd75baaa538c761d2e74d97d40f40f385182c5263af1275cb1829b17","first_seen":"2025-03-19T06:27:36.682571Z","last_seen":"2026-05-24T18:48:27.068541Z","times_seen":129,"resource_available":false,"data":null}},"time_used":649,"timings":{"blocked":554,"dns":0,"connect":0,"send":0,"wait":94,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.girlsdump.com/media/videos/tmb/000/004/129/1.jpg","fqdn":"www.girlsdump.com","domain":"girlsdump.com","tld":"com"},"ip":{"addr":"169.62.37.218","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"girlsdump.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Jul 2025 10:50:10 GMT","end":"Sat, 11 Oct 2025 10:50:09 GMT"},"fingerprint":{"sha1":"B5:15:42:21:A4:14:A1:91:37:AA:0C:41:AC:D4:5F:B8:C4:2C:A9:74","sha256":"40:55:21:6B:C6:50:EC:F7:B1:50:34:10:8D:F8:CE:5C:6F:F6:25:68:34:D0:63:3E:B3:57:0F:C6:AE:80:6F:DE"}}},"request":{"raw":"GET /media/videos/tmb/000/004/129/1.jpg HTTP/1.1\r\nHost: www.girlsdump.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 19 Aug 2025 17:39:29 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 22418\r\nLast-Modified: Wed, 13 Jan 2021 10:10:23 GMT\r\nConnection: keep-alive\r\nETag: \"5ffec70f-5792\"\r\nExpires: Thu, 18 Sep 2025 17:39:29 GMT\r\nCache-Control: max-age=2592000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22418,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 300x226, components 3","md5":"ed0462c48ac5c4bf50050231c98055b3","sha1":"2b5b8e2566d6eeeae82d9af4cc8dde153c7f3519","sha256":"d32344daa01b3407dcbe1c8433fd63593723cdce2fe3de0b0c893b2ecddea9c8","sha512":"90b57153ef116c1420dd13d85d715a3bcda956a72600329033ea74393c19c95025ee48e8fa6b048e05c283f0f2a085e45cb23b2d772bc92e844062830c59ab38","ssdeep":"384:nuKH9sJUzVc5hvaVT1rxhIyZTBDLawG2XttDU5BoQaTDjIkSr21g7ZvhiY:nRO7vabrBtBDLpGutZs/WDjIFrEg7TB","tlshash":"e7a2d07b2197c5d8b73a5574bb07cd3831e47af67a239a0c18d8c2529485da24b22c9b","first_seen":"2023-11-22T17:01:52Z","last_seen":"2026-05-24T18:48:27.146136Z","times_seen":132,"resource_available":false,"data":null}},"time_used":750,"timings":{"blocked":656,"dns":0,"connect":0,"send":0,"wait":93,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.profitabledisplaycontent.com/watch.1055185194576.js?dev=e\u0026key=9e5c0b9f77173ca4b1dd6cce2774d640\u0026kw=%5B%22nannyspy%22%2C%22brave%22%2C%22nanny%22%2C%22tries%22%2C%22to%22%2C%22fit%22%2C%22bosses%22%2C%22giant%22%2C%22dick%22%5D\u0026pst=1755625229\u0026rb=\u0026refer=https%3A%2F%2Fwww.girlsdump.com%2Fch1.php%3Fmc_attr%3Dc%3Dc56751a6-9473-447b-87c6-aca765ab9652..m%3Dmeifnavttg8bkyqsjtouiil1n4..d%3D0-0-0-1-8..l%3D17556012354..e%3D%7Bclick_id%7D..t1%3D%7Bcampaign_id%7D..t2%3D%7Bcreative_id%7D..t3%3D%7Bcategories%7D..t4%3D%7Bkeywords%7D..t5%3D%7Breferrer%7D..t6%3D%7Bsite_id%7D..t7%3D%7Bformat%7D..t8%3D%7Bip%7D..t9%3D%7Bgeo%7D..t10%3D%7Bpricing_model%7D\u0026res=14.3223\u0026rmtc=t\u0026shu=bfc54d194d53b27c7134af56e3bcc408461b83dafce6bf56ac4b69d3e8d971a7368cb1b5534346296c0ec05943516b11833e7e985bf8c4df3153a18d5eae86c174957244d73576a16d8fd04e730578ea4cd65e00db28f70fa5cf\u0026tz=0\u0026uuid=89b3c7bc-f578-4279-8643-471137b27270%3A3%3A1","fqdn":"www.profitabledisplaycontent.com","domain":"profitabledisplaycontent.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:29.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.profitabledisplaycontent.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 22:16:27 GMT","end":"Wed, 22 Oct 2025 22:16:26 GMT"},"fingerprint":{"sha1":"80:ED:AE:02:6E:22:92:2C:1D:3B:CF:40:B8:05:ED:A8:F4:78:41:C1","sha256":"27:CE:4E:A9:E9:2E:EA:67:C9:22:7C:B4:62:29:07:B9:BD:AA:87:B5:6A:AD:89:6C:68:5A:63:CB:C5:73:7D:0F"}}},"request":{"raw":"GET /watch.1055185194576.js?dev=e\u0026key=9e5c0b9f77173ca4b1dd6cce2774d640\u0026kw=%5B%22nannyspy%22%2C%22brave%22%2C%22nanny%22%2C%22tries%22%2C%22to%22%2C%22fit%22%2C%22bosses%22%2C%22giant%22%2C%22dick%22%5D\u0026pst=1755625229\u0026rb=\u0026refer=https%3A%2F%2Fwww.girlsdump.com%2Fch1.php%3Fmc_attr%3Dc%3Dc56751a6-9473-447b-87c6-aca765ab9652..m%3Dmeifnavttg8bkyqsjtouiil1n4..d%3D0-0-0-1-8..l%3D17556012354..e%3D%7Bclick_id%7D..t1%3D%7Bcampaign_id%7D..t2%3D%7Bcreative_id%7D..t3%3D%7Bcategories%7D..t4%3D%7Bkeywords%7D..t5%3D%7Breferrer%7D..t6%3D%7Bsite_id%7D..t7%3D%7Bformat%7D..t8%3D%7Bip%7D..t9%3D%7Bgeo%7D..t10%3D%7Bpricing_model%7D\u0026res=14.3223\u0026rmtc=t\u0026shu=bfc54d194d53b27c7134af56e3bcc408461b83dafce6bf56ac4b69d3e8d971a7368cb1b5534346296c0ec05943516b11833e7e985bf8c4df3153a18d5eae86c174957244d73576a16d8fd04e730578ea4cd65e00db28f70fa5cf\u0026tz=0\u0026uuid=89b3c7bc-f578-4279-8643-471137b27270%3A3%3A1 HTTP/1.1\r\nHost: www.profitabledisplaycontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.girlsdump.com\r\nReferer: https://www.girlsdump.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.dRecXu2yr0IroGTKJ5bJjP-QHA4C_NB_rQGLiHTiqc4\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 19 Aug 2025 17:39:29 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://www.girlsdump.com\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=89b3c7bc-f578-4279-8643-471137b27270:3:1; expires=Tue, 26 Aug 2025 17:39:29 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Wed, 20 Aug 2025 17:39:29 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Wed, 20 Aug 2025 17:39:29 GMT; path=/; secure; SameSite=None\npdhtkv5=true; expires=Wed, 20 Aug 2025 17:39:29 GMT; path=/; secure; SameSite=None\nuncs5=1; expires=Wed, 20 Aug 2025 17:39:29 GMT; path=/; secure; SameSite=None\nu_pl14613345=1; expires=Wed, 20 Aug 2025 17:39:29 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 24\r\nHost: www.profitabledisplaycontent.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 08c876a123922cc29c9a3bdf33d5b334\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":4844,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3968)","md5":"9241dd91f7b8fce7eb591a65c2778971","sha1":"7f5b5ff94896301d7342f3f7fc2bcb4000e4f9f4","sha256":"41ef0e5d07cbd0e56ec57eda61afc774ed1087d47d4af693629d061df2b3ee97","sha512":"2f83a271cb161be9e20707d2fdf9a570a3b574ccec6b8f2e23d5e84328bd9c7331c324a780a5ea762d1aa96b0c8043c18ca37c555e026f1562930e31cb3f3f6a","ssdeep":"96:rlozv12nsZyYIlSrzNfjQd9uZyYIlSrzNfjQW1/DuCfMEDaH:rSzv0sZYkrZfIMZYkrZf5buCkCaH","tlshash":"0da118b53ea5e5b0a453f46f20226294be60a4066a148f467dccc2d45f76e780f78ae8","first_seen":"2025-08-19T17:40:01.647737Z","last_seen":"2025-08-19T17:40:01.647737Z","times_seen":1,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/07cvpCr3Xe3g2ttJNUkC6W0J/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LeHdnEUAAAAAFiyGpf5SpsponjLpsUZOs1_ybgg\u0026co=aHR0cHM6Ly93d3cuZ2lybHNkdW1wLmNvbTo0NDM.\u0026hl=en\u0026v=07cvpCr3Xe3g2ttJNUkC6W0J\u0026theme=dark\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=4z2ukbqqd4yz","date":"2025-08-19T17:39:30.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /recaptcha/releases/07cvpCr3Xe3g2ttJNUkC6W0J/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42195\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 18 Aug 2025 16:54:29 GMT\r\nexpires: Tue, 18 Aug 2026 16:54:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 89101\r\nlast-modified: Fri, 01 Aug 2025 00:01:10 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":80510,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"375a6bb306dfafb983e14413ec973370","sha1":"51c49d2e23ef19049cad68eea6258475b7de3751","sha256":"fb9268fd6f3ca01aa26b948f95ac89bebc646f70f3c9f54a2e3034547b2c24c8","sha512":"ec5b11f55469baad710ffaed2e38b78a8c57d4e02ea2f2a354689dc17c77dced4cb1a0b1391339cda1a2eff80ca5090f074dba5f9f27b16961a48ddb983e1060","ssdeep":"1536:1fGNbFoZJSUYOOaLnAW8+IcTOIBCtthXwW5wx7:1GRFauOxLA/+IcTOhLXS","tlshash":"6e739f7338513a39fc3b9b616086b9ecf21cc527e5514bf6b6497a20c3db19a8253b07","first_seen":"2025-08-07T15:32:25.58115Z","last_seen":"2026-05-23T15:58:39.025578Z","times_seen":8067,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tubes.fuckyoucash.com/embed/66593","fqdn":"tubes.fuckyoucash.com","domain":"fuckyoucash.com","tld":"com"},"ip":{"addr":"3.167.2.91","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fuckyoucash.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 07 May 2025 00:00:00 GMT","end":"Fri, 05 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:51:5A:C2:83:68:39:C6:46:2F:40:4C:1B:C8:EF:04:4E:DE:DF:18","sha256":"ED:50:86:02:48:D3:19:AF:98:3F:80:B3:61:71:57:7F:E6:B5:17:DF:58:06:63:76:CA:48:6C:E6:09:0D:71:DA"}}},"request":{"raw":"GET /embed/66593 HTTP/1.1\r\nHost: tubes.fuckyoucash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 999\r\ncache-control: max-age=3600 public\r\ncontent-encoding: gzip\r\ndate: Tue, 19 Aug 2025 17:32:03 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\nserver: nginx\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 edea1d4f37b8855878682c02540138fe.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: W4XKX0XMC0Zv2w_fFzZugRU-AmW1Ot90aIoIGx6cl6nQqC_ZEOBnig==\r\nage: 446\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1932,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (595)","md5":"ab4885735aca0ef3e19010719cc0b72a","sha1":"f428eac63fd38a40d5946d050c0ee5b74ed2108d","sha256":"9f67c9a6b82dc75a83f89caf066879287a29d8576819e7c8570a68a26e3dabca","sha512":"d8d19f1ea233bef9dc835b81c9a0338a8de17f3de5545490053463e8712f4a8fb9452647e04a886ea69a26e198a7f192ade799006481d354cdee91dd4066c4ee","ssdeep":"","tlshash":"28416616c82248e41a82d4f43b64bd54da6d410bee45fc60b8dfb6a40f99269dcb73ec","first_seen":"2025-08-19T17:40:01.6493Z","last_seen":"2025-08-19T17:40:01.6493Z","times_seen":1,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":90,"dns":24,"connect":1,"send":0,"wait":25,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/si/96/8c/a9/968ca96c6ec6d68895fc74f04956403c/1723680009.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:29.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Jul 2025 02:33:11 GMT","end":"Wed, 08 Oct 2025 02:33:10 GMT"},"fingerprint":{"sha1":"06:D8:07:0F:AB:BF:D8:7F:C5:38:82:AC:A7:8A:20:4D:83:6C:EA:C9","sha256":"CF:05:58:46:C3:07:3F:B6:A6:8D:42:F2:3B:3D:91:36:93:10:CB:D5:89:47:A3:62:26:D2:F3:BA:AC:51:0E:B7"}}},"request":{"raw":"GET /si/96/8c/a9/968ca96c6ec6d68895fc74f04956403c/1723680009.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 17:39:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 146537\r\nserver: nginx/1.21.6\r\nlast-modified: Thu, 15 Aug 2024 00:00:10 GMT\r\netag: \"66bd450a-23c69\"\r\nexpires: Thu, 21 Aug 2025 17:39:29 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: ah0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146537,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 240, 8-bit/color RGBA, non-interlaced","md5":"1f2136906f3dbb2445c9c5d81b318a26","sha1":"c654f1728ac8e463d05f6ad898e758ce7e60c680","sha256":"db25c6f2b7fd65d8fcb54e70f4c65473a46a61576bac351f324ca79c99224330","sha512":"b8a2c580dcbd91ce84a0b0c7a3daa3063ab434973c6bb46f8647cab33553ade9bcf7089c0919a1e6855c35faa53d07f78c21cbcd1b325b1545aa34706d8eec9c","ssdeep":"3072:uX1rPUPNaFn/Kk/r7jS5DZAakRvnjCmRr2aANQpPXKtO:8jWy/lD7ODAhWaiQpL","tlshash":"29e312fd8f24c17481a6a7626085aa6fdea4c21846f994fe05c8631ffc5f219f38c660","first_seen":"2024-12-23T03:33:29.529981Z","last_seen":"2025-09-22T09:24:18.282012Z","times_seen":348,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":157,"dns":32,"connect":19,"send":0,"wait":37,"receive":69,"ssl":113},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=98c497cb-ecfa-4039-8dff-41d26e087c9b\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3223\u0026b_frame=0\u0026pk=de21fbaed972e35daf58964d69ff178d\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=17","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:31.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Jul 2025 15:12:33 GMT","end":"Mon, 29 Sep 2025 15:12:32 GMT"},"fingerprint":{"sha1":"9E:08:20:A0:75:ED:21:51:E0:3D:DE:29:CD:B0:11:01:4D:04:77:0A","sha256":"FB:D4:A2:1D:0F:F1:FB:A8:D9:5E:88:03:1F:BB:94:D2:32:5C:CC:49:11:11:FC:04:7B:C6:43:40:CF:1E:A2:BA"}}},"request":{"raw":"GET /pxf.gif?uuid=98c497cb-ecfa-4039-8dff-41d26e087c9b\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3223\u0026b_frame=0\u0026pk=de21fbaed972e35daf58964d69ff178d\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=17 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Tue, 19 Aug 2025 17:39:31 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 0a8fc114437aaadadd32a73c39d201f4\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":673,"timings":{"blocked":284,"dns":1,"connect":91,"send":0,"wait":103,"receive":0,"ssl":192},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easiercampaignworkshop.com/de/21/fb/de21fbaed972e35daf58964d69ff178d.js","fqdn":"easiercampaignworkshop.com","domain":"easiercampaignworkshop.com","tld":"com"},"ip":{"addr":"192.243.59.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"easiercampaignworkshop.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 13:56:43 GMT","end":"Tue, 30 Sep 2025 13:56:42 GMT"},"fingerprint":{"sha1":"FA:86:F0:64:F7:37:65:44:C5:0E:88:60:D7:F7:32:68:62:DC:6E:59","sha256":"48:9D:F8:26:4D:B3:BC:2B:5F:6D:FD:14:A3:28:E3:DA:52:EC:D8:28:9E:18:2D:E9:6D:D6:93:B0:9F:4B:8E:EE"}}},"request":{"raw":"GET /de/21/fb/de21fbaed972e35daf58964d69ff178d.js HTTP/1.1\r\nHost: easiercampaignworkshop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Tue, 19 Aug 2025 17:39:28 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 25596\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: easiercampaignworkshop.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 48f90571d07df7ec848e18f83b2e050e\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":72561,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"53c11a8753cfc4137203bf79a308afdb","sha1":"27b7473485ac0c82c1cc45642c21924421924efa","sha256":"dba9e4cdb7230eea9bb289d97a894f3379b02f98bc4b748b85fa309f2d17da1c","sha512":"003c9b92174ace257ec909f43893c6a9338236a074a1487bcba4abdf07dfe1eb078f24845c1175b0a7021d08c92b7e8150b3413393467566dc22a9a1d4c5c2e1","ssdeep":"768:Y2WnYMmNjGqw648+QhS8u+Jcj/XcdNjNEmOdY08kUbTehzbcepw6f:Y2WnMl4x5O+jvc6dY0U3fE","tlshash":"b463c7483f51b27802e6b8fa712fa61af0265c0195d8e4d8f503f4ddae66719f036f25","first_seen":"2025-08-19T17:40:01.650848Z","last_seen":"2025-08-19T17:40:01.650848Z","times_seen":1,"resource_available":true,"data":null}},"time_used":756,"timings":{"blocked":268,"dns":13,"connect":94,"send":0,"wait":98,"receive":92,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-19","alert":"Sinkholed","trigger":"easiercampaignworkshop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easiercampaignworkshop.com/13/1e/ee/131eeed32817b6fc0a9e0816881611df.js","fqdn":"easiercampaignworkshop.com","domain":"easiercampaignworkshop.com","tld":"com"},"ip":{"addr":"192.243.59.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"easiercampaignworkshop.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 13:56:43 GMT","end":"Tue, 30 Sep 2025 13:56:42 GMT"},"fingerprint":{"sha1":"FA:86:F0:64:F7:37:65:44:C5:0E:88:60:D7:F7:32:68:62:DC:6E:59","sha256":"48:9D:F8:26:4D:B3:BC:2B:5F:6D:FD:14:A3:28:E3:DA:52:EC:D8:28:9E:18:2D:E9:6D:D6:93:B0:9F:4B:8E:EE"}}},"request":{"raw":"GET /13/1e/ee/131eeed32817b6fc0a9e0816881611df.js HTTP/1.1\r\nHost: easiercampaignworkshop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Tue, 19 Aug 2025 17:39:28 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 32763\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nSet-Cookie: 4b4e7ab587d59b22ad7bcd2439afc363_FEATURES-2636=1; expires=Tue, 19 Aug 2025 17:39:28 GMT; secure; SameSite=None\r\nHost: easiercampaignworkshop.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: de2e5f64a879f2f6547d5dfebc171dd6\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":105467,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"752b544c62ed269b43a515be70b2e105","sha1":"d5bed78068cc433b2785cd1a0468ddc4520c2934","sha256":"373ccdcba1ccc1a117fb0912f1e7f653f4539e1aac0f7f2502e689517307956b","sha512":"03272a9caf65d0ea17386973cb90f1afa634a6c07b094bf628895d11fca74ca15996a59cf6e6f3e0e417092e1398273aa18c9dee3c5d20a4bc2edd4d2144706a","ssdeep":"3072:H0i5L6Tj23Zrs61f/f7EqERB6ns6HsXuhqQPw4CTR2b3i:HF0q3i","tlshash":"7ea3d78c7a82f49e42666032222f540ef1d91e99144ca468db97f5fc1f3d71ba938bb4","first_seen":"2025-08-19T17:40:01.651826Z","last_seen":"2025-08-19T17:40:01.651826Z","times_seen":1,"resource_available":true,"data":null}},"time_used":479,"timings":{"blocked":-1,"dns":12,"connect":91,"send":0,"wait":96,"receive":93,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-19","alert":"Sinkholed","trigger":"easiercampaignworkshop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"milletappliancejeopardize.com/impr.gif?sid=H4sIAAAAAAAC_1RSMWwjRRQd51xBwXFCFFe5BAk5u961Y3PFiXAERYQkXIJSUM3O7Dpzmd1ZZna9jiVQRKTTdRhBwVFtnp2LgAMdDTQgIQcJoUhIcZfiUkBFwVGArqBC61gy96V5__95M9L7b-b2QXpOHKT0bP1N1RNS0vl61aq8sCUirjJTWd2s2FbVulbZElHDvVbpFqA7L9uOW7VerLzusx01X7Nsy7Itu7IktB-o7vyEhYjvt-xqy6q6tapdd9HVT_YmLcHQEnjnnFyB4ONnfg_egWAjROGDG77ZSVT80mthKmmiNDr86O1oJ1JZhHBWBrqEIDqanoYyY0I-nYOKjqYTQHWGxQTwxJjMPf8QXnQ0lQmvc3ih1JPwI3j8aWSdEXw5gqAjMLUPwU8JwDhW1xCF91aVzujuBUsLdkzKj_-GyMak_PA5ROHXi1J0KxtKpolQkUE3yCG6I4j2CHF6jKQ3B5EdgyUfQPBfyfzjFUThcM1IBcHzyfQiGIGaEtJiiRLSoIQ0LiHkZxXXarrMpk4jaHG2YLnUdbnvWa1mzbJoiy0gZYWsPpK4Dyb7YHoPsd7DjvjotH4FOv0RZjuH4SWYZExKb-2hw3NkPkFmCDJKkAmCLCHIOvkhl6Zm8ntcmtSzp7k2zU4-UEn7gB6qpO1HBFT3oXk-FPG7Zh8suTToBYYPVAHUS_IB9Xh-EJ-TZyfG_fHPVez4Z5VGnTs112o4rNFs1SzWsFqu5S_4da_hUK9pw4gcwsxNPOmJMSkdPUJc5M0VePQYRh6DicugqQ2a5aDbOXrRV22hpeFpGFeZCsFVjjgpI9ktHchzcnUiYeP2n_DZyfXux8n3t97_F0zniHWOW-Ingra8M7ipMjK8qTJDvlmLExGKHi3edSOhiX_pizf83UxpvnzD9D9_hRVEUd7f9E2yQiMuorYhXy4Kzn29pDTzyQ_LZsv31lOzvZjqKI1X1l9dWg5j7RsjVDQCFWNC7j4AE2Ny-ef3Jn-2-t2HEHoEneYI0xMyDbB4DyaeaTeKQMsZ78VlZGk-0DVvtikFgfRnPfVymP_13qweaFrcpiI_MHfQ1mXQZB9RmKOjc3RkDir7MOlTgyTWJ9d_uVvEZ_BkeeBJXR56UstPCov_KuC3Ah5dOG7EWSVw_BqzrOZCw3aagW87LmdBvem2eINajuMjMePt4ben_wUAAP__i1mixKAEAAA=","fqdn":"milletappliancejeopardize.com","domain":"milletappliancejeopardize.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:29.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"milletappliancejeopardize.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 31 Jul 2025 08:36:21 GMT","end":"Wed, 29 Oct 2025 08:36:20 GMT"},"fingerprint":{"sha1":"EA:64:64:B0:BA:DC:E1:5D:06:7D:52:B8:2C:0B:86:7F:CE:4B:A1:74","sha256":"DB:07:0A:AC:70:F7:AC:62:69:99:4F:53:5A:A1:10:05:D2:07:FB:2B:9A:EE:E7:F4:1A:BB:3C:3C:C1:27:DB:31"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSMWwjRRQd51xBwXFCFFe5BAk5u961Y3PFiXAERYQkXIJSUM3O7Dpzmd1ZZna9jiVQRKTTdRhBwVFtnp2LgAMdDTQgIQcJoUhIcZfiUkBFwVGArqBC61gy96V5__95M9L7b-b2QXpOHKT0bP1N1RNS0vl61aq8sCUirjJTWd2s2FbVulbZElHDvVbpFqA7L9uOW7VerLzusx01X7Nsy7Itu7IktB-o7vyEhYjvt-xqy6q6tapdd9HVT_YmLcHQEnjnnFyB4ONnfg_egWAjROGDG77ZSVT80mthKmmiNDr86O1oJ1JZhHBWBrqEIDqanoYyY0I-nYOKjqYTQHWGxQTwxJjMPf8QXnQ0lQmvc3ih1JPwI3j8aWSdEXw5gqAjMLUPwU8JwDhW1xCF91aVzujuBUsLdkzKj_-GyMak_PA5ROHXi1J0KxtKpolQkUE3yCG6I4j2CHF6jKQ3B5EdgyUfQPBfyfzjFUThcM1IBcHzyfQiGIGaEtJiiRLSoIQ0LiHkZxXXarrMpk4jaHG2YLnUdbnvWa1mzbJoiy0gZYWsPpK4Dyb7YHoPsd7DjvjotH4FOv0RZjuH4SWYZExKb-2hw3NkPkFmCDJKkAmCLCHIOvkhl6Zm8ntcmtSzp7k2zU4-UEn7gB6qpO1HBFT3oXk-FPG7Zh8suTToBYYPVAHUS_IB9Xh-EJ-TZyfG_fHPVez4Z5VGnTs112o4rNFs1SzWsFqu5S_4da_hUK9pw4gcwsxNPOmJMSkdPUJc5M0VePQYRh6DicugqQ2a5aDbOXrRV22hpeFpGFeZCsFVjjgpI9ktHchzcnUiYeP2n_DZyfXux8n3t97_F0zniHWOW-Ingra8M7ipMjK8qTJDvlmLExGKHi3edSOhiX_pizf83UxpvnzD9D9_hRVEUd7f9E2yQiMuorYhXy4Kzn29pDTzyQ_LZsv31lOzvZjqKI1X1l9dWg5j7RsjVDQCFWNC7j4AE2Ny-ef3Jn-2-t2HEHoEneYI0xMyDbB4DyaeaTeKQMsZ78VlZGk-0DVvtikFgfRnPfVymP_13qweaFrcpiI_MHfQ1mXQZB9RmKOjc3RkDir7MOlTgyTWJ9d_uVvEZ_BkeeBJXR56UstPCov_KuC3Ah5dOG7EWSVw_BqzrOZCw3aagW87LmdBvem2eINajuMjMePt4ben_wUAAP__i1mixKAEAAA= HTTP/1.1\r\nHost: milletappliancejeopardize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl15332378=1; nlec65d324063c68920c60940e7e5b63ab81=[5474031,5474018,5474030,5474029]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 19 Aug 2025 17:39:29 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nvary: Origin\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: iprc_l+139b730920ff4066887cd7b5c5bea5a5=5474029; expires=Wed, 20 Aug 2025 17:39:29 GMT; path=/; secure; SameSite=None\niprc_l:5474029=1; expires=Wed, 20 Aug 2025 17:39:29 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 4\r\nHost: milletappliancejeopardize.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: cc097a12fb5eefce688e17fd78440907\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":306,"timings":{"blocked":204,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-19","alert":"Sinkholed","trigger":"milletappliancejeopardize.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LeHdnEUAAAAAFiyGpf5SpsponjLpsUZOs1_ybgg\u0026co=aHR0cHM6Ly93d3cuZ2lybHNkdW1wLmNvbTo0NDM.\u0026hl=en\u0026v=07cvpCr3Xe3g2ttJNUkC6W0J\u0026theme=dark\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=4z2ukbqqd4yz","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:30.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6LeHdnEUAAAAAFiyGpf5SpsponjLpsUZOs1_ybgg\u0026co=aHR0cHM6Ly93d3cuZ2lybHNkdW1wLmNvbTo0NDM.\u0026hl=en\u0026v=07cvpCr3Xe3g2ttJNUkC6W0J\u0026theme=dark\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=4z2ukbqqd4yz HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 19 Aug 2025 17:39:30 GMT\r\ncontent-security-policy: script-src 'nonce-K06ynuAV1-N7NtTcIbm2BQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":77021,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (56645)","md5":"e5d69edb5de3462135db98101fef60fa","sha1":"2b9b952182136ef7cac9607a6bb85be08a2476f2","sha256":"5f1c5c68d636ca6d598a14ee19e5ac533fab3e80e49815d0e74a42b0fd76dd93","sha512":"ea9c9128d9ea20bc2aa92c94770195cba6739a98bd27f9a0f895315ac7b8d783f1abee9b2def358184dea241b8a60e66bb4b7eaab9d5f370ffae6370aec4903f","ssdeep":"1536:iG6IF8mnA8Q7ciOpLnKf+yySlza8Mq8wwRMu9VWHVav5w:iGbRA8A6iz3MFDMOv5w","tlshash":"9373c01bc65324addf6f8e8297d67fa9613f6006104285ecabfb04d45e6ac5b62703cc","first_seen":"2025-08-19T17:40:01.652864Z","last_seen":"2025-08-19T17:40:01.652864Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/utility/social-media/instagram/new/4/img/close.svg","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:30.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 14:01:22 GMT","end":"Mon, 29 Sep 2025 14:59:36 GMT"},"fingerprint":{"sha1":"CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B","sha256":"8B:98:84:C0:8D:47:7C:1B:A7:26:4B:E4:9E:6E:FD:8E:E1:6D:6E:41:1D:E7:91:B7:70:A3:C1:D0:C0:85:6B:31"}}},"request":{"raw":"GET /sb/ssp/utility/social-media/instagram/new/4/img/close.svg HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 17:39:30 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kPulhXz8CT209mXvImthZCI5413pTtBPyzmy%2FItEKj80s7ipvX9lvHz3lUzeFp2HAB85ztENKuYZ2JGKee8CC74YDoVO7DDnOR6uTIWRUVw%3D\"}]}\r\nage: 981671\r\ncf-cache-status: HIT\r\netag: W/\"65aa84ff-52a\"\r\ncontent-encoding: br\r\ncf-ray: 971b6e436c0ab497-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1322,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3edeb68064815a05dc25ee715b546048","sha1":"6ed43c4d875aa7d955e4897c9b78bab55ab4f735","sha256":"6d87b433d8a0e4648ae21a4491bf63848bf8bb19eb215399d5b6370cb0e6d48f","sha512":"bc27f8afeab37cd3649be7bee629251f5cdea1cb17fc2ceda9257c10ee00833c3da16e12bdf262eefaef5be057d806904f6596c535f46fd6331c332d47aa8eb7","ssdeep":"","tlshash":"772197d4658a2e3eb324fbf0c174157867e422b2bf10e54c739b386b7214a9304c8e14","first_seen":"2023-05-10T13:19:33Z","last_seen":"2026-04-12T05:56:34.364196Z","times_seen":710,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/07cvpCr3Xe3g2ttJNUkC6W0J/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LeHdnEUAAAAAFiyGpf5SpsponjLpsUZOs1_ybgg\u0026co=aHR0cHM6Ly93d3cuZ2lybHNkdW1wLmNvbTo0NDM.\u0026hl=en\u0026v=07cvpCr3Xe3g2ttJNUkC6W0J\u0026theme=dark\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=4z2ukbqqd4yz","date":"2025-08-19T17:39:30.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /recaptcha/releases/07cvpCr3Xe3g2ttJNUkC6W0J/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 341818\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 18 Aug 2025 18:08:35 GMT\r\nexpires: Tue, 18 Aug 2026 18:08:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 84655\r\nlast-modified: Fri, 01 Aug 2025 00:01:10 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":800792,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"ef9df0b24b3cd0b880dc214fe644af53","sha1":"3033e1c344b264a84506fc97c7cf46c3c6f42ec8","sha256":"242f090a7ea07bfdf6504310f582ab368d95f6a673e38ac71e3b921b7bdc8abc","sha512":"65b9f85959c2eb1cb43ef8639b1ec6777b8a710f6b6b4055ce63d753522b35707657c4a2f700a71108cf90660890b3b1acaa793e783f7279a5d6ce254643eeaa","ssdeep":"12288:8SVAUZNkYzZaJ5TxKGvfuS8gUxeNu5nLcan75Av:F5dzYJiGnuSDO+nan0","tlshash":"95055ce4700a74b99362b0fb44bb104da3fec516d80c0d5db1a9d8f02bb944da57aeb7","first_seen":"2025-08-07T15:32:25.571794Z","last_seen":"2026-05-25T17:50:02.566933Z","times_seen":11032,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Finstagram%2Fnew%2F4%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=97","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"192.243.61.225","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:30.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 22:21:33 GMT","end":"Fri, 26 Sep 2025 22:21:32 GMT"},"fingerprint":{"sha1":"4A:6A:48:C8:5B:C5:2B:2E:9C:03:AF:BF:4C:E6:10:23:E2:7B:EA:97","sha256":"A8:42:B5:4A:20:C8:13:EF:B5:90:0F:54:37:F7:05:60:8D:91:07:E3:A4:0F:7A:22:C9:AF:F1:F5:22:E8:68:C9"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Finstagram%2Fnew%2F4%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=97 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nCookie: uid_id2=f38d03e5-8664-4b50-81ae-d95a31c79720:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl15478440=1; slecde21fbaed972e35daf58964d69ff178d=[6116560]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 19 Aug 2025 17:39:30 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-19","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-K272QG5WTS","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"A2:8A:24:AD:51:7D:A4:62:BB:34:6F:C9:21:A1:B9:E1:2D:A6:0E:C1","sha256":"9F:B9:94:8F:84:D3:44:71:A7:81:72:C8:80:4D:14:02:E3:E0:30:0C:F1:17:27:83:00:82:D9:C3:68:D3:B3:AF"}}},"request":{"raw":"GET /gtag/js?id=G-K272QG5WTS HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 19 Aug 2025 17:39:28 GMT\r\nexpires: Tue, 19 Aug 2025 17:39:28 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1106:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1106:0\r\nreport-to: {\"group\":\"ascgcycc:1106:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1106:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 130072\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":382305,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"9cfb2eed14c7475e577f198e8138bebd","sha1":"431300ae6a8671b76d80813d9a2d5f0ca600ed8d","sha256":"06929ec06839a57938e8a527ee8ae501f63ae2574fe4712ca2106289fc58f6c0","sha512":"57a55365684506a315e6f24b8ebb2b35f41d28973349211174c5fd93a89b4600f8ad11e22c3fee7afcf0e1bd6b0d030c4b461806c8e3b3ea263b45dc299a6e92","ssdeep":"6144:sukldUcWer7tSvzLwQrDlUKB3IKRILuwNXTODrp6q9:3klqcr7tSvzLwQrDlVYZOrF9","tlshash":"5b8418cd73d674629396b478503f018ba57b28a2f44cc899f189cde42e74a9a4237f7c","first_seen":"2025-08-19T17:40:01.654727Z","last_seen":"2025-08-19T17:40:01.654727Z","times_seen":1,"resource_available":true,"data":null}},"time_used":396,"timings":{"blocked":135,"dns":0,"connect":21,"send":0,"wait":54,"receive":54,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.girlsdump.com/misc/jquery/jquery.min.js","fqdn":"www.girlsdump.com","domain":"girlsdump.com","tld":"com"},"ip":{"addr":"169.62.37.218","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"girlsdump.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Jul 2025 10:50:10 GMT","end":"Sat, 11 Oct 2025 10:50:09 GMT"},"fingerprint":{"sha1":"B5:15:42:21:A4:14:A1:91:37:AA:0C:41:AC:D4:5F:B8:C4:2C:A9:74","sha256":"40:55:21:6B:C6:50:EC:F7:B1:50:34:10:8D:F8:CE:5C:6F:F6:25:68:34:D0:63:3E:B3:57:0F:C6:AE:80:6F:DE"}}},"request":{"raw":"GET /misc/jquery/jquery.min.js HTTP/1.1\r\nHost: www.girlsdump.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 19 Aug 2025 17:39:28 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 85578\r\nLast-Modified: Fri, 20 May 2016 17:24:41 GMT\r\nConnection: keep-alive\r\nETag: \"573f4859-14e4a\"\r\nExpires: Thu, 18 Sep 2025 17:39:28 GMT\r\nCache-Control: max-age=2592000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":85578,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32065)","md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-05-27T17:17:29.761675Z","times_seen":281503,"resource_available":true,"data":null}},"time_used":623,"timings":{"blocked":143,"dns":1,"connect":93,"send":0,"wait":185,"receive":96,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.girlsdump.com/misc/bootstrap/js/bootstrap.min.js","fqdn":"www.girlsdump.com","domain":"girlsdump.com","tld":"com"},"ip":{"addr":"169.62.37.218","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"girlsdump.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Jul 2025 10:50:10 GMT","end":"Sat, 11 Oct 2025 10:50:09 GMT"},"fingerprint":{"sha1":"B5:15:42:21:A4:14:A1:91:37:AA:0C:41:AC:D4:5F:B8:C4:2C:A9:74","sha256":"40:55:21:6B:C6:50:EC:F7:B1:50:34:10:8D:F8:CE:5C:6F:F6:25:68:34:D0:63:3E:B3:57:0F:C6:AE:80:6F:DE"}}},"request":{"raw":"GET /misc/bootstrap/js/bootstrap.min.js HTTP/1.1\r\nHost: www.girlsdump.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 19 Aug 2025 17:39:28 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 37045\r\nLast-Modified: Mon, 25 Jul 2016 12:53:30 GMT\r\nConnection: keep-alive\r\nETag: \"57960bca-90b5\"\r\nExpires: Thu, 18 Sep 2025 17:39:28 GMT\r\nCache-Control: max-age=2592000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":37045,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32033)","md5":"5869c96cc8f19086aee625d670d741f9","sha1":"430a443d74830fe9be26efca431f448c1b3740f9","sha256":"53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef","sha512":"8b3b64a1bb2f9e329f02d4cd7479065630184ebaed942ee61a9ff9e1ce34c28c0eecb854458977815cf3704a8697fa8a5d096d2761f032b74b70d51da3e37f45","ssdeep":"768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ","tlshash":"b6f28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-05-27T16:41:05.981611Z","times_seen":88355,"resource_available":true,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":1,"connect":91,"send":0,"wait":183,"receive":3,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ay.tubeprnlist.online/collect?en=view\u0026pl=https%3A%2F%2Fwww.girlsdump.com%2Fch1.php%3Fmc_attr%3Dc%3Dc56751a6-9473-447b-87c6-aca765ab9652..m%3Dmeifnavttg8bkyqsjtouiil1n4..d%3D0-0-0-1-8..l%3D17556012354..e%3D%7Bclick_id%7D..t1%3D%7Bcampaign_id%7D..t2%3D%7Bcreative_id%7D..t3%3D%7Bcategories%7D..t4%3D%7Bkeywords%7D..t5%3D%7Breferrer%7D..t6%3D%7Bsite_id%7D..t7%3D%7Bformat%7D..t8%3D%7Bip%7D..t9%3D%7Bgeo%7D..t10%3D%7Bpricing_model%7D\u0026pt=NANNYSPY%20BRAVE%20Nanny%20TRIES%20TO%20FIT%20Bosses%20GIANT%20DICk\u0026to=0\u0026p%5Bvid%5D=meitwa5p9olm81w5j52c\u0026p%5Bsres%5D=1280x1024\u0026p%5Bisv%5D=1","fqdn":"ay.tubeprnlist.online","domain":"tubeprnlist.online","tld":"online"},"ip":{"addr":"15.197.197.46","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:29.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ay.tubeprnlist.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 15 Jul 2025 22:21:39 GMT","end":"Mon, 13 Oct 2025 22:21:38 GMT"},"fingerprint":{"sha1":"E7:43:DA:B8:47:37:3A:3D:ED:C6:3B:2E:C1:F3:88:D6:2A:07:5D:E1","sha256":"7C:ED:A0:19:6D:CF:23:4A:38:76:79:F2:2B:FE:CD:0F:8D:AF:94:9E:6D:9E:F4:98:71:B6:96:89:2C:50:97:E5"}}},"request":{"raw":"GET /collect?en=view\u0026pl=https%3A%2F%2Fwww.girlsdump.com%2Fch1.php%3Fmc_attr%3Dc%3Dc56751a6-9473-447b-87c6-aca765ab9652..m%3Dmeifnavttg8bkyqsjtouiil1n4..d%3D0-0-0-1-8..l%3D17556012354..e%3D%7Bclick_id%7D..t1%3D%7Bcampaign_id%7D..t2%3D%7Bcreative_id%7D..t3%3D%7Bcategories%7D..t4%3D%7Bkeywords%7D..t5%3D%7Breferrer%7D..t6%3D%7Bsite_id%7D..t7%3D%7Bformat%7D..t8%3D%7Bip%7D..t9%3D%7Bgeo%7D..t10%3D%7Bpricing_model%7D\u0026pt=NANNYSPY%20BRAVE%20Nanny%20TRIES%20TO%20FIT%20Bosses%20GIANT%20DICk\u0026to=0\u0026p%5Bvid%5D=meitwa5p9olm81w5j52c\u0026p%5Bsres%5D=1280x1024\u0026p%5Bisv%5D=1 HTTP/1.1\r\nHost: ay.tubeprnlist.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.girlsdump.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 17:39:29 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 61\r\nserver: nginx\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 600\r\naccess-control-allow-origin: *\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Full-Version,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced\r\nx-robots-tag: noindex, nofollow, noarchive\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"1eaee5cda4c20014dff6850440a599d8","sha1":"7799c1170377da57778eb35c571077cef48d6e54","sha256":"925a5831635b962507f5305cbdf83f9d21750cca3d1a751b0ace6de03679c4cf","sha512":"2a3d076cb751148ec8677775f7f86704cdf32b8882e526f7b854a97c3b222a31ebc169eec82b2bcabda536c57b19a54963e9fb2ea7aa5ee6e0fd8317b3f689db","ssdeep":"","tlshash":"4490000ba02b80033282002c20032baf80000acbae8083f8c0be823c8e2c0f02282030","first_seen":"2023-11-24T21:13:29Z","last_seen":"2026-05-24T18:48:27.13759Z","times_seen":129,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":82,"dns":1,"connect":1,"send":0,"wait":26,"receive":1,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/07cvpCr3Xe3g2ttJNUkC6W0J/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=07cvpCr3Xe3g2ttJNUkC6W0J\u0026k=6LeHdnEUAAAAAFiyGpf5SpsponjLpsUZOs1_ybgg\u0026bft=0dAFcWeA4hdXGcvrYLfnOSlb1bVDRISkx_MyNLiYR9aApeNG1QhvlgMZqjcyTKQLP29ViWUqHaM9qapW-XAp2GpWbO5GYv0LOeBA","date":"2025-08-19T17:39:31.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /recaptcha/releases/07cvpCr3Xe3g2ttJNUkC6W0J/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42195\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 18 Aug 2025 16:54:29 GMT\r\nexpires: Tue, 18 Aug 2026 16:54:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 89102\r\nlast-modified: Fri, 01 Aug 2025 00:01:10 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":80510,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"375a6bb306dfafb983e14413ec973370","sha1":"51c49d2e23ef19049cad68eea6258475b7de3751","sha256":"fb9268fd6f3ca01aa26b948f95ac89bebc646f70f3c9f54a2e3034547b2c24c8","sha512":"ec5b11f55469baad710ffaed2e38b78a8c57d4e02ea2f2a354689dc17c77dced4cb1a0b1391339cda1a2eff80ca5090f074dba5f9f27b16961a48ddb983e1060","ssdeep":"1536:1fGNbFoZJSUYOOaLnAW8+IcTOIBCtthXwW5wx7:1GRFauOxLA/+IcTOhLXS","tlshash":"6e739f7338513a39fc3b9b616086b9ecf21cc527e5514bf6b6497a20c3db19a8253b07","first_seen":"2025-08-07T15:32:25.58115Z","last_seen":"2026-05-23T15:58:39.025578Z","times_seen":8067,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tubes.fuckyoucash.com/js/app.js?id=69af81cefea91532992c","fqdn":"tubes.fuckyoucash.com","domain":"fuckyoucash.com","tld":"com"},"ip":{"addr":"3.167.2.91","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tubes.fuckyoucash.com/embed/66593","date":"2025-08-19T17:39:29.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fuckyoucash.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 07 May 2025 00:00:00 GMT","end":"Fri, 05 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:51:5A:C2:83:68:39:C6:46:2F:40:4C:1B:C8:EF:04:4E:DE:DF:18","sha256":"ED:50:86:02:48:D3:19:AF:98:3F:80:B3:61:71:57:7F:E6:B5:17:DF:58:06:63:76:CA:48:6C:E6:09:0D:71:DA"}}},"request":{"raw":"GET /js/app.js?id=69af81cefea91532992c HTTP/1.1\r\nHost: tubes.fuckyoucash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tubes.fuckyoucash.com/embed/66593\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 60975\r\naccept-ranges: bytes\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: gzip\r\ndate: Tue, 03 Jun 2025 15:49:40 GMT\r\netag: \"683f16d0-ee2f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 03 Jun 2025 15:37:52 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 edea1d4f37b8855878682c02540138fe.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: W-WzOjwYJACAeteGcR_76Sq-dd170ivG5PWeKRYh_bt8UZBTedYKQA==\r\nage: 6659389\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":199095,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65475)","md5":"69af81cefea91532992c98cc9ce7b8e9","sha1":"aa99e58d8de7b3b98eca03438c9362670e52511e","sha256":"34d001fa7f567a5bb24a0cd2a8fff787d224b229f8adcbbff642eed356d72159","sha512":"97e2e614128602233af9ec84c28b462bf4a9f41d1ea9bd014c621664189c7344af729ffd47363d55025d84abb91fe9a68df298b505eed3f0c7bc1a3be9a6bf20","ssdeep":"3072:zFUTE//p7Y1eNGhXsirFYaafQaqQPJtLJ+5HOnD:2K/JY1eNWpWQaqsRJ+1K","tlshash":"f914e88d72d5b07247ab7076807f450bb23a689d680ea018f299d4dd2d7cd8a6237f3d","first_seen":"2023-11-22T17:01:51Z","last_seen":"2026-05-24T18:48:27.149513Z","times_seen":158,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/ab/d9/b7/abd9b7772f5454ef43ba6f9999ba3e21/1753952143.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:29.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Jul 2025 02:33:11 GMT","end":"Wed, 08 Oct 2025 02:33:10 GMT"},"fingerprint":{"sha1":"06:D8:07:0F:AB:BF:D8:7F:C5:38:82:AC:A7:8A:20:4D:83:6C:EA:C9","sha256":"CF:05:58:46:C3:07:3F:B6:A6:8D:42:F2:3B:3D:91:36:93:10:CB:D5:89:47:A3:62:26:D2:F3:BA:AC:51:0E:B7"}}},"request":{"raw":"GET /cti/ab/d9/b7/abd9b7772f5454ef43ba6f9999ba3e21/1753952143.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 17:39:29 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 55491\r\nserver: nginx/1.21.6\r\nlast-modified: Thu, 31 Jul 2025 08:55:43 GMT\r\netag: \"688b2f8f-d8c3\"\r\nexpires: Thu, 21 Aug 2025 17:39:29 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: ah0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55491,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2025:07:30 12:13:54], progressive, precision 8, 300x250, components 3","md5":"5b5ee3ad1480d32ba1830ef700c0879b","sha1":"cc82bb14a155637c09e59d62e19586cf8357785e","sha256":"1c469f2d22d765d38c3220e13c15ddfd2fc8d730c32a0031645b95b640fa0a8e","sha512":"443108ebbba2ef4bce38d344f8fff116cc248d524e5d5fb031679d5b53ac83d9d194817ffefee20062a7c481076a320ad0eafae32edae15ba28e962c8219626a","ssdeep":"1536:xYhc5RAvNYhc5RAvYupEkf/5IBVW5yz6/jU1AIVL:+hc5R4qhc5R4FfhuVW5y+gLVL","tlshash":"cc43e128bf98bf11fed5457c98f6d3d68363ef588a73a1507d0c84123b60a998b79342","first_seen":"2025-07-31T13:21:14.548833Z","last_seen":"2025-09-02T19:41:47.053598Z","times_seen":323,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.profitabledisplaycontent.com/impr.gif?sid=H4sIAAAAAAAC_1RTP2wcxReec_L7FVAAIaKguoICpPg8szO7s0sKhAlBESaJkqAU0My_PQ_e21lmdm-dE0VEJJTSBUXK9TsnFhAQSIgOCZ3pIiH5qFzEDT0FSGlo0DmWHF7x3vfNN6P53ujNF9vNIaLQiIOrH7iJLQqxEg9w__WbttSuDf3LN_oED_D5_k1bJux8f3OR_PhNQtkAv9F_z6gNtxJhgjHBpH_RepO7zZUjFWz1MCODDA9YNCAxg03_Xx6aHgTRAz0-RGfA6vkLf-QfgVUzKEffXzBho3bVuXdHTSFq52Gsdz8sN0rXljA6gbnvQV7uHu8GF-YI3VsCV-4edwBuvLPoAKSdo6VXHoMsd49tghzff-pUFmBKkPp5aMczMMUeWDED5e6A1fsIQGm4fAXK0YPLzrfi1lNVLNQ5Ov3kb7DtHJ1-fBbK0Xerhd3sX3dFU1tXBtjMO7CbM7DDGVTNHtSTJbDtHqj6c7D6N7TyZA3K0c6VUDiw-uC1NJNUcamW85inyyzi2XKaMLrMOCGUy4hHHB89kc1nIMIpaEIPGtuDJu9BU_VgpA_6DKdMEUGTPNOKYyYY00biLI0wFpni0KiF9y2oqy1QxRYofxsqfxs27JfX9uMz-yvFfjwB3_wCYf3gR5mrmGmSMR1TGXHFCWUijxNDpVKLuxIiU6pFrkwi8zgRiskk09SkOuNEcJqkShIZx5RRlkRZorBROM4YjUkiCUkpNdxkaSzzVDGdUxJTQVIdG2HSRBHOsphHjGlOY54Ikug015gZTnHMUyOY0klsMNYySnOOcxGrHILuQagRjHUHrUHQBgStQNBaBG2NoB1393URotA90EVoJDmu0XGl3dTVw21x39VDUyIQfgu87nZs9Wm4A6o-NZ3kQU_dIglZd1MhdbddHaKXjqbi8B8BG-agn5lYYZnlnBNOlWCSaJ0oZSLOmU4YhmA7sGEJROjBxM5Rb_dPqBb1xhpIsQeh2ANlXwTR_A9EO6UYg1ifRjGGSfnt0Poi6GZUDZQbgXYdVPVpqG_1totD9OqRkY__OgtGPULHAcp3UPkOPrG_IhgWd6fXXIt2rrk2oB-uVLUd2YlYjO71WtTm_1-_b261zutLF8LWV2-rhbCAD2-YUK-JUttyGNA3q1Zr4y86rwz6-VK4aeTVJqyvNr5sqrWr71y8NKq8CcG6cgbCztFzh-dA2Tl6-bPVo2_J7o3B-hn4poNR84zX6jaE6oQHh8AXJ1xWCNqmm_pIniwWFkFhTriQHYRnuDzBUy8Wp4XttsNdGPoeiPoOlKMOxr6DcdGBKLYgNKemdeUfvfU7PQqQRW8qC492ZOEXuj3o59RECuOUJ4SmuSGUaZXHKct0IjClBuowX9_5af_fAAAA___a91EkbwUAAA==","fqdn":"www.profitabledisplaycontent.com","domain":"profitabledisplaycontent.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:29.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.profitabledisplaycontent.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 22:16:27 GMT","end":"Wed, 22 Oct 2025 22:16:26 GMT"},"fingerprint":{"sha1":"80:ED:AE:02:6E:22:92:2C:1D:3B:CF:40:B8:05:ED:A8:F4:78:41:C1","sha256":"27:CE:4E:A9:E9:2E:EA:67:C9:22:7C:B4:62:29:07:B9:BD:AA:87:B5:6A:AD:89:6C:68:5A:63:CB:C5:73:7D:0F"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RTP2wcxReec_L7FVAAIaKguoICpPg8szO7s0sKhAlBESaJkqAU0My_PQ_e21lmdm-dE0VEJJTSBUXK9TsnFhAQSIgOCZ3pIiH5qFzEDT0FSGlo0DmWHF7x3vfNN6P53ujNF9vNIaLQiIOrH7iJLQqxEg9w__WbttSuDf3LN_oED_D5_k1bJux8f3OR_PhNQtkAv9F_z6gNtxJhgjHBpH_RepO7zZUjFWz1MCODDA9YNCAxg03_Xx6aHgTRAz0-RGfA6vkLf-QfgVUzKEffXzBho3bVuXdHTSFq52Gsdz8sN0rXljA6gbnvQV7uHu8GF-YI3VsCV-4edwBuvLPoAKSdo6VXHoMsd49tghzff-pUFmBKkPp5aMczMMUeWDED5e6A1fsIQGm4fAXK0YPLzrfi1lNVLNQ5Ov3kb7DtHJ1-fBbK0Xerhd3sX3dFU1tXBtjMO7CbM7DDGVTNHtSTJbDtHqj6c7D6N7TyZA3K0c6VUDiw-uC1NJNUcamW85inyyzi2XKaMLrMOCGUy4hHHB89kc1nIMIpaEIPGtuDJu9BU_VgpA_6DKdMEUGTPNOKYyYY00biLI0wFpni0KiF9y2oqy1QxRYofxsqfxs27JfX9uMz-yvFfjwB3_wCYf3gR5mrmGmSMR1TGXHFCWUijxNDpVKLuxIiU6pFrkwi8zgRiskk09SkOuNEcJqkShIZx5RRlkRZorBROM4YjUkiCUkpNdxkaSzzVDGdUxJTQVIdG2HSRBHOsphHjGlOY54Ikug015gZTnHMUyOY0klsMNYySnOOcxGrHILuQagRjHUHrUHQBgStQNBaBG2NoB1393URotA90EVoJDmu0XGl3dTVw21x39VDUyIQfgu87nZs9Wm4A6o-NZ3kQU_dIglZd1MhdbddHaKXjqbi8B8BG-agn5lYYZnlnBNOlWCSaJ0oZSLOmU4YhmA7sGEJROjBxM5Rb_dPqBb1xhpIsQeh2ANlXwTR_A9EO6UYg1ifRjGGSfnt0Poi6GZUDZQbgXYdVPVpqG_1totD9OqRkY__OgtGPULHAcp3UPkOPrG_IhgWd6fXXIt2rrk2oB-uVLUd2YlYjO71WtTm_1-_b261zutLF8LWV2-rhbCAD2-YUK-JUttyGNA3q1Zr4y86rwz6-VK4aeTVJqyvNr5sqrWr71y8NKq8CcG6cgbCztFzh-dA2Tl6-bPVo2_J7o3B-hn4poNR84zX6jaE6oQHh8AXJ1xWCNqmm_pIniwWFkFhTriQHYRnuDzBUy8Wp4XttsNdGPoeiPoOlKMOxr6DcdGBKLYgNKemdeUfvfU7PQqQRW8qC492ZOEXuj3o59RECuOUJ4SmuSGUaZXHKct0IjClBuowX9_5af_fAAAA___a91EkbwUAAA== HTTP/1.1\r\nHost: www.profitabledisplaycontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoxNDYxMzM0NSwiayI6IjllNWMwYjlmNzcxNzNjYTRiMWRkNmNjZTI3NzRkNjQwIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxMDg1MjYsInBpZCI6ODcxMTYsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MTYsImFpZCI6NSwicHQiOjQsInBrIjoiZjIwcHYyNjgzaCIsImNwa3MiOnsiNDYiOiIxODAwNWY2YjQxNDU1M2E5ODU0NjMwNjBjNTE0NWZiZCJ9LCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6MjY2NTYxMTE1LCJpZHMiOiIiLCJpYyI6ZmFsc2UsIm4iOiJEZXNrdG9wLEVtdWxhdG9yIiwidiI6IlVua25vd24iLCJtIjoiVW5rbm93biIsImYiOjEsImZuIjoiRGVza3RvcCIsIm9pZCI6Mzg5MTQsIm9uIjoiV2luZG93cyIsIm92IjoiMTAuMCIsImJpZCI6MTM2OTI1LCJibiI6IkZpcmVmb3giLCJidiI6IjEzNC4wIiwid3YiOmZhbHNlLCJlIjp0cnVlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6dHJ1ZSwiciI6Imh0dHBzOi8vd3d3LmdpcmxzZHVtcC5jb20vY2gxLnBocD9tY19hdHRyPWM9YzU2NzUxYTYtOTQ3My00NDdiLTg3YzYtYWNhNzY1YWI5NjUyLi5tPW1laWZuYXZ0dGc4Ymt5cXNqdG91aWlsMW40Li5kPTAtMC0wLTEtOC4ubD0xNzU1NjAxMjM1NC4uZT17Y2xpY2tfaWR9Li50MT17Y2FtcGFpZ25faWR9Li50Mj17Y3JlYXRpdmVfaWR9Li50Mz17Y2F0ZWdvcmllc30uLnQ0PXtrZXl3b3Jkc30uLnQ1PXtyZWZlcnJlcn0uLnQ2PXtzaXRlX2lkfS4udDc9e2Zvcm1hdH0uLnQ4PXtpcH0uLnQ5PXtnZW99Li50MTA9e3ByaWNpbmdfbW9kZWx9IiwiYXIiOltdfX0.dRecXu2yr0IroGTKJ5bJjP-QHA4C_NB_rQGLiHTiqc4; uid_id2=89b3c7bc-f578-4279-8643-471137b27270:3:1; pdhtkv=true; uncs=1; pdhtkv5=true; uncs5=1; u_pl14613345=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 19 Aug 2025 17:39:29 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: www.profitabledisplaycontent.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: b879b87295f9652758478f1e90592ce2\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Finstagram%2Fnew%2F4%2Fcss%2Fstyle.css\u0026l=7578\u0026fd=96","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"192.243.61.225","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:30.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 22:21:33 GMT","end":"Fri, 26 Sep 2025 22:21:32 GMT"},"fingerprint":{"sha1":"4A:6A:48:C8:5B:C5:2B:2E:9C:03:AF:BF:4C:E6:10:23:E2:7B:EA:97","sha256":"A8:42:B5:4A:20:C8:13:EF:B5:90:0F:54:37:F7:05:60:8D:91:07:E3:A4:0F:7A:22:C9:AF:F1:F5:22:E8:68:C9"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Finstagram%2Fnew%2F4%2Fcss%2Fstyle.css\u0026l=7578\u0026fd=96 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nCookie: uid_id2=f38d03e5-8664-4b50-81ae-d95a31c79720:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl15478440=1; slecde21fbaed972e35daf58964d69ff178d=[6116560]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 19 Aug 2025 17:39:30 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-19","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.girlsdump.com/media/videos/tmb/000/005/920/1.jpg","fqdn":"www.girlsdump.com","domain":"girlsdump.com","tld":"com"},"ip":{"addr":"169.62.37.218","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"girlsdump.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Jul 2025 10:50:10 GMT","end":"Sat, 11 Oct 2025 10:50:09 GMT"},"fingerprint":{"sha1":"B5:15:42:21:A4:14:A1:91:37:AA:0C:41:AC:D4:5F:B8:C4:2C:A9:74","sha256":"40:55:21:6B:C6:50:EC:F7:B1:50:34:10:8D:F8:CE:5C:6F:F6:25:68:34:D0:63:3E:B3:57:0F:C6:AE:80:6F:DE"}}},"request":{"raw":"GET /media/videos/tmb/000/005/920/1.jpg HTTP/1.1\r\nHost: www.girlsdump.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 19 Aug 2025 17:39:29 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 13778\r\nLast-Modified: Sat, 03 Sep 2022 17:00:26 GMT\r\nConnection: keep-alive\r\nETag: \"6313882a-35d2\"\r\nExpires: Thu, 18 Sep 2025 17:39:29 GMT\r\nCache-Control: max-age=2592000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13778,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x226, components 3","md5":"6b604d6571dd732421ffea3edadf3190","sha1":"2b541483ba742f46dc50f6b19387ccf67ab95c14","sha256":"99541cb4d2eb49437b15430bd6e08892c07934672c01b682e33588a46a49483c","sha512":"c438f4f5a268a738921b32f6a27a9d96cfd30ac2dd1fb937ec5b63b086fc71b7144a3471bb3dfc78111d601dbee23ac70394f0918586aef1e4626c003d74ef71","ssdeep":"192:pqhk7QTpK6gC8XGl1zGrnnNR7JCjN37BdW5i73Kj9amHiNGhBYNou:pqPoU82l1ijnNFJChLBd5ajUmCNgBYCu","tlshash":"3b52d14e776d9dd972081c2ecda11db08aeeae02d3959601cac599810cb72ed42e7fe1","first_seen":"2025-03-19T06:27:36.716083Z","last_seen":"2026-05-24T18:48:27.061614Z","times_seen":129,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":629,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.girlsdump.com/media/videos/tmb/000/002/109/1.jpg","fqdn":"www.girlsdump.com","domain":"girlsdump.com","tld":"com"},"ip":{"addr":"169.62.37.218","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"girlsdump.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Jul 2025 10:50:10 GMT","end":"Sat, 11 Oct 2025 10:50:09 GMT"},"fingerprint":{"sha1":"B5:15:42:21:A4:14:A1:91:37:AA:0C:41:AC:D4:5F:B8:C4:2C:A9:74","sha256":"40:55:21:6B:C6:50:EC:F7:B1:50:34:10:8D:F8:CE:5C:6F:F6:25:68:34:D0:63:3E:B3:57:0F:C6:AE:80:6F:DE"}}},"request":{"raw":"GET /media/videos/tmb/000/002/109/1.jpg HTTP/1.1\r\nHost: www.girlsdump.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 19 Aug 2025 17:39:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 10661\r\nLast-Modified: Sat, 30 May 2020 21:58:30 GMT\r\nConnection: keep-alive\r\nETag: \"5ed2d706-29a5\"\r\nExpires: Thu, 18 Sep 2025 17:39:28 GMT\r\nCache-Control: max-age=2592000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10661,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x226, components 3","md5":"cdf75058a2ec2eae1d18e6930b87cdc8","sha1":"8ea37687b36eef9cb2d2f39f5f713a164d2e3e3f","sha256":"26829810f3fc7b2c96cd55bf98aff5d1f4165fc15de62609ec9345d1ec97481b","sha512":"efbb8aae3f8f2fa9a5bfecbe5aaabab9c704ec973b3ddce2bd0b578cd5e32edd7770f687b9b7963cac90f4374f3bda49cb394dbda17be46e32e4b3b9b7f3795e","ssdeep":"192:EGiHlcynp6pT8gfXnm2EaMDw3/+MuniUKG0GwlawUgyMFNPe955N:EGiHlBnp6pTjlEaMDw/+viUKGoUgbF4T","tlshash":"ee22a0bf334486e0fe1919347b577de06fe48442389903c372e8b559b9abe00edd1249","first_seen":"2023-11-22T17:01:52Z","last_seen":"2026-05-24T18:48:27.107148Z","times_seen":132,"resource_available":false,"data":null}},"time_used":522,"timings":{"blocked":427,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.girlsdump.com/media/videos/tmb/000/000/046/1.jpg","fqdn":"www.girlsdump.com","domain":"girlsdump.com","tld":"com"},"ip":{"addr":"169.62.37.218","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"girlsdump.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Jul 2025 10:50:10 GMT","end":"Sat, 11 Oct 2025 10:50:09 GMT"},"fingerprint":{"sha1":"B5:15:42:21:A4:14:A1:91:37:AA:0C:41:AC:D4:5F:B8:C4:2C:A9:74","sha256":"40:55:21:6B:C6:50:EC:F7:B1:50:34:10:8D:F8:CE:5C:6F:F6:25:68:34:D0:63:3E:B3:57:0F:C6:AE:80:6F:DE"}}},"request":{"raw":"GET /media/videos/tmb/000/000/046/1.jpg HTTP/1.1\r\nHost: www.girlsdump.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 19 Aug 2025 17:39:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 13902\r\nLast-Modified: Thu, 16 Apr 2020 19:44:15 GMT\r\nConnection: keep-alive\r\nETag: \"5e98b58f-364e\"\r\nExpires: Thu, 18 Sep 2025 17:39:28 GMT\r\nCache-Control: max-age=2592000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13902,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x226, components 3","md5":"c4c949b64c51096709b3b724edddbcaa","sha1":"524382ca63877eece0668a75e4b6ce5e4c82937a","sha256":"d2bdc8e84466e324d39d7c9bb5b7f4f74a8202ecc7d4235f776c8a33b9c09030","sha512":"f0e24c8e9fc48631f91dbf248da9fb2ec11c5e0b6467a6a1dae50629d428e2b13177407d129dab489e0d7c434b808dfb0fcaef020471e35b0cba80e79c790495","ssdeep":"192:0IjuQbOP+x8wshQzf7pULm5WzCJJ7kDh0ZMv2dwpt3GvlZPbFSIyv/GrR:0tQbOmuRQbNGzEqGZ1dwptqlZPpl8/GF","tlshash":"5f52af92f289a9e67c02d07262899e108cdc07d572f891698fe57bcd9d1efc21e17097","first_seen":"2023-11-22T17:01:52Z","last_seen":"2026-05-24T18:48:27.110002Z","times_seen":132,"resource_available":false,"data":null}},"time_used":519,"timings":{"blocked":425,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"milletappliancejeopardize.com/ntv.json?key=65d324063c68920c60940e7e5b63ab81\u0026vstc=4\u0026rb=","fqdn":"milletappliancejeopardize.com","domain":"milletappliancejeopardize.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"milletappliancejeopardize.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 31 Jul 2025 08:36:21 GMT","end":"Wed, 29 Oct 2025 08:36:20 GMT"},"fingerprint":{"sha1":"EA:64:64:B0:BA:DC:E1:5D:06:7D:52:B8:2C:0B:86:7F:CE:4B:A1:74","sha256":"DB:07:0A:AC:70:F7:AC:62:69:99:4F:53:5A:A1:10:05:D2:07:FB:2B:9A:EE:E7:F4:1A:BB:3C:3C:C1:27:DB:31"}}},"request":{"raw":"GET /ntv.json?key=65d324063c68920c60940e7e5b63ab81\u0026vstc=4\u0026rb= HTTP/1.1\r\nHost: milletappliancejeopardize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.girlsdump.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 19 Aug 2025 17:39:29 GMT\r\nContent-Type: application/json\r\nContent-Length: 16117\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://www.girlsdump.com\r\naccess-control-allow-credentials: true\r\nset-cookie: pdhtkv=true; expires=Wed, 20 Aug 2025 17:39:29 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Wed, 20 Aug 2025 17:39:29 GMT; path=/; secure; SameSite=None\npdhtkv49=true; expires=Wed, 20 Aug 2025 17:39:29 GMT; path=/; secure; SameSite=None\nuncs49=1; expires=Wed, 20 Aug 2025 17:39:29 GMT; path=/; secure; SameSite=None\nu_pl15332378=1; expires=Wed, 20 Aug 2025 17:39:29 GMT; path=/; secure; SameSite=None\nnlec65d324063c68920c60940e7e5b63ab81=[5474031,5474018,5474030,5474029]; expires=Tue, 19 Aug 2025 17:39:34 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 21\r\nHost: milletappliancejeopardize.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 9958e930e0e23fb77fb5ce13ae2cc982\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16117,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a5760cc0ea79bf30f776848edfda9a23","sha1":"2a23791a921b79a4c0b884d942c737f3c8a0c8ed","sha256":"8a7cdc61d3523587fcbbb61bfb55857ecf342789044a75c1e948484652ceaa2a","sha512":"a8dbed0cd764a5572b3dfdb972d82c3cd3f45b814c314d4bdedf4d6aba15da5025c3e5b4713ac6acceb033f87689bb5057ff4819d90e1d99a49659cf44772c3d","ssdeep":"384:fwWp9EV3SZuMCcThWKy6Snq7NiA9fraubxl7f:fwY4iYv0Ly3kNZ9jvNZf","tlshash":"6772bf730429107f0ce0d4ee650e99d86fe46a0ae0884fe745ac8fa765a6483b32e859","first_seen":"2025-08-19T17:40:01.662646Z","last_seen":"2025-08-19T17:40:01.662646Z","times_seen":1,"resource_available":false,"data":null}},"time_used":806,"timings":{"blocked":298,"dns":16,"connect":92,"send":0,"wait":115,"receive":92,"ssl":191},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-19","alert":"Sinkholed","trigger":"milletappliancejeopardize.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"milletappliancejeopardize.com/ren.gif?sid=H4sIAAAAAAAC_1RSMWwjRRQd51xBwXFCFFe5BAk5a3vt2FxxIhxBESEJl6AUVLM7u85cZneWmVmvYwkUEel0HUZQcFSTZ-ci4EBHAw1IyEFCKBJS3KW4FFBRcBSgK6jQOpbMfWne_3_ejPT-m7l9kJ6TGlJ6tv6m7HEh6Hy97JRe2OIxk5kurW6WKk7ZuVba4nHDvVbq5qA6L1dqbtl5sfR64O_I-apTcZyKUyktcRWEsjs_YcGT-61KueWU3Wq5UnfRVU_2Oi1A0wJY55xcAWfjZ34P3wH3R4ijBzcCvWNk8tJrUSqokQoddvR2vBPLLEY0K0NVQBgfTU9D6jEhn85BxkfTCSA7w3wCeHxM5p5_CC8-msqE1zm8UOoJBDE89jSyzgiBGIHTEXy5D85OCeAzrK4hju6tSpXR3QuW5uyYFB__DZ6NSfHhc4ijrxcF75Y2pEgNl7FGN7Tg3RF4e4QkPYbpzYFnx_DNB-DsVzL_eAVxNFzTQoIzO5mehyNQXUCaL15AGhaQJgVE7KzkOk3Xr9BaI2wxf8FxqeuywHNazarj0Ja_gNTPZfVhkj580Yev9pCoPezwj07rV6DSH6G3LTQrQJsxKby1hw6zyAKCTBNklCDjBJkhyDr2kAld1fYeEzr1KtNcneaaHUjTPqCH0rSDmICqPhSzQ568q_fhm0uDXqjZQOZAPWMH1GP2IDknz06M--Ofq9gJzkqNOqtVXadR8xvNVtXxG07LdYKFoO41atRrVqC5BddzE096fEwKR4-Q5HlzBR49hhbH8Pll0LQCmlnQbYte_FWbK6FZGiVlX0Zg0iIxRZjdwoE4J1cnEjZu_4nAP7ne_dh8f-v9f-Eri0RZ3OI_EbTFncFNmZHhTZlp8s1aYnjEezR_1w1DTXDpizeC3UwqtnxD9z9_xc-JvLy_GWizQmPG47YmXy5yxgK1JJUfkB-W9Vbgrad6ezFVcZqsrL-6tBwlKtCay3gEyseE3H0An4_J5Z_fm_zZ8ncfgqsRVGoRpSdkGvCTPehkpl1LAiVmvJcUkaV2oKrebFNwAhHMeupZ6P_13qweKJrfptwe6DtoqyKo2UccWXSURUdYUNGHTp8amESdXP_lbh6fwRPFgSdUcegJJT7JLf4rh99yeHThuOZnpXrVqzWazUYQNlhYY7VqjbXqTtByaavhttw6jB5vD789_S8AAP__dzEyGqAEAAA=","fqdn":"milletappliancejeopardize.com","domain":"milletappliancejeopardize.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:29.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"milletappliancejeopardize.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 31 Jul 2025 08:36:21 GMT","end":"Wed, 29 Oct 2025 08:36:20 GMT"},"fingerprint":{"sha1":"EA:64:64:B0:BA:DC:E1:5D:06:7D:52:B8:2C:0B:86:7F:CE:4B:A1:74","sha256":"DB:07:0A:AC:70:F7:AC:62:69:99:4F:53:5A:A1:10:05:D2:07:FB:2B:9A:EE:E7:F4:1A:BB:3C:3C:C1:27:DB:31"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSMWwjRRQd51xBwXFCFFe5BAk5a3vt2FxxIhxBESEJl6AUVLM7u85cZneWmVmvYwkUEel0HUZQcFSTZ-ci4EBHAw1IyEFCKBJS3KW4FFBRcBSgK6jQOpbMfWne_3_ejPT-m7l9kJ6TGlJ6tv6m7HEh6Hy97JRe2OIxk5kurW6WKk7ZuVba4nHDvVbq5qA6L1dqbtl5sfR64O_I-apTcZyKUyktcRWEsjs_YcGT-61KueWU3Wq5UnfRVU_2Oi1A0wJY55xcAWfjZ34P3wH3R4ijBzcCvWNk8tJrUSqokQoddvR2vBPLLEY0K0NVQBgfTU9D6jEhn85BxkfTCSA7w3wCeHxM5p5_CC8-msqE1zm8UOoJBDE89jSyzgiBGIHTEXy5D85OCeAzrK4hju6tSpXR3QuW5uyYFB__DZ6NSfHhc4ijrxcF75Y2pEgNl7FGN7Tg3RF4e4QkPYbpzYFnx_DNB-DsVzL_eAVxNFzTQoIzO5mehyNQXUCaL15AGhaQJgVE7KzkOk3Xr9BaI2wxf8FxqeuywHNazarj0Ja_gNTPZfVhkj580Yev9pCoPezwj07rV6DSH6G3LTQrQJsxKby1hw6zyAKCTBNklCDjBJkhyDr2kAld1fYeEzr1KtNcneaaHUjTPqCH0rSDmICqPhSzQ568q_fhm0uDXqjZQOZAPWMH1GP2IDknz06M--Ofq9gJzkqNOqtVXadR8xvNVtXxG07LdYKFoO41atRrVqC5BddzE096fEwKR4-Q5HlzBR49hhbH8Pll0LQCmlnQbYte_FWbK6FZGiVlX0Zg0iIxRZjdwoE4J1cnEjZu_4nAP7ne_dh8f-v9f-Eri0RZ3OI_EbTFncFNmZHhTZlp8s1aYnjEezR_1w1DTXDpizeC3UwqtnxD9z9_xc-JvLy_GWizQmPG47YmXy5yxgK1JJUfkB-W9Vbgrad6ezFVcZqsrL-6tBwlKtCay3gEyseE3H0An4_J5Z_fm_zZ8ncfgqsRVGoRpSdkGvCTPehkpl1LAiVmvJcUkaV2oKrebFNwAhHMeupZ6P_13qweKJrfptwe6DtoqyKo2UccWXSURUdYUNGHTp8amESdXP_lbh6fwRPFgSdUcegJJT7JLf4rh99yeHThuOZnpXrVqzWazUYQNlhYY7VqjbXqTtByaavhttw6jB5vD789_S8AAP__dzEyGqAEAAA= HTTP/1.1\r\nHost: milletappliancejeopardize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl15332378=1; nlec65d324063c68920c60940e7e5b63ab81=[5474031,5474018,5474030,5474029]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 19 Aug 2025 17:39:29 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: milletappliancejeopardize.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: bb1cc9561892d6398be9b5c9dc00e82d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":767,"timings":{"blocked":326,"dns":1,"connect":141,"send":0,"wait":95,"receive":0,"ssl":185},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-19","alert":"Sinkholed","trigger":"milletappliancejeopardize.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"milletappliancejeopardize.com/impr.gif?sid=H4sIAAAAAAAC_1RSMWwcRReeda76_4IQIYpUV4KEzru3e-c7UkSEEGRhbBMbuaCandk9Tzy7s8zs3p5PAllYilJeBAWhWn93jgUEFBpoQEJnJIQsIfk6F3EBFQWhAKWgQns56eBJ87335puRvvfN3D7IzomLjJ6tv6n6Qkq62KjZ1Re2RMxVbqqrm1XHrtlXqlsibnpXqr0SdPdlx_Vq9ovV1wO2oxbrtmPbju1UbwgdhKq3OGUhkgdtp9a2a1695jQ89PR_e5NZMNQC756TSxB88syv4TsQbIw4eng9MDupSl56LcokTZVGlx-9He_EKo8RzctQWwjjo9lpKDMh5OMFqPhoNgFUd1ROAF9MyMLzj-DHRzOZ8LuHT5X6EkEMn_8feXeMQI4h6BhM7UPwUwIwjtU1xNH9VaVzuvuUpSU7IZUnf0LkE1J59Bzi6MtrUvSqG0pmqVCxQS8sIHpjiM4YSXaMtL8AkR-DpR9A8J_J4pMVxNFozUgFwYvp9CIcgxoLWbmEhSy0kCUWIn5W9eyWxxzqNsM2Z0u2Rz2PB77dbtVtm7bZEjJWyhogTQZgcgCm95DoPeyIu6eNS9DZ9zDbBQy3YNIJsd7aQ5cXyAOC3BDklCAXBHlKkHeLQy5N3RT3uTSZ78xyfZbdYqjSzgE9VGkniAmoHkDzYiSSd80-WHph2A8NH6oSqJ8WQ-rz4iA5J89Ojfvtr8vYCc6qzQZ3657ddFmz1a7brGm3PTtYChp-06V-y4ERBYRZmHrSFxNiHT1GUubNFfj0GEYeg4mLoJkDmheg2wX68RcdoaXhWZTUmIrAVYEkrSDdtQ7kObk8lbBx-w8E7ORq78P021vv_w2mCyS6wC3xA0FH3hneVDkZ3VS5IV-tJamIRJ-W77qR0jS48NkbwW6uNF--bgafvsJKoiwfbAYmXaExF3HHkM-vCc4DfUNpFpDvls1W4K9nZvtapuMsWVl_9cZylOjAGKHiMaiYEHLvIZiYkIs_vjf9s7Vv7kLoMXRWIMpOyCzAkj2YZK7dKAIt57yfWMizYqjr_nxTCgIZzHvqFzD_6v15PdS0vE1FcWDuoKMroOk-4qhAVxfoygJUDmCy_w3TRJ9c_eleGZ_Al5WhL3Vl5EstP5paXMIvJTwu4XcYcVYN3aDObLu11HTcVhg4rsdZ2Gh5bd6ktusGSM1ke_T16T8BAAD__1bbXlmgBAAA","fqdn":"milletappliancejeopardize.com","domain":"milletappliancejeopardize.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:29.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"milletappliancejeopardize.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 31 Jul 2025 08:36:21 GMT","end":"Wed, 29 Oct 2025 08:36:20 GMT"},"fingerprint":{"sha1":"EA:64:64:B0:BA:DC:E1:5D:06:7D:52:B8:2C:0B:86:7F:CE:4B:A1:74","sha256":"DB:07:0A:AC:70:F7:AC:62:69:99:4F:53:5A:A1:10:05:D2:07:FB:2B:9A:EE:E7:F4:1A:BB:3C:3C:C1:27:DB:31"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSMWwcRReeda76_4IQIYpUV4KEzru3e-c7UkSEEGRhbBMbuaCandk9Tzy7s8zs3p5PAllYilJeBAWhWn93jgUEFBpoQEJnJIQsIfk6F3EBFQWhAKWgQns56eBJ87335puRvvfN3D7IzomLjJ6tv6n6Qkq62KjZ1Re2RMxVbqqrm1XHrtlXqlsibnpXqr0SdPdlx_Vq9ovV1wO2oxbrtmPbju1UbwgdhKq3OGUhkgdtp9a2a1695jQ89PR_e5NZMNQC756TSxB88syv4TsQbIw4eng9MDupSl56LcokTZVGlx-9He_EKo8RzctQWwjjo9lpKDMh5OMFqPhoNgFUd1ROAF9MyMLzj-DHRzOZ8LuHT5X6EkEMn_8feXeMQI4h6BhM7UPwUwIwjtU1xNH9VaVzuvuUpSU7IZUnf0LkE1J59Bzi6MtrUvSqG0pmqVCxQS8sIHpjiM4YSXaMtL8AkR-DpR9A8J_J4pMVxNFozUgFwYvp9CIcgxoLWbmEhSy0kCUWIn5W9eyWxxzqNsM2Z0u2Rz2PB77dbtVtm7bZEjJWyhogTQZgcgCm95DoPeyIu6eNS9DZ9zDbBQy3YNIJsd7aQ5cXyAOC3BDklCAXBHlKkHeLQy5N3RT3uTSZ78xyfZbdYqjSzgE9VGkniAmoHkDzYiSSd80-WHph2A8NH6oSqJ8WQ-rz4iA5J89Ojfvtr8vYCc6qzQZ3657ddFmz1a7brGm3PTtYChp-06V-y4ERBYRZmHrSFxNiHT1GUubNFfj0GEYeg4mLoJkDmheg2wX68RcdoaXhWZTUmIrAVYEkrSDdtQ7kObk8lbBx-w8E7ORq78P021vv_w2mCyS6wC3xA0FH3hneVDkZ3VS5IV-tJamIRJ-W77qR0jS48NkbwW6uNF--bgafvsJKoiwfbAYmXaExF3HHkM-vCc4DfUNpFpDvls1W4K9nZvtapuMsWVl_9cZylOjAGKHiMaiYEHLvIZiYkIs_vjf9s7Vv7kLoMXRWIMpOyCzAkj2YZK7dKAIt57yfWMizYqjr_nxTCgIZzHvqFzD_6v15PdS0vE1FcWDuoKMroOk-4qhAVxfoygJUDmCy_w3TRJ9c_eleGZ_Al5WhL3Vl5EstP5paXMIvJTwu4XcYcVYN3aDObLu11HTcVhg4rsdZ2Gh5bd6ktusGSM1ke_T16T8BAAD__1bbXlmgBAAA HTTP/1.1\r\nHost: milletappliancejeopardize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl15332378=1; nlec65d324063c68920c60940e7e5b63ab81=[5474031,5474018,5474030,5474029]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 19 Aug 2025 17:39:29 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: iprc_l+252753b734c472520bd76285c95659b9=5474031; expires=Wed, 20 Aug 2025 17:39:29 GMT; path=/; secure; SameSite=None\niprc_l:5474031=1; expires=Wed, 20 Aug 2025 17:39:29 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 1\r\nHost: milletappliancejeopardize.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 1aa7137cb0d7b4ae3cec8a92de1b6a16\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":1,"connect":106,"send":0,"wait":105,"receive":0,"ssl":206},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-19","alert":"Sinkholed","trigger":"milletappliancejeopardize.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/utility/social-media/instagram/new/4/css/animate.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:30.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 14:01:22 GMT","end":"Mon, 29 Sep 2025 14:59:36 GMT"},"fingerprint":{"sha1":"CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B","sha256":"8B:98:84:C0:8D:47:7C:1B:A7:26:4B:E4:9E:6E:FD:8E:E1:6D:6E:41:1D:E7:91:B7:70:A3:C1:D0:C0:85:6B:31"}}},"request":{"raw":"GET /sb/ssp/utility/social-media/instagram/new/4/css/animate.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.girlsdump.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 17:39:30 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa84ff-13361\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nage: 279702\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=go045TYctS%2BIxnHwUzPl9VVbVHFsJiX5ti0cLv4lZ3QwVmZeLdoPJqWAdWOC1%2FQ%2FRL9BEhyyEWw1Hc184bv2sSvLe8kS4vTFKmjfpC9Jchc%3D\"}]}\r\ncf-ray: 971b6e42daeab497-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78689,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3d4123dbfb33d27a5cfdfcfa91df6783","sha1":"e7d0eeeec54b848f0bc3da8685fa3bc88429d660","sha256":"cb7d1393b65701b2f97d8da244c2c6023e9cbc3463ecb0136b915cfc775c6887","sha512":"75c8a48dc207595e201b50b87ff68782112a21aded9f15f14185c07d40f0151d6afe74a2b278aa575caf12ac422e8166316296ed7b6573ea24e667cca4af51dd","ssdeep":"384:jvuAuF81dghu3ublZlX/m/Gu7uNUtrL4VrbZJgBhLYNKwZiMUL6Vpaj7F:jvuAu21dghu3uLu7uNKwZiMUL6Vpaj7F","tlshash":"22731bad399115845263861d83df9e68273ce5731826acef73c2488bcf8bf9867c9147","first_seen":"2024-01-20T06:37:31Z","last_seen":"2026-05-27T17:01:38.194376Z","times_seen":11580,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":67,"dns":22,"connect":8,"send":0,"wait":22,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/utility/social-media/instagram/new/4/js/script.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:30.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 14:01:22 GMT","end":"Mon, 29 Sep 2025 14:59:36 GMT"},"fingerprint":{"sha1":"CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B","sha256":"8B:98:84:C0:8D:47:7C:1B:A7:26:4B:E4:9E:6E:FD:8E:E1:6D:6E:41:1D:E7:91:B7:70:A3:C1:D0:C0:85:6B:31"}}},"request":{"raw":"GET /sb/ssp/utility/social-media/instagram/new/4/js/script.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.girlsdump.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 17:39:30 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fYBVbUJxa4nXUILn8FtOgcyDwBEWlEuewKtlA2x%2Fj2B5EXyFTQ4ZrdX9dyAFpd8Lq9QRLnyKBEYqN107enih2UNF9MsfzqXz%2FTWo3452XX4%3D\"}]}\r\nage: 279702\r\ncf-cache-status: HIT\r\netag: W/\"65aa84ff-1bc\"\r\ncontent-encoding: br\r\ncf-ray: 971b6e42dae6b497-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":444,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"02eef03d816f45efe77308aba07b0e94","sha1":"67ed5890e847d96a9cae9870e1adc821f551be35","sha256":"45cf2559fcb1af6347e9de4e1d2fad22896f10066e72bce39b0d1f19cda13824","sha512":"a8da3e933659ddddd30a3fe6d1347b31609807a3c16a5e954fed8d26cd21ead9f8a48a76b49ef7114ff198859aed2093da09df7dc2c39f10ddfcaa461f6d4639","ssdeep":"","tlshash":"f4f05c346174423453b7e1a6328b6b9e2130065fd0058249b42c574a1ee1ba522e2ba7","first_seen":"2023-04-06T09:46:19Z","last_seen":"2026-04-12T05:56:34.365744Z","times_seen":802,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":56,"dns":12,"connect":8,"send":0,"wait":24,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ay.tubeprnlist.online/js/t.js","fqdn":"ay.tubeprnlist.online","domain":"tubeprnlist.online","tld":"online"},"ip":{"addr":"15.197.197.46","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ay.tubeprnlist.online","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 15 Jul 2025 22:21:39 GMT","end":"Mon, 13 Oct 2025 22:21:38 GMT"},"fingerprint":{"sha1":"E7:43:DA:B8:47:37:3A:3D:ED:C6:3B:2E:C1:F3:88:D6:2A:07:5D:E1","sha256":"7C:ED:A0:19:6D:CF:23:4A:38:76:79:F2:2B:FE:CD:0F:8D:AF:94:9E:6D:9E:F4:98:71:B6:96:89:2C:50:97:E5"}}},"request":{"raw":"GET /js/t.js HTTP/1.1\r\nHost: ay.tubeprnlist.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 17:39:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3854\r\nserver: nginx\r\ncache-control: public, max-age=600\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Full-Version,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced\r\nx-robots-tag: noindex, nofollow, noarchive\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9240,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9240), with no line terminators","md5":"2ecfa96bbde42a40a76f587214f8d1db","sha1":"8a6c6ba777fa713ad66bd910a8602d555492e2c2","sha256":"40dc5d12e66f68818c56da1a9e66d204e6129bead83b149e99fbd0b6ce32e668","sha512":"264776dd23b7e08900b5fb464c790a922fe1a12fac07a5e4b439915c288cd6c101c4bf855f733e2c5fdd5f3a5cc0c0b2e83a9b09dda1d979d4026acf19e48272","ssdeep":"192:8llhRmuba1+mX92HYCMprbQ7uAyd8Q3kFSeYCmt9pZHhKB1s1mPd2kWLv:8jhRmu+Me2HLMdbQC5z3kFVo9pZHhKBi","tlshash":"4a12e6d17150283965d325659abf340eb1b35c48fc8c8140e821e8e26d78faa17ffe6c","first_seen":"2025-08-12T11:33:57.511338Z","last_seen":"2026-05-24T18:48:27.098128Z","times_seen":128,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":76,"dns":13,"connect":1,"send":0,"wait":24,"receive":0,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.girlsdump.com/media/videos/tmb/000/001/133/1.jpg","fqdn":"www.girlsdump.com","domain":"girlsdump.com","tld":"com"},"ip":{"addr":"169.62.37.218","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"girlsdump.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Jul 2025 10:50:10 GMT","end":"Sat, 11 Oct 2025 10:50:09 GMT"},"fingerprint":{"sha1":"B5:15:42:21:A4:14:A1:91:37:AA:0C:41:AC:D4:5F:B8:C4:2C:A9:74","sha256":"40:55:21:6B:C6:50:EC:F7:B1:50:34:10:8D:F8:CE:5C:6F:F6:25:68:34:D0:63:3E:B3:57:0F:C6:AE:80:6F:DE"}}},"request":{"raw":"GET /media/videos/tmb/000/001/133/1.jpg HTTP/1.1\r\nHost: www.girlsdump.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 19 Aug 2025 17:39:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 18521\r\nLast-Modified: Thu, 23 Apr 2020 09:55:22 GMT\r\nConnection: keep-alive\r\nETag: \"5ea1660a-4859\"\r\nExpires: Thu, 18 Sep 2025 17:39:28 GMT\r\nCache-Control: max-age=2592000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":18521,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x226, components 3","md5":"63c24c4c735f093d55e2464e2393764e","sha1":"f5a4aa5cb115c7e99ea4b2bfa85ac5f6405fa923","sha256":"6336d424b08cb8f989dc0fc24b9ed578db604ee7635def67b56ebb663d1a4cb4","sha512":"d5e24d90e7e2163e3f091b3b0f1785677b8f341fb36f2109e3452c8c49697e36226742e02ace2e2d9cf87f6f370179158047fbd85b86339a69620c70e4ef0315","ssdeep":"384:R8ek8YGexfyqZ23ptg5gMJkmJfvGhVOSCCoV2xE/fFkovFiKrqK:R7YV5BZ0GgMBvIvCt2MfFrFiI","tlshash":"4582cf580184dfc1b2a3c770f62a9fcbd0f39169f43a45f4b0c18f9595a868a2b7523e","first_seen":"2023-11-22T17:01:52Z","last_seen":"2026-05-24T18:48:27.065018Z","times_seen":130,"resource_available":false,"data":null}},"time_used":543,"timings":{"blocked":446,"dns":0,"connect":0,"send":0,"wait":96,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"18.198.116.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.girlsdump.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 17:39:29 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://www.girlsdump.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=89b3c7bc-f578-4279-8643-471137b27270:3:1; expires=Fri, 17 Aug 2035 17:39:29 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"277aa372f6e56cd041526af9357aca12","sha1":"4996aef5baea156928971702271632f278ad96c5","sha256":"1b0240ff2b0eceacb13ed03716d324cb957572e7bb660af7f299033fa6a9ef09","sha512":"642c6ea3db66ca602b7ae71995a0715c60ce5cf7af3c5c54a5cbd634f4ef95f2ae3597da0ef514e863c82b5c3f74795222ea74ddb99a9b440b4f59b269a4b7fa","ssdeep":"","tlshash":"b590045077ddd174503403010701f14c551c0ff1507300504d17c57d140501011cc513","first_seen":"2025-08-19T17:40:01.666122Z","last_seen":"2025-08-19T17:40:01.666122Z","times_seen":1,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":115,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-images.r1.cdn.pornpros.com/content/videos/c/7/e/c7e79b3e-d564-4e8e-b213-844d3e6ce816/handtouched/019.jpg?imgw=970\u0026imgh=545","fqdn":"cdn-images.r1.cdn.pornpros.com","domain":"pornpros.com","tld":"com"},"ip":{"addr":"64.210.135.118","port":443,"asn":30361,"as":"SWIFTWILL2","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tubes.fuckyoucash.com/embed/66593","date":"2025-08-19T17:39:29.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"r1.cdn.pornpros.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 22:41:11 GMT","end":"Mon, 10 Nov 2025 22:41:10 GMT"},"fingerprint":{"sha1":"A2:9C:38:F6:3F:85:E5:A1:3E:51:FD:8F:B4:0D:EB:31:95:50:8F:3E","sha256":"57:C1:36:FC:EA:F2:0D:BC:A6:A3:2F:64:39:85:8F:A9:16:C4:A9:2D:D6:BA:88:81:0B:84:E7:D3:9A:D0:72:36"}}},"request":{"raw":"GET /content/videos/c/7/e/c7e79b3e-d564-4e8e-b213-844d3e6ce816/handtouched/019.jpg?imgw=970\u0026imgh=545 HTTP/1.1\r\nHost: cdn-images.r1.cdn.pornpros.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tubes.fuckyoucash.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 17:39:29 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 122601\r\nlast-modified: Thu, 07 Dec 2017 09:29:44 GMT\r\netag: W/\"3421bb613-3644b-55fbcb5509200\"\r\nexpires: Wed, 31 Jul 2024 16:05:08 GMT\r\ncache-control: max-age=10368000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\np3p: CP=\"ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI\"\r\naccess-control-allow-origin: *\r\nx-cdn-diag: ams5-7619-2-2025435-h-0-0---;8658-19-2834713----0-0-1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":122601,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 970x544, components 3","md5":"40dbeb767a1d948f47561b03d2dfb887","sha1":"4b1583e82a6782e5957780ed1da9f5f179d8f408","sha256":"f2cf2abce2d34fc3664c286a84ecb1b7d1633a8ca207dcda86c38f71cbe61c37","sha512":"733e16437d2589527937dfb5a99fa88eab2a6d5c7445660ff8207eaa5b870e58e984397310711f9d73f1d37852b0cb8e32a49bbea6f1a1c2f51a71e48eb97c19","ssdeep":"1536:Sxbe0pj63MfGvv6hIyFOY0NKAIuRWoMX2FjIoFH5UbVV07fFOtvO8DybtkASwcBP:6zpIeGqhfwRphSo6HgFOtG8FlEMF2u","tlshash":"0ec31269bb16afb2f8211d36ac1b8d2178d79a43eed1dace022776983074cf5b1c1c54","first_seen":"2023-11-22T17:01:52Z","last_seen":"2026-05-24T18:48:27.074303Z","times_seen":150,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":131,"dns":86,"connect":17,"send":0,"wait":18,"receive":56,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.profitabledisplaycontent.com/watch.1055185194576.js?key=9e5c0b9f77173ca4b1dd6cce2774d640\u0026kw=%5B%22nannyspy%22%2C%22brave%22%2C%22nanny%22%2C%22tries%22%2C%22to%22%2C%22fit%22%2C%22bosses%22%2C%22giant%22%2C%22dick%22%5D\u0026refer=https%3A%2F%2Fwww.girlsdump.com%2Fch1.php%3Fmc_attr%3Dc%3Dc56751a6-9473-447b-87c6-aca765ab9652..m%3Dmeifnavttg8bkyqsjtouiil1n4..d%3D0-0-0-1-8..l%3D17556012354..e%3D%7Bclick_id%7D..t1%3D%7Bcampaign_id%7D..t2%3D%7Bcreative_id%7D..t3%3D%7Bcategories%7D..t4%3D%7Bkeywords%7D..t5%3D%7Breferrer%7D..t6%3D%7Bsite_id%7D..t7%3D%7Bformat%7D..t8%3D%7Bip%7D..t9%3D%7Bgeo%7D..t10%3D%7Bpricing_model%7D\u0026tz=0\u0026dev=e\u0026res=14.3223\u0026rb=\u0026uuid=89b3c7bc-f578-4279-8643-471137b27270%3A3%3A1","fqdn":"www.profitabledisplaycontent.com","domain":"profitabledisplaycontent.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:29.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.profitabledisplaycontent.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 22:16:27 GMT","end":"Wed, 22 Oct 2025 22:16:26 GMT"},"fingerprint":{"sha1":"80:ED:AE:02:6E:22:92:2C:1D:3B:CF:40:B8:05:ED:A8:F4:78:41:C1","sha256":"27:CE:4E:A9:E9:2E:EA:67:C9:22:7C:B4:62:29:07:B9:BD:AA:87:B5:6A:AD:89:6C:68:5A:63:CB:C5:73:7D:0F"}}},"request":{"raw":"GET /watch.1055185194576.js?key=9e5c0b9f77173ca4b1dd6cce2774d640\u0026kw=%5B%22nannyspy%22%2C%22brave%22%2C%22nanny%22%2C%22tries%22%2C%22to%22%2C%22fit%22%2C%22bosses%22%2C%22giant%22%2C%22dick%22%5D\u0026refer=https%3A%2F%2Fwww.girlsdump.com%2Fch1.php%3Fmc_attr%3Dc%3Dc56751a6-9473-447b-87c6-aca765ab9652..m%3Dmeifnavttg8bkyqsjtouiil1n4..d%3D0-0-0-1-8..l%3D17556012354..e%3D%7Bclick_id%7D..t1%3D%7Bcampaign_id%7D..t2%3D%7Bcreative_id%7D..t3%3D%7Bcategories%7D..t4%3D%7Bkeywords%7D..t5%3D%7Breferrer%7D..t6%3D%7Bsite_id%7D..t7%3D%7Bformat%7D..t8%3D%7Bip%7D..t9%3D%7Bgeo%7D..t10%3D%7Bpricing_model%7D\u0026tz=0\u0026dev=e\u0026res=14.3223\u0026rb=\u0026uuid=89b3c7bc-f578-4279-8643-471137b27270%3A3%3A1 HTTP/1.1\r\nHost: www.profitabledisplaycontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.girlsdump.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.21.6\r\nDate: Tue, 19 Aug 2025 17:39:29 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://www.girlsdump.com\r\naccess-control-allow-credentials: true\r\nlocation: https://www.profitabledisplaycontent.com/watch.1055185194576.js?dev=e\u0026key=9e5c0b9f77173ca4b1dd6cce2774d640\u0026kw=%5B%22nannyspy%22%2C%22brave%22%2C%22nanny%22%2C%22tries%22%2C%22to%22%2C%22fit%22%2C%22bosses%22%2C%22giant%22%2C%22dick%22%5D\u0026pst=1755625229\u0026rb=\u0026refer=https%3A%2F%2Fwww.girlsdump.com%2Fch1.php%3Fmc_attr%3Dc%3Dc56751a6-9473-447b-87c6-aca765ab9652..m%3Dmeifnavttg8bkyqsjtouiil1n4..d%3D0-0-0-1-8..l%3D17556012354..e%3D%7Bclick_id%7D..t1%3D%7Bcampaign_id%7D..t2%3D%7Bcreative_id%7D..t3%3D%7Bcategories%7D..t4%3D%7Bkeywords%7D..t5%3D%7Breferrer%7D..t6%3D%7Bsite_id%7D..t7%3D%7Bformat%7D..t8%3D%7Bip%7D..t9%3D%7Bgeo%7D..t10%3D%7Bpricing_model%7D\u0026res=14.3223\u0026rmtc=t\u0026shu=bfc54d194d53b27c7134af56e3bcc408461b83dafce6bf56ac4b69d3e8d971a7368cb1b5534346296c0ec05943516b11833e7e985bf8c4df3153a18d5eae86c174957244d73576a16d8fd04e730578ea4cd65e00db28f70fa5cf\u0026tz=0\u0026uuid=89b3c7bc-f578-4279-8643-471137b27270%3A3%3A1\r\nset-cookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.dRecXu2yr0IroGTKJ5bJjP-QHA4C_NB_rQGLiHTiqc4; expires=Tue, 19 Aug 2025 17:40:29 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 1\r\nHost: www.profitabledisplaycontent.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 6dd123fdc570d678c8eb38578952d3e3\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4844,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":753,"timings":{"blocked":300,"dns":22,"connect":92,"send":0,"wait":150,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/si/76/23/db/7623db53a4b8b71eb93d1f27e1349f42/1723679885.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:29.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Jul 2025 02:33:11 GMT","end":"Wed, 08 Oct 2025 02:33:10 GMT"},"fingerprint":{"sha1":"06:D8:07:0F:AB:BF:D8:7F:C5:38:82:AC:A7:8A:20:4D:83:6C:EA:C9","sha256":"CF:05:58:46:C3:07:3F:B6:A6:8D:42:F2:3B:3D:91:36:93:10:CB:D5:89:47:A3:62:26:D2:F3:BA:AC:51:0E:B7"}}},"request":{"raw":"GET /si/76/23/db/7623db53a4b8b71eb93d1f27e1349f42/1723679885.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 17:39:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 21151\r\nserver: nginx/1.21.6\r\nlast-modified: Wed, 14 Aug 2024 23:58:07 GMT\r\netag: \"66bd448f-529f\"\r\nexpires: Thu, 21 Aug 2025 17:39:29 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: ah0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21151,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3","md5":"b312b07679c37478b2be46280bd8966f","sha1":"c5d1b6d62319dec8d2127dbe5074b6aeec16de72","sha256":"7e8eb92872d20ea1ecd58aa4a8763a7e0a6399479429f831210f5ec41b44b445","sha512":"a2e03751df319f4ae3fa0a279a0640518681c7cadfb2fa46bf289896bbf9887726f5e2dee96eb3e0f69dcfdc18cacabb1c8031778c04812888211272b7c261e9","ssdeep":"384:9wsXzKGBFxfDkV52agZgpRdVYj+hn3PZyrsijBbl48HPzXnbAYgvbJiwQ3fh94os:CsjDvrEhES3PIxBBDnbAYcdQz6","tlshash":"c092d171973f956cfd398934f42c5e46b99ffb4c9203ca4e835ad8c922424047e7ca51","first_seen":"2024-08-21T10:19:04.164949Z","last_seen":"2025-09-22T09:24:17.520636Z","times_seen":377,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":158,"dns":30,"connect":70,"send":0,"wait":71,"receive":28,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2Fd3%2F55%2Ffb%2Fd355fb06fa4f4907609b7d285fa07f7a%2F1664530003.html\u0026l=1175\u0026fd=183","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"192.243.61.225","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:30.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 22:21:33 GMT","end":"Fri, 26 Sep 2025 22:21:32 GMT"},"fingerprint":{"sha1":"4A:6A:48:C8:5B:C5:2B:2E:9C:03:AF:BF:4C:E6:10:23:E2:7B:EA:97","sha256":"A8:42:B5:4A:20:C8:13:EF:B5:90:0F:54:37:F7:05:60:8D:91:07:E3:A4:0F:7A:22:C9:AF:F1:F5:22:E8:68:C9"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2Fd3%2F55%2Ffb%2Fd355fb06fa4f4907609b7d285fa07f7a%2F1664530003.html\u0026l=1175\u0026fd=183 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nCookie: uid_id2=f38d03e5-8664-4b50-81ae-d95a31c79720:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl15478440=1; slecde21fbaed972e35daf58964d69ff178d=[6116560]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 19 Aug 2025 17:39:30 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-19","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","fqdn":"www.girlsdump.com","domain":"girlsdump.com","tld":"com"},"ip":{"addr":"169.62.37.218","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-19T17:39:27.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"girlsdump.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Jul 2025 10:50:10 GMT","end":"Sat, 11 Oct 2025 10:50:09 GMT"},"fingerprint":{"sha1":"B5:15:42:21:A4:14:A1:91:37:AA:0C:41:AC:D4:5F:B8:C4:2C:A9:74","sha256":"40:55:21:6B:C6:50:EC:F7:B1:50:34:10:8D:F8:CE:5C:6F:F6:25:68:34:D0:63:3E:B3:57:0F:C6:AE:80:6F:DE"}}},"request":{"raw":"GET /ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model} HTTP/1.1\r\nHost: www.girlsdump.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 19 Aug 2025 17:39:28 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"ExoClick","description":"ExoClick is a Barcelona-based online advertising company, which provides online advertising services to both advertisers and publishers.","website":"https://www.exoclick.com","common_platform_enumeration":"","icon":"ExoClick.png","categories":["Advertising"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":34357,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1371)","md5":"4e1e1d418921ffbd6f057d958ba36200","sha1":"ca7ab8e9bf86af79f2f9fea2073955ca897610dc","sha256":"88d31d28069ae66384dc7ee44a8bb5f0631ace181de60afdcf5a9dc39db739c8","sha512":"999d02256863f0a0d7bed3a3adae5cab7e8cfdddc0312572c91df228b9d2381a76ecfcdd93ddf198878aac7c7070bbae96d9907a0bab22fb5a8ca107568a1071","ssdeep":"384:PSRs7xAjKeJCspij0KbMjnnjTy42XsK1v3jqmTGEc2bojRaC11Yuj557R+:LVUvWxbgnjTy4NK1v5ojRf11l557R+","tlshash":"3cf2b560f5980c33023786c92d51bb1935e3da6bc7539e00b2bf06e45fc6e90f85b6a6","first_seen":"2025-08-16T11:58:16.888075Z","last_seen":"2025-09-13T18:35:29.995165Z","times_seen":22,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":210,"dns":11,"connect":93,"send":0,"wait":93,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.girlsdump.com/misc/font-awesome/css/font-awesome.min.css","fqdn":"www.girlsdump.com","domain":"girlsdump.com","tld":"com"},"ip":{"addr":"169.62.37.218","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"girlsdump.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Jul 2025 10:50:10 GMT","end":"Sat, 11 Oct 2025 10:50:09 GMT"},"fingerprint":{"sha1":"B5:15:42:21:A4:14:A1:91:37:AA:0C:41:AC:D4:5F:B8:C4:2C:A9:74","sha256":"40:55:21:6B:C6:50:EC:F7:B1:50:34:10:8D:F8:CE:5C:6F:F6:25:68:34:D0:63:3E:B3:57:0F:C6:AE:80:6F:DE"}}},"request":{"raw":"GET /misc/font-awesome/css/font-awesome.min.css HTTP/1.1\r\nHost: www.girlsdump.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 19 Aug 2025 17:39:28 GMT\r\nContent-Type: text/css\r\nContent-Length: 31000\r\nLast-Modified: Thu, 22 Dec 2016 20:50:34 GMT\r\nConnection: keep-alive\r\nETag: \"585c3c9a-7918\"\r\nExpires: Thu, 18 Sep 2025 17:39:28 GMT\r\nCache-Control: max-age=2592000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-05-27T17:11:35.384899Z","times_seen":278341,"resource_available":true,"data":null}},"time_used":545,"timings":{"blocked":167,"dns":1,"connect":92,"send":0,"wait":183,"receive":5,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:54 GMT","end":"Mon, 29 Sep 2025 08:35:53 GMT"},"fingerprint":{"sha1":"F3:96:6E:68:01:34:12:AD:6A:03:D8:EF:BD:47:E1:FD:A4:AA:FB:C5","sha256":"BF:6D:12:A9:D7:AB:31:65:56:63:8F:97:4E:12:51:58:55:9A:75:81:94:F8:34:D1:46:46:48:4B:34:CB:8A:9E"}}},"request":{"raw":"GET /recaptcha/api.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Tue, 19 Aug 2025 17:39:28 GMT\r\ndate: Tue, 19 Aug 2025 17:39:28 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1017,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1017), with no line terminators","md5":"be8f16d18bb6ef3cb03b370f33ee1640","sha1":"35357bb2c8e001490c5fdcf6748ed1cad68d76de","sha256":"f2586eabafdde47daf8ad905490c2297ea924380ef752a530f92606e550c251e","sha512":"64eb363468e23ea2cf9756350b774b8a1017033665e45275a60b49d36fc4b713d9befee24fdeb5dc997d3b3b5c3057dbc21eac8a21dc63d6782c846326c78717","ssdeep":"","tlshash":"b01102b71a08e0350f3209e1f2ffcab5e592741cf11845e8a511ea881e6acc7ce08589","first_seen":"2025-08-07T15:32:25.575827Z","last_seen":"2025-10-15T08:09:54.83212Z","times_seen":4438,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":1,"connect":27,"send":0,"wait":32,"receive":0,"ssl":183},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Jul 2025 15:11:38 GMT","end":"Mon, 29 Sep 2025 15:11:37 GMT"},"fingerprint":{"sha1":"F9:52:70:4B:81:A8:F8:39:E6:E7:96:8F:EA:FE:17:FD:96:C5:32:E3","sha256":"D8:C9:87:B5:89:5E:D4:F4:8D:FD:98:3C:31:39:42:67:D3:20:27:14:A9:AD:F2:AB:97:A4:48:0F:94:F0:FF:A2"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 19 Aug 2025 17:39:28 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 28254\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: b979ffed5fd64437f17c80c07470cd39\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85386,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":72,"dns":1,"connect":20,"send":0,"wait":24,"receive":18,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:30.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.girlsdump.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 14 Aug 2025 10:09:08 GMT\r\nexpires: Fri, 14 Aug 2026 10:09:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 459022\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-27T17:18:58.403259Z","times_seen":851871,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":38,"dns":1,"connect":7,"send":0,"wait":15,"receive":6,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rashcolonizeexpand.com/pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=998\u0026rd=998\u0026fd=523\u0026bv=25.8.2357\u0026tmpl=70","fqdn":"rashcolonizeexpand.com","domain":"rashcolonizeexpand.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rashcolonizeexpand.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 22:10:41 GMT","end":"Fri, 26 Sep 2025 22:10:40 GMT"},"fingerprint":{"sha1":"C7:75:50:5C:D3:7C:BF:A1:34:3E:61:33:FC:D6:81:21:2E:31:1D:92","sha256":"CB:A9:18:8B:DD:56:71:B4:C1:61:A7:9F:5C:50:7F:22:BB:83:72:BC:0F:B3:14:19:C4:E9:F9:59:6A:0F:95:EC"}}},"request":{"raw":"GET /pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=998\u0026rd=998\u0026fd=523\u0026bv=25.8.2357\u0026tmpl=70 HTTP/1.1\r\nHost: rashcolonizeexpand.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 19 Aug 2025 17:39:29 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: rashcolonizeexpand.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":741,"timings":{"blocked":324,"dns":31,"connect":95,"send":0,"wait":98,"receive":1,"ssl":190},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-19","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.highperformanceformat.com/9e5c0b9f77173ca4b1dd6cce2774d640/invoke.js","fqdn":"www.highperformanceformat.com","domain":"highperformanceformat.com","tld":"com"},"ip":{"addr":"192.243.59.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"highperformanceformat.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 22:12:45 GMT","end":"Sun, 09 Nov 2025 22:12:44 GMT"},"fingerprint":{"sha1":"B9:F8:C8:45:C0:0A:8C:9E:D0:93:4C:61:6A:2B:96:49:20:7B:36:AD","sha256":"CB:4C:A5:11:03:46:B4:B3:1A:2C:67:7A:70:5E:BA:61:07:FB:22:C6:9B:14:E6:FC:FF:46:02:F6:30:DA:F0:A0"}}},"request":{"raw":"GET /9e5c0b9f77173ca4b1dd6cce2774d640/invoke.js HTTP/1.1\r\nHost: www.highperformanceformat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Tue, 19 Aug 2025 17:39:28 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 12987\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: www.highperformanceformat.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 12fa450f66e4cb7bc71356cefd4ae0f6\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32985,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32985), with no line terminators","md5":"640690a569f36344ac969340a70252b5","sha1":"ba70d4c183fc426a6d5e869c661cc9da0120d747","sha256":"2ba26512d2279dbd295db12e329801148080ed7083145267a25c5d9ef262a40c","sha512":"ec82c12392286020f46c995765995fec5ef7949d7e51ed8750f1bc9112ce1a608c450d871f6494269453a1697c3fc09eda51558780fcbca100e059c45a873111","ssdeep":"384:euHnDzIpmAf19PXm2bBdMLlAwH3KQsjmTOlXqel+rn2NrL0uAfdtiOmuBc8Fg:ZjzSfpbULz3KQQmTO5qel+qL0PFcWg","tlshash":"f6e209883f70b44d1376303b322f856ef9b5cd555488d88cd287ac952ab9b1ee437e0a","first_seen":"2025-08-07T09:51:10.714666Z","last_seen":"2025-08-19T17:40:01.672644Z","times_seen":7,"resource_available":true,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":13,"connect":105,"send":0,"wait":107,"receive":0,"ssl":215},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-19","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.girlsdump.com/media/videos/tmb/000/005/923/1.jpg","fqdn":"www.girlsdump.com","domain":"girlsdump.com","tld":"com"},"ip":{"addr":"169.62.37.218","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"girlsdump.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Jul 2025 10:50:10 GMT","end":"Sat, 11 Oct 2025 10:50:09 GMT"},"fingerprint":{"sha1":"B5:15:42:21:A4:14:A1:91:37:AA:0C:41:AC:D4:5F:B8:C4:2C:A9:74","sha256":"40:55:21:6B:C6:50:EC:F7:B1:50:34:10:8D:F8:CE:5C:6F:F6:25:68:34:D0:63:3E:B3:57:0F:C6:AE:80:6F:DE"}}},"request":{"raw":"GET /media/videos/tmb/000/005/923/1.jpg HTTP/1.1\r\nHost: www.girlsdump.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 19 Aug 2025 17:39:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 19017\r\nLast-Modified: Sat, 03 Sep 2022 17:08:26 GMT\r\nConnection: keep-alive\r\nETag: \"63138a0a-4a49\"\r\nExpires: Thu, 18 Sep 2025 17:39:28 GMT\r\nCache-Control: max-age=2592000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19017,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x226, components 3","md5":"a84c0a10018121d608431211b3897c86","sha1":"55287198834ead4020b2c79ea15150964cb72c64","sha256":"5f30440c4cfc7c1a1aa0bac688ca10eb3e982a3e15b187e889331ee08bac78ed","sha512":"e1d08751de4439af06affb916b4c04614d6d330455c61fba94960f60b0ace0c0559c7542a611b0d1ae01c43ec491307073cc02cdc564df4fb810bf59bf475699","ssdeep":"384:2oS3XvHJ3z/Di10O3BLrdHAWOjI9lAXziRwyvMJyIGCf/sv0ofItSEMa:2zHJTDi1fBLr7Oj5Xzieyv7C88owtSVa","tlshash":"ba82b02a20ae5dcdb57bbbb6a0590dad81e4b8c521b7831a90e61ee5ef165302e4d034","first_seen":"2025-03-19T06:27:36.709467Z","last_seen":"2026-05-24T18:48:27.155901Z","times_seen":129,"resource_available":false,"data":null}},"time_used":631,"timings":{"blocked":535,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.girlsdump.com/media/videos/tmb/000/004/146/1.jpg","fqdn":"www.girlsdump.com","domain":"girlsdump.com","tld":"com"},"ip":{"addr":"169.62.37.218","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"girlsdump.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Jul 2025 10:50:10 GMT","end":"Sat, 11 Oct 2025 10:50:09 GMT"},"fingerprint":{"sha1":"B5:15:42:21:A4:14:A1:91:37:AA:0C:41:AC:D4:5F:B8:C4:2C:A9:74","sha256":"40:55:21:6B:C6:50:EC:F7:B1:50:34:10:8D:F8:CE:5C:6F:F6:25:68:34:D0:63:3E:B3:57:0F:C6:AE:80:6F:DE"}}},"request":{"raw":"GET /media/videos/tmb/000/004/146/1.jpg HTTP/1.1\r\nHost: www.girlsdump.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 19 Aug 2025 17:39:29 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 23069\r\nLast-Modified: Wed, 10 Feb 2021 13:22:35 GMT\r\nConnection: keep-alive\r\nETag: \"6023de1b-5a1d\"\r\nExpires: Thu, 18 Sep 2025 17:39:29 GMT\r\nCache-Control: max-age=2592000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":23069,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x226, components 3","md5":"88b8404e0343282bc60f695c6833ee29","sha1":"53aca6578ebda01c8b74487b1b014a115f992634","sha256":"550c838a9a9d1c6e8e88be3d0b6a4cf09f27bf4328c78b77a083fd19e1c6bd71","sha512":"a4d8bf1e78046a704eac3b03ad6d0d47afdfff6893f0fdd14957e72a7bff7b54b96892b0b3da07b75b6416ea8c68b67156431376f7f5fde37d1f8a15ba47711f","ssdeep":"384:DgORO2B16TkwIqtE01Fx2nXoxLyjJBUeXKd7ZMQK7+efuwl9VTsJW4NL:DgaO9vIqzkCsJBSd7ZMQKrBl9VTuWg","tlshash":"66a2d0ee231ec1c67f62faf7d816ac151bd6bf4002d336152ae578caa16113f81e254d","first_seen":"2023-11-22T17:01:52Z","last_seen":"2026-05-24T18:48:27.144319Z","times_seen":132,"resource_available":false,"data":null}},"time_used":762,"timings":{"blocked":668,"dns":0,"connect":0,"send":0,"wait":93,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"milletappliancejeopardize.com/ren.gif?sid=H4sIAAAAAAAC_1RSQWwbRReeTX36_wOlQhx68hEk5KzttWvTQ0UpQREhCU1QDpxmd3adaWZ3lplZr2MJFBGp6tEVHCinyWenEVBQucAFJOQgIRQJKb7l0BzgxIFyAPXACa1ryfCk-d57881I3_tmbh9k56SOjJ6tvyn7XAi62Ki45Re2eMJkrsurm-WqW3Gvlrd40vSulnsFqO7L1bpXcV8svx4GO3Kx5lZdt-pWy0tchZHsLU5Z8PRBu1ppuxWvVqk2PPTUf3udOdDUAeuek0vgbPLMr9E74MEYSfzwRqh3jExfei3OBDVSocuO3k52EpkniOdlpBxEydHsNKSeEPLxAmRyNJsAsjsqJoDPJ2Th-Ufwk6OZTPjdw6dKfYEwgc_-j7w7RijG4HSMQO6Ds1MCBAyra0ji-6tS5XT3KUsLdkJKT_4Ezyek9Og5JPGX1wXvlTekyAyXiUYvsuC9MXhnjDQ7hukvgOfHCMwH4OxnsvhkBUk8WtNCgjM7nZ5HY1DtICsWd5BFDrLUQczOyp7b8oIqrTejNguuuB71PBb6brtVc13aDq4gCwpZA5h0gEAMEKg9pGoPO_zuaeMSVPY99LaFZg60mRDnrT10mUUeEuSaIKcEOSfIDUHetYdM6Jq295nQmV-d5dos1-1Qms4BPZSmEyYEVA2gmB3x9F29j8BcGPYjzYayAOobO6Q-swfpOXl2atxvf13GTnhWbjZYvea5zXrQbLVrbtB0254bXgkbfrNO_VYVmltwvTD1pM8nxDl6jLTImyvw6TG0OEbAL4JmVdDcgm5b9JMvOlwJzbI4rQQyBpMWqSnB7DoH4pxcnkrYuP0HwuDkWu9D8-2t9_9GoCxSZXGL_0DQEXeGN2VORjdlrslXa6nhMe_T4l03DDXhhc_eCHdzqdjyDT349JWgIIrywWaozQpNGE86mnx-nTMWqiWpgpB8t6y3Qn8909vXM5Vk6cr6q0vLcapCrblMxqB8Qsi9hwj4hFz88b3pn618cxdcjaEyizg7IbNAkO5Bp3PtWhIoMef91EGe2aGq-fNNwQlEOO-pb6H_1fvzeqhocZtye6DvoKNKoGYfSWzRVRZdYUHFADr739Ck6uTaT_eK-AS-KA19oUojXyjx0dTiAn4p4HEBv0Pzs3Kj5tebrVYzjJosqrN6rc7aDTdse7Td9NpeA0ZPtkdfn_4TAAD__6qzzoegBAAA","fqdn":"milletappliancejeopardize.com","domain":"milletappliancejeopardize.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:29.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"milletappliancejeopardize.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 31 Jul 2025 08:36:21 GMT","end":"Wed, 29 Oct 2025 08:36:20 GMT"},"fingerprint":{"sha1":"EA:64:64:B0:BA:DC:E1:5D:06:7D:52:B8:2C:0B:86:7F:CE:4B:A1:74","sha256":"DB:07:0A:AC:70:F7:AC:62:69:99:4F:53:5A:A1:10:05:D2:07:FB:2B:9A:EE:E7:F4:1A:BB:3C:3C:C1:27:DB:31"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSQWwbRReeTX36_wOlQhx68hEk5KzttWvTQ0UpQREhCU1QDpxmd3adaWZ3lplZr2MJFBGp6tEVHCinyWenEVBQucAFJOQgIRQJKb7l0BzgxIFyAPXACa1ryfCk-d57881I3_tmbh9k56SOjJ6tvyn7XAi62Ki45Re2eMJkrsurm-WqW3Gvlrd40vSulnsFqO7L1bpXcV8svx4GO3Kx5lZdt-pWy0tchZHsLU5Z8PRBu1ppuxWvVqk2PPTUf3udOdDUAeuek0vgbPLMr9E74MEYSfzwRqh3jExfei3OBDVSocuO3k52EpkniOdlpBxEydHsNKSeEPLxAmRyNJsAsjsqJoDPJ2Th-Ufwk6OZTPjdw6dKfYEwgc_-j7w7RijG4HSMQO6Ds1MCBAyra0ji-6tS5XT3KUsLdkJKT_4Ezyek9Og5JPGX1wXvlTekyAyXiUYvsuC9MXhnjDQ7hukvgOfHCMwH4OxnsvhkBUk8WtNCgjM7nZ5HY1DtICsWd5BFDrLUQczOyp7b8oIqrTejNguuuB71PBb6brtVc13aDq4gCwpZA5h0gEAMEKg9pGoPO_zuaeMSVPY99LaFZg60mRDnrT10mUUeEuSaIKcEOSfIDUHetYdM6Jq295nQmV-d5dos1-1Qms4BPZSmEyYEVA2gmB3x9F29j8BcGPYjzYayAOobO6Q-swfpOXl2atxvf13GTnhWbjZYvea5zXrQbLVrbtB0254bXgkbfrNO_VYVmltwvTD1pM8nxDl6jLTImyvw6TG0OEbAL4JmVdDcgm5b9JMvOlwJzbI4rQQyBpMWqSnB7DoH4pxcnkrYuP0HwuDkWu9D8-2t9_9GoCxSZXGL_0DQEXeGN2VORjdlrslXa6nhMe_T4l03DDXhhc_eCHdzqdjyDT349JWgIIrywWaozQpNGE86mnx-nTMWqiWpgpB8t6y3Qn8909vXM5Vk6cr6q0vLcapCrblMxqB8Qsi9hwj4hFz88b3pn618cxdcjaEyizg7IbNAkO5Bp3PtWhIoMef91EGe2aGq-fNNwQlEOO-pb6H_1fvzeqhocZtye6DvoKNKoGYfSWzRVRZdYUHFADr739Ck6uTaT_eK-AS-KA19oUojXyjx0dTiAn4p4HEBv0Pzs3Kj5tebrVYzjJosqrN6rc7aDTdse7Td9NpeA0ZPtkdfn_4TAAD__6qzzoegBAAA HTTP/1.1\r\nHost: milletappliancejeopardize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl15332378=1; nlec65d324063c68920c60940e7e5b63ab81=[5474031,5474018,5474030,5474029]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 19 Aug 2025 17:39:29 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: milletappliancejeopardize.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 3dd79bae03523a14aac4e6f6451fc742\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-19","alert":"Sinkholed","trigger":"milletappliancejeopardize.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/utility/social-media/instagram/new/4/css/style.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:30.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Jul 2025 14:01:22 GMT","end":"Mon, 29 Sep 2025 14:59:36 GMT"},"fingerprint":{"sha1":"CD:76:E0:2A:28:09:08:24:2D:4C:A1:14:B2:AE:6C:39:A4:CC:2F:6B","sha256":"8B:98:84:C0:8D:47:7C:1B:A7:26:4B:E4:9E:6E:FD:8E:E1:6D:6E:41:1D:E7:91:B7:70:A3:C1:D0:C0:85:6B:31"}}},"request":{"raw":"GET /sb/ssp/utility/social-media/instagram/new/4/css/style.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.girlsdump.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 17:39:30 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa84ff-1d9a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nage: 279702\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qm64pDxoOPALYOENQyQV%2Fw1Stsu%2F%2B7oHj3M2kheGm3vjt04uf3od3PyQMTWLhqW1wIA%2FRsPetDPVGUY%2BCjmdnAoZU6w%2B1sZ0UDe7fzaPXcw%3D\"}]}\r\ncf-ray: 971b6e42eaf9b497-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7578,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"98090679cdc97734c4911d7995d7a560","sha1":"50616bcd7ea8829649ce87ccf771dcc60ad20d8d","sha256":"985576dbd564299199b75f1e108e7808324c3549692fe41a04aa32b85a1f727a","sha512":"a3ff81836af5a5c150d064a8f55d3604c48a68d366a61096a05cde2f5ff3a3bfd0dde4e10f66c06b168573390c5fe11375d9b53afd0ba0bf8e99b8cfef6c35ac","ssdeep":"192:2arMX5EtHh9HhZzJJxMX5jMPBR0hJWsGZPhHG0b26zSSfJl00LApicS:fMXkzJnMXJM762ijm","tlshash":"98f1dd9b6b371604b407e4aa2f6a2b4727244017960fed247fcd724c8fc52e8d5a278b","first_seen":"2024-09-11T20:57:23Z","last_seen":"2026-04-12T05:56:34.369984Z","times_seen":639,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":68,"dns":21,"connect":8,"send":0,"wait":19,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Finstagram%2Fnew%2F4%2Fjs%2Fscript.js\u0026l=444\u0026fd=89","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"192.243.61.225","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:30.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 22:21:33 GMT","end":"Fri, 26 Sep 2025 22:21:32 GMT"},"fingerprint":{"sha1":"4A:6A:48:C8:5B:C5:2B:2E:9C:03:AF:BF:4C:E6:10:23:E2:7B:EA:97","sha256":"A8:42:B5:4A:20:C8:13:EF:B5:90:0F:54:37:F7:05:60:8D:91:07:E3:A4:0F:7A:22:C9:AF:F1:F5:22:E8:68:C9"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Finstagram%2Fnew%2F4%2Fjs%2Fscript.js\u0026l=444\u0026fd=89 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nCookie: uid_id2=f38d03e5-8664-4b50-81ae-d95a31c79720:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl15478440=1; slecde21fbaed972e35daf58964d69ff178d=[6116560]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 19 Aug 2025 17:39:30 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-19","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.girlsdump.com/media/users/nopic-hidden.gif","fqdn":"www.girlsdump.com","domain":"girlsdump.com","tld":"com"},"ip":{"addr":"169.62.37.218","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"girlsdump.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Jul 2025 10:50:10 GMT","end":"Sat, 11 Oct 2025 10:50:09 GMT"},"fingerprint":{"sha1":"B5:15:42:21:A4:14:A1:91:37:AA:0C:41:AC:D4:5F:B8:C4:2C:A9:74","sha256":"40:55:21:6B:C6:50:EC:F7:B1:50:34:10:8D:F8:CE:5C:6F:F6:25:68:34:D0:63:3E:B3:57:0F:C6:AE:80:6F:DE"}}},"request":{"raw":"GET /media/users/nopic-hidden.gif HTTP/1.1\r\nHost: www.girlsdump.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 19 Aug 2025 17:39:28 GMT\r\nContent-Type: image/gif\r\nContent-Length: 3453\r\nLast-Modified: Wed, 28 Mar 2012 12:47:24 GMT\r\nConnection: keep-alive\r\nETag: \"4f73085c-d7d\"\r\nExpires: Thu, 18 Sep 2025 17:39:28 GMT\r\nCache-Control: max-age=2592000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3453,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 100 x 121","md5":"403f1f519fa7266cea2b4c95cef498e7","sha1":"be6b9ecdc71c058f25dfcde90badbfd13397f5d6","sha256":"5f9c716347bf56b314ea02cde86f13cc46243e80aa9cb1a5dbf2892ea4cebc35","sha512":"c065b1a91b19eecf632f0820647c9daa351ffa32db6e458e8a2d90c418447bc265213fad872f7f4836f42da17cdc62ea23aaf99555e79fadf5b4f5fefe3411d0","ssdeep":"","tlshash":"1961297c5665202ea34526f6816d5b19faabeb848c60b79418fe800762f2878326c34b","first_seen":"2023-06-20T14:32:36Z","last_seen":"2026-05-24T18:48:27.112426Z","times_seen":169,"resource_available":false,"data":null}},"time_used":631,"timings":{"blocked":536,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"18.198.116.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.girlsdump.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 17:39:29 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://www.girlsdump.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=f38d03e5-8664-4b50-81ae-d95a31c79720:1:1; expires=Fri, 17 Aug 2035 17:39:29 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"0601dab52412624f65b158f51a1e4a9f","sha1":"8c8f4fde36a634220b60cd1f3bffb11a2ca9ed6a","sha256":"07226eda67e04d9379731ef5bc56a087877b4433b05e70d58d41471f0b34e37e","sha512":"619ff12f05bad68be332855b71094be7066530830f70145be5c29c68d237b1bce73914701b955ac0d60d086b13e2f7a39fa621841227f6be6f1763d3a86a8718","ssdeep":"","tlshash":"6c9004c04311c5703105304c144c500f13d3c743ddd7c10c04c7cc4055433515174030","first_seen":"2025-08-19T17:40:01.675549Z","last_seen":"2025-08-19T17:40:01.675549Z","times_seen":1,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":155,"dns":24,"connect":28,"send":0,"wait":21,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Jul 2025 15:11:38 GMT","end":"Mon, 29 Sep 2025 15:11:37 GMT"},"fingerprint":{"sha1":"F9:52:70:4B:81:A8:F8:39:E6:E7:96:8F:EA:FE:17:FD:96:C5:32:E3","sha256":"D8:C9:87:B5:89:5E:D4:F4:8D:FD:98:3C:31:39:42:67:D3:20:27:14:A9:AD:F2:AB:97:A4:48:0F:94:F0:FF:A2"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 19 Aug 2025 17:39:28 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 28254\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 0d3c64a6fc457efda98950a1277f040f\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85386,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":71,"dns":3,"connect":23,"send":0,"wait":23,"receive":18,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"18.198.116.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.girlsdump.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 17:39:29 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://www.girlsdump.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=ba23922f-0d73-4232-9dd1-447edde39de3:2:1; expires=Fri, 17 Aug 2035 17:39:29 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"658632a97c088afe7762d6e4773391d8","sha1":"9859835df16cdf655c6a9037cb30a2ee9e58cc2d","sha256":"1ba448b505d653f2e171f4c8d69d80b3eb5bf517018e2fca3f8d74c5517473a5","sha512":"8e35862226781ce49983a011461d8cb95d1980256d8cd08bc8c0bc0823e84f8ec6bab9fb0fe88fab7a0f200a9ca560cbed9b541ba112173e6c18fa913460f3fd","ssdeep":"","tlshash":"7990044711d4fc0dd7d5c70000c435740701511301c41cc0753fc33401d3f010011130","first_seen":"2025-08-19T17:40:01.676546Z","last_seen":"2025-08-19T17:40:01.676546Z","times_seen":1,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":133,"dns":2,"connect":21,"send":0,"wait":24,"receive":0,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"milletappliancejeopardize.com/impr.gif?sid=H4sIAAAAAAAC_1RSMYwbRRceX1z9f0GIEEUqlyAh36537bNJERFCUMSRhNyhK6hmZ3Z9k5vdWWZ2vT4joROHopRGUBCquc--nICAQgMNSMiHhNBJSOfuilwBFQWhAKWgQutYMjxpvvfefDPS976Z23v5KfGQ05Mbr6uBkJIuN-tO7bkNkXBVmNq19Zrr1J0LtQ2RtPwLtX4Juvei6_l15_naqyHbUssNx3Uc13FrV4QOI9VfnrEQ6f2OW-84db9Rd5s--vq_vckrMLQC3jsl5yD49Klfo7cg2ARJ_OByaLYylb7wSpxLmimNHj94M9lKVJEgXpSRriBKDuanocyUkI-XoJKD-QRQvXE5AQIxJUvPPkSQHMxlIujtP1EaSIQJAv5_FL0JQjmBoBMwtQvBjwnAOK5dRxLfu6Z0QbefsLRkp6T6-E-IYkqqD59BEn95SYp-bU3JPBMqMehHFqI_gehOkOaHyAZLEMUhWPYeBP-ZLD9eRRKPrxupILidTS-iCaipIC-XqCCPKsjTCmJ-UvOdts9c6rWiDmcrjk99n4eB02k3HId22ApyVsoaIkuHYHIIpneQ6h1siQ-Om-eg8-9hNi0Mr8BkU1J5Ywc9blGEBIUhKChBIQiKjKDo2X0uTcPYe1yaPHDnuTHPnh2prLtH91XWDRMCqofQ3I5F-rbZBcvOjAaR4SNVAg0yO6IBt3vpKXl6Ztxvf53HVnhSazW51_Cdlsda7U7DYS2n4zvhStgMWh4N2i6MsBBmaebJQExJ5eAR0jKvryKghzDyEEycBc1d0MKCbloMki-6QkvD8zitMxWDK4s0qyLbruzJU3J-JmHt9i8I2dHF_ofZt7fe_RtMW6Ta4pb4gaAr74xuqoKMb6rCkK-up5mIxYCW77qW0Sw889lr4XahNL962Qw_fYmVRFneXw9NtkoTLpKuIZ9fEpyH-orSLCTfXTUbYXAjN5uXcp3k6eqNl69cjVMdGiNUMgEVU0LuPgATU3L2x3dmf7b-zfsQegKdW8T5EZkHWLoDky60G0Wg5YIP0iUUuR3pRrDYlIJAhoueBhbmX32wqEealrepsHvmDrq6CprtIoktetqiJy2oHMLk_xtlqT66-NPdMj5BIKujQOrqOJBaflRa_MfM5xIelfA7jDipRV7YYI7TXmm5XjsKXc_nLGq2_Q5vUcfzQmRmujn--vifAAAA___Kw9aYoAQAAA==","fqdn":"milletappliancejeopardize.com","domain":"milletappliancejeopardize.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:29.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"milletappliancejeopardize.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 31 Jul 2025 08:36:21 GMT","end":"Wed, 29 Oct 2025 08:36:20 GMT"},"fingerprint":{"sha1":"EA:64:64:B0:BA:DC:E1:5D:06:7D:52:B8:2C:0B:86:7F:CE:4B:A1:74","sha256":"DB:07:0A:AC:70:F7:AC:62:69:99:4F:53:5A:A1:10:05:D2:07:FB:2B:9A:EE:E7:F4:1A:BB:3C:3C:C1:27:DB:31"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSMYwbRRceX1z9f0GIEEUqlyAh36537bNJERFCUMSRhNyhK6hmZ3Z9k5vdWWZ2vT4joROHopRGUBCquc--nICAQgMNSMiHhNBJSOfuilwBFQWhAKWgQutYMjxpvvfefDPS976Z23v5KfGQ05Mbr6uBkJIuN-tO7bkNkXBVmNq19Zrr1J0LtQ2RtPwLtX4Juvei6_l15_naqyHbUssNx3Uc13FrV4QOI9VfnrEQ6f2OW-84db9Rd5s--vq_vckrMLQC3jsl5yD49Klfo7cg2ARJ_OByaLYylb7wSpxLmimNHj94M9lKVJEgXpSRriBKDuanocyUkI-XoJKD-QRQvXE5AQIxJUvPPkSQHMxlIujtP1EaSIQJAv5_FL0JQjmBoBMwtQvBjwnAOK5dRxLfu6Z0QbefsLRkp6T6-E-IYkqqD59BEn95SYp-bU3JPBMqMehHFqI_gehOkOaHyAZLEMUhWPYeBP-ZLD9eRRKPrxupILidTS-iCaipIC-XqCCPKsjTCmJ-UvOdts9c6rWiDmcrjk99n4eB02k3HId22ApyVsoaIkuHYHIIpneQ6h1siQ-Om-eg8-9hNi0Mr8BkU1J5Ywc9blGEBIUhKChBIQiKjKDo2X0uTcPYe1yaPHDnuTHPnh2prLtH91XWDRMCqofQ3I5F-rbZBcvOjAaR4SNVAg0yO6IBt3vpKXl6Ztxvf53HVnhSazW51_Cdlsda7U7DYS2n4zvhStgMWh4N2i6MsBBmaebJQExJ5eAR0jKvryKghzDyEEycBc1d0MKCbloMki-6QkvD8zitMxWDK4s0qyLbruzJU3J-JmHt9i8I2dHF_ofZt7fe_RtMW6Ta4pb4gaAr74xuqoKMb6rCkK-up5mIxYCW77qW0Sw889lr4XahNL962Qw_fYmVRFneXw9NtkoTLpKuIZ9fEpyH-orSLCTfXTUbYXAjN5uXcp3k6eqNl69cjVMdGiNUMgEVU0LuPgATU3L2x3dmf7b-zfsQegKdW8T5EZkHWLoDky60G0Wg5YIP0iUUuR3pRrDYlIJAhoueBhbmX32wqEealrepsHvmDrq6CprtIoktetqiJy2oHMLk_xtlqT66-NPdMj5BIKujQOrqOJBaflRa_MfM5xIelfA7jDipRV7YYI7TXmm5XjsKXc_nLGq2_Q5vUcfzQmRmujn--vifAAAA___Kw9aYoAQAAA== HTTP/1.1\r\nHost: milletappliancejeopardize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl15332378=1; nlec65d324063c68920c60940e7e5b63ab81=[5474031,5474018,5474030,5474029]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 19 Aug 2025 17:39:29 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: iprc_l+ccdcfb4f71d48f2794867f8e0e4ccfb6=5474018; expires=Wed, 20 Aug 2025 17:39:29 GMT; path=/; secure; SameSite=None\niprc_l:5474018=1; expires=Wed, 20 Aug 2025 17:39:29 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 3\r\nHost: milletappliancejeopardize.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: fd99fe46a9a8d0b20479ffdd72cf72ae\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":1,"connect":104,"send":0,"wait":97,"receive":0,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-19","alert":"Sinkholed","trigger":"milletappliancejeopardize.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/07cvpCr3Xe3g2ttJNUkC6W0J/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:30.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /recaptcha/releases/07cvpCr3Xe3g2ttJNUkC6W0J/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.girlsdump.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 341818\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 18 Aug 2025 18:08:35 GMT\r\nexpires: Tue, 18 Aug 2026 18:08:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 84655\r\nlast-modified: Fri, 01 Aug 2025 00:01:10 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":800792,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"ef9df0b24b3cd0b880dc214fe644af53","sha1":"3033e1c344b264a84506fc97c7cf46c3c6f42ec8","sha256":"242f090a7ea07bfdf6504310f582ab368d95f6a673e38ac71e3b921b7bdc8abc","sha512":"65b9f85959c2eb1cb43ef8639b1ec6777b8a710f6b6b4055ce63d753522b35707657c4a2f700a71108cf90660890b3b1acaa793e783f7279a5d6ce254643eeaa","ssdeep":"12288:8SVAUZNkYzZaJ5TxKGvfuS8gUxeNu5nLcan75Av:F5dzYJiGnuSDO+nan0","tlshash":"95055ce4700a74b99362b0fb44bb104da3fec516d80c0d5db1a9d8f02bb944da57aeb7","first_seen":"2025-08-07T15:32:25.571794Z","last_seen":"2026-05-25T17:50:02.566933Z","times_seen":11032,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":89,"dns":5,"connect":14,"send":0,"wait":15,"receive":63,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/07cvpCr3Xe3g2ttJNUkC6W0J/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=07cvpCr3Xe3g2ttJNUkC6W0J\u0026k=6LeHdnEUAAAAAFiyGpf5SpsponjLpsUZOs1_ybgg\u0026bft=0dAFcWeA4hdXGcvrYLfnOSlb1bVDRISkx_MyNLiYR9aApeNG1QhvlgMZqjcyTKQLP29ViWUqHaM9qapW-XAp2GpWbO5GYv0LOeBA","date":"2025-08-19T17:39:31.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /recaptcha/releases/07cvpCr3Xe3g2ttJNUkC6W0J/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 341818\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 18 Aug 2025 18:08:35 GMT\r\nexpires: Tue, 18 Aug 2026 18:08:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 84656\r\nlast-modified: Fri, 01 Aug 2025 00:01:10 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":800792,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"ef9df0b24b3cd0b880dc214fe644af53","sha1":"3033e1c344b264a84506fc97c7cf46c3c6f42ec8","sha256":"242f090a7ea07bfdf6504310f582ab368d95f6a673e38ac71e3b921b7bdc8abc","sha512":"65b9f85959c2eb1cb43ef8639b1ec6777b8a710f6b6b4055ce63d753522b35707657c4a2f700a71108cf90660890b3b1acaa793e783f7279a5d6ce254643eeaa","ssdeep":"12288:8SVAUZNkYzZaJ5TxKGvfuS8gUxeNu5nLcan75Av:F5dzYJiGnuSDO+nan0","tlshash":"95055ce4700a74b99362b0fb44bb104da3fec516d80c0d5db1a9d8f02bb944da57aeb7","first_seen":"2025-08-07T15:32:25.571794Z","last_seen":"2026-05-25T17:50:02.566933Z","times_seen":11032,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.girlsdump.com/media/videos/tmb/000/005/145/1.jpg","fqdn":"www.girlsdump.com","domain":"girlsdump.com","tld":"com"},"ip":{"addr":"169.62.37.218","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"girlsdump.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Jul 2025 10:50:10 GMT","end":"Sat, 11 Oct 2025 10:50:09 GMT"},"fingerprint":{"sha1":"B5:15:42:21:A4:14:A1:91:37:AA:0C:41:AC:D4:5F:B8:C4:2C:A9:74","sha256":"40:55:21:6B:C6:50:EC:F7:B1:50:34:10:8D:F8:CE:5C:6F:F6:25:68:34:D0:63:3E:B3:57:0F:C6:AE:80:6F:DE"}}},"request":{"raw":"GET /media/videos/tmb/000/005/145/1.jpg HTTP/1.1\r\nHost: www.girlsdump.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 19 Aug 2025 17:39:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 16182\r\nLast-Modified: Fri, 11 Mar 2022 23:19:00 GMT\r\nConnection: keep-alive\r\nETag: \"622bd8e4-3f36\"\r\nExpires: Thu, 18 Sep 2025 17:39:28 GMT\r\nCache-Control: max-age=2592000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16182,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x226, components 3","md5":"b3fd3a9b71c22786e18e8327a6e0ac84","sha1":"50145c2d447297038cfc479d199d501fc422a746","sha256":"9f726f9abca5162c339ee7f5a5c0bbe093720047c46f012b512f306b353ec991","sha512":"d9e499e3ca1565e2e5a3011baa44cfa34bb03f309a099d64137ed8c07f7286feb4399d445884884b2a6d84237d461131006f77d0a48780f969adde7105e14659","ssdeep":"384:8KJ4N3ADBWy9/V3cuDfw+ryfxVh1sZlyHOearWHKmQxpKpx:87N3cAyfXU+e11sSuFrWqmZpx","tlshash":"3472d06396411bdbff70500289a85ed81c81aeb7b0e446097ce27f6e3a14ce641f2e4a","first_seen":"2025-03-19T06:27:36.702217Z","last_seen":"2026-05-24T18:48:27.056526Z","times_seen":129,"resource_available":false,"data":null}},"time_used":630,"timings":{"blocked":532,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"weirdopt.com/ad/advertisers.js","fqdn":"weirdopt.com","domain":"weirdopt.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:29.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"weirdopt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Jul 2025 15:18:37 GMT","end":"Mon, 29 Sep 2025 15:18:36 GMT"},"fingerprint":{"sha1":"1A:27:71:C0:8E:44:D4:6B:F5:AA:49:F0:F1:AF:E5:5F:30:23:A4:D4","sha256":"84:6C:2E:D6:ED:8A:2F:33:05:CC:E9:F2:24:E5:5C:E0:80:C2:04:2D:C3:21:06:64:E1:0D:14:81:A1:9A:00:1B"}}},"request":{"raw":"GET /ad/advertisers.js HTTP/1.1\r\nHost: weirdopt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 19 Aug 2025 17:39:29 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 0\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 3cea0172875c66db5cf3cb4fa28d4f99\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":36,"dns":3,"connect":17,"send":0,"wait":18,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"milletappliancejeopardize.com/ren.gif?sid=H4sIAAAAAAAC_1RSMWwjRRce51z9f8FxQhRXuQQJOWt77bO54sRxBEWEJFyCUlDN7oyduczuLDOzXsdIKCLodKURFBzV5LNzEXCgo4EGJOQgIRQJKe5SXAqoKDgK0BVUaH2WDE-a770334z0vW_m9kF6TmpI6dn666ovpKSL9bJXem5LxExlprS6Wap4Ze9qaUvEDf9qqZeD7r5Yqfll7_nSqzzcUYtVr-J5Fa9SWhKat1VvccpCJPdblXLLK_vVcqXuo6f_25u0AEMLYN1zcgmCTZ76tf0WRDhGHD24wc2OVckLr0SppFZpdNnRm_FOrLIY0bxs6wLa8dHsNJSZEPLxAlR8NJsAqjvKJ0AgJmTh2YcI4qOZTATdwydKAwkeI2D_R9Ydg8sxBB0jVPsQ7JQAIcPqGuLo3qrSGd19wtKcnZDi4z8hsgkpPnwGcfTldSl6pQ0lUytUbNBrO4jeGKIzRpIew_YXILJjhPY9CPYzWXy8gjgarRmpIJibTi_aY1BTQJovUUDaLiBNCojYWcn3mn5YobVGu8XCK55PfZ_xwGs1q55HW-EVpGEuawCbDBDKAUK9h0TvYUd8cFq_BJ1-D7PtYFgBxk5I4Y09dJlDxgkyQ5BRgkwQZJYg67pDJk3VuHtMmjSozHJ1lmtuqGzngB4q2-ExAdUDaOZGInnb7CO0F4b9tmFDlQMNrBvSgLmD5Jw8PTXut78uY4eflRp1Vqv6XqMWNpqtqhc2vJbv8Su8HjRqNGhWYISDMAtTT_piQgpHj5DkeXMFAT2GkccIxUXQtAKaOdBth378RUdoaVgaJeVQRWDKIbFF2N3CgTwnl6cSNm7_Ah6eXOt9aL-99e7fCLVDoh1uiR8IOvLO8KbKyOimygz5ai2xIhJ9mr_rhqWWX_jsNb6bKc2Wb5jBpy-FOZGX9ze5sSs0ZiLuGPL5dcEY10tKh5x8t2y2eLCemu3rqY7TZGX95aXlKNHcGKHiMaiYEHL3AUIxIRd_fGf6Z8vfvA-hx9CpQ5SekFkgTPZgkrl2owi0nPNBsoAsdUNdDeabUhBIPu9p4GD-1QfzeqhpfpsKd2DuoKOLoHYfceTQ1Q5d6UDlACb939Am-uTaT3fz-ASBLA4DqYujQGr5UW7xH1Ofc3iUw-8w4qxUrwa1RrPZ4O0Ga9dYrVpjrbrHWz5tNfyWX4c1k-3R16f_BAAA__82q0ZGoAQAAA==","fqdn":"milletappliancejeopardize.com","domain":"milletappliancejeopardize.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:29.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"milletappliancejeopardize.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 31 Jul 2025 08:36:21 GMT","end":"Wed, 29 Oct 2025 08:36:20 GMT"},"fingerprint":{"sha1":"EA:64:64:B0:BA:DC:E1:5D:06:7D:52:B8:2C:0B:86:7F:CE:4B:A1:74","sha256":"DB:07:0A:AC:70:F7:AC:62:69:99:4F:53:5A:A1:10:05:D2:07:FB:2B:9A:EE:E7:F4:1A:BB:3C:3C:C1:27:DB:31"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSMWwjRRce51z9f8FxQhRXuQQJOWt77bO54sRxBEWEJFyCUlDN7oyduczuLDOzXsdIKCLodKURFBzV5LNzEXCgo4EGJOQgIRQJKe5SXAqoKDgK0BVUaH2WDE-a770334z0vW_m9kF6TmpI6dn666ovpKSL9bJXem5LxExlprS6Wap4Ze9qaUvEDf9qqZeD7r5Yqfll7_nSqzzcUYtVr-J5Fa9SWhKat1VvccpCJPdblXLLK_vVcqXuo6f_25u0AEMLYN1zcgmCTZ76tf0WRDhGHD24wc2OVckLr0SppFZpdNnRm_FOrLIY0bxs6wLa8dHsNJSZEPLxAlR8NJsAqjvKJ0AgJmTh2YcI4qOZTATdwydKAwkeI2D_R9Ydg8sxBB0jVPsQ7JQAIcPqGuLo3qrSGd19wtKcnZDi4z8hsgkpPnwGcfTldSl6pQ0lUytUbNBrO4jeGKIzRpIew_YXILJjhPY9CPYzWXy8gjgarRmpIJibTi_aY1BTQJovUUDaLiBNCojYWcn3mn5YobVGu8XCK55PfZ_xwGs1q55HW-EVpGEuawCbDBDKAUK9h0TvYUd8cFq_BJ1-D7PtYFgBxk5I4Y09dJlDxgkyQ5BRgkwQZJYg67pDJk3VuHtMmjSozHJ1lmtuqGzngB4q2-ExAdUDaOZGInnb7CO0F4b9tmFDlQMNrBvSgLmD5Jw8PTXut78uY4eflRp1Vqv6XqMWNpqtqhc2vJbv8Su8HjRqNGhWYISDMAtTT_piQgpHj5DkeXMFAT2GkccIxUXQtAKaOdBth378RUdoaVgaJeVQRWDKIbFF2N3CgTwnl6cSNm7_Ah6eXOt9aL-99e7fCLVDoh1uiR8IOvLO8KbKyOimygz5ai2xIhJ9mr_rhqWWX_jsNb6bKc2Wb5jBpy-FOZGX9ze5sSs0ZiLuGPL5dcEY10tKh5x8t2y2eLCemu3rqY7TZGX95aXlKNHcGKHiMaiYEHL3AUIxIRd_fGf6Z8vfvA-hx9CpQ5SekFkgTPZgkrl2owi0nPNBsoAsdUNdDeabUhBIPu9p4GD-1QfzeqhpfpsKd2DuoKOLoHYfceTQ1Q5d6UDlACb939Am-uTaT3fz-ASBLA4DqYujQGr5UW7xH1Ofc3iUw-8w4qxUrwa1RrPZ4O0Ga9dYrVpjrbrHWz5tNfyWX4c1k-3R16f_BAAA__82q0ZGoAQAAA== HTTP/1.1\r\nHost: milletappliancejeopardize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl15332378=1; nlec65d324063c68920c60940e7e5b63ab81=[5474031,5474018,5474030,5474029]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 19 Aug 2025 17:39:29 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: milletappliancejeopardize.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 8c1673f998117e7138f5ab8598d6570f\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":152,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-19","alert":"Sinkholed","trigger":"milletappliancejeopardize.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LeHdnEUAAAAAFiyGpf5SpsponjLpsUZOs1_ybgg\u0026co=aHR0cHM6Ly93d3cuZ2lybHNkdW1wLmNvbTo0NDM.\u0026hl=en\u0026v=07cvpCr3Xe3g2ttJNUkC6W0J\u0026theme=dark\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=4z2ukbqqd4yz","date":"2025-08-19T17:39:31.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/07cvpCr3Xe3g2ttJNUkC6W0J/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha\"\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 14 Aug 2025 17:58:48 GMT\r\nexpires: Thu, 21 Aug 2025 17:58:48 GMT\r\ncache-control: public, max-age=604800\r\nage: 430843\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-05-27T17:18:09.7347Z","times_seen":633738,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/07cvpCr3Xe3g2ttJNUkC6W0J/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=07cvpCr3Xe3g2ttJNUkC6W0J","date":"2025-08-19T17:39:31.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /recaptcha/releases/07cvpCr3Xe3g2ttJNUkC6W0J/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 341818\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 18 Aug 2025 18:08:35 GMT\r\nexpires: Tue, 18 Aug 2026 18:08:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 84656\r\nlast-modified: Fri, 01 Aug 2025 00:01:10 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":800792,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"ef9df0b24b3cd0b880dc214fe644af53","sha1":"3033e1c344b264a84506fc97c7cf46c3c6f42ec8","sha256":"242f090a7ea07bfdf6504310f582ab368d95f6a673e38ac71e3b921b7bdc8abc","sha512":"65b9f85959c2eb1cb43ef8639b1ec6777b8a710f6b6b4055ce63d753522b35707657c4a2f700a71108cf90660890b3b1acaa793e783f7279a5d6ce254643eeaa","ssdeep":"12288:8SVAUZNkYzZaJ5TxKGvfuS8gUxeNu5nLcan75Av:F5dzYJiGnuSDO+nan0","tlshash":"95055ce4700a74b99362b0fb44bb104da3fec516d80c0d5db1a9d8f02bb944da57aeb7","first_seen":"2025-08-07T15:32:25.571794Z","last_seen":"2026-05-25T17:50:02.566933Z","times_seen":11032,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":14,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.girlsdump.com/media/videos/tmb/000/005/921/1.jpg","fqdn":"www.girlsdump.com","domain":"girlsdump.com","tld":"com"},"ip":{"addr":"169.62.37.218","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"girlsdump.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Jul 2025 10:50:10 GMT","end":"Sat, 11 Oct 2025 10:50:09 GMT"},"fingerprint":{"sha1":"B5:15:42:21:A4:14:A1:91:37:AA:0C:41:AC:D4:5F:B8:C4:2C:A9:74","sha256":"40:55:21:6B:C6:50:EC:F7:B1:50:34:10:8D:F8:CE:5C:6F:F6:25:68:34:D0:63:3E:B3:57:0F:C6:AE:80:6F:DE"}}},"request":{"raw":"GET /media/videos/tmb/000/005/921/1.jpg HTTP/1.1\r\nHost: www.girlsdump.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 19 Aug 2025 17:39:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 23373\r\nLast-Modified: Sat, 03 Sep 2022 17:03:35 GMT\r\nConnection: keep-alive\r\nETag: \"631388e7-5b4d\"\r\nExpires: Thu, 18 Sep 2025 17:39:28 GMT\r\nCache-Control: max-age=2592000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":23373,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x226, components 3","md5":"f19f5cfeb0d48412228d2aa96290bc7e","sha1":"4cfaf83f67e8d06be0a219c739cc777c223a4489","sha256":"10c0666372ef7ce757ba5e3ecf63bd85a0c11f999aa96b67f9a89e0673beebec","sha512":"d2320e284d409a5f10f78d12eb7383853ca49ec5b45293ef61c21318860ffed95ff49a87f5c864aa2bcb643e2096f56e7e7f5fba7b15a325b4ace427c74bc74f","ssdeep":"384:gZKzZSe+oJV4YkNS4IZfhBe6lVoWnpzISY6kdGSwG6l0ENgy6L/WzjE2SiUcwB:rke+ku1rslVoWnps02Nwfj4/SSiUce","tlshash":"b1a2df97e220e4ccfd9d80aca2d5fd3897e50b8834115079ffca2ddca2d89f15ae4168","first_seen":"2025-03-19T06:27:36.711816Z","last_seen":"2026-05-24T18:48:27.060571Z","times_seen":129,"resource_available":false,"data":null}},"time_used":634,"timings":{"blocked":536,"dns":0,"connect":0,"send":0,"wait":97,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.girlsdump.com/templates/defboot/js/all.min.js?t=1587436278","fqdn":"www.girlsdump.com","domain":"girlsdump.com","tld":"com"},"ip":{"addr":"169.62.37.218","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"girlsdump.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Jul 2025 10:50:10 GMT","end":"Sat, 11 Oct 2025 10:50:09 GMT"},"fingerprint":{"sha1":"B5:15:42:21:A4:14:A1:91:37:AA:0C:41:AC:D4:5F:B8:C4:2C:A9:74","sha256":"40:55:21:6B:C6:50:EC:F7:B1:50:34:10:8D:F8:CE:5C:6F:F6:25:68:34:D0:63:3E:B3:57:0F:C6:AE:80:6F:DE"}}},"request":{"raw":"GET /templates/defboot/js/all.min.js?t=1587436278 HTTP/1.1\r\nHost: www.girlsdump.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 19 Aug 2025 17:39:28 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 44230\r\nLast-Modified: Thu, 21 Mar 2024 05:52:08 GMT\r\nConnection: keep-alive\r\nETag: \"65fbcb08-acc6\"\r\nExpires: Thu, 18 Sep 2025 17:39:28 GMT\r\nCache-Control: max-age=2592000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":44230,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20356)","md5":"f591af509d034b9237e59fd07b3b31c1","sha1":"cd1ebbfaa683098d751ce9c29a3e4977da699fc7","sha256":"020bb8db0c8d664359d827ca49000e45d72d991b457b78a00a1ad154e8edd590","sha512":"d4f9faeffd2b10cd86193e6a9afaa245b495f36cb1d852a77194710175f7202556b44d5e5523c58f403709abde13386f972b5b94b4cf07e8e9aeec77b10f721c","ssdeep":"768:ESdqC36Lk3cjPxodvP8kMi9/+0UKKruPccSH:Q26LjPxodvP8kMEYudSH","tlshash":"5013fb89bb50395381ff22fb015b170762365ede86098418a07eded41e70e64a7ebf1e","first_seen":"2023-03-13T14:21:38Z","last_seen":"2026-05-24T18:48:27.091556Z","times_seen":198,"resource_available":true,"data":null}},"time_used":469,"timings":{"blocked":-1,"dns":1,"connect":92,"send":0,"wait":185,"receive":93,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/ren.gif?sid=H4sIAAAAAAAC_1RSTWgkRRitzu7Ng7qKgiDMwYOCmXRP9_y0e1hc15VgTMJuJAfxUN1VPSlT3dVWdU9P5hQMyB5nb3rrvJls_FlFL94EmXgLiBlByGFzUPAkHhT2LD0ZGP2gvp96VfDeq_r4ML8gLnJ6vvmOGggp6Uqzbtde3hYJU4WprW_VHLtuX69ti6TlXa_1q6R7rzmuV7dfqb3Fw1210rAd23Zsp3ZbaB6p_soMhUgf-k7dt-teo-40PfT1_2eTWzDUAutdkGsQbPrk79F7EOEESfzNLW52M5W--macS5opjR47fjfZTVSRIF60kbYQJcfz01BmSsgnS1DJ8VwBVG9cKUAgpmTpuUcIkuM5TQS9o0umgQRPELAnUPQm4HICQScI1QEEOyNAyLC-gSR-sK50QfcuUVqhU3L18T8QxZRcffQskvjrm1L0a3eVzDOhEoN-VEL0JxDdCdL8BNlgCaI4QZh9BMF-IiuP15DE4w0jFQQ7fylyO8x2eXO502p5y17QtJc7DuXLzG9S1wnbfrthzywS0QTUWMirJSzkkYU8tRCz85pnd7zQoW4r8lnYtj3qeYwHtt9p2Db1wzbysOI-RJYOEcohQr2PVO9jV9w_a16Dzn-A2SlhmAWTEfRYiYITFIagoASFICgygqJXHjFpGqZ8wKTJA2deG_PqliOVdQ_pkcq6PCGgegjNyrFIPzQHCLMro0Fk2EhViQZZOaIBKw_TC_L0zNk_659hl5_XGG84UUA589sN7jYZjZodv-Wxlh9FTrvDYEQJYZZmfgzElFjHfyGt6tYaAnoCI08QiqdA8xdBixJ0p8Qg-aortDQsj9N6qGIwVSLNriLbsw7lBXlhRuH9rZ_Bw9Mbf0SzQKhLpLrEB-JHgq68N7qjCjK-owpDvt1IMxGLAa0e_m5GM37li7f5XqE0W71lhp-_HlZA1T7c4iZbowkTSdeQL28Kxri-rXTIyferZpsHm7nZuZnrJE_XNt-4vRqnmhsjVDIBrVT9rRGKKXnm0-dnn9r79TcIPYHOS8T5KZkHwnQfJl1wN4pAywUepBaKvBzpRrDYlIJA8sVMgxLmP3Ow6EeaVrepKA_NPXS1BZodIIlL9HSJnixB5RAmvzLKUn164xd3FgikNQqktsaB1PL-pcVGnNeajcBtdTotHrVY5DK34TK_aXPfo37L870mMjPdGX939m8AAAD__4HwzO2yBAAA","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"192.243.61.225","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:30.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 22:21:33 GMT","end":"Fri, 26 Sep 2025 22:21:32 GMT"},"fingerprint":{"sha1":"4A:6A:48:C8:5B:C5:2B:2E:9C:03:AF:BF:4C:E6:10:23:E2:7B:EA:97","sha256":"A8:42:B5:4A:20:C8:13:EF:B5:90:0F:54:37:F7:05:60:8D:91:07:E3:A4:0F:7A:22:C9:AF:F1:F5:22:E8:68:C9"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSTWgkRRitzu7Ng7qKgiDMwYOCmXRP9_y0e1hc15VgTMJuJAfxUN1VPSlT3dVWdU9P5hQMyB5nb3rrvJls_FlFL94EmXgLiBlByGFzUPAkHhT2LD0ZGP2gvp96VfDeq_r4ML8gLnJ6vvmOGggp6Uqzbtde3hYJU4WprW_VHLtuX69ti6TlXa_1q6R7rzmuV7dfqb3Fw1210rAd23Zsp3ZbaB6p_soMhUgf-k7dt-teo-40PfT1_2eTWzDUAutdkGsQbPrk79F7EOEESfzNLW52M5W--macS5opjR47fjfZTVSRIF60kbYQJcfz01BmSsgnS1DJ8VwBVG9cKUAgpmTpuUcIkuM5TQS9o0umgQRPELAnUPQm4HICQScI1QEEOyNAyLC-gSR-sK50QfcuUVqhU3L18T8QxZRcffQskvjrm1L0a3eVzDOhEoN-VEL0JxDdCdL8BNlgCaI4QZh9BMF-IiuP15DE4w0jFQQ7fylyO8x2eXO502p5y17QtJc7DuXLzG9S1wnbfrthzywS0QTUWMirJSzkkYU8tRCz85pnd7zQoW4r8lnYtj3qeYwHtt9p2Db1wzbysOI-RJYOEcohQr2PVO9jV9w_a16Dzn-A2SlhmAWTEfRYiYITFIagoASFICgygqJXHjFpGqZ8wKTJA2deG_PqliOVdQ_pkcq6PCGgegjNyrFIPzQHCLMro0Fk2EhViQZZOaIBKw_TC_L0zNk_659hl5_XGG84UUA589sN7jYZjZodv-Wxlh9FTrvDYEQJYZZmfgzElFjHfyGt6tYaAnoCI08QiqdA8xdBixJ0p8Qg-aortDQsj9N6qGIwVSLNriLbsw7lBXlhRuH9rZ_Bw9Mbf0SzQKhLpLrEB-JHgq68N7qjCjK-owpDvt1IMxGLAa0e_m5GM37li7f5XqE0W71lhp-_HlZA1T7c4iZbowkTSdeQL28Kxri-rXTIyferZpsHm7nZuZnrJE_XNt-4vRqnmhsjVDIBrVT9rRGKKXnm0-dnn9r79TcIPYHOS8T5KZkHwnQfJl1wN4pAywUepBaKvBzpRrDYlIJA8sVMgxLmP3Ow6EeaVrepKA_NPXS1BZodIIlL9HSJnixB5RAmvzLKUn164xd3FgikNQqktsaB1PL-pcVGnNeajcBtdTotHrVY5DK34TK_aXPfo37L870mMjPdGX939m8AAAD__4HwzO2yBAAA HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nCookie: uid_id2=f38d03e5-8664-4b50-81ae-d95a31c79720:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl15478440=1; slecde21fbaed972e35daf58964d69ff178d=[6116560]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 19 Aug 2025 17:39:30 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: afb5c1a3197b50f016494646a7dadc14\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-19","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LeHdnEUAAAAAFiyGpf5SpsponjLpsUZOs1_ybgg\u0026co=aHR0cHM6Ly93d3cuZ2lybHNkdW1wLmNvbTo0NDM.\u0026hl=en\u0026v=07cvpCr3Xe3g2ttJNUkC6W0J\u0026theme=dark\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=4z2ukbqqd4yz","date":"2025-08-19T17:39:31.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15344\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 14 Aug 2025 10:25:01 GMT\r\nexpires: Fri, 14 Aug 2026 10:25:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 458070\r\nlast-modified: Mon, 16 Oct 2017 17:32:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15344, version 1.0","md5":"5d4aeb4e5f5ef754e307d7ffaef688bd","sha1":"06db651cdf354c64a7383ea9c77024ef4fb4cef8","sha256":"3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc","sha512":"7eb7c301df79d35a6a521fae9d3dccc0a695d3480b4d34c7d262dd0c67abec8437ed40e2920625e98aaeafba1d908dec69c3b07494ec7c29307de49e91c2ef48","ssdeep":"384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw","tlshash":"5162e16aef76dc7e4f1af1361c01b45404462290ba6155eff00d6e1d4eed1aff461392","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T16:12:09.169319Z","times_seen":541487,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":8,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.girlsdump.com/media/videos/tmb/000/005/143/1.jpg","fqdn":"www.girlsdump.com","domain":"girlsdump.com","tld":"com"},"ip":{"addr":"169.62.37.218","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"girlsdump.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Jul 2025 10:50:10 GMT","end":"Sat, 11 Oct 2025 10:50:09 GMT"},"fingerprint":{"sha1":"B5:15:42:21:A4:14:A1:91:37:AA:0C:41:AC:D4:5F:B8:C4:2C:A9:74","sha256":"40:55:21:6B:C6:50:EC:F7:B1:50:34:10:8D:F8:CE:5C:6F:F6:25:68:34:D0:63:3E:B3:57:0F:C6:AE:80:6F:DE"}}},"request":{"raw":"GET /media/videos/tmb/000/005/143/1.jpg HTTP/1.1\r\nHost: www.girlsdump.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 19 Aug 2025 17:39:29 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 23382\r\nLast-Modified: Fri, 11 Mar 2022 23:14:28 GMT\r\nConnection: keep-alive\r\nETag: \"622bd7d4-5b56\"\r\nExpires: Thu, 18 Sep 2025 17:39:29 GMT\r\nCache-Control: max-age=2592000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23382,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x226, components 3","md5":"6c089df3340d180a7ed432238a681260","sha1":"5fdd39ab5230adccb9e1be20d7c2a49d6385966e","sha256":"7a32177507ae24d277dbd4028333fc373652479f57c6b6c414e3ee1f0412170a","sha512":"865357a30431d6df83fa4798abc19d125fa5a1ec962220ad13d4868770891087d217e10fa669a645b09d9eea7a9c660ff3f2317136ba710a59b466ab2d3db5ec","ssdeep":"384:IXAXdXVXtOdCiE4F3PJLNHKxcMHiP94NUxF7iaZ1T7R0K4ZspMj4GS2OymSOLDNy:IwtXVEd663jqx/A9e+8C7U9UGS2Oyr8A","tlshash":"cfa2e084b238bbe1f7873865f8147da780e2df9509a12a1ee2cb7149c87df08da54c65","first_seen":"2025-03-19T06:27:36.697359Z","last_seen":"2026-05-24T18:48:27.089445Z","times_seen":129,"resource_available":false,"data":null}},"time_used":729,"timings":{"blocked":635,"dns":0,"connect":0,"send":0,"wait":93,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.girlsdump.com/media/videos/tmb/000/002/773/1.jpg","fqdn":"www.girlsdump.com","domain":"girlsdump.com","tld":"com"},"ip":{"addr":"169.62.37.218","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"girlsdump.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Jul 2025 10:50:10 GMT","end":"Sat, 11 Oct 2025 10:50:09 GMT"},"fingerprint":{"sha1":"B5:15:42:21:A4:14:A1:91:37:AA:0C:41:AC:D4:5F:B8:C4:2C:A9:74","sha256":"40:55:21:6B:C6:50:EC:F7:B1:50:34:10:8D:F8:CE:5C:6F:F6:25:68:34:D0:63:3E:B3:57:0F:C6:AE:80:6F:DE"}}},"request":{"raw":"GET /media/videos/tmb/000/002/773/1.jpg HTTP/1.1\r\nHost: www.girlsdump.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 19 Aug 2025 17:39:29 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 15755\r\nLast-Modified: Fri, 17 Jul 2020 21:42:10 GMT\r\nConnection: keep-alive\r\nETag: \"5f121b32-3d8b\"\r\nExpires: Thu, 18 Sep 2025 17:39:29 GMT\r\nCache-Control: max-age=2592000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15755,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x226, components 3","md5":"572a4e23e1cbd8312999f6ca571841a0","sha1":"52e32e53433f2ad4a5806333ebe743a2b4ad8ddb","sha256":"b8d238926ed405d6665f8bad6a58955fdd55bf834fb09ba0c6a0007355c3b41e","sha512":"b1b7ef100b50af401f46bf405a93f7ef5ebead967a869d63fc8bb929cfc3230a7c38d22a3db8320aeed2ad005132df06158a7e892f457069832d3eb312f9ec50","ssdeep":"192:jQQDxFghY38F1/O/bKnwkY27vCR4r0ePhm7kOW/qyGz0Dego3L4MwqZwRuNBTQoN:8BhY38HGTKzrpAQBhrDedM+whVsyZO","tlshash":"3862b06b759d30f07935e3bd3a8e8dd4bdc41ae493234e9f96cb14510211bd6e55842c","first_seen":"2025-03-19T06:27:36.679767Z","last_seen":"2026-05-24T18:48:27.080459Z","times_seen":129,"resource_available":false,"data":null}},"time_used":739,"timings":{"blocked":646,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"18.198.116.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.girlsdump.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 17:39:29 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://www.girlsdump.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=98c497cb-ecfa-4039-8dff-41d26e087c9b:2:1; expires=Fri, 17 Aug 2035 17:39:29 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"50d942532cd803e95215b55fcf29dcae","sha1":"b94dca2a678312507597ebb4de3ecc1b49dd1789","sha256":"5888c71ef7c8d0865e5611cae8b1d32f8b42f6d7c00cef110607692999d2042b","sha512":"5ecddfb71581689c76d509acc4493d334af77aac16ca7b0f9e68551c454aa752c0ffdbbfeab296761849121db65906b0fc97d624ac8bc069adf49be03def4fc6","ssdeep":"","tlshash":"c390040115f54443f7441307d30030d4f0307d00051733d437f154017c00d0744d0531","first_seen":"2025-08-19T17:40:01.683041Z","last_seen":"2025-08-19T17:40:01.683041Z","times_seen":1,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":167,"dns":5,"connect":21,"send":0,"wait":21,"receive":0,"ssl":139},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:30.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 19 Aug 2025 17:39:30 GMT\r\ndate: Tue, 19 Aug 2025 17:39:30 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"e9d2e14beb088f37fae98294940a9dcd","sha1":"1dafc3c55550249c8c2d782d5616c7b445c8e005","sha256":"f2e491cc46d3fcba81f729065d622bd722751d4a2e7f80b479aa64a92c17b5c7","sha512":"64025ea9b660d5e1d45a593a27345e152ba6b5ef95daceee5e43201319a555eb5457cfe1ecdcc725202063a22c5f406f3ba4607863d5b714c378f144bcdea5f7","ssdeep":"384:pjf5jgjPjrjyUj/qY4+j4jYjpjfMj1jWj6jyhj/qY4XjNjtj4jfdjkjDj3jyQj/E:p90DXOU/R08toBy+Oh/EBpcZwPLOQ/VK","tlshash":"e5722291041740009b835ce223cebf35fe1f92117152d0b5abfd9b6badcbc66526939d","first_seen":"2025-06-02T17:27:24.212334Z","last_seen":"2026-01-19T16:22:17.33804Z","times_seen":5482,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":187,"dns":0,"connect":27,"send":0,"wait":45,"receive":0,"ssl":160},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.girlsdump.com/media/videos/tmb/000/004/116/1.jpg","fqdn":"www.girlsdump.com","domain":"girlsdump.com","tld":"com"},"ip":{"addr":"169.62.37.218","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"girlsdump.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Jul 2025 10:50:10 GMT","end":"Sat, 11 Oct 2025 10:50:09 GMT"},"fingerprint":{"sha1":"B5:15:42:21:A4:14:A1:91:37:AA:0C:41:AC:D4:5F:B8:C4:2C:A9:74","sha256":"40:55:21:6B:C6:50:EC:F7:B1:50:34:10:8D:F8:CE:5C:6F:F6:25:68:34:D0:63:3E:B3:57:0F:C6:AE:80:6F:DE"}}},"request":{"raw":"GET /media/videos/tmb/000/004/116/1.jpg HTTP/1.1\r\nHost: www.girlsdump.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 19 Aug 2025 17:39:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 26081\r\nLast-Modified: Wed, 13 Jan 2021 10:10:19 GMT\r\nConnection: keep-alive\r\nETag: \"5ffec70b-65e1\"\r\nExpires: Thu, 18 Sep 2025 17:39:28 GMT\r\nCache-Control: max-age=2592000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26081,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 380x380, segment length 16, baseline, precision 8, 300x226, components 3","md5":"0198e071c5ff901efd3bfba8df07c9d5","sha1":"ec4bc2c1217ea2740321eab88e9fdbba70a84d4e","sha256":"88cef0c846a84d42c08552ac0ca9f2d2cc0ca8c63f62f769fb29e090f4a7eacb","sha512":"162be107354790e998fa63325874878cb6872c6d46afe4e6b92980efad8113885434cfe26fe6e85fe75be2454bd4a6640439febe1eb40b2081ae3e4f04a2c4d3","ssdeep":"384:fcNuUVKkMqtrnubOhq3ZGLiIiYdzwt23yMNowSqTqX5ufirGtWmben5CV/CxpxO:fCVKkMUnsMMl1MNowg5uqrG0mb68yO","tlshash":"7fc2d047e88fadd7b5b696e8a8314c8576d4fb85a207830026bfd7539cb4db9123012e","first_seen":"2023-11-22T17:01:52Z","last_seen":"2026-05-24T18:48:27.116029Z","times_seen":130,"resource_available":false,"data":null}},"time_used":523,"timings":{"blocked":429,"dns":0,"connect":0,"send":0,"wait":93,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/si/4b/75/3b/4b753b437ff8f56901e837fea0e6bca359fe1e90bff265f8a8bfba1802d37813.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:30.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Jul 2025 02:33:11 GMT","end":"Wed, 08 Oct 2025 02:33:10 GMT"},"fingerprint":{"sha1":"06:D8:07:0F:AB:BF:D8:7F:C5:38:82:AC:A7:8A:20:4D:83:6C:EA:C9","sha256":"CF:05:58:46:C3:07:3F:B6:A6:8D:42:F2:3B:3D:91:36:93:10:CB:D5:89:47:A3:62:26:D2:F3:BA:AC:51:0E:B7"}}},"request":{"raw":"GET /si/4b/75/3b/4b753b437ff8f56901e837fea0e6bca359fe1e90bff265f8a8bfba1802d37813.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 17:39:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 6423\r\nserver: nginx/1.21.6\r\nlast-modified: Fri, 15 Aug 2025 01:09:01 GMT\r\netag: \"689e88ad-1917\"\r\nexpires: Thu, 21 Aug 2025 17:39:30 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: ah0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6423,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3","md5":"d8f143c53ef89fe568fb4f86eaaadd76","sha1":"57435a41ae46252e83eaa425e86c8d004fc82287","sha256":"2939c9713939fc59e054d5101edbb46015515ea52bd362372aeb6475d0a67a26","sha512":"1344497a4e548bea8882be8acbb9384fa7dcc15e31194cc670622945ba95d60825d069dffb2d3cd3a659c21df65909b3780e377c55202560be35db2aec41b680","ssdeep":"96:IElbw+iukgvhR4EpfmZe4iM/B+bNpqt9TJu5FY67pz97OPhk7fIOA+e1vRvzo:9wtwRfunBKMt9eY2pz9qa6RZvE","tlshash":"73d18e4a94192ba1ee9a49f8e8d73f03d22876716e66b63420830cfdbb12dfc4144741","first_seen":"2025-08-15T07:53:25.315072Z","last_seen":"2025-12-22T04:22:03.419479Z","times_seen":1333,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbs?c=1","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"192.243.61.225","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:30.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 22:21:33 GMT","end":"Fri, 26 Sep 2025 22:21:32 GMT"},"fingerprint":{"sha1":"4A:6A:48:C8:5B:C5:2B:2E:9C:03:AF:BF:4C:E6:10:23:E2:7B:EA:97","sha256":"A8:42:B5:4A:20:C8:13:EF:B5:90:0F:54:37:F7:05:60:8D:91:07:E3:A4:0F:7A:22:C9:AF:F1:F5:22:E8:68:C9"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nCookie: uid_id2=f38d03e5-8664-4b50-81ae-d95a31c79720:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl15478440=1; slecde21fbaed972e35daf58964d69ff178d=[6116560]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 19 Aug 2025 17:39:30 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-19","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=07cvpCr3Xe3g2ttJNUkC6W0J\u0026k=6LeHdnEUAAAAAFiyGpf5SpsponjLpsUZOs1_ybgg\u0026bft=0dAFcWeA4hdXGcvrYLfnOSlb1bVDRISkx_MyNLiYR9aApeNG1QhvlgMZqjcyTKQLP29ViWUqHaM9qapW-XAp2GpWbO5GYv0LOeBA","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:31.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"GET /recaptcha/api2/bframe?hl=en\u0026v=07cvpCr3Xe3g2ttJNUkC6W0J\u0026k=6LeHdnEUAAAAAFiyGpf5SpsponjLpsUZOs1_ybgg\u0026bft=0dAFcWeA4hdXGcvrYLfnOSlb1bVDRISkx_MyNLiYR9aApeNG1QhvlgMZqjcyTKQLP29ViWUqHaM9qapW-XAp2GpWbO5GYv0LOeBA HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 19 Aug 2025 17:39:31 GMT\r\ncontent-security-policy: script-src 'nonce-YQHiF2BHOm5XpC5kw1fRcg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7700,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"bc1c2ef72d82d13a7158cf382d1f2c18","sha1":"e63b9c0bb596a07cf3911bee0efa357c3e99b356","sha256":"d41b2423143a03ee0d3a3b52b22d546b683ae781874a1a726e1f492fb1c54cd1","sha512":"f3313955c58c779cd08d07deea07222ed8db31e13104d511e2598fbfa44c556c2679f7617de53e79391dc22e4a816aa3db36302034438861d34fef6fd6e47b24","ssdeep":"192:NjK+QK9KyK03XK/KIqKI4Kn7KSKBKC3sKUKoNK8KGnKrKEKT3AKrKFpK+A+:M+tI/y6yekn+f8QZRtpGKuBjdu++A+","tlshash":"eef1bb80081a9810ab930cd273cf3e36fd4f51267146c8b6abfd69a8ede7d26925474d","first_seen":"2025-08-19T17:40:01.686287Z","last_seen":"2025-08-19T17:40:01.686287Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.girlsdump.com/misc/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"www.girlsdump.com","domain":"girlsdump.com","tld":"com"},"ip":{"addr":"169.62.37.218","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"girlsdump.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Jul 2025 10:50:10 GMT","end":"Sat, 11 Oct 2025 10:50:09 GMT"},"fingerprint":{"sha1":"B5:15:42:21:A4:14:A1:91:37:AA:0C:41:AC:D4:5F:B8:C4:2C:A9:74","sha256":"40:55:21:6B:C6:50:EC:F7:B1:50:34:10:8D:F8:CE:5C:6F:F6:25:68:34:D0:63:3E:B3:57:0F:C6:AE:80:6F:DE"}}},"request":{"raw":"GET /misc/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: www.girlsdump.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/misc/font-awesome/css/font-awesome.min.css\r\nCookie: _ga_K272QG5WTS=GS2.1.s1755625168$o1$g0$t1755625168$j60$l0$h0; _ga=GA1.1.1942031897.1755625169\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 19 Aug 2025 17:39:28 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 77160\r\nLast-Modified: Thu, 22 Dec 2016 20:50:33 GMT\r\nConnection: keep-alive\r\nETag: \"585c3c99-12d68\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-05-27T17:18:22.399564Z","times_seen":482326,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/sbar.json?key=de21fbaed972e35daf58964d69ff178d\u0026uuid=f38d03e5-8664-4b50-81ae-d95a31c79720%3A1%3A1","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"192.243.61.225","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:29.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 22:21:33 GMT","end":"Fri, 26 Sep 2025 22:21:32 GMT"},"fingerprint":{"sha1":"4A:6A:48:C8:5B:C5:2B:2E:9C:03:AF:BF:4C:E6:10:23:E2:7B:EA:97","sha256":"A8:42:B5:4A:20:C8:13:EF:B5:90:0F:54:37:F7:05:60:8D:91:07:E3:A4:0F:7A:22:C9:AF:F1:F5:22:E8:68:C9"}}},"request":{"raw":"GET /sbar.json?key=de21fbaed972e35daf58964d69ff178d\u0026uuid=f38d03e5-8664-4b50-81ae-d95a31c79720%3A1%3A1 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.girlsdump.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 19 Aug 2025 17:39:29 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nAccess-Control-Allow-Origin: https://www.girlsdump.com\r\nAccess-Control-Allow-Credentials: true\r\nSet-Cookie: uid_id2=f38d03e5-8664-4b50-81ae-d95a31c79720:1:1; expires=Tue, 26 Aug 2025 17:39:29 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Wed, 20 Aug 2025 17:39:29 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Wed, 20 Aug 2025 17:39:29 GMT; path=/; secure; SameSite=None\npdhtkv29=true; expires=Wed, 20 Aug 2025 17:39:29 GMT; path=/; secure; SameSite=None\nuncs29=1; expires=Wed, 20 Aug 2025 17:39:29 GMT; path=/; secure; SameSite=None\nu_pl15478440=1; expires=Wed, 20 Aug 2025 17:39:29 GMT; path=/; secure; SameSite=None\nslecde21fbaed972e35daf58964d69ff178d=[6116560]; expires=Tue, 19 Aug 2025 17:39:34 GMT; path=/; secure; SameSite=None\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 5642bfe317625c49d13b94f945319335\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6212,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"4624a949f5e5d289fd94a92877e2765a","sha1":"71c0b2671be44af9fa789ccb31a7fe06d9d95307","sha256":"618a0d2d88ce5ea05c910f31e55c01907dafa8df18c71093aa6da24fc4690f77","sha512":"1009ae7d8695a8d1edcb88ed8691bb1f8637d754459d897f02397fea7a53eb74b49dc21c1232b14ae4f3693c37a5abe52a45193767d084db23620a912b8dea67","ssdeep":"192:9z2gUl5ndWtUjZ1SGniZ7GLF+rc0z7HQUUSaUXCyAT9czR:9zs5MtUaGniZ7GoXz7w+aB59C","tlshash":"40d17c7c289991f2d887f4b638223d7eadc5299b2c7a783c44a2539fc46d4c90d5827e","first_seen":"2025-08-19T17:40:01.687851Z","last_seen":"2025-08-19T17:40:01.687851Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1074,"timings":{"blocked":379,"dns":26,"connect":102,"send":0,"wait":316,"receive":0,"ssl":248},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-19","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/si/56/2e/61/562e61d246ea51456dbc6923816f7bbc/1723680005.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:29.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Jul 2025 02:33:11 GMT","end":"Wed, 08 Oct 2025 02:33:10 GMT"},"fingerprint":{"sha1":"06:D8:07:0F:AB:BF:D8:7F:C5:38:82:AC:A7:8A:20:4D:83:6C:EA:C9","sha256":"CF:05:58:46:C3:07:3F:B6:A6:8D:42:F2:3B:3D:91:36:93:10:CB:D5:89:47:A3:62:26:D2:F3:BA:AC:51:0E:B7"}}},"request":{"raw":"GET /si/56/2e/61/562e61d246ea51456dbc6923816f7bbc/1723680005.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 Aug 2025 17:39:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 193846\r\nserver: nginx/1.21.6\r\nlast-modified: Thu, 15 Aug 2024 00:00:07 GMT\r\netag: \"66bd4507-2f536\"\r\nexpires: Thu, 21 Aug 2025 17:39:29 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: ah0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":193846,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 240, 8-bit/color RGBA, non-interlaced","md5":"b1b4b94611a185e45daec44d7685025f","sha1":"7cda73a508402d93ee2cb2b1a921a9492210df4c","sha256":"69ededc75b0c01168a32d1ad917135fb734590cb25ec7ea0ef9cb2ba1dea2a8e","sha512":"8643811f94feb23aa4965ce2858a2c404dc4f828430620bf0d862cd8e191516f066a9f841a512b9faf363791657e84b925e5b2df20efefcc023491f014bba6c1","ssdeep":"3072:DO+D2iUhWyPd7iXZ3944SHNAT+eOhH5y08JoaDcvEWI0S75LalD1Wp88MaBUUm/4:DO8yPd7iXZipHNXhU3ofvEWHsNalD1Wd","tlshash":"0714232469e48014a0012f5df5684e3a3e146dc366acf77a7d076a365ff9aaf0a7d033","first_seen":"2024-12-23T18:18:26.515082Z","last_seen":"2025-09-21T08:47:17.600424Z","times_seen":352,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":24,"connect":70,"send":0,"wait":71,"receive":46,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=98c497cb-ecfa-4039-8dff-41d26e087c9b\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3223\u0026b_frame=0\u0026pk=131eeed32817b6fc0a9e0816881611df\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=17","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"192.243.59.13","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:31.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Jul 2025 15:12:33 GMT","end":"Mon, 29 Sep 2025 15:12:32 GMT"},"fingerprint":{"sha1":"9E:08:20:A0:75:ED:21:51:E0:3D:DE:29:CD:B0:11:01:4D:04:77:0A","sha256":"FB:D4:A2:1D:0F:F1:FB:A8:D9:5E:88:03:1F:BB:94:D2:32:5C:CC:49:11:11:FC:04:7B:C6:43:40:CF:1E:A2:BA"}}},"request":{"raw":"GET /pxf.gif?uuid=98c497cb-ecfa-4039-8dff-41d26e087c9b\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3223\u0026b_frame=0\u0026pk=131eeed32817b6fc0a9e0816881611df\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=17 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Tue, 19 Aug 2025 17:39:31 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 841b6d86080366d037b080cf06701412\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":658,"timings":{"blocked":282,"dns":0,"connect":92,"send":0,"wait":93,"receive":0,"ssl":189},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:30.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.girlsdump.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 14 Aug 2025 10:09:08 GMT\r\nexpires: Fri, 14 Aug 2026 10:09:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 459022\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-27T17:18:58.403259Z","times_seen":851871,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":40,"dns":1,"connect":7,"send":0,"wait":8,"receive":9,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.girlsdump.com/templates/defboot/images/logo.png?t=1520718755","fqdn":"www.girlsdump.com","domain":"girlsdump.com","tld":"com"},"ip":{"addr":"169.62.37.218","port":443,"asn":36351,"as":"SOFTLAYER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"girlsdump.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Jul 2025 10:50:10 GMT","end":"Sat, 11 Oct 2025 10:50:09 GMT"},"fingerprint":{"sha1":"B5:15:42:21:A4:14:A1:91:37:AA:0C:41:AC:D4:5F:B8:C4:2C:A9:74","sha256":"40:55:21:6B:C6:50:EC:F7:B1:50:34:10:8D:F8:CE:5C:6F:F6:25:68:34:D0:63:3E:B3:57:0F:C6:AE:80:6F:DE"}}},"request":{"raw":"GET /templates/defboot/images/logo.png?t=1520718755 HTTP/1.1\r\nHost: www.girlsdump.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 19 Aug 2025 17:39:28 GMT\r\nContent-Type: image/png\r\nContent-Length: 5915\r\nLast-Modified: Sat, 26 Jun 2021 23:46:16 GMT\r\nConnection: keep-alive\r\nETag: \"60d7bc48-171b\"\r\nExpires: Thu, 18 Sep 2025 17:39:28 GMT\r\nCache-Control: max-age=2592000, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5915,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 197 x 64, 8-bit/color RGBA, non-interlaced","md5":"3dcf6a000dadab3649201eba8add6041","sha1":"3ed45fa251442706abadf5854f9830f78cbf4718","sha256":"7117cb06484da55ef86a47be9b0e7622066fe907c641fa9f5329bf233aa865e9","sha512":"40fb2ce318ca4584115c84022cc5697675cb18317c31d7e38696e2e5f774b57d58a6d854a76623dea528e95f6382e57600aa6698b861ad0c52ce27419ef0e955","ssdeep":"96:VQ6BQMBvTYCFXnZmiu1fipuVOz/e8x3XS5SvXLgJ5XPbYbpe42fR5zrAXPt:GiQwvTbXnZmiucUM/V3KSvXePUbpeLVm","tlshash":"fec1af979387c017fbefdd0b1a8ee7d850be7a26a1100626a312218f26d624498a148a","first_seen":"2023-11-22T17:01:51Z","last_seen":"2026-05-24T18:48:27.087469Z","times_seen":135,"resource_available":false,"data":null}},"time_used":547,"timings":{"blocked":452,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easiercampaignworkshop.com/65d324063c68920c60940e7e5b63ab81/invoke.js","fqdn":"easiercampaignworkshop.com","domain":"easiercampaignworkshop.com","tld":"com"},"ip":{"addr":"192.243.59.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:28.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"easiercampaignworkshop.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Jul 2025 13:56:43 GMT","end":"Tue, 30 Sep 2025 13:56:42 GMT"},"fingerprint":{"sha1":"FA:86:F0:64:F7:37:65:44:C5:0E:88:60:D7:F7:32:68:62:DC:6E:59","sha256":"48:9D:F8:26:4D:B3:BC:2B:5F:6D:FD:14:A3:28:E3:DA:52:EC:D8:28:9E:18:2D:E9:6D:D6:93:B0:9F:4B:8E:EE"}}},"request":{"raw":"GET /65d324063c68920c60940e7e5b63ab81/invoke.js HTTP/1.1\r\nHost: easiercampaignworkshop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Tue, 19 Aug 2025 17:39:28 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 11099\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: easiercampaignworkshop.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 7aa88f055345f367db368878c1709257\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31064,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31062), with no line terminators","md5":"cfb8c2cc8190b2ddeaffb05f6ab9a5c5","sha1":"72d1f42a1bce1e6a7d2f4b6982bb206805876d38","sha256":"202aef5eb276d057b80b9f1303da1e8a9e233da41874629dc868c02d09a93969","sha512":"72974af62ffc9fb17543e1eab8cf9490a9b2de5fd757a62774af747649142533f836a87296eda5243e5865fd2681eddf05b4f3d6da3787dc62fbc63c965afb71","ssdeep":"768:5d8JfLHR9wJi/57czDGD1urnJEOlhPm+7:iLHR7afzf7","tlshash":"afd2d7db7f10b37c129b9473263f440ae3391d02f5c8c75dd977d6962a8c30a896a6e8","first_seen":"2025-08-19T17:40:01.68976Z","last_seen":"2025-08-19T17:40:01.68976Z","times_seen":1,"resource_available":true,"data":null}},"time_used":393,"timings":{"blocked":-1,"dns":10,"connect":93,"send":0,"wait":100,"receive":0,"ssl":190},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-19","alert":"Sinkholed","trigger":"easiercampaignworkshop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"milletappliancejeopardize.com/ren.gif?sid=H4sIAAAAAAAC_1RSMWxbRRg-p55goFSIoZNHkJDzbD-7Nh0qSgmKCElogjIw3Xt3dq659-5xd8_PsQSKiFR1NIKBMl0-O42AgsoCC0jIQUIoElK8ZWgGmBgoA6gDE3quJcMv3ff__3130vd_d7cP0nNSQ0rP1t9UfSElXayXvdILWyJmKjOl1c1SxSt7V0tbIm74V0u9HHT35UrNL3svll7n4Y5arHoVz6t4ldKS0LyteotTFiK536qUW17Zr5YrdR89_f_epAUYWgDrnpNLEGzyzG_tdyDCMeLowQ1udqxKXnotSiW1SqPLjt6Od2KVxYjmZVsX0I6PZqehzISQTxag4qPZBFDdUT4BAjEhC88_RBAfzWQi6B4-URpI8BgBexpZdwwuxxB0jFDtQ7BTAoQMq2uIo3urSmd09wlLc3ZCio__gsgmpPjwOcTRV9el6JU2lEytULFBr-0gemOIzhhJegzbX4DIjhHaDyDYL2Tx8QriaLRmpIJgbjq9aI9BTQFpvkQBabuANCkgYmcl32v6YYXWGu0WC694PvV9xgOv1ax6Hm2FV5CGuawBbDJAKAcI9R4SvYcd8eFp_RJ0-gPMtoNhBRg7IYW39tBlDhknyAxBRgkyQZBZgqzrDpk0VePuMWnSoDLL1VmuuaGynQN6qGyHxwRUD6CZG4nkXbOP0F4Y9tuGDVUONLBuSAPmDpJz8uzUuN__vowdflZq1Fmt6nuNWthotqpe2PBavsev8HrQqNGgWYERDsIsTD3piwkpHD1CkufNFQT0GEYeIxQXQdMKaOZAtx368ZcdoaVhaZSUQxWBKYfEFmF3CwfynFyeSti4_Qg8PLnW-8h-d-v9fxBqh0Q73BI_EnTkneFNlZHRTZUZ8vVaYkUk-jR_1w1LLb_w-Rt8N1OaLd8wg89eCXMiL-9vcmNXaMxE3DHki-uCMa6XlA45-X7ZbPFgPTXb11Mdp8nK-qtLy1GiuTFCxWNQMSHk7gOEYkIu_vTe9M-Wvx1A6DF06hClJ2QWCJM9mGSu3SgCLed8kFxAlrqhrgbzTSkIJJ_3NHAw_-mDeT3UNL9NhTswd9DRRVC7jzhy6GqHrnSgcgCTPjW0iT659vPdPD5FIIvDQOriKJBafpxb_GcOv07NzuEPGHFWqleDWqPZbPB2g7VrrFatsVbd4y2fthp-y6_Dmsn26JvTfwMAAP__jWmoAKAEAAA=","fqdn":"milletappliancejeopardize.com","domain":"milletappliancejeopardize.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:29.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"milletappliancejeopardize.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 31 Jul 2025 08:36:21 GMT","end":"Wed, 29 Oct 2025 08:36:20 GMT"},"fingerprint":{"sha1":"EA:64:64:B0:BA:DC:E1:5D:06:7D:52:B8:2C:0B:86:7F:CE:4B:A1:74","sha256":"DB:07:0A:AC:70:F7:AC:62:69:99:4F:53:5A:A1:10:05:D2:07:FB:2B:9A:EE:E7:F4:1A:BB:3C:3C:C1:27:DB:31"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSMWxbRRg-p55goFSIoZNHkJDzbD-7Nh0qSgmKCElogjIw3Xt3dq659-5xd8_PsQSKiFR1NIKBMl0-O42AgsoCC0jIQUIoElK8ZWgGmBgoA6gDE3quJcMv3ff__3130vd_d7cP0nNSQ0rP1t9UfSElXayXvdILWyJmKjOl1c1SxSt7V0tbIm74V0u9HHT35UrNL3svll7n4Y5arHoVz6t4ldKS0LyteotTFiK536qUW17Zr5YrdR89_f_epAUYWgDrnpNLEGzyzG_tdyDCMeLowQ1udqxKXnotSiW1SqPLjt6Od2KVxYjmZVsX0I6PZqehzISQTxag4qPZBFDdUT4BAjEhC88_RBAfzWQi6B4-URpI8BgBexpZdwwuxxB0jFDtQ7BTAoQMq2uIo3urSmd09wlLc3ZCio__gsgmpPjwOcTRV9el6JU2lEytULFBr-0gemOIzhhJegzbX4DIjhHaDyDYL2Tx8QriaLRmpIJgbjq9aI9BTQFpvkQBabuANCkgYmcl32v6YYXWGu0WC694PvV9xgOv1ax6Hm2FV5CGuawBbDJAKAcI9R4SvYcd8eFp_RJ0-gPMtoNhBRg7IYW39tBlDhknyAxBRgkyQZBZgqzrDpk0VePuMWnSoDLL1VmuuaGynQN6qGyHxwRUD6CZG4nkXbOP0F4Y9tuGDVUONLBuSAPmDpJz8uzUuN__vowdflZq1Fmt6nuNWthotqpe2PBavsev8HrQqNGgWYERDsIsTD3piwkpHD1CkufNFQT0GEYeIxQXQdMKaOZAtx368ZcdoaVhaZSUQxWBKYfEFmF3CwfynFyeSti4_Qg8PLnW-8h-d-v9fxBqh0Q73BI_EnTkneFNlZHRTZUZ8vVaYkUk-jR_1w1LLb_w-Rt8N1OaLd8wg89eCXMiL-9vcmNXaMxE3DHki-uCMa6XlA45-X7ZbPFgPTXb11Mdp8nK-qtLy1GiuTFCxWNQMSHk7gOEYkIu_vTe9M-Wvx1A6DF06hClJ2QWCJM9mGSu3SgCLed8kFxAlrqhrgbzTSkIJJ_3NHAw_-mDeT3UNL9NhTswd9DRRVC7jzhy6GqHrnSgcgCTPjW0iT659vPdPD5FIIvDQOriKJBafpxb_GcOv07NzuEPGHFWqleDWqPZbPB2g7VrrFatsVbd4y2fthp-y6_Dmsn26JvTfwMAAP__jWmoAKAEAAA= HTTP/1.1\r\nHost: milletappliancejeopardize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl15332378=1; nlec65d324063c68920c60940e7e5b63ab81=[5474031,5474018,5474030,5474029]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 19 Aug 2025 17:39:29 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nvary: Origin\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: milletappliancejeopardize.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: a50563ef1116bd1d1291a499abb85df3\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":781,"timings":{"blocked":336,"dns":1,"connect":147,"send":0,"wait":95,"receive":0,"ssl":186},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-19","alert":"Sinkholed","trigger":"milletappliancejeopardize.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/impr.gif?sid=H4sIAAAAAAAC_1RSTWgkRRitTnLzoK6iIAhz8KBgJt3TPX_uYTGukWBMwm4kB_FQ3VU9KVPd1VZ1T0_mFAzIHmdveuu8mWz8WUUv3gSZeAuIGUHIYXNQ8CQeFPYsPRkY_aC-n3pV8N6r-vg4uyIuMnq5_Y7qCynpSr1qV17eFTFTuals7lQcu2rfrOyKuOHdrPTKpLuvOa5XtV-pvMWDfbVSsx3bdmynsiY0D1VvZYpCJA_bTrVtV71a1al76On_zyazYKgF1r0iNyDY5Mnfw_cggjHi6Jvb3OynKnn1zSiTNFUaXXb6brwfqzxGNG9DbSGMT2enocyEkE8WoOLTmQKo7qhUAF9MyMJzj-DHpzOa8Lsn10x9CR7DZ08g747B5RiCjhGoIwh2QYCAYXMLcfRgU-mcHlyjtEQnZOnxPxD5hCw9ehZx9PWqFL3KXSWzVKjYoBcWEL0xRGeMJDtD2l-AyM8QpB9BsJ_IyuMNxNFoy0gFwS5fCt0Ws11eX241Gt6y59ft5ZZD-TJr16nrBM12s2ZPLRLhGNRYyMolLGShhSyxELHLime3vMChbiNss6Bpe9TzGPftdqtm27QdNJEFJfcB0mSAQA4Q6EMk-hD74v5F_QZ09gPMXgHDLJiUoMsK5JwgNwQ5JcgFQZ4S5N3ihElTM8UDJk3mO7Nam1W3GKq0c0xPVNrhMQHVA2hWjETyoTlCkC4O-6FhQ1Um6qfFkPqsOE6uyNNTZ_-sfoZ9fllhvOaEPuWs3axxt85oWG-1Gx5rtMPQabYYjCggzMLUj76YEOv0LyRl3dmAT89g5BkC8RRo9iJoXoDuFejHX3WEloZlUVINVASmCiTpEtID61hekRemFN7f-Rk8OL_1RzgNBLpAogt8IH4k6Mh7wzsqJ6M7Kjfk260kFZHo0_Lh76Y05YtfvM0PcqXZ-m0z-Pz1oATK9uEON-kGjZmIO4Z8uSoY43pN6YCT79fNLve3M7O3muk4Sza231hbjxLNjREqHoOWqv7WCMSEPPPp89NP7f36G4QeQ2cFouyczAJBcgiTzLkbRaDlHPcTC3lWDHXNn29KQSD5fKZ-AfOf2Z_3Q03L21QUx-YeOtoCTY8QRwW6ukBXFqByAJMtDtNEn9_6xZ0GfGkNfamtkS-1vH9tsRGXldDltcC2W82G47ZC7rgeC8J6y2uzBrVdlyM1k73Rdxf_BgAA__99mFwzsgQAAA==","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.girlsdump.com/ch1.php?mc_attr=c=c56751a6-9473-447b-87c6-aca765ab9652..m=meifnavttg8bkyqsjtouiil1n4..d=0-0-0-1-8..l=17556012354..e={click_id}..t1={campaign_id}..t2={creative_id}..t3={categories}..t4={keywords}..t5={referrer}..t6={site_id}..t7={format}..t8={ip}..t9={geo}..t10={pricing_model}","date":"2025-08-19T17:39:30.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Jun 2025 22:21:33 GMT","end":"Fri, 26 Sep 2025 22:21:32 GMT"},"fingerprint":{"sha1":"4A:6A:48:C8:5B:C5:2B:2E:9C:03:AF:BF:4C:E6:10:23:E2:7B:EA:97","sha256":"A8:42:B5:4A:20:C8:13:EF:B5:90:0F:54:37:F7:05:60:8D:91:07:E3:A4:0F:7A:22:C9:AF:F1:F5:22:E8:68:C9"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSTWgkRRitTnLzoK6iIAhz8KBgJt3TPX_uYTGukWBMwm4kB_FQ3VU9KVPd1VZ1T0_mFAzIHmdveuu8mWz8WUUv3gSZeAuIGUHIYXNQ8CQeFPYsPRkY_aC-n3pV8N6r-vg4uyIuMnq5_Y7qCynpSr1qV17eFTFTuals7lQcu2rfrOyKuOHdrPTKpLuvOa5XtV-pvMWDfbVSsx3bdmynsiY0D1VvZYpCJA_bTrVtV71a1al76On_zyazYKgF1r0iNyDY5Mnfw_cggjHi6Jvb3OynKnn1zSiTNFUaXXb6brwfqzxGNG9DbSGMT2enocyEkE8WoOLTmQKo7qhUAF9MyMJzj-DHpzOa8Lsn10x9CR7DZ08g747B5RiCjhGoIwh2QYCAYXMLcfRgU-mcHlyjtEQnZOnxPxD5hCw9ehZx9PWqFL3KXSWzVKjYoBcWEL0xRGeMJDtD2l-AyM8QpB9BsJ_IyuMNxNFoy0gFwS5fCt0Ws11eX241Gt6y59ft5ZZD-TJr16nrBM12s2ZPLRLhGNRYyMolLGShhSyxELHLime3vMChbiNss6Bpe9TzGPftdqtm27QdNJEFJfcB0mSAQA4Q6EMk-hD74v5F_QZ09gPMXgHDLJiUoMsK5JwgNwQ5JcgFQZ4S5N3ihElTM8UDJk3mO7Nam1W3GKq0c0xPVNrhMQHVA2hWjETyoTlCkC4O-6FhQ1Um6qfFkPqsOE6uyNNTZ_-sfoZ9fllhvOaEPuWs3axxt85oWG-1Gx5rtMPQabYYjCggzMLUj76YEOv0LyRl3dmAT89g5BkC8RRo9iJoXoDuFejHX3WEloZlUVINVASmCiTpEtID61hekRemFN7f-Rk8OL_1RzgNBLpAogt8IH4k6Mh7wzsqJ6M7Kjfk260kFZHo0_Lh76Y05YtfvM0PcqXZ-m0z-Pz1oATK9uEON-kGjZmIO4Z8uSoY43pN6YCT79fNLve3M7O3muk4Sza231hbjxLNjREqHoOWqv7WCMSEPPPp89NP7f36G4QeQ2cFouyczAJBcgiTzLkbRaDlHPcTC3lWDHXNn29KQSD5fKZ-AfOf2Z_3Q03L21QUx-YeOtoCTY8QRwW6ukBXFqByAJMtDtNEn9_6xZ0GfGkNfamtkS-1vH9tsRGXldDltcC2W82G47ZC7rgeC8J6y2uzBrVdlyM1k73Rdxf_BgAA__99mFwzsgQAAA== HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.girlsdump.com/\r\nCookie: uid_id2=f38d03e5-8664-4b50-81ae-d95a31c79720:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl15478440=1; slecde21fbaed972e35daf58964d69ff178d=[6116560]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 19 Aug 2025 17:39:31 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: iprc_a+b7f961aa4561cfc7f5f333b48867b924=127602; expires=Wed, 20 Aug 2025 17:39:31 GMT; path=/; secure; SameSite=None\niprc_a:127602=1; expires=Wed, 20 Aug 2025 17:39:31 GMT; path=/; secure; SameSite=None\niprc_l+c045ee9970790b6ec029c7059384f8d1=6116560; expires=Wed, 20 Aug 2025 17:39:31 GMT; path=/; secure; SameSite=None\niprc_l:6116560=3; expires=Wed, 20 Aug 2025 17:39:31 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 3\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 0278fa38ea03a64fea7ad141bb0704f2\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:18:43.802994Z","times_seen":15783557,"resource_available":true,"data":null}},"time_used":677,"timings":{"blocked":291,"dns":1,"connect":91,"send":0,"wait":95,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-19","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}