{"report_id":"2d1f293f-0798-4890-be33-36468c7a3f1a","version":0,"status":"done","tags":[],"date":"2026-08-30T06:55:53Z","url":{"schema":"http","addr":"tds.onlyhotdgirl.com/5f47970e-eba4-4b91-8db6-3dd062f5117b?source1=8690\u0026clickid={clickid}","fqdn":"tds.onlyhotdgirl.com","domain":"onlyhotdgirl.com","tld":"com"},"ip":{"addr":"13.249.8.12","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"title":"Welcome!","dom":{"size":47327,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2999)","md5":"241b1cdf3a21b4d52e9d406643999fb1","sha1":"6692da65a47bb38095910b2441dd6618eb71e133","sha256":"5a969913cce732ae26e73f4da2464431ae60a0f07a013205986916fb65f36558","sha512":"7d6dbace57a2fc88d0b3730c595a3a6d3feec494bba596ef0f902dd110d933d99e4d797368504dfe92a6d4f61693aad9fc626e247d17a55fbe24c31c0bba5703","ssdeep":"768:+FKTwBbq+Tlh1mmXWqko2ERs1t8X5GPfrD:Ie+31mGWq04MfrD","tlshash":"89237b20d6308f3b12eb398cfbb0e57d8064e386d400506bb52dbad927ddadd556393a","dom_hash":"domhash55eb37b99ed6cbe9f4dcbe6d906a3cf9","first_seen":"2026-08-30T06:56:02.616258Z","last_seen":"2026-08-30T06:56:02.616258Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"tds.onlyhotdgirl.com/5f47970e-eba4-4b91-8db6-3dd062f5117b?source1=8690\u0026clickid={clickid}","fqdn":"tds.onlyhotdgirl.com","domain":"onlyhotdgirl.com","tld":"com"},"ip":{"addr":"13.249.8.12","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-04T06:55:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"s.chmsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"s.opoxv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"clc.clickrotate.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"s.zlinkt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"s.orbsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-29","alert":"Sinkholed","trigger":"s.chnsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"s.opoxv.com","ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2019-12-02","domain_rank":213712,"first_seen":"2019-12-13T09:21:20Z","last_seen":"2026-08-27T01:44:05.487069Z","alert_count":1,"request_count":1,"received_data":417,"sent_data":519,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"swarmpush.com","ip":{"addr":"104.21.7.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-06-17","domain_rank":354030,"first_seen":"2020-04-26T01:00:32Z","last_seen":"2026-08-23T08:11:00.924398Z","alert_count":0,"request_count":2,"received_data":3165,"sent_data":1026,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.1.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"s.magsrv.com","ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-08-01","domain_rank":47665,"first_seen":"2023-08-04T12:48:00Z","last_seen":"2026-08-29T15:48:02.043155Z","alert_count":1,"request_count":1,"received_data":418,"sent_data":520,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s.eln3ax.com","ip":{"addr":"95.211.229.245","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-02-17","domain_rank":358654,"first_seen":"2025-03-22T19:46:49.365602Z","last_seen":"2026-08-23T08:10:59.853556Z","alert_count":0,"request_count":1,"received_data":418,"sent_data":520,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"clc.clickrotate.net","ip":{"addr":"3.164.240.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2024-05-03","domain_rank":5286614,"first_seen":"2024-10-13T03:38:47.852455Z","last_seen":"2026-08-23T08:11:00.999657Z","alert_count":2,"request_count":2,"received_data":1065,"sent_data":1019,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"s.dsordy.com","ip":{"addr":"103.224.182.238","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"domain_registered":"2025-06-12","domain_rank":0,"first_seen":"2025-10-02T05:53:19.853611Z","last_seen":"2026-08-23T08:10:59.66304Z","alert_count":0,"request_count":1,"received_data":199,"sent_data":520,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"tds.onlyhotdgirl.com","ip":{"addr":"13.249.8.55","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2024-06-25","domain_rank":0,"first_seen":"2024-10-14T14:42:59.472983Z","last_seen":"2026-08-15T05:24:10.303095Z","alert_count":0,"request_count":1,"received_data":1226,"sent_data":556,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"s.dsp7c5.com","ip":{"addr":"103.224.182.208","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"domain_registered":"2025-06-12","domain_rank":0,"first_seen":"2025-10-05T05:09:59.79432Z","last_seen":"2026-08-23T08:11:00.899758Z","alert_count":0,"request_count":1,"received_data":199,"sent_data":520,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"s.pemsrv.com","ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-08-01","domain_rank":104334,"first_seen":"2023-08-04T13:10:46Z","last_seen":"2026-08-29T18:55:45.948114Z","alert_count":0,"request_count":1,"received_data":418,"sent_data":520,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s.zlinkt.com","ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-06-30","domain_rank":4002425,"first_seen":"2025-08-06T13:39:35.476818Z","last_seen":"2026-08-23T08:10:59.611946Z","alert_count":1,"request_count":1,"received_data":418,"sent_data":520,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s.orbsrv.com","ip":{"addr":"95.211.229.245","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2020-05-16","domain_rank":50502,"first_seen":"2020-09-02T21:53:48Z","last_seen":"2026-08-27T17:18:59.784952Z","alert_count":1,"request_count":1,"received_data":418,"sent_data":520,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s.chnsrv.com","ip":{"addr":"95.211.229.245","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-15","domain_rank":356919,"first_seen":"2025-07-16T14:39:46.853439Z","last_seen":"2026-08-24T06:02:22.980684Z","alert_count":1,"request_count":1,"received_data":418,"sent_data":520,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"kissflirtnight.baby","ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":70,"request_count":70,"received_data":2025302,"sent_data":51167,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Stimulus","description":"A modest JavaScript framework for the HTML you already have.","website":"https://stimulusjs.org/","common_platform_enumeration":"","icon":"Stimulus.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"s.chmsrv.com","ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-09-22","domain_rank":0,"first_seen":"2025-09-23T09:30:19.263762Z","last_seen":"2026-08-22T12:19:57.134367Z","alert_count":1,"request_count":1,"received_data":418,"sent_data":520,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/taboola_controller-77335ab2c11c7d35e7e25b553b834b8c.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa88b9fb00e08c883854f9ca50802712","sha1":"c80177df5eaf011178bcc936441197b689169a2c","sha256":"ce2b542af49225a2c04d1ac38bb113c2ab98ee0a5af03c991f23e3e772275f43","sha512":"eb6a81950d0a68b19446cdeb88e213d1508ed634f2775cc80ba1163c870fc28a603279f30d9d7c30b9d015d8ccab434fcb8675a0378c674b89d277d4fc730a75","ssdeep":"","tlshash":"1721381a2bda1b384166a0682faf7e122275409b15054d093fdc0a94dfd923e98e3bf9","size":1223,"data":"","first_seen":"2026-05-20T14:29:40.811282Z","last_seen":"2026-08-30T08:59:39.547171Z","times_seen":261,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/scripts/symfony_form-aee93db26ca3d995d28a81a3d92c3049.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3b76cc7d8d79c6cb9736f6de841710a","sha1":"f6a197165bffcca1a7d64039066a0c82a5e3148e","sha256":"dc4f401261ccf729d9031284da06975ff4b110c68fe72f7070337e86916dd55d","sha512":"e0bcf46771fa85968e362bdb515e1dba727e396720b36f2a1d7ed39ea5ba8cea7cc5a6b8b0edf68eb0fdd388ed5b28362fe675c42d3315196bc2a8a309e46513","ssdeep":"384:ftTtQicewY7a55eKN1F+fRnYIBViwSZJAgc5:1TtQTewY7a55eKN1F+03Zmgc5","tlshash":"aad21175d5e6682316a250a559a3c003a3e1c1a75d093d0cbbac13cf6fded6f08b8a7d","size":30094,"data":"","first_seen":"2025-12-03T20:42:28.86785Z","last_seen":"2026-08-30T08:59:39.516471Z","times_seen":543,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/user_attribute_controller-9c83942a590731cc7e690bdd7ba5d4cb.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"47308d8fb0ad19b491b8a403a087c743","sha1":"e2465f4487fce420c2ddf669b4fa64a4c7570746","sha256":"a2485f9d700d3cc94540a91a97c752e85f0f0a2f6d8cadf60508034b2d04f730","sha512":"7818ad2cade265894a4e8bda6ae12315797f3cc21dd78e807025888be5f4e9feacedfb8d0b52d7d21ddf9816b322c78bd6718ff70c01a7fc5464ba62e20f6bd5","ssdeep":"","tlshash":"9f41ef1a26e312f20d6771289f8fa451aaa440c7544f8f797ebc8641bf4442c22f8be7","size":2236,"data":"","first_seen":"2025-09-07T15:41:20.50893Z","last_seen":"2026-08-30T08:59:39.530874Z","times_seen":635,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/pushilka_controller-63999f245c27e0096a4779903f5722f4.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd4a8ccd016ba8cca2c145d6c2e3f01b","sha1":"c1253bac550826037452036f6b5346274ad0c0a3","sha256":"6842ceaf6ef175bcf28113a0f9775ea18f35136f47905d4a053cde9d23cc344c","sha512":"9601f112020e3000b42eb4e92a033a22c19f64782fcd832d384ab8baa984c9c6b3da111041fe5b5d07479fb509e1ced45efcdf2ab3ad0dddedbb7b35adcc9b34","ssdeep":"","tlshash":"ba41c29b4aeb076045ca70a52daf50115376800f7c586b6c7fad5e006f5ce3c5ae772c","size":1942,"data":"","first_seen":"2026-06-04T19:55:57.627382Z","last_seen":"2026-08-30T08:59:39.51542Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/@symfony/ux-turbo/turbo_controller-f3040d8b6a5a81530e1ea5ec500d1142.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6dc64031969ced1adb84cfd46af13868","sha1":"d282f73054a08e1cae48ebff8ae2c56392b63d5d","sha256":"65b1725e7ef72ba1214080a2a288cd0d7fa8f08d05679ae8965469c9d7556411","sha512":"37085ab8b2d083de4d7bf9880e408a365d70c91164ccf316ac5afdcdeeb1530962adce29eeeccc3babfdb9c0998fd0696b35de5daa941063f1c18e398384e9d8","ssdeep":"","tlshash":"13d0120534b4c3b107c550cde74aec3d6198d8c9f6c9785351942eb4b2c80eba84325d","size":213,"data":"","first_seen":"2025-10-19T15:32:53.97739Z","last_seen":"2026-08-30T08:59:39.540917Z","times_seen":623,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/exoclick_tracking_controller-27b77585602becc53ac5d432f7cf85da.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7083d7d88bbc7f0f0fa732ee16bf4e10","sha1":"cb1a17e84d9a78918b5613f206ec64a754c33702","sha256":"92cdfe33a67aa0d8b614c9338614572c0444e4b7c6bae3ec12a4fc30315d8359","sha512":"89f41805a8b774f7a6e4971958b09f008abe6c09eeb9420590ff7d55047cfb0c83bf971f2c0434eb2b22eb5dfa3100a56c1a871f7d15ec5fec7e067fbe7f8265","ssdeep":"","tlshash":"f531292b66ef0f240766b06d0f8b5941217ac01b0b05a95a7b9c11c8dfd81be45f3afd","size":1572,"data":"","first_seen":"2025-10-17T16:22:27.59883Z","last_seen":"2026-08-30T08:59:39.523901Z","times_seen":603,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/app-ecb9b55849781102e2cc6e9b140fd37a.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f2ae2a568d458190ee67649aed6ccd1","sha1":"662fe1ee187cfef5b2f2366cbed7c8460a8c45bb","sha256":"8d34a370779f8ad3e0f4704f04924b7226dd47ab462e33530cd685e4af91a29f","sha512":"58aecc2638ec5dca197cf5711b60ba0fa8d461af29f06a56fd4d23802bf35a723cff92f42d20c6dfec6a25ca388c58ad16a68a4ed471eed9c08d4bda50212834","ssdeep":"","tlshash":"a5700022ab080880c0c000082828028802a880000bc00a28020a2322880883a3032002","size":25,"data":"","first_seen":"2025-09-07T15:41:20.480885Z","last_seen":"2026-08-30T08:59:39.52118Z","times_seen":635,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/bootstrap-b845a684f371f0f2224949604dca5544.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3aa195cafbbbafd42a7edbc613046c28","sha1":"e3efb9ad0014e5038c7f92c834845cee4b9663c6","sha256":"73e65bd84ea6825b108b96d2be0ae834cf861e236e5c452169c8bdd7d737e0e7","sha512":"26b9b5bc3916d9c63a9f8561771e1845dbae6068ba4543aaf46090c7699a92d8c7e625982ac3041e7e45df44177cf8bbca96008c5acd9c262b56c28cb644416a","ssdeep":"","tlshash":"8ea0110a080a8a0c8cce08bca00223080f8082300e828b2a0a8a0322c88e082bb008a0","size":81,"data":"","first_seen":"2025-09-07T15:41:20.516872Z","last_seen":"2026-08-30T08:59:39.514736Z","times_seen":635,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/page_analytics_controller-05ff90e2a0a3734889804ee94d8e9b31.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0892a14a768f18c73c319ca4f19d17a3","sha1":"c3e83c08d0be8f46fd64dac76c17bc2041512751","sha256":"82124847224ac9d1def3ac39ed1e25045af7d7bb17a7dc904f6d38ab4669e670","sha512":"b9432b7438383fbd44969378d78f87d29759140384f90bb06e882292e2eee053c2be0d46a6e5dba383edab398347204985eabfb9fea89795a29fe0e26ff7690e","ssdeep":"","tlshash":"0f41cb8146b7528166e2222e971f7704d52540933d0bbd853f0c4760bfca62b74b1efe","size":2134,"data":"","first_seen":"2025-09-07T15:41:20.507893Z","last_seen":"2026-08-30T08:59:39.501637Z","times_seen":635,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/backbutton_controller-375e60b22b1c2f25f013c9cb48276de7.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ddaaad2082c4359dcb8d36f5ce65ee9","sha1":"c662d74fca59db4f91f3a35fcf9e5d381342d0bb","sha256":"d90921632050b7f7e4a0e2fad075b2ba99cff970356e691180ef9df5d82222c0","sha512":"845e6f96b07828bcd8e459322d6e5dc06979dffdea1f0a57ff6eef568679db5349dab33fd8178a20d4e25dc5c803d1de8797acc6c3eecedb8f076a3676bb8403","ssdeep":"","tlshash":"aa01475e62e244310aa770424f1f622871eb901b6a296f09ff6d4be1bf5456b0441b8e","size":828,"data":"","first_seen":"2025-09-07T15:41:20.525381Z","last_seen":"2026-08-30T08:59:39.533166Z","times_seen":635,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/trafficjunky_controller-21b92619b31e7b3e8fcdc34a853134be.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5b0b41b0703a74ec988578930719a6e","sha1":"bc0adb04f92f8e3356fc40bad398383b16addbea","sha256":"302119d2b59cb7bce51bc5eae97c835ac284e0ab01a610621a000ea9a4153167","sha512":"6dad77bd8e257dfa5eb6256f89b01679e5e946e2b0385154a8ca2e15727e745a23886a84b475f4eee72b5c8491cb24248b9fb0244b3d0cf56d4133e5c64c3281","ssdeep":"","tlshash":"8121474a2a9b0e350263b42c2f8b6645723941d781490e097fcc4bd0efd863f98a36d9","size":1397,"data":"","first_seen":"2025-09-07T15:41:20.464282Z","last_seen":"2026-08-30T08:59:39.514034Z","times_seen":635,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/targetbutton_controller-6880b7c186e90274417e80597f0b2b70.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ceadaf511cdb77e81ed086eb23939f4c","sha1":"0f6dc6de01b1e775b0905663d22c1cff39bd1fec","sha256":"6683085b01409d13578282c266d6b49fb9416e4f86d7fd7f84bc02a0453a60d6","sha512":"c263be9fbc7247bec06f0fbbfa2daf91d2c4baebbbc7d2efcffa4109b0ba7aac3023581c7aa00597be502eb703a05d3f3511e4fbfaf36238ee5fc29e53bc8076","ssdeep":"","tlshash":"77d02e5620a363a0023f308eaf1ba9b96140e0c3bb0a46497f8c0b30cfec0319187788","size":278,"data":"","first_seen":"2025-09-07T15:41:20.517948Z","last_seen":"2026-08-30T08:59:39.499151Z","times_seen":635,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/reg_form_controller-fd857b9855f60ae714a52554abfbac44.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0dfa24e05dcb687e09b1e21ca9c51181","sha1":"560c465ca5bb9a14cb11b502177c343bcada58ed","sha256":"5468c7048386bfebc0cfc1bb607f9aed234d5a5e8787a482a0d7297d1f2d0da8","sha512":"4657f148a0f81ced6affe58b40448fab9ac26902de34068597ef53b59c0ab1077854820014ad77a7051c9e18690411270de456a843238a14edb0774852fc63a2","ssdeep":"96:fI2TG0az3MqZWh6ZhkXEiCL4nxKO/DIXiNYSuIl2YcU+l3r+z3htauFM4YSZbMCr:fXHccGSwW0p8xKg5uIUU+lyrji9Ksk","tlshash":"e902ab2512fa10d4c2a7522a6fcb6111116ed2835e49ae49bfbc47940f8c93e68d8ff8","size":8907,"data":"","first_seen":"2026-08-09T12:18:07.370841Z","last_seen":"2026-08-30T08:59:39.511733Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/vendor/@hotwired/stimulus/stimulus.index-af27b0728a07bda78f2ee3ba84fd1d21.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a1504323404b685ef2a47f206d87526","sha1":"c45cbca188e451e06ccb51d66dd16b7501163113","sha256":"73edeb2da02d53524d4cf8557854bfc6276c4aed7f22867d0a5bec872bb64e3a","sha512":"484185a800495f105727459d4b21c6345d97edc1219319390a3eb4b6e73cf889897cc2716134e0165c34a8b9b18d0140ac5eb69733d9c2343af8748c5a11b66a","ssdeep":"768:/1joMBqOMlejHxmwEdCsiQ1PrEEIqo/cqiAUjDIFOn9RvSDIvQHqgMSXH7G2dYWH:/LCdCsiQ1PrEEIqo/cJBjDIFOn9ADIvW","tlshash":"6e23a5a133d760b703da449fe462410af31969e97809406cfe7cacd7bc70d45a2b7ab9","size":45973,"data":"","first_seen":"2026-06-30T05:59:43.170896Z","last_seen":"2026-08-30T08:59:39.507814Z","times_seen":131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/vendor/pushilka/pushilka.index-e62f03129dbd16e46856d53f1dc2cf08.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"57448b1c4953da03cf16ed72f30100f6","sha1":"e31a561a3116baac6ec0000a899d331812d234d9","sha256":"1f52f0596357c3957398dabd602816a7011dd937038b3aad8703ec27f85d65e4","sha512":"9f3f0f9e91903000ececb0633219a328916c9daf3894e9c1d9fcc8ed4a5c0bfcf1fad55276a45a613980738301b74706ef911601f08ce718ffd1d230be5d13e5","ssdeep":"192:iBK/V0maaX3mEa9K85RoEMMJ079RzF56F:vt0mpVBsMfW","tlshash":"02e1842a354abb3517ce600e262e5788c3b759663cd60878bf8d0dc02e7dd1641a7b70","size":6873,"data":"","first_seen":"2026-07-03T16:50:41.949115Z","last_seen":"2026-08-30T08:59:39.517781Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/vendor/i18next/i18next.index-aba15d29e37ac3e2996cbfa770dd6c1a.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"73ca468fbf89203d41f6bb9d5c9a7c1b","sha1":"1f4fcf3ba15c4b5b31e4d9a0d2c0dbe68198265c","sha256":"ac09895e200fa8905cc3c8909e651c2d5ee383fcd9fc797c2f60380818671468","sha512":"a446b84162fee406c043b17fa47955be0b6a6a1e9e55aa5e4726602dcf8893ac44e23a24dc38338ba921971a7fc653b48cafb2c0c3e32de30844a5a217843578","ssdeep":"768:fqKC06XNG9N517ZCzMQeneUSguXPS0NvHAWyNkCMn3yLAl8bM1dLw/+zIyvTAf9r:YuN3FRy3zda5g/ijtojOfm/G3","tlshash":"2c1309c572ebaa2a03da91d570601504db25a9593448680efe7dafd7e4c3d0693fbf30","size":42281,"data":"","first_seen":"2026-07-03T16:50:41.975812Z","last_seen":"2026-08-30T08:59:39.519631Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/vendor/i18next-browser-languagedetector/i18next-browser-languagedetector.index-d6b39b26ea0b082467c4f58a92bebbf0.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"658f6bbcd57195b9a4bcbe02a9d0d656","sha1":"6549454bbaae0530f7f38bf6e1f38da9247f54e3","sha256":"fbb7fa089d68412cb6600ca56ba79f5c3d81e49f5349868cdd63efa9e50d41b9","sha512":"39fb15aa22b05e07e54a3204398a0d33e4086ee1633530a048aca9adc430ada29ad74ba99d0803b934c4b75d2eaa781ef1e7cd3f7c33cb05425fb29012aea08f","ssdeep":"192:LhOahqWDJiqOZj9RZWyjS1QJ/UoV2V/h5wJUxERJl:9OahjNObRFj8QJ/6p5w1","tlshash":"66e1c958b64a509702f600dc3877aa05b23259d0784cac9cb159ff737885e47a2fb7ba","size":7193,"data":"","first_seen":"2026-06-30T05:59:43.175899Z","last_seen":"2026-08-30T08:59:39.508737Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/@symfony/stimulus-bundle/loader-5751ad1ee2975e725a94d8121d153d17.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f9c485655cbe27485a8859fa8d70b2b","sha1":"190dd1f92062c5d4d94cf5ad5b2cc32c84d808c7","sha256":"f871d8febde50ffc633b3e4801f6927b1ae46c841a1d7f003b13d255d144a13c","sha512":"4cff862dca39fde62705c805a2560cb5a3c924919aa1c8308bb0ed81c6d2da2debb98812ef04e380a371be8bc4af53a8f769c82c56ebd160c4240b71b4217a12","ssdeep":"","tlshash":"a5619bd5b4f613b207db28aeff16987ca231a0cb68459d43795c7e904fd10e8b3a3860","size":3289,"data":"","first_seen":"2025-09-18T16:05:37.399686Z","last_seen":"2026-08-30T08:59:39.532651Z","times_seen":672,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/fix_tracking_domain_controller-a5706d3221917e320f4a03d6b64f29fb.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"07fe2430d883316f51344cdfcff0954c","sha1":"39eebe1806a57e21aa69243417c0be9423d8f9b2","sha256":"d2ae5153415ac9944b39d311edb681e2ebb0905523a68147545800f9947f8c8a","sha512":"c68c7e92a1b78791158727d96a373de8f79d0dce8cd2e92c9c5364b3652e0562b93bbcfcc064a79b2aade5a424b9c2937216e5f4dd111b8d4355cc8d9312649a","ssdeep":"","tlshash":"ff314c4913e142bd4563705dfb5fe2996198c09f288b89deff1c82905f8093865f2b89","size":1646,"data":"","first_seen":"2026-04-06T04:49:55.197574Z","last_seen":"2026-08-30T08:59:39.509958Z","times_seen":370,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/@symfony/stimulus-bundle/controllers-9450ed57c268b89ac2abbbcd3046bda8.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b13006aa5dfc128101790b18fece4f29","sha1":"6afe1b321ebc9460728ca966b9802d030a822e46","sha256":"67e5a03ada03d14ff27686237782b6c0e1ea9b74e88a085e1a12fbcb05b492b5","sha512":"87a243ad0c8725f5d02793514d914856544226561db91da4539ebf7cc34d4f12b18bf4eaf52e1d93a57fb727ad052dbc96041b45b7c8ffb800ddac358346ed5b","ssdeep":"384:2mDFXsnW+vuF3A3CGju3QHwjCig0NyPqzAxFQPs+jV63yxunTsgDvQ8FYTVMSzkm:nDmd+0anV","tlshash":"9762be259630673b17d6a85df79af97dc331f9c1e3002603980f3daa93e82e86993456","size":15365,"data":"","first_seen":"2026-08-01T11:29:22.161001Z","last_seen":"2026-08-30T08:59:39.542762Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/aliases_controller-20caf158d7696affeaeab488106ff238.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"00d7d7b3729cf2fca2ac20ab450d0c5d","sha1":"648d336366510911b1e06c73c8ace6fcc250eff2","sha256":"54ea250d47eba1498665f79e57f0e9b4582b3f8503a8a84012c6d18e694ce6de","sha512":"ec993d2ea623517c9990548df1d3461caab7ac3586ab4afb9cb1c5dbd20688d61446c2d83df4e55ed8d57072440f8de9b5d7032a5397c35410ca84222ba12819","ssdeep":"","tlshash":"0e41627e01fb0e0a49b1107fce0e6335112550332c49fe84bdae8a949fc992d6176fe9","size":2279,"data":"","first_seen":"2026-07-24T22:29:03.042268Z","last_seen":"2026-08-30T06:56:02.64561Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/exit_popup_controller-9cc3ae8381f15ddd78ea0fbd2141526e.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6672ccb6d3b0063f32a1b665e8dbcfd9","sha1":"0dc5eaed2b4f5ee521a8fd641b807b4da9a3b6e4","sha256":"e329f619f60446fd5262bb46d5b398a0bcc5aca578f0236cb5db5374a0b78ad5","sha512":"744bc2dfd1c07ca83eaeb4857291a5bd0e8933c0e146ba2e3426963a0ab9caf00e4cc30f8223e9cea044bc3df0997c0b586b38f7aa9cccc2b1752295a0d7bed1","ssdeep":"","tlshash":"c2f0e50e68fa9260017b345d1e0f9039a9e0a40f264a8f40be5c8bb2cfa827c965270c","size":487,"data":"","first_seen":"2025-09-07T15:41:20.48348Z","last_seen":"2026-08-30T08:59:39.500812Z","times_seen":635,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/vendor/jquery/jquery.index-320ce5db7d5a1437225818702b995851.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"521748d21918480689efc38711b7373f","sha1":"edbb48857badac2bd413ef70c5654334eac26031","sha256":"ba52a36cefdd1b60052decac503adbad04c6b2b9563105e29a101070114c6e87","sha512":"2147abb8de580b4da06b622f122da3a795973d6c38b5f0dda127406651532ca0a56792539b17f086cb62cc6bebe75a3f8a3cdee498b5a4aa814015b9c667ed02","ssdeep":"1536:AQPJiqTilKwwcaOYr2gObeM8tClDK/GVz2MlBlrqq5rXm4+c609:AQvOM2glM8CIuz2MFHwc609","tlshash":"aa8309dcb2c7746343ab60b9007f650af2366899280dc510f069e8f9bd75a4a817bf7d","size":87694,"data":"","first_seen":"2026-06-30T05:59:43.177417Z","last_seen":"2026-08-30T08:59:39.543613Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e017636d2d37fb3c3509e85cba17e99b","sha1":"24e506f3890ffcb7bc936c19c0af42605585369e","sha256":"482f43889b2783bbdac2e11e873d9ea482fcd6d02ba54e9fea55d66e0e2d8da9","sha512":"59dce116d3d46bfadd99b4b50d796d6f8a4718e28d4e3260fe34a119e6cd85eedade42452854b8aa5efbd81b41299f22d75d37fd3fd032316e742782a51aeeea","ssdeep":"","tlshash":"ffe0267528c64a301b9b207f733dce4a361a10472850ea1a7ccd98449f54fe78a34b6c","size":431,"data":"","first_seen":"2026-06-06T19:32:43.840994Z","last_seen":"2026-08-30T08:59:39.556394Z","times_seen":199,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/layouts/registration_open_controller-ae03a4f7f22650cddff381b5f8035612.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e311899c9ac26e5ef6a43dcfaeef5b3e","sha1":"46e0eddea17f3bab429bd3bf86127842558be196","sha256":"64d3cfee4e350f1c63d87915d59814deb1fee8048a2cf3e6a3ec12ee25ee8118","sha512":"889306b5f64ac6d0cd9bcb031b4d1c501844848d8df595a8c2cc96f0f898a11f6cd7d67b1ed52d92ee2cc843e430758909fb12bca443ac17d34662e9453cbc7e","ssdeep":"","tlshash":"98117a0a7176466824bbf05b87abe4591615600f710acf1db9ce0be04f84018a9cba9c","size":1081,"data":"","first_seen":"2025-09-07T15:41:20.490931Z","last_seen":"2026-08-30T06:56:02.626558Z","times_seen":167,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/scripts/page_controller-82dc12886df7d0b869b74889e9b037c7.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e5f25edd5fcc392508cb0e422b226bd9","sha1":"3f79fdc01224f97219f75ae3440fdb91b1f52d74","sha256":"0167affe7b11ffc2e8d2122491d93c53671760a8010cf197a4b34f7b566462ed","sha512":"afee9f16c5bbef52db17121410bbfe7f7ddfa2b71bd75a4253ebf241dbb55c19fbf481c7402eaae5dcd0968a84011c397982c6f4739399853314c44b8259a47a","ssdeep":"","tlshash":"cfe0cd0112b657f041ae305dff09ac7f6251f1d75555175778cc0d30af890f87556650","size":359,"data":"","first_seen":"2025-09-07T15:41:20.528839Z","last_seen":"2026-08-30T08:59:39.524901Z","times_seen":511,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/vendor/es-module-shims/es-module-shims.index-d5e09080ddef5888637fadf109664626.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a087982c51573a148ea3821f9e10069","sha1":"05d39d88fe3a7334a5dcfd341e03d8732fd1e787","sha256":"475facb739e5dd261f3303a277c56152e194be171f205e92287fd54d8aa13918","sha512":"e16cb7861b0d25ac26708ade991804e343c28f05f49f1524f8fd9e2d67c9972bdd2e878f2297d8b9b22a7c53f88f07fca9f2f20535e5925b90d3b6b94a3f162d","ssdeep":"768:4MpkOFXGX04ceeZdqu0g+jgClI1Ypf0VoxCHbDbFkOqrVYBPQWTr+CPDCTFJbJID:4WDy7jIGiHOTFDM5bu6H","tlshash":"54030b4530feb03383c23ae350ab725b5a24495cfa085825b764ff57a8656e78c23fd6","size":37695,"data":"","first_seen":"2025-04-11T11:14:30.137663Z","last_seen":"2026-08-30T08:59:39.513168Z","times_seen":639,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/alert_controller-a1df9ab33f2fef598a62c6e9a3eb38a1.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4ca234f38903bd3eace881adde99465","sha1":"142be859dfa92f7ffaefad347c7bdcf1618419a9","sha256":"47353a9c3963fa044dcd4d9c48cc343dd394eb7663e4de9802d0483e741ab1e2","sha512":"cb0d79632a1163f7d72d92203802229d982cb8845dbb16ff6645a76f8a98df2cedf83e2cdc9142ce89214fc9cf903f5ea485e7591227c9de9dc82630eb3fbe42","ssdeep":"","tlshash":"3a81cb2af0bb1cc2c127214a3d2e7692a074849ba9b63c32b94c7b4d8f061e9c65d770","size":4076,"data":"","first_seen":"2026-02-13T06:57:49.19788Z","last_seen":"2026-08-30T08:59:39.522688Z","times_seen":445,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/popunder_controller-1c759d45c74a32a1291b0851f8a349b4.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"30ce8b9cb65e800bded97b5f49b7af04","sha1":"601a0318e36bae5702884f2c1707c5b559e0f369","sha256":"91ac0f7f509764b2e68c03927a8fdcce23888c8103782f9962b8fa23cd792950","sha512":"747d6dace2302340a90588d4d56cf0242f93bc7c1a289e3347eef945111a42c1408fbceeb340b65b16f09cd3cea83b76065ee33354c80e0c0552f598cc484866","ssdeep":"","tlshash":"4d210e5475f384a0817f30a28f6f521020b7e4bf381aaa67ff5c4f10af4021ea545bd8","size":1120,"data":"","first_seen":"2026-05-27T06:41:42.47605Z","last_seen":"2026-08-30T08:59:39.504932Z","times_seen":249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/telemetry_controller-8a4e57e20e75295b74bbb1ab55f58602.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfbf0fd289d91d5c85105c4fe68e9c0b","sha1":"e0331d97cda634189d4375bc82748a057855397a","sha256":"73c80c590a2dd669ed68cd92fa446471064c6c1a938cd3454ca2f562ce1014f6","sha512":"6d1472ff46a77518b4fdabe068a4def3eac0c922d73036c01fd77a63cc7cfa1bdd59e2ce3ba6cecb096a506a927c4720524d4bb6f73be8f8c890646faa4e96b6","ssdeep":"48:2T3svppMd/AVgdUGh9r563UHeBch6+pM4lNWudmXr6+aqHSeaPJcVvQVXdTht:2T38f0eor563UHeBcHpvy5aP+RQ/P","tlshash":"6da143ea1533205501b6265fa3075349713690573f0ab9827b4c83342faeb6b72b6ff8","size":4629,"data":"","first_seen":"2026-02-28T19:38:24.553622Z","last_seen":"2026-08-30T08:59:39.50339Z","times_seen":415,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/vendor/@hotwired/turbo/turbo.index-e673eeee48ff679f524833e318f415ca.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"54bad1c6cd0580f26d26b547a48b8572","sha1":"f79e3d50b1ffb01a875018bc089ab9bc560e2807","sha256":"3ca1dd5c39f340d6d41542fff00708ae2b79acf470870cd8933cf24a456c2a68","sha512":"28565ce6fc4f8438ee5687a890c44406adab41f7058554fd513d1b22d25f8b0b9c2ee05734109f21f9b62c5ce02d5291c0479cf3e5752f91bbd9928753f59637","ssdeep":"1536:/8dPkURrX3Z63LjN2Ggz7lLlaZf87kI7NU9ljVyzcMaO5RTTSAqOvSApqxAvbEOb:uPkbyA/qOsOFZ43t","tlshash":"1e73b8d63366647547de44ffe4224201b2233895384a807cb92cacdb6d7de89a776fb0","size":76656,"data":"","first_seen":"2026-06-30T05:59:43.185618Z","last_seen":"2026-08-30T08:59:39.553591Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/scripts/misc-443a692d3b24a294b703e50c9146e8ab.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"abd1b5c01c188655840dcf19c5b54655","sha1":"53e981fc1e3632112f7a4bcab7df34c20b9ca024","sha256":"c01bef67d4bfabd7fa343a25cefd24a8760079326d366052932ecc25870a64ac","sha512":"62708c157b032297f181ffce8687a134ec87a00c5d79ef2be82e5e360426abdf7f849190fc69b3e783d5d35bd06ec7440f045e75879487fafa0b4bae9ef8e6b5","ssdeep":"","tlshash":"06213b4f3ae229864a1371785acfd01576bce1c7b54c4714bdbdea901f15938c1faa84","size":1151,"data":"","first_seen":"2026-05-01T12:35:49.482254Z","last_seen":"2026-08-30T08:59:39.502369Z","times_seen":330,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/vendor/@hotwired/turbo/turbo.index-e673eeee48ff679f524833e318f415ca.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.693Z","timestamp":1788072923693,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/vendor/@hotwired/turbo/turbo.index-e673eeee48ff679f524833e318f415ca.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2FSbS1y97ZrcpUw6oawT%2FHX3i%2FVaeWpkTi72jpLGInyIET8uNJ92LaGOaa%2BQMEKLnneCgXNqN5M4ueNQanxhWdzvPWc0QDZ4CvAqhNoWOqFUTv7VkXg33%2FQ%2B51i3fd%2BdzMJb25oH\"}]}\r\nlast-modified: Sat, 22 Aug 2026 15:53:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a89c5e6-12b70\"\r\ncf-ray: a331e3bd1b6c56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76656,"size_decoded":22674,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (38527)","md5":"54bad1c6cd0580f26d26b547a48b8572","sha1":"f79e3d50b1ffb01a875018bc089ab9bc560e2807","sha256":"3ca1dd5c39f340d6d41542fff00708ae2b79acf470870cd8933cf24a456c2a68","sha512":"28565ce6fc4f8438ee5687a890c44406adab41f7058554fd513d1b22d25f8b0b9c2ee05734109f21f9b62c5ce02d5291c0479cf3e5752f91bbd9928753f59637","ssdeep":"1536:/8dPkURrX3Z63LjN2Ggz7lLlaZf87kI7NU9ljVyzcMaO5RTTSAqOvSApqxAvbEOb:uPkbyA/qOsOFZ43t","tlshash":"1e73b8d63366647547de44ffe4224201b2233895384a807cb92cacdb6d7de89a776fb0","first_seen":"2026-06-30T05:59:43.185618Z","last_seen":"2026-08-30T08:59:39.553591Z","times_seen":126,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/layouts/registration_open_controller-ae03a4f7f22650cddff381b5f8035612.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.705Z","timestamp":1788072923705,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/controllers/layouts/registration_open_controller-ae03a4f7f22650cddff381b5f8035612.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RxJG%2Fc8XxQ%2FGtBVOYWyXgX8yQlF0TJh3gwpUFEoHhD7s7whmFQEvzlIrZpSyiKa1OxPjYgr6TMX52D7Lv7HZGcqP51YGdqCxAgpwxL%2BYHMUqdVZYiGHQ%2BKSAOPFUzmAJMb8Oj%2FbJ\"}]}\r\nlast-modified: Fri, 08 May 2026 12:00:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"69fdd04d-439\"\r\ncf-ray: a331e3bd2b7256ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1081,"size_decoded":1233,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"e311899c9ac26e5ef6a43dcfaeef5b3e","sha1":"46e0eddea17f3bab429bd3bf86127842558be196","sha256":"64d3cfee4e350f1c63d87915d59814deb1fee8048a2cf3e6a3ec12ee25ee8118","sha512":"889306b5f64ac6d0cd9bcb031b4d1c501844848d8df595a8c2cc96f0f898a11f6cd7d67b1ed52d92ee2cc843e430758909fb12bca443ac17d34662e9453cbc7e","ssdeep":"","tlshash":"98117a0a7176466824bbf05b87abe4591615600f710acf1db9ce0be04f84018a9cba9c","first_seen":"2025-09-07T15:41:20.490931Z","last_seen":"2026-08-30T06:56:02.626558Z","times_seen":167,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/layouts/registration_open/i/green_back-5044bf5f316525b30f245b054efefca3.png","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.731Z","timestamp":1788072923731,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/layouts/registration_open/i/green_back-5044bf5f316525b30f245b054efefca3.png HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/assets/layouts/registration_open/css/style-c8c2af75fe07e66cbc8e860791572fbc.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 08 May 2026 12:00:14 GMT\r\netag: \"69fdd04e-f6954\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ivhyU26rh1XQnwUK5uqOkW6jI3a0jxM%2BZ59f2A4m5YmQKnrbVsnhcbQrlW%2FeTU7NotBMLXHqcLaPVY8GULnXA7EnZw5SStj8vu1TlHkGTKAHo4ZEoxwAHEtP2hAuiab5O2FkD2%2Fm\"}]}\r\ncf-ray: a331e3bd5b7556ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1010004\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1010004,"size_decoded":1010750,"mime_type":"image/png","magic":"PNG image data, 1850 x 966, 8-bit/color RGBA, non-interlaced","md5":"164019b7e8d54d1571b42407247ed5f2","sha1":"335ccc6ef313884b12ebeed90f6210650f830415","sha256":"0df6b04a9c3fbb0a5207480b9cacbdec0cf687f422d8906be2862945d6d48dc6","sha512":"1b135aa73e9823800131edc728e7a6c31c1778150b42bcfe4817316152480338ef18f8587aa07439970fc2638b394325bf7eaa8aad916ecb19d45f6f5f2978ed","ssdeep":"24576:bHObjPlNKWKrzTnGO5Xr8gznk6/fdLhcY6TwbXo:bubjPSWKrRpYgznks1w0bXo","tlshash":"eb2523c7b2de63409f8779b1e6ae124c99d7ef15c3f71842a632f44012e99642772b0b","first_seen":"2025-09-07T15:41:20.499227Z","last_seen":"2026-08-30T06:56:02.627863Z","times_seen":102,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/exoclick_tracking_controller-27b77585602becc53ac5d432f7cf85da.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.805Z","timestamp":1788072923805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/controllers/exoclick_tracking_controller-27b77585602becc53ac5d432f7cf85da.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1hqvPKV1DqG%2FtXdS%2FYLCHdHD9DNW%2FB36Kv3vbtkx2hkZDuQGEbsRdZMpzIbSUfMV3zMXZvpGaehtNNly6ObfZRm%2FLWv70Pn3%2Bj9fhAoQn7ylxrM04QU%2BY9IllZVj4MWrbtTaFAy%2B\"}]}\r\nlast-modified: Fri, 08 May 2026 12:00:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=63072000\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69fdd04d-624\"\r\ncf-ray: a331e3bdcb8556ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1572,"size_decoded":1340,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"7083d7d88bbc7f0f0fa732ee16bf4e10","sha1":"cb1a17e84d9a78918b5613f206ec64a754c33702","sha256":"92cdfe33a67aa0d8b614c9338614572c0444e4b7c6bae3ec12a4fc30315d8359","sha512":"89f41805a8b774f7a6e4971958b09f008abe6c09eeb9420590ff7d55047cfb0c83bf971f2c0434eb2b22eb5dfa3100a56c1a871f7d15ec5fec7e067fbe7f8265","ssdeep":"","tlshash":"f531292b66ef0f240766b06d0f8b5941217ac01b0b05a95a7b9c11c8dfd81be45f3afd","first_seen":"2025-10-17T16:22:27.59883Z","last_seen":"2026-08-30T08:59:39.523901Z","times_seen":603,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/favicon.ico","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:24.231Z","timestamp":1788072924231,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:24 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DMvyFHn4NcBFK1dyhaXPp5%2FtevmNXNF7zZRnlu8PkFt20QjQGtSgypBdRfs1cbyz29p%2BD3DCbfddAT4erXHvaEgY79ibJV77IFPmT4ktF%2BxR%2B8zYeSxGpv9Z4sI5VxlszNZ4D1Xn\"}]}\r\nx-powered-by: PHP/8.1.34\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 08 May 2026 12:00:13 GMT\r\npriority: u=6,i=?0\r\nstrict-transport-security: max-age=63072000\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a331e3c07bb856ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":950,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"569fc2c853fad4468a8e204fecd79413","sha1":"4c4f56f988bf63610234885f20617196bf81f36b","sha256":"6d9b88dd25e3d2b532aaa85364e84f299868031f16ec07ffb15f59406c824a2a","sha512":"0ac0f74dfe414d9ffc5dc78b2a6be3b03203851dc517ee54fbfc0f69c4c4d032ee98adb56043f77b1facc6256d193a9b82dfa54c18a41c7a5d7bdf2ca473d148","ssdeep":"","tlshash":"57215759720081a9ce4a393ded8ff52123687e094a6432f730823f3f390e814ca6655f","first_seen":"2023-05-27T07:13:25Z","last_seen":"2026-08-30T08:59:39.54865Z","times_seen":1342,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/reg_form_controller-fd857b9855f60ae714a52554abfbac44.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.815Z","timestamp":1788072923815,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/controllers/reg_form_controller-fd857b9855f60ae714a52554abfbac44.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CqzX39p12IrYyRBL%2FdVfgPjDf9uKR7Aq6VllyLKC5knjcmdyHvYkXUCbx83yVLbXgIhafVC%2BsE3WojwztgB7Omi7j1gXqbA1NBy361rzPGcbHHZtBoLJWCRm0QFu%2BX41I20RASep\"}]}\r\nlast-modified: Fri, 07 Aug 2026 11:55:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=63072000\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a75c7b1-22cb\"\r\ncf-ray: a331e3bddb8a56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8907,"size_decoded":3015,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"0dfa24e05dcb687e09b1e21ca9c51181","sha1":"560c465ca5bb9a14cb11b502177c343bcada58ed","sha256":"5468c7048386bfebc0cfc1bb607f9aed234d5a5e8787a482a0d7297d1f2d0da8","sha512":"4657f148a0f81ced6affe58b40448fab9ac26902de34068597ef53b59c0ab1077854820014ad77a7051c9e18690411270de456a843238a14edb0774852fc63a2","ssdeep":"96:fI2TG0az3MqZWh6ZhkXEiCL4nxKO/DIXiNYSuIl2YcU+l3r+z3htauFM4YSZbMCr:fXHccGSwW0p8xKg5uIUU+lyrji9Ksk","tlshash":"e902ab2512fa10d4c2a7522a6fcb6111116ed2835e49ae49bfbc47940f8c93e68d8ff8","first_seen":"2026-08-09T12:18:07.370841Z","last_seen":"2026-08-30T08:59:39.511733Z","times_seen":14,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/layouts/registration_open/fonts/GothamPro-d6ec97ad5bb237ac61540ba836eb0786.woff","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.737Z","timestamp":1788072923737,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/layouts/registration_open/fonts/GothamPro-d6ec97ad5bb237ac61540ba836eb0786.woff HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/assets/layouts/registration_open/css/style-c8c2af75fe07e66cbc8e860791572fbc.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 08 May 2026 12:00:14 GMT\r\netag: \"69fdd04e-51b0\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f3IaFKpGulzUcfvg6MmxRH6ZF1ds587fRvW673qW%2BBYohhHp7quQUa6HzTPanX5wiQiJguviBeofdY%2BBC8nBlXw8HNQ2h0d92qfEZ%2FuwXU7QyG%2BVsQMWXoBfwnC3zSQFeUNpxiwD\"}]}\r\ncf-ray: a331e3bd5b7756ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20912\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20912,"size_decoded":21660,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 20912, version 1.1","md5":"3cb46b372ab77d032576b9f70c83d1ff","sha1":"00c5e00a04e586921e216f0614b324cbe2de408f","sha256":"bc3e2af807f5dbfe08810fc2050080825050d3b60eaeffa67e82f42021d7023a","sha512":"d50900db6bf3e470bcfcfeba9772d62789d51735c6e4fecb98d71de5169090239db188f9ad70d8b479ecc9e26134ad3072060bb8ee81a3075592624b9bb7bc06","ssdeep":"384:e3MnywwhpjhuAsG00StcfkWAre7fTN8OPBY3POmEeN:e3WiPli0StxWnvmOZ0OmE2","tlshash":"3c92d1baea515ecee54f51b6c9c723bf91942360365e7583d0b7a38e71a30f2cc46406","first_seen":"2023-05-10T15:33:27Z","last_seen":"2026-08-30T06:56:02.632767Z","times_seen":803,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/bootstrap-b845a684f371f0f2224949604dca5544.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.779Z","timestamp":1788072923779,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/bootstrap-b845a684f371f0f2224949604dca5544.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9PiRjv1RCwM%2BNcsM%2FH1ZZ6cgrgawbNs44JkqyA9FsvjHBhcL%2BIhBmuMqGFCpds3qDxaHsmBiugWdzjbIm87GkKfJnABbvhyzWdWWZU8khG7GLPQILP3rrRrtZLWTHybqyJe6Pp4W\"}]}\r\nlast-modified: Fri, 08 May 2026 12:00:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=63072000\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69fdd04d-51\"\r\ncf-ray: a331e3bdab7a56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81,"size_decoded":815,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"3aa195cafbbbafd42a7edbc613046c28","sha1":"e3efb9ad0014e5038c7f92c834845cee4b9663c6","sha256":"73e65bd84ea6825b108b96d2be0ae834cf861e236e5c452169c8bdd7d737e0e7","sha512":"26b9b5bc3916d9c63a9f8561771e1845dbae6068ba4543aaf46090c7699a92d8c7e625982ac3041e7e45df44177cf8bbca96008c5acd9c262b56c28cb644416a","ssdeep":"","tlshash":"8ea0110a080a8a0c8cce08bca00223080f8082300e828b2a0a8a0322c88e082bb008a0","first_seen":"2025-09-07T15:41:20.516872Z","last_seen":"2026-08-30T08:59:39.514736Z","times_seen":635,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/@symfony/stimulus-bundle/controllers-9450ed57c268b89ac2abbbcd3046bda8.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.789Z","timestamp":1788072923789,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/@symfony/stimulus-bundle/controllers-9450ed57c268b89ac2abbbcd3046bda8.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UZiQDukXDmDTomQ9KaO7FmYuMiTQZ6LFgBHju6neD9N9UagKZXZAhst62KMKakZwecf9Op2i%2B8Me6SRakrQBKWWkMd4RxhsiVhgZDjmDJnKfJi9PSRpMf%2Fdhw4Pp6QVcTvW2qzdO\"}]}\r\nlast-modified: Sat, 22 Aug 2026 15:53:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=63072000\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a89c5e6-3c05\"\r\ncf-ray: a331e3bdbb7d56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15365,"size_decoded":3169,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13666)","md5":"b13006aa5dfc128101790b18fece4f29","sha1":"6afe1b321ebc9460728ca966b9802d030a822e46","sha256":"67e5a03ada03d14ff27686237782b6c0e1ea9b74e88a085e1a12fbcb05b492b5","sha512":"87a243ad0c8725f5d02793514d914856544226561db91da4539ebf7cc34d4f12b18bf4eaf52e1d93a57fb727ad052dbc96041b45b7c8ffb800ddac358346ed5b","ssdeep":"384:2mDFXsnW+vuF3A3CGju3QHwjCig0NyPqzAxFQPs+jV63yxunTsgDvQ8FYTVMSzkm:nDmd+0anV","tlshash":"9762be259630673b17d6a85df79af97dc331f9c1e3002603980f3daa93e82e86993456","first_seen":"2026-08-01T11:29:22.161001Z","last_seen":"2026-08-30T08:59:39.542762Z","times_seen":18,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/fix_tracking_domain_controller-a5706d3221917e320f4a03d6b64f29fb.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.808Z","timestamp":1788072923808,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/controllers/fix_tracking_domain_controller-a5706d3221917e320f4a03d6b64f29fb.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8S9cnpyilO34sBKIq9cKCybRNehqEGbf%2BZHwtQ%2BIgBEnVKGAnuug65dlDIaut7lYcwX5jj5n4lKh2rPBBOkE6iRAMch2DZB43OR8HjdAplp%2Bqo9vS51xD4xT42dsZ%2Fo4shRCsEw5\"}]}\r\nlast-modified: Fri, 08 May 2026 12:00:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=63072000\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69fdd04d-66e\"\r\ncf-ray: a331e3bdcb8656ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1646,"size_decoded":1344,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"07fe2430d883316f51344cdfcff0954c","sha1":"39eebe1806a57e21aa69243417c0be9423d8f9b2","sha256":"d2ae5153415ac9944b39d311edb681e2ebb0905523a68147545800f9947f8c8a","sha512":"c68c7e92a1b78791158727d96a373de8f79d0dce8cd2e92c9c5364b3652e0562b93bbcfcc064a79b2aade5a424b9c2937216e5f4dd111b8d4355cc8d9312649a","ssdeep":"","tlshash":"ff314c4913e142bd4563705dfb5fe2996198c09f288b89deff1c82905f8093865f2b89","first_seen":"2026-04-06T04:49:55.197574Z","last_seen":"2026-08-30T08:59:39.509958Z","times_seen":370,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/user_attribute_controller-9c83942a590731cc7e690bdd7ba5d4cb.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.822Z","timestamp":1788072923822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/controllers/user_attribute_controller-9c83942a590731cc7e690bdd7ba5d4cb.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SY7I7KjUyODOFCWquTolBGQHD1DpIdn0ZxUy3d2ps%2FtWNqz6%2Fpsu5vLgmlIp2iF61lKOgbHaCagNsIvDesAGGmFNDAVfOJixgIAHHZnGmxm%2FkzTz%2FPc8cdeNTSwubHq9e4KpJukA\"}]}\r\nlast-modified: Fri, 08 May 2026 12:00:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=63072000\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69fdd04d-8bc\"\r\ncf-ray: a331e3bdeb9056ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2236,"size_decoded":1556,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"47308d8fb0ad19b491b8a403a087c743","sha1":"e2465f4487fce420c2ddf669b4fa64a4c7570746","sha256":"a2485f9d700d3cc94540a91a97c752e85f0f0a2f6d8cadf60508034b2d04f730","sha512":"7818ad2cade265894a4e8bda6ae12315797f3cc21dd78e807025888be5f4e9feacedfb8d0b52d7d21ddf9816b322c78bd6718ff70c01a7fc5464ba62e20f6bd5","ssdeep":"","tlshash":"9f41ef1a26e312f20d6771289f8fa451aaa440c7544f8f797ebc8641bf4442c22f8be7","first_seen":"2025-09-07T15:41:20.50893Z","last_seen":"2026-08-30T08:59:39.530874Z","times_seen":635,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/backbutton_controller-375e60b22b1c2f25f013c9cb48276de7.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.672Z","timestamp":1788072923672,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/controllers/backbutton_controller-375e60b22b1c2f25f013c9cb48276de7.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vI1LC3ktskGpAbKWs1bKOt2VOW%2BuLcKcXy4kAL1l2%2BimRwczkEfvtjYmPaCH3GU4rQLtIGsNZ2aPkuaSm5Q9vQiAzbtU6HvAzZtRNVcvxUKAWGvEViY8xPKjVgXjaCwzxY%2BsQpFq\"}]}\r\nlast-modified: Fri, 08 May 2026 12:00:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"69fdd04d-33c\"\r\ncf-ray: a331e3bcfb5f56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":828,"size_decoded":1121,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"2ddaaad2082c4359dcb8d36f5ce65ee9","sha1":"c662d74fca59db4f91f3a35fcf9e5d381342d0bb","sha256":"d90921632050b7f7e4a0e2fad075b2ba99cff970356e691180ef9df5d82222c0","sha512":"845e6f96b07828bcd8e459322d6e5dc06979dffdea1f0a57ff6eef568679db5349dab33fd8178a20d4e25dc5c803d1de8797acc6c3eecedb8f076a3676bb8403","ssdeep":"","tlshash":"aa01475e62e244310aa770424f1f622871eb901b6a296f09ff6d4be1bf5456b0441b8e","first_seen":"2025-09-07T15:41:20.525381Z","last_seen":"2026-08-30T08:59:39.533166Z","times_seen":635,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/fix_tracking_domain_controller-a5706d3221917e320f4a03d6b64f29fb.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.679Z","timestamp":1788072923679,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/controllers/fix_tracking_domain_controller-a5706d3221917e320f4a03d6b64f29fb.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Z2SFyEBYekJTZ4TK31nnaZVIzr4gzYMi%2FwNUDWxlTTHUcfzwM%2FODp9K0UGqaiQWaNt2029UOUeS%2B8NRZTDxovKp2T1ytHxfGf3Wo5%2F0TJP7dyP3oNsldp9aZpaQVGHWPtYiXFqq\"}]}\r\nlast-modified: Fri, 08 May 2026 12:00:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"69fdd04d-66e\"\r\ncf-ray: a331e3bcfb6256ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1646,"size_decoded":1337,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"07fe2430d883316f51344cdfcff0954c","sha1":"39eebe1806a57e21aa69243417c0be9423d8f9b2","sha256":"d2ae5153415ac9944b39d311edb681e2ebb0905523a68147545800f9947f8c8a","sha512":"c68c7e92a1b78791158727d96a373de8f79d0dce8cd2e92c9c5364b3652e0562b93bbcfcc064a79b2aade5a424b9c2937216e5f4dd111b8d4355cc8d9312649a","ssdeep":"","tlshash":"ff314c4913e142bd4563705dfb5fe2996198c09f288b89deff1c82905f8093865f2b89","first_seen":"2026-04-06T04:49:55.197574Z","last_seen":"2026-08-30T08:59:39.509958Z","times_seen":370,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/page_analytics_controller-05ff90e2a0a3734889804ee94d8e9b31.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.812Z","timestamp":1788072923812,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/controllers/page_analytics_controller-05ff90e2a0a3734889804ee94d8e9b31.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2Ffqd3ZCgPacrG7qHQUALMlGNv%2F36eu582yBLN%2B5gC3I%2F0gdcmwsiFCC6jQwAgoR1JWRz%2BU6orFpW1wC4wO203INoz0spxyy499rc12uXarmNbh7Gz80aBRs1xhzTBcFZlxL23ij\"}]}\r\nlast-modified: Fri, 08 May 2026 12:00:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=63072000\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69fdd04d-856\"\r\ncf-ray: a331e3bddb8756ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2134,"size_decoded":1481,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"0892a14a768f18c73c319ca4f19d17a3","sha1":"c3e83c08d0be8f46fd64dac76c17bc2041512751","sha256":"82124847224ac9d1def3ac39ed1e25045af7d7bb17a7dc904f6d38ab4669e670","sha512":"b9432b7438383fbd44969378d78f87d29759140384f90bb06e882292e2eee053c2be0d46a6e5dba383edab398347204985eabfb9fea89795a29fe0e26ff7690e","ssdeep":"","tlshash":"0f41cb8146b7528166e2222e971f7704d52540933d0bbd853f0c4760bfca62b74b1efe","first_seen":"2025-09-07T15:41:20.507893Z","last_seen":"2026-08-30T08:59:39.501637Z","times_seen":635,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/popunder_controller-1c759d45c74a32a1291b0851f8a349b4.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.813Z","timestamp":1788072923813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/controllers/popunder_controller-1c759d45c74a32a1291b0851f8a349b4.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2jvYXRvAw7listyBQxCHxg%2F8Xx8dfq%2BPdq1TKFB%2BvOu6JRy9hNtXCHKBMYWvI91FELXMptc3Dtn5fVNMejS0LYKTpEx0Hw7X5PtePDM4DHU4rw86vVpEBFZlBktd1eUOPpwpV7Gj\"}]}\r\nlast-modified: Mon, 25 May 2026 14:57:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=63072000\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a14636b-460\"\r\ncf-ray: a331e3bddb8856ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1120,"size_decoded":1227,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"30ce8b9cb65e800bded97b5f49b7af04","sha1":"601a0318e36bae5702884f2c1707c5b559e0f369","sha256":"91ac0f7f509764b2e68c03927a8fdcce23888c8103782f9962b8fa23cd792950","sha512":"747d6dace2302340a90588d4d56cf0242f93bc7c1a289e3347eef945111a42c1408fbceeb340b65b16f09cd3cea83b76065ee33354c80e0c0552f598cc484866","ssdeep":"","tlshash":"4d210e5475f384a0817f30a28f6f521020b7e4bf381aaa67ff5c4f10af4021ea545bd8","first_seen":"2026-05-27T06:41:42.47605Z","last_seen":"2026-08-30T08:59:39.504932Z","times_seen":249,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/scripts/misc-443a692d3b24a294b703e50c9146e8ab.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.830Z","timestamp":1788072923830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/scripts/misc-443a692d3b24a294b703e50c9146e8ab.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TJr4d9bk%2FhQO0ew58kntljPKrv3S2NmXd7yg6arxygwnDCP5TBUbYVGUkduhU37hQJmvMtzMSy9Fv%2FO4piL%2BgT0cQJv%2FWg50ah%2BFUH9kIEeJUZ4BwA095uDa%2FltUrmFuur73JMug\"}]}\r\nlast-modified: Fri, 08 May 2026 12:00:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=63072000\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69fdd04e-47f\"\r\ncf-ray: a331e3bdfb9456ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1151,"size_decoded":1223,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"abd1b5c01c188655840dcf19c5b54655","sha1":"53e981fc1e3632112f7a4bcab7df34c20b9ca024","sha256":"c01bef67d4bfabd7fa343a25cefd24a8760079326d366052932ecc25870a64ac","sha512":"62708c157b032297f181ffce8687a134ec87a00c5d79ef2be82e5e360426abdf7f849190fc69b3e783d5d35bd06ec7440f045e75879487fafa0b4bae9ef8e6b5","ssdeep":"","tlshash":"06213b4f3ae229864a1371785acfd01576bce1c7b54c4714bdbdea901f15938c1faa84","first_seen":"2026-05-01T12:35:49.482254Z","last_seen":"2026-08-30T08:59:39.502369Z","times_seen":330,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.chmsrv.com/tag.php?goal=c245b7a2b379fc31de1017421bed3df1","fqdn":"s.chmsrv.com","domain":"chmsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:24.009Z","timestamp":1788072924009,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chmsrv.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 15:02:01 GMT","end":"Thu, 08 Oct 2026 15:02:00 GMT"},"fingerprint":{"sha1":"C9:9E:5F:05:9C:C1:10:6E:4A:E1:6E:EC:2A:BC:B6:AC:33:B7:C2:38","sha256":"0A:B3:70:40:D6:98:12:05:48:D5:E0:88:22:A8:F0:5F:CB:74:B5:53:22:11:89:55:19:15:6D:03:D8:09:B3:55"}}},"request":{"raw":"POST /tag.php?goal=c245b7a2b379fc31de1017421bed3df1 HTTP/1.1\r\nHost: s.chmsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://kissflirtnight.baby\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 30 Aug 2026 06:55:24 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A143128%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-08-30%22%3B%7D%7D; expires=Mon, 30 Aug 2027 06:55:24 GMT; path=/; domain=.chmsrv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":[{"name":"goals","value":"a%3A1%3A%7Bi%3A143128%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-08-30%22%3B%7D%7D","quoted":false,"path":"/","domain":".chmsrv.com","expires":"2027-08-30T06:55:24Z","raw_expires":"Mon, 30 Aug 2027 06:55:24 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"goals=a%3A1%3A%7Bi%3A143128%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-08-30%22%3B%7D%7D; expires=Mon, 30 Aug 2027 06:55:24 GMT; path=/; domain=.chmsrv.com; Secure; SameSite=none"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":438,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T09:22:58.739271Z","times_seen":18182520,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":3,"connect":22,"send":0,"wait":25,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"s.chmsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/aliases_controller-20caf158d7696affeaeab488106ff238.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.671Z","timestamp":1788072923671,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/controllers/aliases_controller-20caf158d7696affeaeab488106ff238.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qCrNPG2%2BDdbm6yHVeYiQtsO5SKp%2FVsQLgsmhheuIljIOg6PfA8RrDTw2cdPbEyyiVbQdcYQ8SSvzcUdRSNzrGjJdspZdT98v%2FxMkTHNUsAkoiny%2FW%2FfwJwWLnMZgudKfkfb0JFMu\"}]}\r\nlast-modified: Fri, 24 Jul 2026 16:23:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a63917c-8e7\"\r\ncf-ray: a331e3bcfb5e56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2279,"size_decoded":1463,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"00d7d7b3729cf2fca2ac20ab450d0c5d","sha1":"648d336366510911b1e06c73c8ace6fcc250eff2","sha256":"54ea250d47eba1498665f79e57f0e9b4582b3f8503a8a84012c6d18e694ce6de","sha512":"ec993d2ea623517c9990548df1d3461caab7ac3586ab4afb9cb1c5dbd20688d61446c2d83df4e55ed8d57072440f8de9b5d7032a5397c35410ca84222ba12819","ssdeep":"","tlshash":"0e41627e01fb0e0a49b1107fce0e6335112550332c49fe84bdae8a949fc992d6176fe9","first_seen":"2026-07-24T22:29:03.042268Z","last_seen":"2026-08-30T06:56:02.64561Z","times_seen":23,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/telemetry_controller-8a4e57e20e75295b74bbb1ab55f58602.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.819Z","timestamp":1788072923819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/controllers/telemetry_controller-8a4e57e20e75295b74bbb1ab55f58602.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BSYi1RNHDF2eX6bMT3elU%2FAAvVlCUb9LZk8YFfU%2F7vdTobzrJxPVxaqht7MCh%2BKAcTHEKnZTrnPxZ5DmSP11lXPVaeSUhOswihZsw6D%2Fog19vkM7DDXcs%2F0LFz%2B0n9RXDr8XTKtF\"}]}\r\nlast-modified: Fri, 08 May 2026 12:00:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=63072000\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69fdd04d-1215\"\r\ncf-ray: a331e3bdeb8e56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4629,"size_decoded":2102,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"dfbf0fd289d91d5c85105c4fe68e9c0b","sha1":"e0331d97cda634189d4375bc82748a057855397a","sha256":"73c80c590a2dd669ed68cd92fa446471064c6c1a938cd3454ca2f562ce1014f6","sha512":"6d1472ff46a77518b4fdabe068a4def3eac0c922d73036c01fd77a63cc7cfa1bdd59e2ce3ba6cecb096a506a927c4720524d4bb6f73be8f8c890646faa4e96b6","ssdeep":"48:2T3svppMd/AVgdUGh9r563UHeBch6+pM4lNWudmXr6+aqHSeaPJcVvQVXdTht:2T38f0eor563UHeBcHpvy5aP+RQ/P","tlshash":"6da143ea1533205501b6265fa3075349713690573f0ab9827b4c83342faeb6b72b6ff8","first_seen":"2026-02-28T19:38:24.553622Z","last_seen":"2026-08-30T08:59:39.50339Z","times_seen":415,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/vendor/i18next/i18next.index-aba15d29e37ac3e2996cbfa770dd6c1a.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.825Z","timestamp":1788072923825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/vendor/i18next/i18next.index-aba15d29e37ac3e2996cbfa770dd6c1a.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r%2FTuGIl21gcgls7%2BJnVl9v90vK92HLyxHXbwRlAUW1NIZzmhAF9ydgyN0n5SDvzfeLwO%2FFzaL8I8dVCBw9%2BWHzT8x8wIivWFmMAVXAsoSKPp%2FdQaNVIbz0P3hAwRpDRukn8c6zPT\"}]}\r\nlast-modified: Sat, 22 Aug 2026 15:53:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=63072000\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a89c5e6-a529\"\r\ncf-ray: a331e3bdeb9256ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42281,"size_decoded":15351,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42022)","md5":"73ca468fbf89203d41f6bb9d5c9a7c1b","sha1":"1f4fcf3ba15c4b5b31e4d9a0d2c0dbe68198265c","sha256":"ac09895e200fa8905cc3c8909e651c2d5ee383fcd9fc797c2f60380818671468","sha512":"a446b84162fee406c043b17fa47955be0b6a6a1e9e55aa5e4726602dcf8893ac44e23a24dc38338ba921971a7fc653b48cafb2c0c3e32de30844a5a217843578","ssdeep":"768:fqKC06XNG9N517ZCzMQeneUSguXPS0NvHAWyNkCMn3yLAl8bM1dLw/+zIyvTAf9r:YuN3FRy3zda5g/ijtojOfm/G3","tlshash":"2c1309c572ebaa2a03da91d570601504db25a9593448680efe7dafd7e4c3d0693fbf30","first_seen":"2026-07-03T16:50:41.975812Z","last_seen":"2026-08-30T08:59:39.519631Z","times_seen":111,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.opoxv.com/tag.php?goal=c245b7a2b379fc31de1017421bed3df1","fqdn":"s.opoxv.com","domain":"opoxv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:24.020Z","timestamp":1788072924020,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opoxv.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 15:26:35 GMT","end":"Thu, 08 Oct 2026 15:26:34 GMT"},"fingerprint":{"sha1":"37:FC:F7:FC:A9:66:44:77:F8:DB:78:C3:64:B7:95:41:06:87:86:E4","sha256":"02:AC:F9:62:27:C3:6A:91:F5:08:64:38:43:AB:E5:0C:B3:4A:3E:D5:28:91:A5:8A:B1:D5:44:32:93:69:27:01"}}},"request":{"raw":"POST /tag.php?goal=c245b7a2b379fc31de1017421bed3df1 HTTP/1.1\r\nHost: s.opoxv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://kissflirtnight.baby\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 30 Aug 2026 06:55:24 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A143128%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-08-30%22%3B%7D%7D; expires=Mon, 30 Aug 2027 06:55:24 GMT; path=/; domain=.opoxv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":[{"name":"goals","value":"a%3A1%3A%7Bi%3A143128%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-08-30%22%3B%7D%7D","quoted":false,"path":"/","domain":".opoxv.com","expires":"2027-08-30T06:55:24Z","raw_expires":"Mon, 30 Aug 2027 06:55:24 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"goals=a%3A1%3A%7Bi%3A143128%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-08-30%22%3B%7D%7D; expires=Mon, 30 Aug 2027 06:55:24 GMT; path=/; domain=.opoxv.com; Secure; SameSite=none"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":437,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T09:22:58.739271Z","times_seen":18182520,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":2,"connect":22,"send":0,"wait":25,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"s.opoxv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/exoclick_tracking_controller-27b77585602becc53ac5d432f7cf85da.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.677Z","timestamp":1788072923677,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/controllers/exoclick_tracking_controller-27b77585602becc53ac5d432f7cf85da.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O6e76L03n9lC4opsJ1yZrgYFsHEAvvYdmhgU%2Fi2%2BCsvXjpzfrEAGGP4%2F2J07F8wl6Mi3UtVWg3QO00KyW9MdGvKgsyVZuB5fr7pEH2PpxVJv3uoBqa6sy%2B%2FscDtNn22HK6piDn9G\"}]}\r\nlast-modified: Fri, 08 May 2026 12:00:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"69fdd04d-624\"\r\ncf-ray: a331e3bcfb6156ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1572,"size_decoded":1329,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"7083d7d88bbc7f0f0fa732ee16bf4e10","sha1":"cb1a17e84d9a78918b5613f206ec64a754c33702","sha256":"92cdfe33a67aa0d8b614c9338614572c0444e4b7c6bae3ec12a4fc30315d8359","sha512":"89f41805a8b774f7a6e4971958b09f008abe6c09eeb9420590ff7d55047cfb0c83bf971f2c0434eb2b22eb5dfa3100a56c1a871f7d15ec5fec7e067fbe7f8265","ssdeep":"","tlshash":"f531292b66ef0f240766b06d0f8b5941217ac01b0b05a95a7b9c11c8dfd81be45f3afd","first_seen":"2025-10-17T16:22:27.59883Z","last_seen":"2026-08-30T08:59:39.523901Z","times_seen":603,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/scripts/misc-443a692d3b24a294b703e50c9146e8ab.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.697Z","timestamp":1788072923697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/scripts/misc-443a692d3b24a294b703e50c9146e8ab.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0jW5EYkhAOzhv7rb4qlzKQGpWeN5Cu%2FzGxS40RCkTjzRXlOf6kNRFEt70GGunqKwtdw8fziXtHtjLj4h7ox0Q3XbdVZFeU7N8Q8vhZnGSOwYMwYX0YJ8sJDMPOz3sJ%2FiIovI8Rjh\"}]}\r\nlast-modified: Fri, 08 May 2026 12:00:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"69fdd04e-47f\"\r\ncf-ray: a331e3bd1b6f56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1151,"size_decoded":1208,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"abd1b5c01c188655840dcf19c5b54655","sha1":"53e981fc1e3632112f7a4bcab7df34c20b9ca024","sha256":"c01bef67d4bfabd7fa343a25cefd24a8760079326d366052932ecc25870a64ac","sha512":"62708c157b032297f181ffce8687a134ec87a00c5d79ef2be82e5e360426abdf7f849190fc69b3e783d5d35bd06ec7440f045e75879487fafa0b4bae9ef8e6b5","ssdeep":"","tlshash":"06213b4f3ae229864a1371785acfd01576bce1c7b54c4714bdbdea901f15938c1faa84","first_seen":"2026-05-01T12:35:49.482254Z","last_seen":"2026-08-30T08:59:39.502369Z","times_seen":330,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/pushilka_controller-63999f245c27e0096a4779903f5722f4.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.814Z","timestamp":1788072923814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/controllers/pushilka_controller-63999f245c27e0096a4779903f5722f4.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pAU8BFMTXV72O%2F8XPBz80Gyg2t2AGk1a5IW8yCmDI16a7nWiLt5xHRAMoXzZ53UNdXKk1iA%2BFBjhKEbPQ7FFZhMhh8ZSE2rXM%2BVgT%2BNKIrpxw2i4Aku5ElLVsYNvHke8LZ4PCrNx\"}]}\r\nlast-modified: Thu, 04 Jun 2026 17:17:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=63072000\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a21b328-796\"\r\ncf-ray: a331e3bddb8956ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1942,"size_decoded":1406,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"bd4a8ccd016ba8cca2c145d6c2e3f01b","sha1":"c1253bac550826037452036f6b5346274ad0c0a3","sha256":"6842ceaf6ef175bcf28113a0f9775ea18f35136f47905d4a053cde9d23cc344c","sha512":"9601f112020e3000b42eb4e92a033a22c19f64782fcd832d384ab8baa984c9c6b3da111041fe5b5d07479fb509e1ced45efcdf2ab3ad0dddedbb7b35adcc9b34","ssdeep":"","tlshash":"ba41c29b4aeb076045ca70a52daf50115376800f7c586b6c7fad5e006f5ce3c5ae772c","first_seen":"2026-06-04T19:55:57.627382Z","last_seen":"2026-08-30T08:59:39.51542Z","times_seen":210,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/vendor/i18next-browser-languagedetector/i18next-browser-languagedetector.index-d6b39b26ea0b082467c4f58a92bebbf0.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.829Z","timestamp":1788072923829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/vendor/i18next-browser-languagedetector/i18next-browser-languagedetector.index-d6b39b26ea0b082467c4f58a92bebbf0.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d5s1%2BAjw6IYaF6smvK%2FDaC%2FQ3uJr8itjPFMu%2BXvLfCj74b7iD7mp9qjovRhsZiKivXk3VaJFS4lPGt3WYobf9CCXg6MB35HAv0i8TLRVA05mihqdDlmHz9YyV0X4o7OyLTBah1PO\"}]}\r\nlast-modified: Sat, 22 Aug 2026 15:53:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=63072000\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a89c5e6-1c19\"\r\ncf-ray: a331e3bdeb9356ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7193,"size_decoded":3444,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6887)","md5":"658f6bbcd57195b9a4bcbe02a9d0d656","sha1":"6549454bbaae0530f7f38bf6e1f38da9247f54e3","sha256":"fbb7fa089d68412cb6600ca56ba79f5c3d81e49f5349868cdd63efa9e50d41b9","sha512":"39fb15aa22b05e07e54a3204398a0d33e4086ee1633530a048aca9adc430ada29ad74ba99d0803b934c4b75d2eaa781ef1e7cd3f7c33cb05425fb29012aea08f","ssdeep":"192:LhOahqWDJiqOZj9RZWyjS1QJ/UoV2V/h5wJUxERJl:9OahjNObRFj8QJ/6p5w1","tlshash":"66e1c958b64a509702f600dc3877aa05b23259d0784cac9cb159ff737885e47a2fb7ba","first_seen":"2026-06-30T05:59:43.175899Z","last_seen":"2026-08-30T08:59:39.508737Z","times_seen":124,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/vendor/jquery/jquery.index-320ce5db7d5a1437225818702b995851.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.834Z","timestamp":1788072923834,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/vendor/jquery/jquery.index-320ce5db7d5a1437225818702b995851.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SWyJRz9j%2FpMCl6ieWlMc9EpV4wrXdo2a8RGuBK43YE%2BKD2Trc8xlJJBm97oUliUNodDQiyCzNS%2FfbLV%2Fqpshww33YdqosVjij0gytfAzM2tmZ0gyKaCH5e697accZxM9sBTT7WMR\"}]}\r\nlast-modified: Sat, 22 Aug 2026 15:53:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=63072000\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a89c5e6-1568e\"\r\ncf-ray: a331e3bdfb9856ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87694,"size_decoded":34422,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65285)","md5":"521748d21918480689efc38711b7373f","sha1":"edbb48857badac2bd413ef70c5654334eac26031","sha256":"ba52a36cefdd1b60052decac503adbad04c6b2b9563105e29a101070114c6e87","sha512":"2147abb8de580b4da06b622f122da3a795973d6c38b5f0dda127406651532ca0a56792539b17f086cb62cc6bebe75a3f8a3cdee498b5a4aa814015b9c667ed02","ssdeep":"1536:AQPJiqTilKwwcaOYr2gObeM8tClDK/GVz2MlBlrqq5rXm4+c609:AQvOM2glM8CIuz2MFHwc609","tlshash":"aa8309dcb2c7746343ab60b9007f650af2366899280dc510f069e8f9bd75a4a817bf7d","first_seen":"2026-06-30T05:59:43.177417Z","last_seen":"2026-08-30T08:59:39.543613Z","times_seen":125,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clc.clickrotate.net/.api/telemetry","fqdn":"clc.clickrotate.net","domain":"clickrotate.net","tld":"net"},"ip":{"addr":"3.164.240.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:24.244Z","timestamp":1788072924244,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickrotate.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 28 Aug 2026 00:00:00 GMT","end":"Sat, 13 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"17:C9:67:A3:94:FE:CB:85:D8:E8:EF:03:67:8D:8A:53:39:1D:E7:01","sha256":"1E:0E:35:46:A5:07:20:E6:62:F7:E0:8E:14:EB:86:04:9B:E5:B1:81:82:5D:23:E8:61:27:4F:12:13:B9:EB:6D"}}},"request":{"raw":"POST /.api/telemetry HTTP/1.1\r\nHost: clc.clickrotate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 948\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://kissflirtnight.baby\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":948,"data":"{\"user_id\":\"\",\"visit_id\":\"\",\"ndata\":\"\",\"status\":\"ok\",\"fetch_start\":1248,\"domain_lookup_start\":1265,\"domain_lookup_end\":1337,\"connect_start\":1338,\"connect_end\":1367,\"secure_connection_start\":1338,\"request_start\":1369,\"response_start\":1401,\"response_end\":1401,\"duration\":153,\"screen_width\":1280,\"screen_height\":1024,\"screen_avail_width\":1280,\"screen_avail_height\":1024,\"screen_color_depth\":24,\"screen_pixel_depth\":24,\"screen_orientation_type\":\"landscape-primary\",\"screen_orientation_angle\":0,\"window_inner_width\":1280,\"window_inner_height\":1024,\"window_outer_width\":1280,\"window_outer_height\":1024,\"window_screen_x\":0,\"window_screen_y\":0,\"window_scroll_x\":0,\"window_scroll_y\":0,\"window_device_pixel_ratio\":1,\"doc_client_width\":1280,\"doc_client_height\":1024,\"nav_cookie_enabled\":true,\"nav_online\":true,\"nav_do_not_track\":\"unspecified\",\"nav_hardware_concurrency\":8,\"nav_max_touch_points\":0,\"webgl_vendor\":\"Mesa\",\"webgl_renderer\":\"llvmpipe, or similar\"}"}},"response":{"raw":"HTTP/3 204 \r\nvia: 1.1 c2042c6526b635ce940adba3143aa134.cloudfront.net (CloudFront)\r\nserver: nginx/1.31.2\r\ndate: Sun, 30 Aug 2026 06:55:24 GMT\r\nstrict-transport-security: max-age=63072000\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: F9gThhnmFHN0hSMOWk7TzuOKYcEcTgFchHJIyAyhBH0BXeJC4XPDLg==\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1956,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T09:22:58.739271Z","times_seen":18182520,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"clc.clickrotate.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/vendor/i18next/i18next.index-aba15d29e37ac3e2996cbfa770dd6c1a.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.694Z","timestamp":1788072923694,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/vendor/i18next/i18next.index-aba15d29e37ac3e2996cbfa770dd6c1a.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0y9UwAmTQtxevkBWiYO8jR8vN5wX2zHLZdb4n46l0wqetDIxyYZ12nuOnsJ%2Bbsimem9dPGX8zw5%2BeADrrKTd9NPiXOTc14p510wk4H035pWlprOshdetvqEvPmcrYmbd7LurxLGz\"}]}\r\nlast-modified: Sat, 22 Aug 2026 15:53:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a89c5e6-a529\"\r\ncf-ray: a331e3bd1b6d56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42281,"size_decoded":15494,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42022)","md5":"73ca468fbf89203d41f6bb9d5c9a7c1b","sha1":"1f4fcf3ba15c4b5b31e4d9a0d2c0dbe68198265c","sha256":"ac09895e200fa8905cc3c8909e651c2d5ee383fcd9fc797c2f60380818671468","sha512":"a446b84162fee406c043b17fa47955be0b6a6a1e9e55aa5e4726602dcf8893ac44e23a24dc38338ba921971a7fc653b48cafb2c0c3e32de30844a5a217843578","ssdeep":"768:fqKC06XNG9N517ZCzMQeneUSguXPS0NvHAWyNkCMn3yLAl8bM1dLw/+zIyvTAf9r:YuN3FRy3zda5g/ijtojOfm/G3","tlshash":"2c1309c572ebaa2a03da91d570601504db25a9593448680efe7dafd7e4c3d0693fbf30","first_seen":"2026-07-03T16:50:41.975812Z","last_seen":"2026-08-30T08:59:39.519631Z","times_seen":111,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/popunder_controller-1c759d45c74a32a1291b0851f8a349b4.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.681Z","timestamp":1788072923681,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/controllers/popunder_controller-1c759d45c74a32a1291b0851f8a349b4.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b0XRqMoQgJLSz20Bncst8NmVCFm9y%2FBQRqUsm3JKLTs4%2BetdXXBPvCo11eHBLh4Pj10OgN%2FerBKpJPnGBepu9k15SruCVbJtH%2BcFEGAtIOmj3ll7xBvZaBTGeu31bXtBpA4r3SKF\"}]}\r\nlast-modified: Mon, 25 May 2026 14:57:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a14636b-460\"\r\ncf-ray: a331e3bd0b6456ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1120,"size_decoded":1222,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"30ce8b9cb65e800bded97b5f49b7af04","sha1":"601a0318e36bae5702884f2c1707c5b559e0f369","sha256":"91ac0f7f509764b2e68c03927a8fdcce23888c8103782f9962b8fa23cd792950","sha512":"747d6dace2302340a90588d4d56cf0242f93bc7c1a289e3347eef945111a42c1408fbceeb340b65b16f09cd3cea83b76065ee33354c80e0c0552f598cc484866","ssdeep":"","tlshash":"4d210e5475f384a0817f30a28f6f521020b7e4bf381aaa67ff5c4f10af4021ea545bd8","first_seen":"2026-05-27T06:41:42.47605Z","last_seen":"2026-08-30T08:59:39.504932Z","times_seen":249,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/taboola_controller-77335ab2c11c7d35e7e25b553b834b8c.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.686Z","timestamp":1788072923686,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/controllers/taboola_controller-77335ab2c11c7d35e7e25b553b834b8c.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nDkIFVDksIegLpXom3%2F7gWlbDfa69%2BQyYY6IpOr0AdLWuP%2FrHGkcP6w1CEHOu0C2UeuCdGh6DOvOc1evSY7H%2B5iddKSQoSgfTvWYMhq0FkHSC3zYsXyHrtY3VSDKpXkObKr8ovEF\"}]}\r\nlast-modified: Wed, 20 May 2026 12:40:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a0daba8-4c7\"\r\ncf-ray: a331e3bd0b6756ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1223,"size_decoded":1228,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"fa88b9fb00e08c883854f9ca50802712","sha1":"c80177df5eaf011178bcc936441197b689169a2c","sha256":"ce2b542af49225a2c04d1ac38bb113c2ab98ee0a5af03c991f23e3e772275f43","sha512":"eb6a81950d0a68b19446cdeb88e213d1508ed634f2775cc80ba1163c870fc28a603279f30d9d7c30b9d015d8ccab434fcb8675a0378c674b89d277d4fc730a75","ssdeep":"","tlshash":"1721381a2bda1b384166a0682faf7e122275409b15054d093fdc0a94dfd923e98e3bf9","first_seen":"2026-05-20T14:29:40.811282Z","last_seen":"2026-08-30T08:59:39.547171Z","times_seen":261,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/exit_popup_controller-9cc3ae8381f15ddd78ea0fbd2141526e.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.804Z","timestamp":1788072923804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/controllers/exit_popup_controller-9cc3ae8381f15ddd78ea0fbd2141526e.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rc2xZUHyLrZ2pRVWUGoHxc2f3%2FF8vaM1gysMFkEzk2qGvkKv5KssH91WgomlRiNkknkGkBD1zScaaIamNfyo45Yd1csNIIeInMeD6zvEZRfup6MXkGFmK6PqTQflcYzFEjb%2Beo39\"}]}\r\nlast-modified: Fri, 08 May 2026 12:00:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=63072000\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69fdd04d-1e7\"\r\ncf-ray: a331e3bdcb8456ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":487,"size_decoded":992,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"6672ccb6d3b0063f32a1b665e8dbcfd9","sha1":"0dc5eaed2b4f5ee521a8fd641b807b4da9a3b6e4","sha256":"e329f619f60446fd5262bb46d5b398a0bcc5aca578f0236cb5db5374a0b78ad5","sha512":"744bc2dfd1c07ca83eaeb4857291a5bd0e8933c0e146ba2e3426963a0ab9caf00e4cc30f8223e9cea044bc3df0997c0b586b38f7aa9cccc2b1752295a0d7bed1","ssdeep":"","tlshash":"c2f0e50e68fa9260017b345d1e0f9039a9e0a40f264a8f40be5c8bb2cfa827c965270c","first_seen":"2025-09-07T15:41:20.48348Z","last_seen":"2026-08-30T08:59:39.500812Z","times_seen":635,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.dsordy.com/tag.php?goal=c245b7a2b379fc31de1017421bed3df1","fqdn":"s.dsordy.com","domain":"dsordy.com","tld":"com"},"ip":{"addr":"103.224.182.238","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:24.013Z","timestamp":1788072924013,"http_version":"HTTP/1.1","security_state":"","security_info":null,"request":{"raw":"POST /tag.php?goal=c245b7a2b379fc31de1017421bed3df1 HTTP/1.1\r\nHost: s.dsordy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://kissflirtnight.baby\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Sun, 30 Aug 2026 06:55:24 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 603\r\ncontent-type: text/html; charset=UTF-8\r\nconnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T09:22:58.739271Z","times_seen":18182520,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"swarmpush.com/event","fqdn":"swarmpush.com","domain":"swarmpush.com","tld":"com"},"ip":{"addr":"104.21.7.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:24.833Z","timestamp":1788072924833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swarmpush.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:52:21 GMT","end":"Mon, 02 Nov 2026 12:52:03 GMT"},"fingerprint":{"sha1":"5E:B6:EC:10:B2:A6:EB:B8:17:2F:1D:ED:22:2D:72:EF:E2:1B:CF:A2","sha256":"B9:86:F6:42:D7:B4:7F:97:DB:0D:6B:1E:74:E0:6E:C2:35:4F:1E:70:EA:2F:7A:BD:7A:FE:82:80:A1:1D:59:C2"}}},"request":{"raw":"POST /event HTTP/1.1\r\nHost: swarmpush.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kissflirtnight.baby/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 292\r\nOrigin: https://kissflirtnight.baby\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":292,"data":"{\"event\":\"push_invoked\",\"source\":\"aB4LQnKR\",\"visitorId\":\"1imsyod-e8s2x7\",\"sessionId\":\"zbu766-pdgprl\",\"var1\":\"\",\"var2\":\"5f47970e-eba4-4b91-8db6-3dd062f5117b\",\"var3\":\"\",\"var4\":\"o:461669b0-224e-4e2f-a51b-78f1ade0772e\",\"var5\":\"\",\"var6\":\"\",\"var7\":\"\",\"var8\":\"\",\"var9\":\"\",\"var10\":\"\",\"externalId\":\"\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:25 GMT\r\ncontent-type: application/json\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nx-powered-by: PHP/8.1.29\r\ncache-control: max-age=0, must-revalidate, private\r\npragma: no-cache\r\nexpires: Sun, 30 Aug 2026 06:55:25 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, PUT, DELETE, GET\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NTpBjFAxON%2BwUySemMkbQgxQP85%2F6RidYXJBUtHS1YpxI4Ah5675JbV12OkonRw0NyjDW9d%2F27ukrQGXwy8fYj05xoYIFddME8CnvP5h1r1ZMECL%2Bvo2mHIZ3qm%2Bwr94\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a331e3c43cd8b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 43\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.1.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":841,"mime_type":"application/json","magic":"JSON text data","md5":"3d0f3d7f305897912ba25aa2c95b88a9","sha1":"503467b44732d3e704c22fff3bf72ed29feb36ae","sha256":"7bbeb1d7ffddbc65a104caf1e24cd467cc322c58f4972313804b67960a80a5c5","sha512":"f618ed3ebcfef037105a95e38a7e180db5688fb7a0c92bf85c8aaa3b00f8874aaf70888f2d85334e9ae630926517304f2d47d833c1c108ad3fc0498d16008da6","ssdeep":"","tlshash":"be900440550c1cd503c5050d7504145115cd15f377c73171c47c5d0c47054dd1555315","first_seen":"2023-04-09T07:29:03Z","last_seen":"2026-08-30T08:25:57.615538Z","times_seen":184,"resource_available":false,"data":null}},"time_used":635,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":635,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tds.onlyhotdgirl.com/5f47970e-eba4-4b91-8db6-3dd062f5117b?source1=8690\u0026clickid={clickid}","fqdn":"tds.onlyhotdgirl.com","domain":"onlyhotdgirl.com","tld":"com"},"ip":{"addr":"13.249.8.55","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-30T06:55:22.768Z","timestamp":1788072922768,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tds.onlyhotdgirl.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 26 Apr 2026 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"41:C8:1F:2D:87:8E:96:AC:53:46:E4:64:15:FF:AA:B1:CF:6F:B7:C5","sha256":"7D:E8:E8:81:FF:FA:41:38:F1:43:D5:25:70:88:C9:E8:2D:0D:FB:78:FB:2B:0B:D4:71:6C:E5:AB:1C:B4:02:E3"}}},"request":{"raw":"GET /5f47970e-eba4-4b91-8db6-3dd062f5117b?source1=8690\u0026clickid={clickid} HTTP/1.1\r\nHost: tds.onlyhotdgirl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ncontent-length: 0\r\nx-amz-cf-pop: ARN53-P3\r\ndate: Sun, 30 Aug 2026 06:55:22 GMT\r\nserver: nginx\r\ncache-control: no-store, no-cache, pre-check=0, post-check=0\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nset-cookie: 5f47970e-eba4-4b91-8db6-3dd062f5117b-v4=PaWDvTbh40gR-R8DjkoiXlbwauek5mO-GqXsAk5W2co; Max-Age=86400; Expires=Mon, 31 Aug 2026 06:55:22 GMT; Domain=tds.onlyhotdgirl.com; Path=/; Secure; HttpOnly; SameSite=None\ncc-v4=RpZWAIx7AuqzaF6IhS4rccfjp2WJaR4kTXtZvl4PBF%2BP%2B%2FxrMrDK1UYKPT3ANCIfWNWGfgEFwuNQKO%2B46w%2F%2FQZ1R1soCmU0YEJOUY%2Bpa%2FCTdcEhStcmmphI6PSB7mlKNC8GLkJKTuaWd0%2Ba13LjHbQ%3D%3D; Max-Age=15552000; Expires=Fri, 26 Feb 2027 06:55:22 GMT; Domain=tds.onlyhotdgirl.com; Path=/; Secure; HttpOnly; SameSite=None\r\nlocation: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nx-cache: Miss from cloudfront\r\nalt-svc: h3=\":443\"; ma=86400\r\nvia: 1.1 118086882d9f17e10877e0653a055586.cloudfront.net (CloudFront)\r\nx-amz-cf-id: mjdYqLDSm73G8O6Zm7CnDLl2_5-WGpVMVVT-1Uudkz33ufIo2fHyhw==\r\n\r\n","headers":null,"cookies":[{"name":"5f47970e-eba4-4b91-8db6-3dd062f5117b-v4","value":"PaWDvTbh40gR-R8DjkoiXlbwauek5mO-GqXsAk5W2co","quoted":false,"path":"/","domain":"tds.onlyhotdgirl.com","expires":"2026-08-31T06:55:22Z","raw_expires":"Mon, 31 Aug 2026 06:55:22 GMT","max_age":86400,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"5f47970e-eba4-4b91-8db6-3dd062f5117b-v4=PaWDvTbh40gR-R8DjkoiXlbwauek5mO-GqXsAk5W2co; Max-Age=86400; Expires=Mon, 31 Aug 2026 06:55:22 GMT; Domain=tds.onlyhotdgirl.com; Path=/; Secure; HttpOnly; SameSite=None"},{"name":"cc-v4","value":"RpZWAIx7AuqzaF6IhS4rccfjp2WJaR4kTXtZvl4PBF%2BP%2B%2FxrMrDK1UYKPT3ANCIfWNWGfgEFwuNQKO%2B46w%2F%2FQZ1R1soCmU0YEJOUY%2Bpa%2FCTdcEhStcmmphI6PSB7mlKNC8GLkJKTuaWd0%2Ba13LjHbQ%3D%3D","quoted":false,"path":"/","domain":"tds.onlyhotdgirl.com","expires":"2027-02-26T06:55:22Z","raw_expires":"Fri, 26 Feb 2027 06:55:22 GMT","max_age":15552000,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"cc-v4=RpZWAIx7AuqzaF6IhS4rccfjp2WJaR4kTXtZvl4PBF%2BP%2B%2FxrMrDK1UYKPT3ANCIfWNWGfgEFwuNQKO%2B46w%2F%2FQZ1R1soCmU0YEJOUY%2Bpa%2FCTdcEhStcmmphI6PSB7mlKNC8GLkJKTuaWd0%2Ba13LjHbQ%3D%3D; Max-Age=15552000; Expires=Fri, 26 Feb 2027 06:55:22 GMT; Domain=tds.onlyhotdgirl.com; Path=/; Secure; HttpOnly; SameSite=None"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T09:22:58.739271Z","times_seen":18182520,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":46,"connect":19,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/vendor/es-module-shims/es-module-shims.index-d5e09080ddef5888637fadf109664626.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.431Z","timestamp":1788072923431,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/vendor/es-module-shims/es-module-shims.index-d5e09080ddef5888637fadf109664626.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FXItD2rEu7tmroZbCdxsRk0RvzKlBCI4c8tM2ILNE63n%2BFvt%2Bmlz8O6kdMKyy6GcxfmQx85xJ8DdWOsJHe%2Bqs6DgjwnOgmB%2FsfLxXHvShau5fVu6TdjNgjiDL4ays087Hb%2Bq%2B5nQ\"}]}\r\nlast-modified: Sat, 22 Aug 2026 15:53:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"6a89c5e6-933f\"\r\ncf-ray: a331e3bb7b4a56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37695,"size_decoded":15056,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37444)","md5":"1a087982c51573a148ea3821f9e10069","sha1":"05d39d88fe3a7334a5dcfd341e03d8732fd1e787","sha256":"475facb739e5dd261f3303a277c56152e194be171f205e92287fd54d8aa13918","sha512":"e16cb7861b0d25ac26708ade991804e343c28f05f49f1524f8fd9e2d67c9972bdd2e878f2297d8b9b22a7c53f88f07fca9f2f20535e5925b90d3b6b94a3f162d","ssdeep":"768:4MpkOFXGX04ceeZdqu0g+jgClI1Ypf0VoxCHbDbFkOqrVYBPQWTr+CPDCTFJbJID:4WDy7jIGiHOTFDM5bu6H","tlshash":"54030b4530feb03383c23ae350ab725b5a24495cfa085825b764ff57a8656e78c23fd6","first_seen":"2025-04-11T11:14:30.137663Z","last_seen":"2026-08-30T08:59:39.513168Z","times_seen":639,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/targetbutton_controller-6880b7c186e90274417e80597f0b2b70.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.687Z","timestamp":1788072923687,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/controllers/targetbutton_controller-6880b7c186e90274417e80597f0b2b70.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uN1BPIF0Q7oa3kQTEdwQbu15wsCk61Rt%2BuCmL%2FxJDbt85koN6UR7RKUcmI985HYfsW%2FGD1M5CMRi2TwKXmGsGbLTUoPpAKtsZ0V9ritbidvxjBcxc9SpYE5aCDlBaOtQOEY9yl9D\"}]}\r\nlast-modified: Fri, 08 May 2026 12:00:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"69fdd04d-116\"\r\ncf-ray: a331e3bd0b6856ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":278,"size_decoded":932,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"ceadaf511cdb77e81ed086eb23939f4c","sha1":"0f6dc6de01b1e775b0905663d22c1cff39bd1fec","sha256":"6683085b01409d13578282c266d6b49fb9416e4f86d7fd7f84bc02a0453a60d6","sha512":"c263be9fbc7247bec06f0fbbfa2daf91d2c4baebbbc7d2efcffa4109b0ba7aac3023581c7aa00597be502eb703a05d3f3511e4fbfaf36238ee5fc29e53bc8076","ssdeep":"","tlshash":"77d02e5620a363a0023f308eaf1ba9b96140e0c3bb0a46497f8c0b30cfec0319187788","first_seen":"2025-09-07T15:41:20.517948Z","last_seen":"2026-08-30T08:59:39.499151Z","times_seen":635,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/layouts/registration_open/i/thank_you_green-bc6d004e9f5391c7f6726c4d7f15c518.jpg","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.709Z","timestamp":1788072923709,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/layouts/registration_open/i/thank_you_green-bc6d004e9f5391c7f6726c4d7f15c518.jpg HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 08 May 2026 12:00:14 GMT\r\netag: \"69fdd04e-16a15\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5gPaHNUWEJSYZ1OOZONS9NAHXQW4f6ia8f0B1UJNG20coD9C511SBh7EYtyPwNxsXc%2BC9HxkRS26Bns5ouJ7OZvaBcsG2HMthu6uFZAhBd4hQKSrrri3uhG2YvhVuRZObdXYGVMe\"}]}\r\ncf-ray: a331e3bd3b7456ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 92693\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92693,"size_decoded":93434,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 620x732, components 3","md5":"25e70f8a06c5e70aacd07cf0b2bdd67e","sha1":"a592e2600c29cfb51ebbb56d47edb14e401b325e","sha256":"16ec468b60fb0e9f10a474d39bc610459dd9faecc6f806d05d8e73e547150348","sha512":"4ea070d0ceebaddc56bb57588b8e1cf53510282e1f9ae819fffe235177545b83a8a9143ec5e8d1bbe412dd9c9fb73142febe47e9ca3b34733eb58028a2f8fc2e","ssdeep":"1536:TzHzps82yiuB9+CHpW621slxc0A1Gq2gaZVZTofsZ/aadJpzDmwQnUKDg8mKD2P:TzVs82yVxJv21slu0A2ZvofsIazpziwv","tlshash":"87931228b04e2a85f192a0387ff30372f796275581762e5970c4217b7be35b63fe2294","first_seen":"2025-09-07T15:41:20.510125Z","last_seen":"2026-08-30T06:56:02.658188Z","times_seen":103,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/@symfony/stimulus-bundle/loader-5751ad1ee2975e725a94d8121d153d17.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.782Z","timestamp":1788072923782,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/@symfony/stimulus-bundle/loader-5751ad1ee2975e725a94d8121d153d17.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O%2Fi6%2BxlvOik%2FkxVxsr6f5T4O%2BBD1hSIeJfddIvtzO1BW5AP4WCiKjAfsvYRvF9WAcx789W587zBvl0M7uijqGSysBoQr6lEMkzUsFnNlQ%2BAayq50BE4CTHb18Szwz0V%2BefLa0WR4\"}]}\r\nlast-modified: Wed, 27 Aug 2025 15:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=63072000\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"68af237c-cd9\"\r\ncf-ray: a331e3bdab7b56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3289,"size_decoded":1824,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"7f9c485655cbe27485a8859fa8d70b2b","sha1":"190dd1f92062c5d4d94cf5ad5b2cc32c84d808c7","sha256":"f871d8febde50ffc633b3e4801f6927b1ae46c841a1d7f003b13d255d144a13c","sha512":"4cff862dca39fde62705c805a2560cb5a3c924919aa1c8308bb0ed81c6d2da2debb98812ef04e380a371be8bc4af53a8f769c82c56ebd160c4240b71b4217a12","ssdeep":"","tlshash":"a5619bd5b4f613b207db28aeff16987ca231a0cb68459d43795c7e904fd10e8b3a3860","first_seen":"2025-09-18T16:05:37.399686Z","last_seen":"2026-08-30T08:59:39.532651Z","times_seen":672,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/trafficjunky_controller-21b92619b31e7b3e8fcdc34a853134be.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.820Z","timestamp":1788072923820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/controllers/trafficjunky_controller-21b92619b31e7b3e8fcdc34a853134be.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZJIasZBs0RvWK%2BTv3JsHAlkotGr1n5cR0OGQeVP3a54U6JWav6b6MdArdDjdNqMxJVZrXYY5twpurHWoSvBEMGJZGsIqjcwldMWDxSQDsJa7FQf2EwDIg4OmlhxYYZl%2FvgvlKHOB\"}]}\r\nlast-modified: Fri, 08 May 2026 12:00:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=63072000\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69fdd04d-575\"\r\ncf-ray: a331e3bdeb8f56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1397,"size_decoded":1263,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"f5b0b41b0703a74ec988578930719a6e","sha1":"bc0adb04f92f8e3356fc40bad398383b16addbea","sha256":"302119d2b59cb7bce51bc5eae97c835ac284e0ab01a610621a000ea9a4153167","sha512":"6dad77bd8e257dfa5eb6256f89b01679e5e946e2b0385154a8ca2e15727e745a23886a84b475f4eee72b5c8491cb24248b9fb0244b3d0cf56d4133e5c64c3281","ssdeep":"","tlshash":"8121474a2a9b0e350263b42c2f8b6645723941d781490e097fcc4bd0efd863f98a36d9","first_seen":"2025-09-07T15:41:20.464282Z","last_seen":"2026-08-30T08:59:39.514034Z","times_seen":635,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/vendor/@hotwired/turbo/turbo.index-e673eeee48ff679f524833e318f415ca.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.823Z","timestamp":1788072923823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/vendor/@hotwired/turbo/turbo.index-e673eeee48ff679f524833e318f415ca.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eq%2Fhinhtm8yIcNOkxBuDkFsebeNoub5q85Q87VzxjxBX6iibdBSQ93t0omYNPqf5jRleAzSR%2FLw3ZY3C9msChNQJZJp%2FxzUtFC7lR3n6%2B%2Fv0mB2%2Bd7rc3FSAe%2B47NniMJLNA%2BT%2Fn\"}]}\r\nlast-modified: Sat, 22 Aug 2026 15:53:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=63072000\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a89c5e6-12b70\"\r\ncf-ray: a331e3bdeb9156ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76656,"size_decoded":22772,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (38527)","md5":"54bad1c6cd0580f26d26b547a48b8572","sha1":"f79e3d50b1ffb01a875018bc089ab9bc560e2807","sha256":"3ca1dd5c39f340d6d41542fff00708ae2b79acf470870cd8933cf24a456c2a68","sha512":"28565ce6fc4f8438ee5687a890c44406adab41f7058554fd513d1b22d25f8b0b9c2ee05734109f21f9b62c5ce02d5291c0479cf3e5752f91bbd9928753f59637","ssdeep":"1536:/8dPkURrX3Z63LjN2Ggz7lLlaZf87kI7NU9ljVyzcMaO5RTTSAqOvSApqxAvbEOb:uPkbyA/qOsOFZ43t","tlshash":"1e73b8d63366647547de44ffe4224201b2233895384a807cb92cacdb6d7de89a776fb0","first_seen":"2026-06-30T05:59:43.185618Z","last_seen":"2026-08-30T08:59:39.553591Z","times_seen":126,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/vendor/pushilka/pushilka.index-e62f03129dbd16e46856d53f1dc2cf08.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.831Z","timestamp":1788072923831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/vendor/pushilka/pushilka.index-e62f03129dbd16e46856d53f1dc2cf08.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ko5nnyiSNs8l2K9MfCdohl6vA3F%2FAdIq0iR%2BNKaE%2BKPJai8GqmfDePvzWoZUXu0RqDp3HekT5bh59YBzSZ26o5w%2Fo2orl32aA%2FsyBf1uqiMorWZV%2B4rHGEYgyhAYVmfAp%2FRbtNbo\"}]}\r\nlast-modified: Sat, 22 Aug 2026 15:53:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=63072000\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a89c5e6-1ad9\"\r\ncf-ray: a331e3bdfb9556ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6873,"size_decoded":3335,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6618)","md5":"57448b1c4953da03cf16ed72f30100f6","sha1":"e31a561a3116baac6ec0000a899d331812d234d9","sha256":"1f52f0596357c3957398dabd602816a7011dd937038b3aad8703ec27f85d65e4","sha512":"9f3f0f9e91903000ececb0633219a328916c9daf3894e9c1d9fcc8ed4a5c0bfcf1fad55276a45a613980738301b74706ef911601f08ce718ffd1d230be5d13e5","ssdeep":"192:iBK/V0maaX3mEa9K85RoEMMJ079RzF56F:vt0mpVBsMfW","tlshash":"02e1842a354abb3517ce600e262e5788c3b759663cd60878bf8d0dc02e7dd1641a7b70","first_seen":"2026-07-03T16:50:41.949115Z","last_seen":"2026-08-30T08:59:39.517781Z","times_seen":111,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/exit_popup_controller-9cc3ae8381f15ddd78ea0fbd2141526e.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.674Z","timestamp":1788072923674,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/controllers/exit_popup_controller-9cc3ae8381f15ddd78ea0fbd2141526e.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RzJyZCrUOdIOYHbAw9cAD%2F8T%2BjWmHmdGw8UMuMEt%2FPKd3fZ%2BZqOFF0Cw60AmHlebPCN3Mu1xeo6pHgi16Te8tSY8PxLuPgP6MUILuh0uWSTVVOtQLD8hQQFql9WHdL76mrT2JdHu\"}]}\r\nlast-modified: Fri, 08 May 2026 12:00:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"69fdd04d-1e7\"\r\ncf-ray: a331e3bcfb6056ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":487,"size_decoded":989,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"6672ccb6d3b0063f32a1b665e8dbcfd9","sha1":"0dc5eaed2b4f5ee521a8fd641b807b4da9a3b6e4","sha256":"e329f619f60446fd5262bb46d5b398a0bcc5aca578f0236cb5db5374a0b78ad5","sha512":"744bc2dfd1c07ca83eaeb4857291a5bd0e8933c0e146ba2e3426963a0ab9caf00e4cc30f8223e9cea044bc3df0997c0b586b38f7aa9cccc2b1752295a0d7bed1","ssdeep":"","tlshash":"c2f0e50e68fa9260017b345d1e0f9039a9e0a40f264a8f40be5c8bb2cfa827c965270c","first_seen":"2025-09-07T15:41:20.48348Z","last_seen":"2026-08-30T08:59:39.500812Z","times_seen":635,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/trafficjunky_controller-21b92619b31e7b3e8fcdc34a853134be.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.690Z","timestamp":1788072923690,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/controllers/trafficjunky_controller-21b92619b31e7b3e8fcdc34a853134be.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8YrXmA1bUuGjvJ7Nzwo%2BUZIEb0x3%2BY8F9vvkummG6Me2JFZ4A8merCJtyJaSGal8%2BgfB5m3C%2BZo3Ux2eOrXzIPaGNQ3RsvGMYie%2FQf%2BuJ8zWYk%2FCWidCQe4jMSqjO%2FowL9Ws5Vf9\"}]}\r\nlast-modified: Fri, 08 May 2026 12:00:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"69fdd04d-575\"\r\ncf-ray: a331e3bd1b6a56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1397,"size_decoded":1268,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"f5b0b41b0703a74ec988578930719a6e","sha1":"bc0adb04f92f8e3356fc40bad398383b16addbea","sha256":"302119d2b59cb7bce51bc5eae97c835ac284e0ab01a610621a000ea9a4153167","sha512":"6dad77bd8e257dfa5eb6256f89b01679e5e946e2b0385154a8ca2e15727e745a23886a84b475f4eee72b5c8491cb24248b9fb0244b3d0cf56d4133e5c64c3281","ssdeep":"","tlshash":"8121474a2a9b0e350263b42c2f8b6645723941d781490e097fcc4bd0efd863f98a36d9","first_seen":"2025-09-07T15:41:20.464282Z","last_seen":"2026-08-30T08:59:39.514034Z","times_seen":635,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.dsp7c5.com/tag.php?goal=c245b7a2b379fc31de1017421bed3df1","fqdn":"s.dsp7c5.com","domain":"dsp7c5.com","tld":"com"},"ip":{"addr":"103.224.182.208","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:24.015Z","timestamp":1788072924015,"http_version":"HTTP/1.1","security_state":"","security_info":null,"request":{"raw":"POST /tag.php?goal=c245b7a2b379fc31de1017421bed3df1 HTTP/1.1\r\nHost: s.dsp7c5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://kissflirtnight.baby\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Sun, 30 Aug 2026 06:55:24 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 603\r\ncontent-type: text/html; charset=UTF-8\r\nconnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T09:22:58.739271Z","times_seen":18182520,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/tag.php?goal=c245b7a2b379fc31de1017421bed3df1","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.248","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:24.018Z","timestamp":1788072924018,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 15:24:15 GMT","end":"Thu, 08 Oct 2026 15:24:14 GMT"},"fingerprint":{"sha1":"D7:7E:74:E5:BE:35:61:21:88:6E:2B:94:B2:C2:80:E7:7A:B5:3A:D7","sha256":"A9:17:30:C5:F9:C4:6F:D2:EA:D5:CC:47:40:66:24:65:32:F3:66:D2:D6:44:53:85:1C:CB:93:D2:2C:91:23:35"}}},"request":{"raw":"POST /tag.php?goal=c245b7a2b379fc31de1017421bed3df1 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://kissflirtnight.baby\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 30 Aug 2026 06:55:24 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A143128%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-08-30%22%3B%7D%7D; expires=Mon, 30 Aug 2027 06:55:24 GMT; path=/; domain=.magsrv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":[{"name":"goals","value":"a%3A1%3A%7Bi%3A143128%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-08-30%22%3B%7D%7D","quoted":false,"path":"/","domain":".magsrv.com","expires":"2027-08-30T06:55:24Z","raw_expires":"Mon, 30 Aug 2027 06:55:24 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"goals=a%3A1%3A%7Bi%3A143128%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-08-30%22%3B%7D%7D; expires=Mon, 30 Aug 2027 06:55:24 GMT; path=/; domain=.magsrv.com; Secure; SameSite=none"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":438,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T09:22:58.739271Z","times_seen":18182520,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":3,"connect":21,"send":0,"wait":31,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.pemsrv.com/tag.php?goal=c245b7a2b379fc31de1017421bed3df1","fqdn":"s.pemsrv.com","domain":"pemsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:24.024Z","timestamp":1788072924024,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pemsrv.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 15:28:12 GMT","end":"Thu, 08 Oct 2026 15:28:11 GMT"},"fingerprint":{"sha1":"26:75:3D:DD:CF:77:35:D7:1D:DD:3E:9D:ED:AB:72:AB:A7:1D:F8:7E","sha256":"8C:34:4E:F7:90:50:DD:E6:B8:8D:B1:55:01:A5:EA:04:93:4D:C9:FD:BF:BC:7C:74:EB:BB:7C:34:8D:C9:AD:C7"}}},"request":{"raw":"POST /tag.php?goal=c245b7a2b379fc31de1017421bed3df1 HTTP/1.1\r\nHost: s.pemsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://kissflirtnight.baby\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 30 Aug 2026 06:55:24 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A143128%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-08-30%22%3B%7D%7D; expires=Mon, 30 Aug 2027 06:55:24 GMT; path=/; domain=.pemsrv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":[{"name":"goals","value":"a%3A1%3A%7Bi%3A143128%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-08-30%22%3B%7D%7D","quoted":false,"path":"/","domain":".pemsrv.com","expires":"2027-08-30T06:55:24Z","raw_expires":"Mon, 30 Aug 2027 06:55:24 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"goals=a%3A1%3A%7Bi%3A143128%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-08-30%22%3B%7D%7D; expires=Mon, 30 Aug 2027 06:55:24 GMT; path=/; domain=.pemsrv.com; Secure; SameSite=none"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":438,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T09:22:58.739271Z","times_seen":18182520,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":2,"connect":22,"send":0,"wait":28,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.zlinkt.com/tag.php?goal=c245b7a2b379fc31de1017421bed3df1","fqdn":"s.zlinkt.com","domain":"zlinkt.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:24.026Z","timestamp":1788072924026,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zlinkt.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 05:12:37 GMT","end":"Tue, 10 Nov 2026 05:12:36 GMT"},"fingerprint":{"sha1":"C9:BB:4C:F1:59:3D:36:E8:5C:C6:83:57:5B:67:99:9E:62:4E:77:81","sha256":"D2:89:C7:79:84:9F:F3:0B:EA:77:47:01:25:3C:32:A9:2E:AC:58:36:86:B8:30:85:39:62:57:07:4F:CE:E1:50"}}},"request":{"raw":"POST /tag.php?goal=c245b7a2b379fc31de1017421bed3df1 HTTP/1.1\r\nHost: s.zlinkt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://kissflirtnight.baby\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 30 Aug 2026 06:55:24 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A143128%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-08-30%22%3B%7D%7D; expires=Mon, 30 Aug 2027 06:55:24 GMT; path=/; domain=.zline0.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":[{"name":"goals","value":"a%3A1%3A%7Bi%3A143128%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-08-30%22%3B%7D%7D","quoted":false,"path":"/","domain":".zline0.com","expires":"2027-08-30T06:55:24Z","raw_expires":"Mon, 30 Aug 2027 06:55:24 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"goals=a%3A1%3A%7Bi%3A143128%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-08-30%22%3B%7D%7D; expires=Mon, 30 Aug 2027 06:55:24 GMT; path=/; domain=.zline0.com; Secure; SameSite=none"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":438,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T09:22:58.739271Z","times_seen":18182520,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":3,"connect":21,"send":0,"wait":23,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"s.zlinkt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/layouts/registration_open/css/style-c8c2af75fe07e66cbc8e860791572fbc.css","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.429Z","timestamp":1788072923429,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/layouts/registration_open/css/style-c8c2af75fe07e66cbc8e860791572fbc.css HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mqh28fmcqIlUJ5E0azOJfsNWHbJ6kI0hzuoayAbLMq7Z7ieNk%2F02hNeh1HKXuDDmBwkHKgOlOZMsVcLi63lzFup8ekaFm6O4PADplZi1CctrbS2cG34zizN%2Ft3DGpWdSNSZsZMmp\"}]}\r\nlast-modified: Sat, 22 Aug 2026 15:53:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"6a89c5ea-3eb4\"\r\ncf-ray: a331e3bb7b4956ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16052,"size_decoded":5182,"mime_type":"text/css","magic":"ASCII text","md5":"52ed1f70dd2566c28b3feab60548b880","sha1":"4de6dd3e18138512222cfb72856586274f4285e6","sha256":"2c2816ca311fb00d70be88de42d0cdfe192fa2c932bee59f0239aec5edf0347a","sha512":"2de53f5779c9772c9798761d469a76a53b588653aef6d365c94e78b6c86d32bc247ef497adcdb270ccbdcbb3b38bc6767d0d977a8c91392e48fa8db022439cd2","ssdeep":"384:hF1F7FtFHrFsrF8FqFqF21FNZDzYvpFFqF2OPq9CCP:hF1F7FtFHrF2F8FqFqF21F/DzYvFqF2F","tlshash":"a2721d57afb30d05f40b98a86fa9ab56332d0053560ecdba7e84756ccf8a1d46172f8c","first_seen":"2025-09-07T15:41:20.506564Z","last_seen":"2026-08-30T06:56:02.661579Z","times_seen":167,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/@symfony/stimulus-bundle/controllers-9450ed57c268b89ac2abbbcd3046bda8.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.667Z","timestamp":1788072923667,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/@symfony/stimulus-bundle/controllers-9450ed57c268b89ac2abbbcd3046bda8.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w5fjyHti4HUfE1SUVCWej6rhRS1hPms9ZbxAHd9Qjf5ReMu%2F1P6EieAPk%2BJA1%2B1KHZ3DL8iHjl1bIQ427Y9yL8iqbrNffV2sxKUECa6YYIRqTeWLDd5%2F3FSD12xOYYICMaMjgT%2FF\"}]}\r\nlast-modified: Sat, 22 Aug 2026 15:53:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a89c5e6-3c05\"\r\ncf-ray: a331e3bceb5b56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15365,"size_decoded":3165,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13666)","md5":"b13006aa5dfc128101790b18fece4f29","sha1":"6afe1b321ebc9460728ca966b9802d030a822e46","sha256":"67e5a03ada03d14ff27686237782b6c0e1ea9b74e88a085e1a12fbcb05b492b5","sha512":"87a243ad0c8725f5d02793514d914856544226561db91da4539ebf7cc34d4f12b18bf4eaf52e1d93a57fb727ad052dbc96041b45b7c8ffb800ddac358346ed5b","ssdeep":"384:2mDFXsnW+vuF3A3CGju3QHwjCig0NyPqzAxFQPs+jV63yxunTsgDvQ8FYTVMSzkm:nDmd+0anV","tlshash":"9762be259630673b17d6a85df79af97dc331f9c1e3002603980f3daa93e82e86993456","first_seen":"2026-08-01T11:29:22.161001Z","last_seen":"2026-08-30T08:59:39.542762Z","times_seen":18,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/vendor/jquery/jquery.index-320ce5db7d5a1437225818702b995851.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.706Z","timestamp":1788072923706,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/vendor/jquery/jquery.index-320ce5db7d5a1437225818702b995851.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JqflAZpGRJaF7JE4pLMy7sLnPar8aHhO6hrP7iRfY5KYXtBcdUpysxXQc84bTlt3axL19rr2IsqDvdCFBJZZXkkeD1%2F70UJ4TVpRfD88V%2BezsU%2FM60c6KK6y7%2BL5N3v0j9tcndAM\"}]}\r\nlast-modified: Sat, 22 Aug 2026 15:53:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a89c5e6-1568e\"\r\ncf-ray: a331e3bd2b7356ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87694,"size_decoded":34258,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65285)","md5":"521748d21918480689efc38711b7373f","sha1":"edbb48857badac2bd413ef70c5654334eac26031","sha256":"ba52a36cefdd1b60052decac503adbad04c6b2b9563105e29a101070114c6e87","sha512":"2147abb8de580b4da06b622f122da3a795973d6c38b5f0dda127406651532ca0a56792539b17f086cb62cc6bebe75a3f8a3cdee498b5a4aa814015b9c667ed02","ssdeep":"1536:AQPJiqTilKwwcaOYr2gObeM8tClDK/GVz2MlBlrqq5rXm4+c609:AQvOM2glM8CIuz2MFHwc609","tlshash":"aa8309dcb2c7746343ab60b9007f650af2366899280dc510f069e8f9bd75a4a817bf7d","first_seen":"2026-06-30T05:59:43.177417Z","last_seen":"2026-08-30T08:59:39.543613Z","times_seen":125,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/alert_controller-a1df9ab33f2fef598a62c6e9a3eb38a1.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.798Z","timestamp":1788072923798,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/controllers/alert_controller-a1df9ab33f2fef598a62c6e9a3eb38a1.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sTfXoEExeGlpND3tDanPb3ygXnbnvclgMb6QnuFHrcDpDNYJfQmUgv8VUtI9F9%2F22Qad8cmspX6K08A84GTrabNQmcVG9qu6G0Yrae5fIYLfKAMNlogsd5DNyWVgj%2BxiLOdISi%2BJ\"}]}\r\nlast-modified: Fri, 08 May 2026 12:00:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=63072000\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69fdd04d-fec\"\r\ncf-ray: a331e3bdbb7f56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4076,"size_decoded":1968,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"b4ca234f38903bd3eace881adde99465","sha1":"142be859dfa92f7ffaefad347c7bdcf1618419a9","sha256":"47353a9c3963fa044dcd4d9c48cc343dd394eb7663e4de9802d0483e741ab1e2","sha512":"cb0d79632a1163f7d72d92203802229d982cb8845dbb16ff6645a76f8a98df2cedf83e2cdc9142ce89214fc9cf903f5ea485e7591227c9de9dc82630eb3fbe42","ssdeep":"","tlshash":"3a81cb2af0bb1cc2c127214a3d2e7692a074849ba9b63c32b94c7b4d8f061e9c65d770","first_seen":"2026-02-13T06:57:49.19788Z","last_seen":"2026-08-30T08:59:39.522688Z","times_seen":445,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/aliases_controller-20caf158d7696affeaeab488106ff238.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.801Z","timestamp":1788072923801,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/controllers/aliases_controller-20caf158d7696affeaeab488106ff238.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BnWvf7oM%2Fy7Df0GsqJigDBZm5c65tgNpw5tbSENqeUaEszB4CJqLdJHO16qixOKvFDOqIqI1LenUGqpanb%2BlJymlkpqao2oSR1oQF%2FbYIPtMa4ej4GlqvNyzeWJiCWmD0Dd4pKtn\"}]}\r\nlast-modified: Fri, 24 Jul 2026 16:23:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=63072000\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a63917c-8e7\"\r\ncf-ray: a331e3bdcb8256ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2279,"size_decoded":1466,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"00d7d7b3729cf2fca2ac20ab450d0c5d","sha1":"648d336366510911b1e06c73c8ace6fcc250eff2","sha256":"54ea250d47eba1498665f79e57f0e9b4582b3f8503a8a84012c6d18e694ce6de","sha512":"ec993d2ea623517c9990548df1d3461caab7ac3586ab4afb9cb1c5dbd20688d61446c2d83df4e55ed8d57072440f8de9b5d7032a5397c35410ca84222ba12819","ssdeep":"","tlshash":"0e41627e01fb0e0a49b1107fce0e6335112550332c49fe84bdae8a949fc992d6176fe9","first_seen":"2026-07-24T22:29:03.042268Z","last_seen":"2026-08-30T06:56:02.64561Z","times_seen":23,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clc.clickrotate.net/.api/status","fqdn":"clc.clickrotate.net","domain":"clickrotate.net","tld":"net"},"ip":{"addr":"3.164.240.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:24.002Z","timestamp":1788072924002,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickrotate.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 28 Aug 2026 00:00:00 GMT","end":"Sat, 13 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"17:C9:67:A3:94:FE:CB:85:D8:E8:EF:03:67:8D:8A:53:39:1D:E7:01","sha256":"1E:0E:35:46:A5:07:20:E6:62:F7:E0:8E:14:EB:86:04:9B:E5:B1:81:82:5D:23:E8:61:27:4F:12:13:B9:EB:6D"}}},"request":{"raw":"GET /.api/status HTTP/1.1\r\nHost: clc.clickrotate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kissflirtnight.baby/\r\nOrigin: https://kissflirtnight.baby\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/json\r\ncontent-length: 16\r\nvia: 1.1 60e14ed0cb79469a4eda743a098574f2.cloudfront.net (CloudFront)\r\nserver: nginx/1.31.2\r\ndate: Sun, 30 Aug 2026 06:55:24 GMT\r\nstrict-transport-security: max-age=63072000\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: 1C2Av3jOXUgHLA5Ap9n9XmlSVOnuoEA_fpq3H1BPeOBlHb9I8r95iA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16,"size_decoded":595,"mime_type":"application/json","magic":"JSON text data","md5":"3a0386dd403566b954d2c0610133f6c8","sha1":"b5cd90bb66e6a329a5d5e002ba4b7130f944c2c4","sha256":"6489d6d7a33c5d40e18fc61eeb6c34c341279ee61816394dde5189aa4ad8fae5","sha512":"c34ce1208cd675417059efb86817dc4a548f43bc6d9de9e364ff02fb4c4019a07933b14e57ed875de681a9cce651d403f35be0ad1328a3451e079813a437af17","ssdeep":"","tlshash":"b4600000000c00000cc00c00000c00303fffcfc3003f00c0000c00300f000c0c00c000","first_seen":"2023-05-03T16:43:12Z","last_seen":"2026-08-30T08:59:39.531468Z","times_seen":1134,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":72,"connect":29,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"clc.clickrotate.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.orbsrv.com/tag.php?goal=c245b7a2b379fc31de1017421bed3df1","fqdn":"s.orbsrv.com","domain":"orbsrv.com","tld":"com"},"ip":{"addr":"95.211.229.245","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:24.022Z","timestamp":1788072924022,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orbsrv.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 15:27:46 GMT","end":"Thu, 08 Oct 2026 15:27:45 GMT"},"fingerprint":{"sha1":"03:97:96:FE:0A:38:0B:D0:48:5A:04:07:BA:38:23:F7:99:1E:82:1F","sha256":"AE:6A:39:58:A4:C8:39:8C:A8:F9:54:FD:4B:A6:A1:6A:3F:65:97:9F:04:31:F1:FE:DA:30:8E:79:34:C2:39:01"}}},"request":{"raw":"POST /tag.php?goal=c245b7a2b379fc31de1017421bed3df1 HTTP/1.1\r\nHost: s.orbsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://kissflirtnight.baby\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 30 Aug 2026 06:55:24 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A143128%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-08-30%22%3B%7D%7D; expires=Mon, 30 Aug 2027 06:55:24 GMT; path=/; domain=.orbsrv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":[{"name":"goals","value":"a%3A1%3A%7Bi%3A143128%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-08-30%22%3B%7D%7D","quoted":false,"path":"/","domain":".orbsrv.com","expires":"2027-08-30T06:55:24Z","raw_expires":"Mon, 30 Aug 2027 06:55:24 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"goals=a%3A1%3A%7Bi%3A143128%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-08-30%22%3B%7D%7D; expires=Mon, 30 Aug 2027 06:55:24 GMT; path=/; domain=.orbsrv.com; Secure; SameSite=none"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":438,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T09:22:58.739271Z","times_seen":18182520,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":2,"connect":22,"send":0,"wait":24,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"s.orbsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/vendor/@hotwired/stimulus/stimulus.index-af27b0728a07bda78f2ee3ba84fd1d21.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.665Z","timestamp":1788072923665,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/vendor/@hotwired/stimulus/stimulus.index-af27b0728a07bda78f2ee3ba84fd1d21.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BzGZxJZhszMisfx%2FoTHgALTV7SlgCgOQOo9F4Y45jpUB%2FwasFDtQdPJKE21kS73YWITuITs4ZURTOmo5D791ZYUJJyi0MypnhqhFhaQUSkDvNr%2FOdEbCccHCTauDzJJdffGiztG7\"}]}\r\nlast-modified: Sat, 22 Aug 2026 15:53:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a89c5e6-b395\"\r\ncf-ray: a331e3bceb5a56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45973,"size_decoded":13483,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39454)","md5":"4a1504323404b685ef2a47f206d87526","sha1":"c45cbca188e451e06ccb51d66dd16b7501163113","sha256":"73edeb2da02d53524d4cf8557854bfc6276c4aed7f22867d0a5bec872bb64e3a","sha512":"484185a800495f105727459d4b21c6345d97edc1219319390a3eb4b6e73cf889897cc2716134e0165c34a8b9b18d0140ac5eb69733d9c2343af8748c5a11b66a","ssdeep":"768:/1joMBqOMlejHxmwEdCsiQ1PrEEIqo/cqiAUjDIFOn9RvSDIvQHqgMSXH7G2dYWH:/LCdCsiQ1PrEEIqo/cJBjDIFOn9ADIvW","tlshash":"6e23a5a133d760b703da449fe462410af31969e97809406cfe7cacd7bc70d45a2b7ab9","first_seen":"2026-06-30T05:59:43.170896Z","last_seen":"2026-08-30T08:59:39.507814Z","times_seen":131,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/alert_controller-a1df9ab33f2fef598a62c6e9a3eb38a1.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.670Z","timestamp":1788072923670,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/controllers/alert_controller-a1df9ab33f2fef598a62c6e9a3eb38a1.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7thuN34jkcQPxL8jCB02YDINLa83nP4%2FNuP9E8dCYeqWPiWJ2zq7ckDhV%2BCFsl9wBRhwp2NY8psj2i1v%2FXr1SyhApwuB%2F5ymlbsrDxUWuztl%2B7F8o3U0nIyBh9e9Zoh81qGrOPVd\"}]}\r\nlast-modified: Fri, 08 May 2026 12:00:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"69fdd04d-fec\"\r\ncf-ray: a331e3bcfb5d56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4076,"size_decoded":1965,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"b4ca234f38903bd3eace881adde99465","sha1":"142be859dfa92f7ffaefad347c7bdcf1618419a9","sha256":"47353a9c3963fa044dcd4d9c48cc343dd394eb7663e4de9802d0483e741ab1e2","sha512":"cb0d79632a1163f7d72d92203802229d982cb8845dbb16ff6645a76f8a98df2cedf83e2cdc9142ce89214fc9cf903f5ea485e7591227c9de9dc82630eb3fbe42","ssdeep":"","tlshash":"3a81cb2af0bb1cc2c127214a3d2e7692a074849ba9b63c32b94c7b4d8f061e9c65d770","first_seen":"2026-02-13T06:57:49.19788Z","last_seen":"2026-08-30T08:59:39.522688Z","times_seen":445,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/pushilka_controller-63999f245c27e0096a4779903f5722f4.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.683Z","timestamp":1788072923683,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/controllers/pushilka_controller-63999f245c27e0096a4779903f5722f4.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DptOTYTz2OHbDN%2BKOrSynPvY1eFxOBKx9G5CTcpU4bbeyARaH4UviMw7nef%2FlAPHz8r6UcYdwbH3VPXZdh8GwHlCndb8XauQ%2F9dnulqiOoXdNAM3VhBGbkltSX948b%2BOeW7q4daX\"}]}\r\nlast-modified: Thu, 04 Jun 2026 17:17:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a21b328-796\"\r\ncf-ray: a331e3bd0b6556ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1942,"size_decoded":1399,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"bd4a8ccd016ba8cca2c145d6c2e3f01b","sha1":"c1253bac550826037452036f6b5346274ad0c0a3","sha256":"6842ceaf6ef175bcf28113a0f9775ea18f35136f47905d4a053cde9d23cc344c","sha512":"9601f112020e3000b42eb4e92a033a22c19f64782fcd832d384ab8baa984c9c6b3da111041fe5b5d07479fb509e1ced45efcdf2ab3ad0dddedbb7b35adcc9b34","ssdeep":"","tlshash":"ba41c29b4aeb076045ca70a52daf50115376800f7c586b6c7fad5e006f5ce3c5ae772c","first_seen":"2026-06-04T19:55:57.627382Z","last_seen":"2026-08-30T08:59:39.51542Z","times_seen":210,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/bootstrap-b845a684f371f0f2224949604dca5544.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.662Z","timestamp":1788072923662,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/bootstrap-b845a684f371f0f2224949604dca5544.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E2Nc8YRd55TXYTU6PUWN8%2FZDX%2FjTv7cYsQqwhhoWguApcXFTuvxhki%2FcICNMNw0aAguPnCaX2vAyzYXE0gE3fZiMUWS7bsuwU%2Bs%2BpBmT%2FOq2VZ4L1WTWQUYAZnQdxhByiasg7FrV\"}]}\r\nlast-modified: Fri, 08 May 2026 12:00:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"69fdd04d-51\"\r\ncf-ray: a331e3bceb5856ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81,"size_decoded":814,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"3aa195cafbbbafd42a7edbc613046c28","sha1":"e3efb9ad0014e5038c7f92c834845cee4b9663c6","sha256":"73e65bd84ea6825b108b96d2be0ae834cf861e236e5c452169c8bdd7d737e0e7","sha512":"26b9b5bc3916d9c63a9f8561771e1845dbae6068ba4543aaf46090c7699a92d8c7e625982ac3041e7e45df44177cf8bbca96008c5acd9c262b56c28cb644416a","ssdeep":"","tlshash":"8ea0110a080a8a0c8cce08bca00223080f8082300e828b2a0a8a0322c88e082bb008a0","first_seen":"2025-09-07T15:41:20.516872Z","last_seen":"2026-08-30T08:59:39.514736Z","times_seen":635,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/backbutton_controller-375e60b22b1c2f25f013c9cb48276de7.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.802Z","timestamp":1788072923802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/controllers/backbutton_controller-375e60b22b1c2f25f013c9cb48276de7.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YVVlLD%2B5oulogat48iMhJmiGoQNDX%2F04LCdg70sUWaKXS9wRtLux3QyTzuzYs9uXRnxnheIvuBK25%2BWndIJEnnDPEWczMM7Vbf96zz0TDJFOAvejM16NGeD%2B3homJNgNvkfimTjE\"}]}\r\nlast-modified: Fri, 08 May 2026 12:00:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=63072000\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69fdd04d-33c\"\r\ncf-ray: a331e3bdcb8356ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":828,"size_decoded":1130,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"2ddaaad2082c4359dcb8d36f5ce65ee9","sha1":"c662d74fca59db4f91f3a35fcf9e5d381342d0bb","sha256":"d90921632050b7f7e4a0e2fad075b2ba99cff970356e691180ef9df5d82222c0","sha512":"845e6f96b07828bcd8e459322d6e5dc06979dffdea1f0a57ff6eef568679db5349dab33fd8178a20d4e25dc5c803d1de8797acc6c3eecedb8f076a3676bb8403","ssdeep":"","tlshash":"aa01475e62e244310aa770424f1f622871eb901b6a296f09ff6d4be1bf5456b0441b8e","first_seen":"2025-09-07T15:41:20.525381Z","last_seen":"2026-08-30T08:59:39.533166Z","times_seen":635,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.chnsrv.com/tag.php?goal=c245b7a2b379fc31de1017421bed3df1","fqdn":"s.chnsrv.com","domain":"chnsrv.com","tld":"com"},"ip":{"addr":"95.211.229.245","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:24.011Z","timestamp":1788072924011,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chnsrv.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 04:33:39 GMT","end":"Tue, 10 Nov 2026 04:33:38 GMT"},"fingerprint":{"sha1":"7B:B1:EB:B1:BD:FB:AA:E7:25:EE:4E:C4:32:87:8E:E0:2A:59:0A:0F","sha256":"91:3A:6F:37:A3:E8:70:6E:E3:6E:0F:40:C9:69:E2:8A:0C:42:10:82:69:81:86:18:26:B4:A8:4C:6D:E5:DC:12"}}},"request":{"raw":"POST /tag.php?goal=c245b7a2b379fc31de1017421bed3df1 HTTP/1.1\r\nHost: s.chnsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://kissflirtnight.baby\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 30 Aug 2026 06:55:24 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A143128%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-08-30%22%3B%7D%7D; expires=Mon, 30 Aug 2027 06:55:24 GMT; path=/; domain=.chnsrv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":[{"name":"goals","value":"a%3A1%3A%7Bi%3A143128%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-08-30%22%3B%7D%7D","quoted":false,"path":"/","domain":".chnsrv.com","expires":"2027-08-30T06:55:24Z","raw_expires":"Mon, 30 Aug 2027 06:55:24 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"goals=a%3A1%3A%7Bi%3A143128%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-08-30%22%3B%7D%7D; expires=Mon, 30 Aug 2027 06:55:24 GMT; path=/; domain=.chnsrv.com; Secure; SameSite=none"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":438,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T09:22:58.739271Z","times_seen":18182520,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":2,"connect":21,"send":0,"wait":23,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-29","alert":"Sinkholed","trigger":"s.chnsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/public/page-analytics","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:24.044Z","timestamp":1788072924044,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"POST /public/page-analytics HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 513\r\nOrigin: https://kissflirtnight.baby\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":513,"data":"{\"page_id\":\"o:461669b0-224e-4e2f-a51b-78f1ade0772e\",\"start_time\":0,\"redirect_start\":0,\"redirect_end\":0,\"worker_start\":0,\"fetch_start\":141,\"domain_lookup_start\":143,\"domain_lookup_end\":247,\"connect_start\":247,\"secure_connection_start\":247,\"connect_end\":261,\"request_start\":261,\"response_start\":438,\"response_end\":474,\"dom_interactive\":985,\"dom_content_loaded_event_start\":1264,\"dom_content_loaded_event_end\":1271,\"dom_complete\":1271,\"load_event_start\":1271,\"load_event_end\":1272,\"duration\":1272,\"redirect_count\":0}"}},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:24 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, PUT, DELETE, GET\r\nstrict-transport-security: max-age=63072000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F4Sfj45iP73LgdKDAGsioF%2F0VxOWqt18ZUg1AN5%2BGG6LSwVQ2310jzKpTzgPiyk8G4Xofv1%2FPnX0xRvXkrAs9Osx2oqxB5OeL6tkG4pwum%2BeXAlnzpylj6sR39k2x5xcioyn7BLF\"}]}\r\ncf-ray: a331e3bf4ba856ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":1914,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T09:22:58.739271Z","times_seen":18182520,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/taboola_controller-77335ab2c11c7d35e7e25b553b834b8c.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.817Z","timestamp":1788072923817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/controllers/taboola_controller-77335ab2c11c7d35e7e25b553b834b8c.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p2M2kTuXliv%2FJILl%2BUnTF0vT8JWmKKaYE21UUlCuWhVz3fUhjKH4GizwSLAAxROR3DnVPqI3eCLPiPtO%2BP9zabQiALFgYXepL2k8XIPydrtRWV0dAyxiFtaBmXDQmXt5mHIBenjE\"}]}\r\nlast-modified: Wed, 20 May 2026 12:40:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=63072000\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a0daba8-4c7\"\r\ncf-ray: a331e3bddb8c56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1223,"size_decoded":1233,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"fa88b9fb00e08c883854f9ca50802712","sha1":"c80177df5eaf011178bcc936441197b689169a2c","sha256":"ce2b542af49225a2c04d1ac38bb113c2ab98ee0a5af03c991f23e3e772275f43","sha512":"eb6a81950d0a68b19446cdeb88e213d1508ed634f2775cc80ba1163c870fc28a603279f30d9d7c30b9d015d8ccab434fcb8675a0378c674b89d277d4fc730a75","ssdeep":"","tlshash":"1721381a2bda1b384166a0682faf7e122275409b15054d093fdc0a94dfd923e98e3bf9","first_seen":"2026-05-20T14:29:40.811282Z","last_seen":"2026-08-30T08:59:39.547171Z","times_seen":261,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/layouts/registration_open_controller-ae03a4f7f22650cddff381b5f8035612.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.833Z","timestamp":1788072923833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/controllers/layouts/registration_open_controller-ae03a4f7f22650cddff381b5f8035612.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZGB66wh6xFA8u7EslShRi2Zz47ZUihAEhUY5o5QfY6puQePFhi0gU%2FvODtHvk6ukcdP3BGQA%2FMX96Gd%2BB8wvJXVZr%2B%2F2NgSH66jLJglWYfgZXLlX9iDMGBdzu97t8HoOzzL6NuJx\"}]}\r\nlast-modified: Fri, 08 May 2026 12:00:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=63072000\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69fdd04d-439\"\r\ncf-ray: a331e3bdfb9756ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1081,"size_decoded":1240,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"e311899c9ac26e5ef6a43dcfaeef5b3e","sha1":"46e0eddea17f3bab429bd3bf86127842558be196","sha256":"64d3cfee4e350f1c63d87915d59814deb1fee8048a2cf3e6a3ec12ee25ee8118","sha512":"889306b5f64ac6d0cd9bcb031b4d1c501844848d8df595a8c2cc96f0f898a11f6cd7d67b1ed52d92ee2cc843e430758909fb12bca443ac17d34662e9453cbc7e","ssdeep":"","tlshash":"98117a0a7176466824bbf05b87abe4591615600f710acf1db9ce0be04f84018a9cba9c","first_seen":"2025-09-07T15:41:20.490931Z","last_seen":"2026-08-30T06:56:02.626558Z","times_seen":167,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/layouts/registration_open/i/image-f459145b3880dbc6ed56eef7761b2933.jpg","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:24.836Z","timestamp":1788072924836,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/layouts/registration_open/i/image-f459145b3880dbc6ed56eef7761b2933.jpg HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nCookie: pushilka_vid=1imsyod-e8s2x7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:25 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 19 May 2026 20:16:58 GMT\r\netag: \"6a0cc53a-3d0e\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h6SmNDVg6PBDL8bGci%2FdUruxCvNf14BqfO4XY3KYclk1sMOjxNc%2BdMPIaxwoVFf9o1%2BHoJN9VGRUmwKozzIPGibb1zZeLgto8imzw%2FulUV5DH3JwuAjgzfehMOAtFQFq6ZEt0M2b\"}]}\r\ncf-ray: a331e3c43c0856ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15630\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15630,"size_decoded":16369,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 390x353, components 3","md5":"1d2b209d1a2fd70f62cd439d72b2b2cc","sha1":"bcca758c0db7619c6941434748fa83547df11c7c","sha256":"a976ee682be3e711bd276727f117615dccfdde7168792879e66b0e743902597c","sha512":"11982eaec5f13fb86079d03e317753f347d537b88f4a6875bb2ded25b124aaa10bef9bc0592796a2779440db0fd99b2e87e6bc41763ed6538fe5c7548a9e74c8","ssdeep":"384:Jpk2bJ3NXpSuHMMXt+1iA2CBbwlnSmcq0m1sKqASVKB:JCK3kMc1iNXHF0VKB","tlshash":"4662cf7a329bae66dba310f25ebb562ad677ca724819885e785447d0620e7930260c22","first_seen":"2026-06-08T12:20:28.052581Z","last_seen":"2026-08-30T08:25:57.56533Z","times_seen":96,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/telemetry_controller-8a4e57e20e75295b74bbb1ab55f58602.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.689Z","timestamp":1788072923689,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/controllers/telemetry_controller-8a4e57e20e75295b74bbb1ab55f58602.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qFfw8kbRHSQaiyfoDkHzYOTCci4XL6wbd1AEUbjQVf7PvgIfMFEFMcqixhBx%2BmSzgn0oMQ%2BkkoWZGUEgScl0lrcddS7Zbi1tJzLUQu8wD9LybpXqQuDhXF29FG7SNtihpwIX0I9T\"}]}\r\nlast-modified: Fri, 08 May 2026 12:00:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"69fdd04d-1215\"\r\ncf-ray: a331e3bd0b6956ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4629,"size_decoded":2085,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"dfbf0fd289d91d5c85105c4fe68e9c0b","sha1":"e0331d97cda634189d4375bc82748a057855397a","sha256":"73c80c590a2dd669ed68cd92fa446471064c6c1a938cd3454ca2f562ce1014f6","sha512":"6d1472ff46a77518b4fdabe068a4def3eac0c922d73036c01fd77a63cc7cfa1bdd59e2ce3ba6cecb096a506a927c4720524d4bb6f73be8f8c890646faa4e96b6","ssdeep":"48:2T3svppMd/AVgdUGh9r563UHeBch6+pM4lNWudmXr6+aqHSeaPJcVvQVXdTht:2T38f0eor563UHeBcHpvy5aP+RQ/P","tlshash":"6da143ea1533205501b6265fa3075349713690573f0ab9827b4c83342faeb6b72b6ff8","first_seen":"2026-02-28T19:38:24.553622Z","last_seen":"2026-08-30T08:59:39.50339Z","times_seen":415,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/vendor/pushilka/pushilka.index-e62f03129dbd16e46856d53f1dc2cf08.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.699Z","timestamp":1788072923699,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/vendor/pushilka/pushilka.index-e62f03129dbd16e46856d53f1dc2cf08.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QFUlpm1zstpwaMPeZpD4sZGMMf0fZZ9WeF8Di1XVyWlXmrWFoxQAQF3zvSNAUC7xcfwA%2FE1uvIpQroR53rz7aREaCySz3%2Fhtz%2BPWk2Ld%2BS7mF2udKkCk7PqJOWaPtFJMIeiJxVfn\"}]}\r\nlast-modified: Sat, 22 Aug 2026 15:53:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a89c5e6-1ad9\"\r\ncf-ray: a331e3bd1b7056ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6873,"size_decoded":3322,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6618)","md5":"57448b1c4953da03cf16ed72f30100f6","sha1":"e31a561a3116baac6ec0000a899d331812d234d9","sha256":"1f52f0596357c3957398dabd602816a7011dd937038b3aad8703ec27f85d65e4","sha512":"9f3f0f9e91903000ececb0633219a328916c9daf3894e9c1d9fcc8ed4a5c0bfcf1fad55276a45a613980738301b74706ef911601f08ce718ffd1d230be5d13e5","ssdeep":"192:iBK/V0maaX3mEa9K85RoEMMJ079RzF56F:vt0mpVBsMfW","tlshash":"02e1842a354abb3517ce600e262e5788c3b759663cd60878bf8d0dc02e7dd1641a7b70","first_seen":"2026-07-03T16:50:41.949115Z","last_seen":"2026-08-30T08:59:39.517781Z","times_seen":111,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/vendor/@hotwired/stimulus/stimulus.index-af27b0728a07bda78f2ee3ba84fd1d21.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.786Z","timestamp":1788072923786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/vendor/@hotwired/stimulus/stimulus.index-af27b0728a07bda78f2ee3ba84fd1d21.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QmjOLtvFq0FWWUvTElqE3P%2BgjWhIezYYGdGMHtTUpjPuz7GSeMskaGrG41vOznBQB1ZIovRE5AaSPQWlAvrhmk%2FWy6VmPLTYYdxg7jqESzoL2iJOYjaCeWGrIBZ8jn9ilASXJcTr\"}]}\r\nlast-modified: Sat, 22 Aug 2026 15:53:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=63072000\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a89c5e6-b395\"\r\ncf-ray: a331e3bdab7c56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45973,"size_decoded":13641,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39454)","md5":"4a1504323404b685ef2a47f206d87526","sha1":"c45cbca188e451e06ccb51d66dd16b7501163113","sha256":"73edeb2da02d53524d4cf8557854bfc6276c4aed7f22867d0a5bec872bb64e3a","sha512":"484185a800495f105727459d4b21c6345d97edc1219319390a3eb4b6e73cf889897cc2716134e0165c34a8b9b18d0140ac5eb69733d9c2343af8748c5a11b66a","ssdeep":"768:/1joMBqOMlejHxmwEdCsiQ1PrEEIqo/cqiAUjDIFOn9RvSDIvQHqgMSXH7G2dYWH:/LCdCsiQ1PrEEIqo/cJBjDIFOn9ADIvW","tlshash":"6e23a5a133d760b703da449fe462410af31969e97809406cfe7cacd7bc70d45a2b7ab9","first_seen":"2026-06-30T05:59:43.170896Z","last_seen":"2026-08-30T08:59:39.507814Z","times_seen":131,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"swarmpush.com/s/pushilka/app.css","fqdn":"swarmpush.com","domain":"swarmpush.com","tld":"com"},"ip":{"addr":"104.21.7.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:24.831Z","timestamp":1788072924831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swarmpush.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:52:21 GMT","end":"Mon, 02 Nov 2026 12:52:03 GMT"},"fingerprint":{"sha1":"5E:B6:EC:10:B2:A6:EB:B8:17:2F:1D:ED:22:2D:72:EF:E2:1B:CF:A2","sha256":"B9:86:F6:42:D7:B4:7F:97:DB:0D:6B:1E:74:E0:6E:C2:35:4F:1E:70:EA:2F:7A:BD:7A:FE:82:80:A1:1D:59:C2"}}},"request":{"raw":"GET /s/pushilka/app.css HTTP/1.1\r\nHost: swarmpush.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:24 GMT\r\ncontent-type: text/css\r\netag: W/\"61c89161-671\"\r\nlast-modified: Sun, 26 Dec 2021 15:59:29 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=clJewqF967%2F8F7xe2dy8YetMZClvenKNU66zgqai9TfUhgBsLc31wlj5gEzmNz2fdFPVBmfGsudr5j%2BTr9i6lMlgtyWi9AjsjemGlWs2Y4xG7eKy6%2BkrZx0tT4kTDr8K\"}]}\r\nage: 5181\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a331e3c43cd7b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1649,"size_decoded":1317,"mime_type":"text/css","magic":"ASCII text, with very long lines (1648)","md5":"cf386a01eb1b1501934e228a5592c472","sha1":"bf2003db3172f7148fabf9eb1e4aad910f74b9c2","sha256":"aded6a96695a8cda4f853d1dff32d81849d6c4da6fd939780cbac8680b392080","sha512":"ab7e5dd3d96a0b1a2212edd675d5a2182a9c92d4407f63b3fc57242490600962e0589168c44c37588776b0fdf90cce5569c7831a9800168c747c1dd8f9c8144e","ssdeep":"","tlshash":"df31ce63fad511be91a7c65d645b3bfc7c7e88045b120d7ac516fb7447820f701e1608","first_seen":"2025-10-16T11:43:02.257143Z","last_seen":"2026-08-30T08:25:57.640711Z","times_seen":189,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-30T06:55:22.880Z","timestamp":1788072922880,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email= HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.1.34\r\ncache-control: no-cache, private\r\nlink: \u003c/assets/scripts/exit_popup/css/style-26f0ccdbe82f964f7793718312dffd25.css\u003e; rel=\"preload\"; as=\"style\"\r\nstrict-transport-security: max-age=63072000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rjXugqPMYFeZ%2BoKandGQsfWmf9EOqSGPnUy71UZ7D%2FIz1Svn185pRPNtLbHu01MgLxan7sYZzqXcQVqCukleYTgclRVffMrZSLHJLbiBRCw1eSdpXnXQlYNMK%2BbdRu%2BairiZlQ0W\"}]}\r\ncf-ray: a331e3b8bb0a56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Stimulus","description":"A modest JavaScript framework for the HTML you already have.","website":"https://stimulusjs.org/","common_platform_enumeration":"","icon":"Stimulus.svg","categories":["JavaScript frameworks"]}],"data":{"size":46221,"size_decoded":11825,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2987)","md5":"21d667a85c0f19c6bb1c092bde357b9f","sha1":"2c1dfc3b86d1139d61401ee5b03b2b884bc909f0","sha256":"7a16bcc52f326a47b8ab3964e4f82582049a53e4b589c04c3c049513047b9bc8","sha512":"a0c16c50269b70849ca2873ab54a7218bede8289a065d061dff6cc4d564563eb679d5e9caf74c20f38131c553b44746582499064abcac04b226d790d6707c8b5","ssdeep":"768:TFKTwBbq+Tlh1mmXWqko2Eus1t8t5Eior/:Be+31mGWqvwjor/","tlshash":"e4236a20d2308f3b12eb398cfbb0e57d8064e386d400506bb52dbad967ddadd556393a","first_seen":"2026-08-30T06:56:02.666883Z","last_seen":"2026-08-30T06:56:02.666883Z","times_seen":1,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":0,"dns":103,"connect":15,"send":0,"wait":177,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/app-ecb9b55849781102e2cc6e9b140fd37a.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.656Z","timestamp":1788072923656,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/app-ecb9b55849781102e2cc6e9b140fd37a.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 08 May 2026 12:00:13 GMT\r\netag: \"69fdd04d-19\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qGul%2BLvLuDi3NdmcA%2FjF5ShmOiTeSo5mmrBVdRfvAbM4CiuHw3VYmjlTRggEI3B6w%2F7BD%2BN07NM251rKLxs5JLHmDhUJypyCCc2kTqAbkqo0JPpQ%2BaAVJTAMdD4uZ5j5LEHmdJIh\"}]}\r\ncf-ray: a331e3bcdb5756ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25,"size_decoded":776,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"6f2ae2a568d458190ee67649aed6ccd1","sha1":"662fe1ee187cfef5b2f2366cbed7c8460a8c45bb","sha256":"8d34a370779f8ad3e0f4704f04924b7226dd47ab462e33530cd685e4af91a29f","sha512":"58aecc2638ec5dca197cf5711b60ba0fa8d461af29f06a56fd4d23802bf35a723cff92f42d20c6dfec6a25ca388c58ad16a68a4ed471eed9c08d4bda50212834","ssdeep":"","tlshash":"a5700022ab080880c0c000082828028802a880000bc00a28020a2322880883a3032002","first_seen":"2025-09-07T15:41:20.480885Z","last_seen":"2026-08-30T08:59:39.52118Z","times_seen":635,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/reg_form_controller-fd857b9855f60ae714a52554abfbac44.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.685Z","timestamp":1788072923685,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/controllers/reg_form_controller-fd857b9855f60ae714a52554abfbac44.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M3WwFfvuogQ5raXEsETB0mM5I2iEmWmNlYHUwCnKNFt9%2F0MTJmraBgaSt55JKWmTpzvsK5DbYmZZKIYHXZc7qivrMb%2FNL2u%2FsmFPOEhAPeTp8TSMnwSzYwBTag91zxCBk0tsausu\"}]}\r\nlast-modified: Fri, 07 Aug 2026 11:55:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a75c7b1-22cb\"\r\ncf-ray: a331e3bd0b6656ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8907,"size_decoded":3008,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"0dfa24e05dcb687e09b1e21ca9c51181","sha1":"560c465ca5bb9a14cb11b502177c343bcada58ed","sha256":"5468c7048386bfebc0cfc1bb607f9aed234d5a5e8787a482a0d7297d1f2d0da8","sha512":"4657f148a0f81ced6affe58b40448fab9ac26902de34068597ef53b59c0ab1077854820014ad77a7051c9e18690411270de456a843238a14edb0774852fc63a2","ssdeep":"96:fI2TG0az3MqZWh6ZhkXEiCL4nxKO/DIXiNYSuIl2YcU+l3r+z3htauFM4YSZbMCr:fXHccGSwW0p8xKg5uIUU+lyrji9Ksk","tlshash":"e902ab2512fa10d4c2a7522a6fcb6111116ed2835e49ae49bfbc47940f8c93e68d8ff8","first_seen":"2026-08-09T12:18:07.370841Z","last_seen":"2026-08-30T08:59:39.511733Z","times_seen":14,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/@symfony/ux-turbo/turbo_controller-f3040d8b6a5a81530e1ea5ec500d1142.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.795Z","timestamp":1788072923795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/@symfony/ux-turbo/turbo_controller-f3040d8b6a5a81530e1ea5ec500d1142.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XqxGEBL5J7%2FEcShf9GVpwtsb%2FSw%2FsWTxa5C8d8GEJCKm2b7eA8qJIhpnWe597FJnprcdPPwV3jToLdkq3KBh38W5qRSnnLmJWFEW1IMDkW%2B3Lnoe1qko8Zg5IZhXbZpPvzLZ83%2FW\"}]}\r\nlast-modified: Wed, 27 Aug 2025 15:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=63072000\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"68af237c-d5\"\r\ncf-ray: a331e3bdbb7e56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":213,"size_decoded":872,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"6dc64031969ced1adb84cfd46af13868","sha1":"d282f73054a08e1cae48ebff8ae2c56392b63d5d","sha256":"65b1725e7ef72ba1214080a2a288cd0d7fa8f08d05679ae8965469c9d7556411","sha512":"37085ab8b2d083de4d7bf9880e408a365d70c91164ccf316ac5afdcdeeb1530962adce29eeeccc3babfdb9c0998fd0696b35de5daa941063f1c18e398384e9d8","ssdeep":"","tlshash":"13d0120534b4c3b107c550cde74aec3d6198d8c9f6c9785351942eb4b2c80eba84325d","first_seen":"2025-10-19T15:32:53.97739Z","last_seen":"2026-08-30T08:59:39.540917Z","times_seen":623,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/scripts/page_controller-82dc12886df7d0b869b74889e9b037c7.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.994Z","timestamp":1788072923994,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/scripts/page_controller-82dc12886df7d0b869b74889e9b037c7.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/assets/controllers/layouts/registration_open_controller-ae03a4f7f22650cddff381b5f8035612.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:24 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vR1pfvAR2ek3qzwATQ9K4eumaGYUl%2BdhQjICHb6lUR8RAw1DD7hUR%2BUpZcmuODC741xTQIK1fmH7FgEaSELOXldGQzBXaLp111gob%2Fupc55m3LVx%2FJdK%2BI1empTah9WALkLyWEgb\"}]}\r\nlast-modified: Fri, 08 May 2026 12:00:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"69fdd04e-167\"\r\ncf-ray: a331e3befba556ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":359,"size_decoded":937,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"e5f25edd5fcc392508cb0e422b226bd9","sha1":"3f79fdc01224f97219f75ae3440fdb91b1f52d74","sha256":"0167affe7b11ffc2e8d2122491d93c53671760a8010cf197a4b34f7b566462ed","sha512":"afee9f16c5bbef52db17121410bbfe7f7ddfa2b71bd75a4253ebf241dbb55c19fbf481c7402eaae5dcd0968a84011c397982c6f4739399853314c44b8259a47a","ssdeep":"","tlshash":"cfe0cd0112b657f041ae305dff09ac7f6251f1d75555175778cc0d30af890f87556650","first_seen":"2025-09-07T15:41:20.528839Z","last_seen":"2026-08-30T08:59:39.524901Z","times_seen":511,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/scripts/exit_popup/css/style-26f0ccdbe82f964f7793718312dffd25.css","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.426Z","timestamp":1788072923426,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/scripts/exit_popup/css/style-26f0ccdbe82f964f7793718312dffd25.css HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aaZFwUD3dUNoFRP81ti6Sl8VCcKlIOWVWaEWgauqzs4zdbiAHPh90kxYVew9nHrMU%2BTg82y1FHWOZNZ%2Fdgs3jBebVFErgeadvOI1s3FZPMzcen%2BrxQrTRxPl67VguZ9ClpMEaQGV\"}]}\r\nlast-modified: Sat, 22 Aug 2026 15:53:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i=?0\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"6a89c5ec-195f\"\r\ncf-ray: a331e3bb6b4856ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6495,"size_decoded":2449,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"2fb963abb39bd136416806e69001d047","sha1":"36f0bb6a5493208c90e3b21b62ef268a359a58ec","sha256":"aa3ed4dc8b7eb272e158ad929b13173a30b29c407fdf6089ba3aa44f76bb6dbb","sha512":"06f4438a34a5da949291e778449d29912df9b7d5f3ac0b07e213b6d5ebfae3d4b197c00f9d88f1543fa31355764fdc1e9afdc03745815e90f34ff450f5bd8f5f","ssdeep":"96:qJKNFZ+60Jc+u1NCV/E4dz/bUWKtYXFETYUsY+QHPL55Mf59uof5:Z8V1/E4hbUWKpT9/+QHPL55Mf59u65","tlshash":"a2d1ad979b2911c4713f6d6dafa73b17d9990083970185b0baeca2465ff843811e1fce","first_seen":"2025-09-07T15:41:20.515537Z","last_seen":"2026-08-30T08:59:39.552959Z","times_seen":625,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/@symfony/ux-turbo/turbo_controller-f3040d8b6a5a81530e1ea5ec500d1142.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.668Z","timestamp":1788072923668,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/@symfony/ux-turbo/turbo_controller-f3040d8b6a5a81530e1ea5ec500d1142.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=etzLHufFvuUqm7R5TRxP61J1Jce5X6te%2BswaMsdXtY%2Bi8h5OKjVD6O2y8OYHTFRjQO4XqoMa%2BK60Cmuk9%2FOGMU9w8d%2F1PNJL6anLqf3eY6dJoDhtfn9s8zRfPSJgTwsopvRvRkKB\"}]}\r\nlast-modified: Wed, 27 Aug 2025 15:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"68af237c-d5\"\r\ncf-ray: a331e3bceb5c56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":213,"size_decoded":865,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"6dc64031969ced1adb84cfd46af13868","sha1":"d282f73054a08e1cae48ebff8ae2c56392b63d5d","sha256":"65b1725e7ef72ba1214080a2a288cd0d7fa8f08d05679ae8965469c9d7556411","sha512":"37085ab8b2d083de4d7bf9880e408a365d70c91164ccf316ac5afdcdeeb1530962adce29eeeccc3babfdb9c0998fd0696b35de5daa941063f1c18e398384e9d8","ssdeep":"","tlshash":"13d0120534b4c3b107c550cde74aec3d6198d8c9f6c9785351942eb4b2c80eba84325d","first_seen":"2025-10-19T15:32:53.97739Z","last_seen":"2026-08-30T08:59:39.540917Z","times_seen":623,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/user_attribute_controller-9c83942a590731cc7e690bdd7ba5d4cb.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.691Z","timestamp":1788072923691,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/controllers/user_attribute_controller-9c83942a590731cc7e690bdd7ba5d4cb.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TdOmFa58M6kVNl%2BmC8RGPvd5MUBl%2Bi9mUvEjpqbblCu7qBzZSOc%2FhFdiCJupXhop%2FmOp69Y%2Fk5hm3nooEhz6aH9lRI1U5xP8YVjGyIxh9RBact3wQ4TP5FmmhwJl93QygTJNKPof\"}]}\r\nlast-modified: Fri, 08 May 2026 12:00:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"69fdd04d-8bc\"\r\ncf-ray: a331e3bd1b6b56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2236,"size_decoded":1551,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"47308d8fb0ad19b491b8a403a087c743","sha1":"e2465f4487fce420c2ddf669b4fa64a4c7570746","sha256":"a2485f9d700d3cc94540a91a97c752e85f0f0a2f6d8cadf60508034b2d04f730","sha512":"7818ad2cade265894a4e8bda6ae12315797f3cc21dd78e807025888be5f4e9feacedfb8d0b52d7d21ddf9816b322c78bd6718ff70c01a7fc5464ba62e20f6bd5","ssdeep":"","tlshash":"9f41ef1a26e312f20d6771289f8fa451aaa440c7544f8f797ebc8641bf4442c22f8be7","first_seen":"2025-09-07T15:41:20.50893Z","last_seen":"2026-08-30T08:59:39.530874Z","times_seen":635,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/vendor/i18next-browser-languagedetector/i18next-browser-languagedetector.index-d6b39b26ea0b082467c4f58a92bebbf0.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.696Z","timestamp":1788072923696,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/vendor/i18next-browser-languagedetector/i18next-browser-languagedetector.index-d6b39b26ea0b082467c4f58a92bebbf0.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F9Oj5u9o7j7%2B4suH0bsW%2F%2BkVLeUXEdrKOTcC5RVffFtXx0ORAPnMcfwnfF1TggZSmFBRhMxV9XFwosXp4FOUvmbDRXHdmS5rKnQbucOD6FnX9wMLIqgR7mnR1UsuNh2ibGMNHOa3\"}]}\r\nlast-modified: Sat, 22 Aug 2026 15:53:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a89c5e6-1c19\"\r\ncf-ray: a331e3bd1b6e56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":3435,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6887)","md5":"658f6bbcd57195b9a4bcbe02a9d0d656","sha1":"6549454bbaae0530f7f38bf6e1f38da9247f54e3","sha256":"fbb7fa089d68412cb6600ca56ba79f5c3d81e49f5349868cdd63efa9e50d41b9","sha512":"39fb15aa22b05e07e54a3204398a0d33e4086ee1633530a048aca9adc430ada29ad74ba99d0803b934c4b75d2eaa781ef1e7cd3f7c33cb05425fb29012aea08f","ssdeep":"192:LhOahqWDJiqOZj9RZWyjS1QJ/UoV2V/h5wJUxERJl:9OahjNObRFj8QJ/6p5w1","tlshash":"66e1c958b64a509702f600dc3877aa05b23259d0784cac9cb159ff737885e47a2fb7ba","first_seen":"2026-06-30T05:59:43.175899Z","last_seen":"2026-08-30T08:59:39.508737Z","times_seen":124,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/app-ecb9b55849781102e2cc6e9b140fd37a.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.777Z","timestamp":1788072923777,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/app-ecb9b55849781102e2cc6e9b140fd37a.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 08 May 2026 12:00:13 GMT\r\netag: \"69fdd04d-19\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=63072000\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fhyZ69xVD5QRl3R0f0MAcNwAMo%2B2TRxRaquSM3DeYIIFJRpjsRxQDOKfCbaVRui28R2B1snVeXJriOizcu0zc6OyQRnkWVCKf66f8wQ%2BpvqUJ54SjojARK3x53GKs%2FOE8nEXPIWh\"}]}\r\ncf-ray: a331e3bd9b7956ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25,"size_decoded":779,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"6f2ae2a568d458190ee67649aed6ccd1","sha1":"662fe1ee187cfef5b2f2366cbed7c8460a8c45bb","sha256":"8d34a370779f8ad3e0f4704f04924b7226dd47ab462e33530cd685e4af91a29f","sha512":"58aecc2638ec5dca197cf5711b60ba0fa8d461af29f06a56fd4d23802bf35a723cff92f42d20c6dfec6a25ca388c58ad16a68a4ed471eed9c08d4bda50212834","ssdeep":"","tlshash":"a5700022ab080880c0c000082828028802a880000bc00a28020a2322880883a3032002","first_seen":"2025-09-07T15:41:20.480885Z","last_seen":"2026-08-30T08:59:39.52118Z","times_seen":635,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/targetbutton_controller-6880b7c186e90274417e80597f0b2b70.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.818Z","timestamp":1788072923818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/controllers/targetbutton_controller-6880b7c186e90274417e80597f0b2b70.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Cgq3aCaQcMkK0EiYtvgNZsOKw%2B%2BvsHcQ0FvE4dTB0Lu2D9RQw2myzilAE9a8sNjxchAC%2Fke2O0p7b1GCO11doky0lSjmSCgjWh%2BhgvnIGKkYHg5eu3DJyZl%2BI6sXxTcBrw7OoJo\"}]}\r\nlast-modified: Fri, 08 May 2026 12:00:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=63072000\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69fdd04d-116\"\r\ncf-ray: a331e3bddb8d56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":278,"size_decoded":943,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"ceadaf511cdb77e81ed086eb23939f4c","sha1":"0f6dc6de01b1e775b0905663d22c1cff39bd1fec","sha256":"6683085b01409d13578282c266d6b49fb9416e4f86d7fd7f84bc02a0453a60d6","sha512":"c263be9fbc7247bec06f0fbbfa2daf91d2c4baebbbc7d2efcffa4109b0ba7aac3023581c7aa00597be502eb703a05d3f3511e4fbfaf36238ee5fc29e53bc8076","ssdeep":"","tlshash":"77d02e5620a363a0023f308eaf1ba9b96140e0c3bb0a46497f8c0b30cfec0319187788","first_seen":"2025-09-07T15:41:20.517948Z","last_seen":"2026-08-30T08:59:39.499151Z","times_seen":635,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/@symfony/stimulus-bundle/loader-5751ad1ee2975e725a94d8121d153d17.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.663Z","timestamp":1788072923663,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/@symfony/stimulus-bundle/loader-5751ad1ee2975e725a94d8121d153d17.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Si0oP8gjpwoM%2Fk4VTgxqtOG1Qhs%2B%2BXrj4IoCiYBnIWP9ET%2F8xdqvkbT63i7WKa7M%2BP3JpgoeSpjksC8wcj2oetG4J75S1vrWHqAXbgtPBsNReLzFq7EpYEU6z3ThGq54GRyHGEDi\"}]}\r\nlast-modified: Wed, 27 Aug 2025 15:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"68af237c-cd9\"\r\ncf-ray: a331e3bceb5956ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3289,"size_decoded":1815,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"7f9c485655cbe27485a8859fa8d70b2b","sha1":"190dd1f92062c5d4d94cf5ad5b2cc32c84d808c7","sha256":"f871d8febde50ffc633b3e4801f6927b1ae46c841a1d7f003b13d255d144a13c","sha512":"4cff862dca39fde62705c805a2560cb5a3c924919aa1c8308bb0ed81c6d2da2debb98812ef04e380a371be8bc4af53a8f769c82c56ebd160c4240b71b4217a12","ssdeep":"","tlshash":"a5619bd5b4f613b207db28aeff16987ca231a0cb68459d43795c7e904fd10e8b3a3860","first_seen":"2025-09-18T16:05:37.399686Z","last_seen":"2026-08-30T08:59:39.532651Z","times_seen":672,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/controllers/page_analytics_controller-05ff90e2a0a3734889804ee94d8e9b31.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.680Z","timestamp":1788072923680,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/controllers/page_analytics_controller-05ff90e2a0a3734889804ee94d8e9b31.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k14PP%2B4c%2FbpHNgCne8gZflbvgyApLU8ZWQV6%2B6BO9n2jHM599EAzSDukEXR3QXSvXFZt00fBFmJwRmGt0J3Za2EXWuvkPbUsXJpyGtZ6iMHkY5G95kyrGRNSr14ieNNMDuCd2iRd\"}]}\r\nlast-modified: Fri, 08 May 2026 12:00:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"69fdd04d-856\"\r\ncf-ray: a331e3bd0b6356ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2134,"size_decoded":1470,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"0892a14a768f18c73c319ca4f19d17a3","sha1":"c3e83c08d0be8f46fd64dac76c17bc2041512751","sha256":"82124847224ac9d1def3ac39ed1e25045af7d7bb17a7dc904f6d38ab4669e670","sha512":"b9432b7438383fbd44969378d78f87d29759140384f90bb06e882292e2eee053c2be0d46a6e5dba383edab398347204985eabfb9fea89795a29fe0e26ff7690e","ssdeep":"","tlshash":"0f41cb8146b7528166e2222e971f7704d52540933d0bbd853f0c4760bfca62b74b1efe","first_seen":"2025-09-07T15:41:20.507893Z","last_seen":"2026-08-30T08:59:39.501637Z","times_seen":635,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/scripts/symfony_form-aee93db26ca3d995d28a81a3d92c3049.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.701Z","timestamp":1788072923701,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/scripts/symfony_form-aee93db26ca3d995d28a81a3d92c3049.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oN7AG602BfZrIUGt8Ua80tyLS27%2BWl%2BCMl8d%2FZkxwyOa1cUWkPhKjpWWqtsiBwAisFa3qLXjGK3Lp4q31lGmYdXLjxE2cqdyWRqw%2B2N6MQIi1Blyw2zH6%2F8fi6v7NZMpnyRU%2Bdve\"}]}\r\nlast-modified: Fri, 08 May 2026 12:00:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"69fdd04e-758e\"\r\ncf-ray: a331e3bd2b7156ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30094,"size_decoded":6558,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"c3b76cc7d8d79c6cb9736f6de841710a","sha1":"f6a197165bffcca1a7d64039066a0c82a5e3148e","sha256":"dc4f401261ccf729d9031284da06975ff4b110c68fe72f7070337e86916dd55d","sha512":"e0bcf46771fa85968e362bdb515e1dba727e396720b36f2a1d7ed39ea5ba8cea7cc5a6b8b0edf68eb0fdd388ed5b28362fe675c42d3315196bc2a8a309e46513","ssdeep":"384:ftTtQicewY7a55eKN1F+fRnYIBViwSZJAgc5:1TtQTewY7a55eKN1F+03Zmgc5","tlshash":"aad21175d5e6682316a250a559a3c003a3e1c1a75d093d0cbbac13cf6fded6f08b8a7d","first_seen":"2025-12-03T20:42:28.86785Z","last_seen":"2026-08-30T08:59:39.516471Z","times_seen":543,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/layouts/registration_open/fonts/GothamPro-Bold-b140da92e8fba0458bde4431a84cb847.woff","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.736Z","timestamp":1788072923736,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/layouts/registration_open/fonts/GothamPro-Bold-b140da92e8fba0458bde4431a84cb847.woff HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/assets/layouts/registration_open/css/style-c8c2af75fe07e66cbc8e860791572fbc.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 08 May 2026 12:00:14 GMT\r\netag: \"69fdd04e-51b8\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=63072000\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZFM0TsgYfEtOARQzomEt2APa2%2F%2FbjOAIOI5tjy0GQmhjaiyTrDPTZTuuEjzvOqIeDKAqdHAeuvpP9lUEfYsxtlp%2BwHB4e40eK4nZhlwO3sIUZ%2FKVb5tCdavjfkQuCryhX6ixsnLN\"}]}\r\ncf-ray: a331e3bd5b7656ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20920\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20920,"size_decoded":21668,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 20920, version 1.1","md5":"a3d7d652af07c3610c453b4a51c788c7","sha1":"11b10f90d9bc1c69d722a91fb68dcd4f03b9e98d","sha256":"810a13a74ae783fb66c9bd9fcc492974769e11006b51a9c883eaf12e8c4b0494","sha512":"11cc499df51cd2cbedc68a4b05d1813904b7612123087e151645d4bab2d6b1f8b497f38062daf7315cb40f71b42ee562edb26ff16c546262fa19f373046b7faa","ssdeep":"384:Gh1lSqA8Zrj+udo2EssJRaewgSJFy1+oUuD48ehNNt0hVxgNOGXgFM:GpSmZHxdTsJRtwBJFy1+nuQNUhMNOGXv","tlshash":"a992d11a57375a91d204ce7120d088bbc43ce67e80b75f574e48265e4d89b2c4bb2dbe","first_seen":"2023-05-10T15:33:27Z","last_seen":"2026-08-30T06:56:02.674391Z","times_seen":550,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kissflirtnight.baby/assets/scripts/symfony_form-aee93db26ca3d995d28a81a3d92c3049.js","fqdn":"kissflirtnight.baby","domain":"kissflirtnight.baby","tld":"baby"},"ip":{"addr":"172.67.141.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:23.832Z","timestamp":1788072923832,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kissflirtnight.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 11:23:25 GMT","end":"Fri, 20 Nov 2026 12:22:05 GMT"},"fingerprint":{"sha1":"16:47:E6:8A:3B:6C:DE:64:F2:4D:B2:01:C4:9A:DC:15:51:B4:35:BB","sha256":"82:69:02:4F:18:5A:F7:08:4F:C0:EF:C4:2B:0C:BD:10:CB:F8:12:7D:97:8A:00:AE:A4:43:AD:3E:F4:F4:3D:A3"}}},"request":{"raw":"GET /assets/scripts/symfony_form-aee93db26ca3d995d28a81a3d92c3049.js HTTP/1.1\r\nHost: kissflirtnight.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 06:55:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BaXMV5BEEcbNeCs7kpc7JI0h4d8V9hbGQD7ILimTGgkCXGG%2B8f1I9Y4XNEE7jB7uKAVPMRi04KPL49PuTOF0ZR07jMwShNgQ3OhpeTqhAfcH2yYNUqWMo7BYW4yejk92Ge69af53\"}]}\r\nlast-modified: Fri, 08 May 2026 12:00:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=63072000\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69fdd04e-758e\"\r\ncf-ray: a331e3bdfb9656ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30094,"size_decoded":6558,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"c3b76cc7d8d79c6cb9736f6de841710a","sha1":"f6a197165bffcca1a7d64039066a0c82a5e3148e","sha256":"dc4f401261ccf729d9031284da06975ff4b110c68fe72f7070337e86916dd55d","sha512":"e0bcf46771fa85968e362bdb515e1dba727e396720b36f2a1d7ed39ea5ba8cea7cc5a6b8b0edf68eb0fdd388ed5b28362fe675c42d3315196bc2a8a309e46513","ssdeep":"384:ftTtQicewY7a55eKN1F+fRnYIBViwSZJAgc5:1TtQTewY7a55eKN1F+03Zmgc5","tlshash":"aad21175d5e6682316a250a559a3c003a3e1c1a75d093d0cbbac13cf6fded6f08b8a7d","first_seen":"2025-12-03T20:42:28.86785Z","last_seen":"2026-08-30T08:59:39.516471Z","times_seen":543,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"kissflirtnight.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.eln3ax.com/tag.php?goal=c245b7a2b379fc31de1017421bed3df1","fqdn":"s.eln3ax.com","domain":"eln3ax.com","tld":"com"},"ip":{"addr":"95.211.229.245","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://kissflirtnight.baby/id-en_dh3fi8u.b-1.pk-1.pu-1.v-3.html?ccid=5f47970e-eba4-4b91-8db6-3dd062f5117b\u0026landid=o:461669b0-224e-4e2f-a51b-78f1ade0772e\u0026campaign_id=3OTBDFHKT34V4HIA5KGS6KTYMQ\u0026save_e=0\u0026clickid=wiqabp6315g85utkjf4iu8d6\u0026subaff=8690\u0026email=","date":"2026-08-30T06:55:24.016Z","timestamp":1788072924016,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eln3ax.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 15:17:31 GMT","end":"Thu, 08 Oct 2026 15:17:30 GMT"},"fingerprint":{"sha1":"F8:D9:0F:F6:E3:89:62:18:11:64:67:69:48:4C:DE:A1:E6:1F:F4:BA","sha256":"2B:64:A4:98:78:AD:C2:86:23:E9:FE:BF:AD:BC:4C:EA:8D:F2:E8:5C:26:1E:EE:B2:56:46:BF:9F:8D:6A:E6:4F"}}},"request":{"raw":"POST /tag.php?goal=c245b7a2b379fc31de1017421bed3df1 HTTP/1.1\r\nHost: s.eln3ax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://kissflirtnight.baby\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kissflirtnight.baby/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 30 Aug 2026 06:55:24 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: goals=a%3A1%3A%7Bi%3A143128%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-08-30%22%3B%7D%7D; expires=Mon, 30 Aug 2027 06:55:24 GMT; path=/; domain=.magsrv.com; Secure; SameSite=none\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":[{"name":"goals","value":"a%3A1%3A%7Bi%3A143128%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-08-30%22%3B%7D%7D","quoted":false,"path":"/","domain":".magsrv.com","expires":"2027-08-30T06:55:24Z","raw_expires":"Mon, 30 Aug 2027 06:55:24 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"goals=a%3A1%3A%7Bi%3A143128%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222026-08-30%22%3B%7D%7D; expires=Mon, 30 Aug 2027 06:55:24 GMT; path=/; domain=.magsrv.com; Secure; SameSite=none"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":438,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T09:22:58.739271Z","times_seen":18182520,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":53,"connect":29,"send":0,"wait":26,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
