{"report_id":"2e0a2d8d-f069-45b4-a087-b6996cac0cbb","version":6,"status":"done","tags":[],"date":"2026-01-04T22:22:09Z","url":{"schema":"http","addr":"fushaar.lol/play.php?vid=a50d4760e","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"fushaar.lol/play.php?vid=a50d4760e","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"title":"فيلم طلقني 2025 كامل","dom":{"size":132,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"9c271f6035a5ebcbaa4c64e8470fd789","sha1":"0af9b6922a8ab496c35d843a2f8af0f26e56ee51","sha256":"b1455c9302ea1f4d9d85cc97d6924299c7e0c36eea6418c7aeb4a1d41a03a4bf","sha512":"afc68bf27d334422561aa652ca7e945c6026670898998d890da3839e392533d6d54a508a213bd9b0bab3486f48c80c50968a992eecb2514715686488efd6c36e","ssdeep":"","tlshash":"99c02bfb7840400c18e436e20c91624c1405c00c1841c85408a4109054443e919030c9","dom_hash":"domhashe7878feada357c83b98d617f7576c066","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"fushaar.lol/play.php?vid=a50d4760e","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-08T22:22:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":26}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-04T22:21:46Z","timestamp":1767565306,"ip_dst":{"addr":"162.159.207.0","port":3478,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.22","port":39157,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2026-01-04T22:21:46.739797+0000\",\"flow_id\":2172965285939669,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":39157,\"dest_ip\":\"162.159.207.0\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2026-01-04T22:21:46.739797+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-04T22:21:46Z","timestamp":1767565306,"ip_dst":{"addr":"172.18.0.22","port":39157,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"162.159.207.0","port":3478,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2026-01-04T22:21:46.740498+0000\",\"flow_id\":2172965285939669,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"162.159.207.0\",\"src_port\":3478,\"dest_ip\":\"172.18.0.22\",\"dest_port\":39157,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":74,\"start\":\"2026-01-04T22:21:46.739797+0000\"}}"}],"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dr.groufsesquih.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"pl27988627.effectivegatecpm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"pl27988627.effectivegatecpm.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"pl27988627.effectivegatecpm.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"pl27988627.effectivegatecpm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"bvtpk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"acscdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2025-12-31T21:55:03.360474Z","alert_count":3,"request_count":1,"received_data":85956,"sent_data":409,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"netdna.bootstrapcdn.com","ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":41692,"first_seen":"2012-09-07T15:11:00Z","last_seen":"2025-12-29T02:58:13.80964Z","alert_count":0,"request_count":3,"received_data":125826,"sent_data":1464,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"protrafficinspector.com","ip":{"addr":"35.156.32.205","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-06-18","domain_rank":614186,"first_seen":"2025-07-25T22:45:21.95813Z","last_seen":"2025-12-30T21:57:49.11287Z","alert_count":0,"request_count":1,"received_data":420,"sent_data":438,"comment":"","tags":null,"fingerprints":null},{"fqdn":"0ae7zwoezyki.s4.adsco.re","ip":{"addr":"185.200.116.60","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":463,"sent_data":430,"comment":"","tags":null,"fingerprints":null},{"fqdn":"weirdopt.com","ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":37519,"first_seen":"2025-07-08T12:55:47.272157Z","last_seen":"2026-01-01T07:47:27.133157Z","alert_count":3,"request_count":1,"received_data":377,"sent_data":414,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-04T22:17:15.216142Z","alert_count":0,"request_count":1,"received_data":25891,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"my.rtmark.net","ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2025-12-29T14:32:54.672001Z","alert_count":0,"request_count":2,"received_data":1691,"sent_data":899,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2025-12-28T22:27:44.219613Z","alert_count":0,"request_count":1,"received_data":7787,"sent_data":427,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"acscdn.com","ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-05-05","domain_rank":18769,"first_seen":"2020-05-06T08:07:13Z","last_seen":"2025-12-31T07:12:02.732329Z","alert_count":1,"request_count":1,"received_data":172119,"sent_data":408,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"s3-hls2-cdn58.strmupcdn.com","ip":{"addr":"67.159.6.170","port":443,"asn":30058,"as":"FDCSERVERS","country":"United States","country_code":"US"},"domain_registered":"2025-11-30","domain_rank":0,"first_seen":"2025-12-31T09:01:15.072366Z","last_seen":"2025-12-31T09:01:15.072366Z","alert_count":0,"request_count":3,"received_data":2150931,"sent_data":1709,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"0ae7zwoezyki.l4.adsco.re","ip":{"addr":"185.200.118.62","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":463,"sent_data":430,"comment":"","tags":null,"fingerprints":null},{"fqdn":"4.adsco.re","ip":{"addr":"162.252.214.5","port":2087,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":95532,"first_seen":"2021-01-04T16:47:52Z","last_seen":"2026-01-02T14:18:55.851749Z","alert_count":0,"request_count":2,"received_data":1044,"sent_data":837,"comment":"","tags":null,"fingerprints":null},{"fqdn":"imasdk.googleapis.com","ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3922,"first_seen":"2014-02-25T09:02:53Z","last_seen":"2025-12-29T21:08:31.306004Z","alert_count":0,"request_count":2,"received_data":1384892,"sent_data":977,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2025-12-28T22:36:42.452939Z","alert_count":0,"request_count":1,"received_data":96978,"sent_data":441,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fushaar.lol","ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":38,"request_count":38,"received_data":1894437,"sent_data":21376,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"BootstrapCDN:3.2.0","description":"BootstrapCDN is a powerful and reliable Content Delivery Network (CDN) that delivers static resources, including CSS, JavaScript, and font files, for the widely-used Bootstrap framework. By leveraging multiple server locations worldwide, BootstrapCDN accelerates website loading times, ensuring a smooth and visually appealing user experience. Additionally, it ensures website compatibility with various devices and browsers. The service reduces bandwidth usage and server load, improving web performance for developers and end-users alike.","website":"https://www.bootstrapcdn.com/","common_platform_enumeration":"","icon":"BootstrapCDN.png","categories":["CDN"]},{"name":"Bootstrap:3.2.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:1.11.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery Migrate:1.2.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"usrpubtrk.com","ip":{"addr":"172.67.186.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-16","domain_rank":6824,"first_seen":"2025-06-17T13:34:00.105327Z","last_seen":"2026-01-01T07:24:01.334994Z","alert_count":5,"request_count":1,"received_data":526,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"flushpersist.com","ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-07-01","domain_rank":23810,"first_seen":"2025-07-08T10:43:12.76905Z","last_seen":"2025-12-31T21:11:25.087578Z","alert_count":3,"request_count":1,"received_data":530,"sent_data":763,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"adsco.re","ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":3069,"first_seen":"2017-04-03T03:11:30Z","last_seen":"2025-12-31T07:41:43.098962Z","alert_count":0,"request_count":1,"received_data":1743,"sent_data":438,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-01-04T22:18:41.67311Z","alert_count":0,"request_count":2,"received_data":867620,"sent_data":862,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"jnbhi.com","ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2022-08-31","domain_rank":0,"first_seen":"2025-11-13T12:34:48.915898Z","last_seen":"2026-01-01T23:25:21.767776Z","alert_count":0,"request_count":1,"received_data":113259,"sent_data":402,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"realizationnewestfangs.com","ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-10-02T06:26:57.543488Z","last_seen":"2025-12-30T10:45:03.867986Z","alert_count":8,"request_count":2,"received_data":7830,"sent_data":958,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.betteradsystem.com","ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2020-04-18","domain_rank":944570,"first_seen":"2020-04-18T19:46:40Z","last_seen":"2026-01-01T17:27:10.179256Z","alert_count":0,"request_count":1,"received_data":42493,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-12-28T22:26:34.892336Z","alert_count":0,"request_count":1,"received_data":542646,"sent_data":416,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"dr.groufsesquih.com","ip":{"addr":"188.42.241.221","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-12-14","domain_rank":0,"first_seen":"2025-12-26T12:53:02.677187Z","last_seen":"2025-12-26T12:53:02.677188Z","alert_count":1,"request_count":1,"received_data":1409,"sent_data":420,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"oyo4d.com","ip":{"addr":"139.45.197.118","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2019-03-26","domain_rank":201644,"first_seen":"2025-06-02T17:08:26.404235Z","last_seen":"2026-01-01T23:25:21.765552Z","alert_count":0,"request_count":1,"received_data":824,"sent_data":583,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pl27988627.effectivegatecpm.com","ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":4,"request_count":1,"received_data":107685,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"betteradsystem.com","ip":{"addr":"162.252.213.208","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2020-04-18","domain_rank":64565,"first_seen":"2020-04-19T20:28:40Z","last_seen":"2026-01-01T17:27:10.3426Z","alert_count":0,"request_count":1,"received_data":257,"sent_data":1729,"comment":"","tags":null,"fingerprints":null},{"fqdn":"strmup.cc","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-15","domain_rank":0,"first_seen":"2025-07-17T21:58:10.317223Z","last_seen":"2025-12-30T12:59:56.875597Z","alert_count":0,"request_count":5,"received_data":92413,"sent_data":2247,"comment":"","tags":null,"fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"SweetAlert","description":"SweetAlert is a JavaScript library that provides alternative alert and modal dialog boxes for web applications, with customisable features, aiming to improve the user interface of the default browser dialogs.","website":"https://sweetalert.js.org","common_platform_enumeration":"","icon":"SweetAlert.png","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"JW Player","description":"JW Player is a online video player with video engagement analytics, custom video player skins, and live video streaming capability.","website":"https://www.jwplayer.com","common_platform_enumeration":"","icon":"JW Player.svg","categories":["Video players"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"0ae7zwoezyki.n4.adsco.re","ip":{"addr":"38.132.109.126","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":463,"sent_data":430,"comment":"","tags":null,"fingerprints":null},{"fqdn":"6.adsco.re","ip":{"addr":"104.16.83.77","port":2087,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":91627,"first_seen":"2018-01-15T04:15:29Z","last_seen":"2026-01-02T15:58:02.609061Z","alert_count":0,"request_count":2,"received_data":1175,"sent_data":837,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bvtpk.com","ip":{"addr":"172.67.154.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-03-16","domain_rank":37068,"first_seen":"2025-05-21T11:34:02.786268Z","last_seen":"2026-01-01T13:40:31.086268Z","alert_count":2,"request_count":2,"received_data":227273,"sent_data":806,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-01-04T22:21:06.427471Z","alert_count":0,"request_count":2,"received_data":129766,"sent_data":886,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"b7510.com","ip":{"addr":"139.45.197.115","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2021-03-21","domain_rank":0,"first_seen":"2025-06-19T09:08:24.947983Z","last_seen":"2026-01-01T13:40:31.085982Z","alert_count":0,"request_count":2,"received_data":1650,"sent_data":1171,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"entitlements.jwplayer.com","ip":{"addr":"52.84.50.29","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2007-09-17","domain_rank":18344,"first_seen":"2016-06-21T17:08:11Z","last_seen":"2025-12-30T19:48:13.944676Z","alert_count":0,"request_count":1,"received_data":508,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-04T22:14:09.841371Z","alert_count":0,"request_count":1,"received_data":32106,"sent_data":525,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ssl.p.jwpcdn.com","ip":{"addr":"151.101.2.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-08-07","domain_rank":16928,"first_seen":"2017-01-30T05:00:14Z","last_seen":"2025-12-31T03:10:49.022264Z","alert_count":0,"request_count":5,"received_data":1088101,"sent_data":2147,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fushaar.lol/templates/fushaar/js/theme.js","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8176b4cb2798d51558fe707c55d7fbb","sha1":"2d49a0b8afb91121d20469c210566fb8d21e82d6","sha256":"497a2c9b733f23e5ec7ba08698be68a7cc7c121213e78be6a9db5ceb3943b8c9","sha512":"35bdf908dd7eeb6cbd0c3d6f746e3ef87b992bb188e16f4ccc4966c26c774086f866dd603978d9dbdc65fe3488c4bdd3346c78daad3b39da835f8d34a1514811","ssdeep":"768:sdsHXBe1s4RPwBTlttO81x93OD4JdbNC6vALeqny+C3s1pR7T8I5HDwLYPLAWyCt:sdS4D4JdbNzvweqny+CQpmeHMYPLNxn","tlshash":"4313ea883182b12787f761f5a05f620bb172a9a5a04da43df579d4d1bef4e881123ff8","size":44830,"data":"","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-03-29T20:18:02.125086Z","times_seen":284,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/play.php?vid=a50d4760e","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dbe248a4dab1a7578b7b0343475b994c","sha1":"edb0166b40de40f8e47592e10d302d391e2c959d","sha256":"1fba47e13d1ea56cb858e58924448c8d24d31c0997e8290be437ce2ebcd457bd","sha512":"574e8ed50cb31e98ff558ffe13339fc58db94a2e1a68b4e5a097bec31dfc7d332e977ec112f836636fc543ebe355f177f32c23a0b7c949a51f111d0a13a4bc43","ssdeep":"","tlshash":"4ec002fb40164b1e43685c5cd02ba55ae7e6843d1eb4c807e68ec10a80504aa0e6a758","size":163,"data":"","first_seen":"2026-01-04T22:22:26.203917Z","last_seen":"2026-01-04T22:22:26.203917Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f03e5a3bf534f4a738bc350631fd05bd","sha1":"37b1db88b57438f1072a8ebc7559c909c9d3a682","sha256":"aec3d419d50f05781a96f223e18289aeb52598b5db39be82a7b71dc67d6a7947","sha512":"8eeeaefb86cf5f9d09426814f7b60e1805e644cac3f5ab382c4d393dd0b7ab272c1909a31a57e6d38d5acf207555f097a64a6dd62f60a97093e97bb184126d2a","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmm:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"1793d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","size":95992,"data":"","first_seen":"2023-03-07T01:02:11Z","last_seen":"2026-04-03T18:43:15.69985Z","times_seen":20563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-03T19:21:00.254169Z","times_seen":118026,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/play.php?vid=a50d4760e","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"369ac55bfbb5a3159e5733a541d6f793","sha1":"b7f1f06adb097c636ee9b53bfbdcc9c245481c22","sha256":"ee908c4af7b7f26209185b90d982a94b053704364f0460dcdedb06dd9ccf8b89","sha512":"c7a8e5f09b189d7a8aa11a7390019dbf924c4f67999aa9123bd0a8975247715cb3400c7ea8807ca043d715c9be5b27be0c6e9d04bd297bb421f78c63399b14be","ssdeep":"","tlshash":"f3312e1913428a310ec324d39ecde4d7aee400eeb99bc8117429b4691bcfbcc00df196","size":1833,"data":"","first_seen":"2023-05-21T08:30:01Z","last_seen":"2026-03-29T20:18:02.253258Z","times_seen":221,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7K5TWT1S74","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c9222b670875414762e09651daf9074","sha1":"3def621ae4ad92d38c040df23ce9f4c7527fbf88","sha256":"ca0e219a86f1b6e7801dec15667fae59857d0319afbbdd95dbfe1b8649bd63ed","sha512":"c18b43890145d8da85ffc90b0c0f9d8c618c666656fab9b2fe97c74aae2e6c27ff6cd13111b55e22f74e6263fdd3244b00b557f009598359025a245e80fe353d","ssdeep":"6144:1NIe7ma2bulKY/1u99xHDmHYmyBFzvnsyRO6jJWoNPad4FpC1xY:4C8bu7/1mbrnsy39WbMpb","tlshash":"ca941ace73c674269396e078503f118ba57b29e2b45cc896f189cce41e74a9a4237f7c","size":433021,"data":"","first_seen":"2026-01-04T22:22:26.158842Z","last_seen":"2026-01-04T22:22:26.158842Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-MJZHCJR7Q8","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d504b83907d67b76d4418b666ffd3f8d","sha1":"8772767af1dea2e750ef00ed17db09ae253025b5","sha256":"4df936439e1ef5e3df4a76154bd2d26fac03b1c5d2f6812447ec6865669ec197","sha512":"198b2b415cd4367da34ec3521fb9281bdbfebbd24bc14b597b243e93c1928b928f7a8c76ebddb4e2a33ffdd61c3000e23dc5f923ae384cd151bdc926ab05d44a","ssdeep":"6144:nlIe7ma2bulKY/1u99xHDmHYmyBFzvnsyRO6jJWoNPad4FpC1xY:2C8bu7/1mbrnsy39WbMpb","tlshash":"10941ace73c674269396e078503f118ba57b29e2b45cc896f189cce42d74a9a4237f7c","size":433411,"data":"","first_seen":"2026-01-04T22:22:26.109812Z","last_seen":"2026-01-04T22:22:26.109812Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/play.php?vid=a50d4760e","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3d5e7ae44ebf7eec435c9325b6f676f","sha1":"8b6342ac0b9b097678cb23ae693917b91090b944","sha256":"6dab04cf1ed42a5675ee85fc766f21ccf9386c3e61f9081987b6de3ec7e7f23b","sha512":"5b005cc0eb966d2f33b5a73649d37bc6cc5f0fb2cf7232daae7d64d16015dd4318acdccbd7b4fef7836668839c44905b62504cd6a4618a34fe7479f8bfc1ea73","ssdeep":"","tlshash":"87718548f752242b617770fa4abf1706673a6012db07ac64b17e088d0bd7f38235b8a7","size":3483,"data":"","first_seen":"2023-03-07T13:15:21Z","last_seen":"2026-03-29T20:18:02.285771Z","times_seen":320,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/play.php?vid=a50d4760e","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"29727d13fa2a206a7cc92a101c29ab33","sha1":"647b9b2f5532aaee7217e70850589ad673938fcb","sha256":"42ee5f253d773ac3a83d1fc0d0f922a4c502f66dddfb591593129586c4f2725a","sha512":"5917cf75cc80fb72cddea8cbbba81512d053c8cd265f38c81db939dbe3afe1d9bf4c81ca8ad387743873436144cd57b1f55d79f353be00b851b7a6e220e89b83","ssdeep":"","tlshash":"61c0227079dc5639807a71241dfea204ae1ba910b83a2140e02ca0b146ae63822b2c10","size":190,"data":"","first_seen":"2023-03-07T12:01:39Z","last_seen":"2026-03-29T20:18:02.292636Z","times_seen":376,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/core/bridge3.735.0_en.html?gdpr=1#deid=%22%22\u0026eventfe_experiment_ids=%5B%5D\u0026fid=%22goog_1565491064%22\u0026genotype_experiment_data=%7B%22experimentStateProto%22%3A%22%5B%5B%5B45713128%2Cnull%2Cnull%2C%5B%5D%5D%2C%5Bnull%2C749060184%2Cnull%2C%5Bnull%2C100%5D%5D%2C%5B45722344%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45706017%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45740207%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45668885%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45685340%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45734716%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45735891%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45663239%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45715032%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45661356%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45676441%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45675307%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45675308%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5Bnull%2C45645574%2Cnull%2C%5B%5D%5D%2C%5B45688859%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45656766%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45710689%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45710688%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45685601%2Cnull%2Cnull%2C%5B%5D%5D%2C%5Bnull%2C45685602%2Cnull%2C%5Bnull%2C500%5D%5D%2C%5B45747172%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B775241416%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B781107959%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B781107958%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B792614055%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B781107957%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45729602%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45658982%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45725657%2Cnull%2Cnull%2C%5B%5D%5D%5D%2C%5B%5B16%2C%5B%5B1%2C%5B%5B31089630%5D%2C%5B31089631%2C%5B%5B45668885%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B1000%2C%5B%5B95332046%5D%5D%5D%2C%5Bnull%2C%5B%5B95332047%5D%5D%5D%2C%5B10%2C%5B%5B95333808%5D%2C%5B95333809%2C%5B%5B635466687%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B10%2C%5B%5B95338769%2C%5B%5Bnull%2C45645574%2Cnull%2C%5Bnull%2C1%5D%5D%5D%5D%2C%5B95338770%2C%5B%5Bnull%2C45645574%2Cnull%2C%5Bnull%2C2%5D%5D%5D%5D%5D%5D%2C%5B10%2C%5B%5B95345206%5D%2C%5B95345207%2C%5B%5B45661356%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5Bnull%2C%5B%5B95351425%5D%2C%5B95351426%2C%5B%5B45676441%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B10%2C%5B%5B95356068%5D%2C%5B95356069%2C%5B%5B45685601%2Cnull%2Cnull%2C%5B%5D%5D%2C%5Bnull%2C45685602%2Cnull%2C%5B%5D%5D%5D%5D%2C%5B95356070%2C%5B%5B45685601%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5Bnull%2C45685602%2Cnull%2C%5B%5D%5D%5D%5D%2C%5B95356071%2C%5B%5B45685601%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5Bnull%2C45685602%2Cnull%2C%5Bnull%2C100%5D%5D%5D%5D%5D%5D%2C%5B10%2C%5B%5B95372277%5D%2C%5B95372278%2C%5B%5Bnull%2C745150931%2Cnull%2C%5Bnull%2C1%5D%5D%5D%5D%5D%5D%2C%5B1%2C%5B%5B95373378%2C%5B%5B792614055%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%2C%5B95373379%2C%5B%5B45747172%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B781107959%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B792614055%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B781107957%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B50%2C%5B%5B95375505%5D%2C%5B95375506%2C%5B%5Bnull%2C749060184%2Cnull%2C%5B%5D%5D%5D%5D%5D%5D%2C%5Bnull%2C%5B%5B95375930%5D%2C%5B95375931%2C%5B%5B45734716%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%2C%5B95376520%2C%5B%5B45734716%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45735891%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5Bnull%2C%5B%5B95378095%5D%2C%5B95378096%2C%5B%5B45740207%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B1%2C%5B%5B95378629%5D%2C%5B95378630%2C%5B%5B45729602%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%5D%5D%5D%2Cnull%2Cnull%2C%5Bnull%2C1000%2C1%2C1000%5D%5D%22%7D\u0026imalib_experiments=%5B95322027%2C95331589%2C95332046%5D\u0026is_eap_loader=false\u0026managed_js_experiment_id=0\u0026page_correlator=956442821057389\u0026pvsid=1666379283780804\u0026top_accessible_page_url=%22https%3A%2F%2Ffushaar.lol%2F%22","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"66168ba6a74304e96a98e03c395e98cc","sha1":"0769f6d7bd70ce630a1fe3376490e863ba58c4a4","sha256":"68b9661cf486f63b36b9a262e24ca739a9b39098dc486ce97d786a467a94842b","sha512":"c2fb0c25ba3c006b2db611fc66ddabe2dc58b66d1e6a21dffefbdd7da44acf8429336f1c44423246f66a97c2a6d3eb3ab377460de16a13c372bc940c98ec5a97","ssdeep":"6144:S3X7CHpODSsjt/Te2TqDwcUKoiZSyBXJklAWI7qtb8A+DFdPQ+K+8HSuV2Q4+q9N:gfJTLcUKoUSyBXJc6ePsx8Tl73M","tlshash":"b0152b9cb76274168263f4f5503f014b723ba866e40889bcf689d9e17e7884a4277f7c","size":874900,"data":"","first_seen":"2025-12-06T20:00:47.232661Z","last_seen":"2026-01-09T12:59:00.21588Z","times_seen":1043,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/templates/fushaar/js/jquery.cropit.js","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd82e0edbcecf087be901e8e7ed0d035","sha1":"2cedce9f87501152efa36eb1949d95c0ca4ff200","sha256":"b8a0d09df5a79e5e9494b3061eeff55883870c66714879886348c5095faa7840","sha512":"972ad1b4fe72296e7123bebe0c1e18aaf1fe1617ed41762b0e0b3afc9a7e58c0a4f9e5354094808d94bcebcd8f7c1d12b9c794ae17c47bc9cb3586ca9899193f","ssdeep":"384:b4Ku+vsSCLma/KSUOW5Gur0433Pfmoz8DKNzmavSbnCIjcIOHinWK0inVcaTJX5s:XWmaiSO5Gu/wemaybVtPJXm","tlshash":"4fc2b4193ba1367742a7f1a0760f800c1275e975e446e38cb638d8fa9af18148a77f76","size":27578,"data":"","first_seen":"2023-03-07T12:01:39Z","last_seen":"2026-03-29T20:18:02.154507Z","times_seen":606,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betteradsystem.com/phlkkcbbczgmufkv?IoAqUMwl=BQNiAAAAAAAACZUAAmVhdMmFxPUKZt4ud1BJ0YwNkk-tKp4277nMBdl7pzeQ4R8AcErvSagTd20c81Q2EEWZXJuWWfW_Q5q-KtdIpOfHLLmXkDJNRCRvxCKzkNFRWu97vyECMFvI9mWJX7bEOVNuwqpXgREtUM528WgopY5LKzoD0Jiu2wVIs7SH5jPbYeNWRJ1blAVFIk82rqNH1PbMmgLYUYTLyJY9PTX1hHJF6P-flO2S5tSmblhIF6lx1fxqd7p6zhTt2r96VZH2mf9UavXJMsGolK_KaaPpwaR3Po-8MyzHBYoP8KfiE6UfUr2RmxHG3t1PtSnZ7umqniBkff0_H91VGXvB6bVQ5uCsy13avv7wAE2bh7lM0QtCgo1VNqQZXRqSKLDbSGhWCLOT45TMZXeqpIE65AdgS2-G0CzabfvnoCXJE6BEGE4VY5x8EuWPg4zpmLDIJF8kvqxw4nVnASQtTc4m_2ZNAL-JfYOu54GnO7S1NWxW7xmVFZ-hH-RNBAKuR9lXdUsbPo0gb7x91gQKxfAfin2usSeFhFI6aplorGSmdMrQ-PwBS_Pi13LsRlQjSNNb8eQNGK0RjpnuMkh4CjJHlyPtRpjh3ujKZYres-ZvRnG_hyqYfObAmWd9QPzykVAWorYVmgOrTZyMuGIzcGvkSAF-QiCxxY6KeSkaqDbQdifrEQglPIxZWO-guZ00lKLu1-K44uUpfnq5P3sV1hF9wdQDKp4mjCVQ1hSruw3Dcjfx928LrC1sQorr6kk-bhjljVEmI-Bs3Mgk14RHB2NXVYSK3YbD60cHjoPCsbWGsJB78TpX7Geq7Vfa5DtI6z0Z0KiPCKMjyTWewWNWey8So1462QKzhMIIH0YBv1XaLGfs3DHg01FkyswLIInoogdbPtZN2ZnyqhVzih1x6AX-1Rcwg7nO7O_2vydiHJrsxPx0wfcOUwLYxRw5Gh3tdyDpixK9QvSKWmkRTfGQGOJlAgJ7RyTldT_vrpTwZR0qzJ2Ue-KRsg05xLYwhpQC4R6hDE8yqHEhGM9_OH6tL3Qg1fboYP_8aNhib1vc9vRNVh2CGMBV6fKN5D7Gjz1og5aBQxqqV-ZOAU4NaroByNNNxLS1ail8ntfSQkQR9ITppFDHfAL_KrBaX8eRZm7gP503kqpwxQ\u0026KbxwPvDl=4\u0026rfPCuKic=5210309\u0026gHzMoIbi=\u0026YugSkPLi=0,0\u0026iVEHlAMn=\u0026BMhLxNpT=https%3A%2F%2Ffushaar.lol%2F\u0026aJxRjnvs=1280,1024,1,1280,1024,1","fqdn":"betteradsystem.com","domain":"betteradsystem.com","tld":"com"},"ip":{"addr":"162.252.213.208","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5f0a25e4d3522d56d48ce7bc3e518fb","sha1":"86794caff58f7fee6e684c2ba7195f970a8d6f4c","sha256":"9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5","sha512":"a3a81801f516a4eb11f00d6f56dab0ed4b8a79219e6b4f5436993479f09dae08f14cffbab3327ff66fb39201d8eba1153ae7114f7705a01cc6f0edf840ef1616","ssdeep":"","tlshash":"789002801814116115d1500b8d5159d01259b1a4540801324446ca502dc7883a415774","size":44,"data":"","first_seen":"2023-03-07T01:17:45Z","last_seen":"2026-04-03T19:20:48.182223Z","times_seen":22727,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strmup.cc/4b640ff298e0","fqdn":"strmup.cc","domain":"strmup.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fda19f90e1b1161f8731131c50f8670d","sha1":"6c14686865c5e4d8bb3e892f720dcf1fb92318ee","sha256":"c19a579476ca0d393d6fcd1c233f5332ffa09ef3f8a625bf8863e24e763548fc","sha512":"070f6f42babad6a6be30efaf30e2221724fa28817a9520b943a8990be03267450dc874383ceb4fec1713402964fecdc0ce56403dad8775bcb52beb2433f03811","ssdeep":"96:W4GyTJAcYvK4tHPWdhnC7NqSbstLTrzo7sgsa95JCcNwNXcFa8YO+vUW:WGTJAcYi4JPsSSJrzo4gUuQ","tlshash":"a381d8798354b2a04b9d22cc69b36109327c5cca9c80755cf22bb688372dd5b95f2fe6","size":4146,"data":"","first_seen":"2025-12-11T03:13:22.938579Z","last_seen":"2026-01-21T21:43:11.332377Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jnbhi.com/tag.min.js","fqdn":"jnbhi.com","domain":"jnbhi.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b105ae11aaf0b47395b2000405b0c592","sha1":"3c1e064f7f5914d976f4a81aea09018b88252773","sha256":"59f1a5a724edcb7907d7734c94ea7893e3c0153854847a1dde214f8c71339e9a","sha512":"3e3a9f1b04582013f15fe140f1aeee984bf74299ec944c6d5752bcd8a14db371f03a7f7f3002eee365d2b98a80791f2a0dc2b380001c80928295458d02be6190","ssdeep":"3072:tXki1TG8YlAVCzIqwL76WJHpYx85/MVzUL:6WTGvlwqw5JJdQza","tlshash":"3ab3295673a277d21a6e60d42d57d60573fd8c80488f8867e3c8787972d081cd3abbea","size":112425,"data":"","first_seen":"2025-12-18T15:53:40.958967Z","last_seen":"2026-01-08T02:23:09.116351Z","times_seen":241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/templates/fushaar/js/jquery.readmore.js","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"081fe3d90aad9b9f11e4b1c0569530df","sha1":"ff566498ce6f25f4a3b28c0e2bb92b6b86fea6ed","sha256":"98e825583e6fb4f7e8a65f9063fb7ea2d34aee8f9aa480dfee285ea27f4fca02","sha512":"cf242d2562e01ce001f00b847c0855d090f3c2883ede50cb65298cad502e2ae1fa6648a16eab883bdac88e2cdbe0366f4dcad0967bf3cf0e02ef979bf7f2b2f7","ssdeep":"","tlshash":"ec61f169b323f642c4a720e2705f530a663bf128835580547777dae86f7c80e7863a7e","size":3430,"data":"","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-03-29T20:18:02.153633Z","times_seen":319,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/templates/fushaar/js/jquery.readmore.js","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"081fe3d90aad9b9f11e4b1c0569530df","sha1":"ff566498ce6f25f4a3b28c0e2bb92b6b86fea6ed","sha256":"98e825583e6fb4f7e8a65f9063fb7ea2d34aee8f9aa480dfee285ea27f4fca02","sha512":"cf242d2562e01ce001f00b847c0855d090f3c2883ede50cb65298cad502e2ae1fa6648a16eab883bdac88e2cdbe0366f4dcad0967bf3cf0e02ef979bf7f2b2f7","ssdeep":"","tlshash":"ec61f169b323f642c4a720e2705f530a663bf128835580547777dae86f7c80e7863a7e","size":3430,"data":"","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-03-29T20:18:02.153633Z","times_seen":319,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/aclib.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48250370347c7f2d054321e03c8e394f","sha1":"dce1356dc4ee7b2b650fc3b2fa5c75e2de60c840","sha256":"e3fd6b9ca5d9b8d65c6330aa94f08f24cd2b59e1834cd7c960ea6ea3417acf52","sha512":"37527c5fc8159f26120d652f8477a70703eb6fb1f30126ceb66f9a58e05ddc365a1cb34b82b5bdcb24b694036bfe2a7c3052a50d883b956cccf2e167a7188ae7","ssdeep":"3072:ZcmbG7ee6cW7n8GrMN1HDxlfm1VeDbclbsZpyQ:y/FW78GrufmyclbsZpyQ","tlshash":"f4f395083a9455037b4b6fbb271774e5e9062c4ab894099eb254bc74e2836b3fff1136","size":171200,"data":"","first_seen":"2025-12-17T14:33:37.34138Z","last_seen":"2026-01-13T14:12:13.867658Z","times_seen":466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.36.2/jwplayer.core.controls.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.2.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"96388c8374190b02b1c684940b0c267c","sha1":"c49462b6c0755a6be517da89213c6815a72658cb","sha256":"efd4bdf5c117754802f889555f4396867101f917ce259303d8171371e2903589","sha512":"6ab3adef3c69468d2645c352d6a902d9e6e409b1e88fa5c126b7928a546acd7f3f8ef29cf04ff017db5f1e24ad70a442484d7c5bfceb9b789a34bd0daae65c20","ssdeep":"3072:V+Y7nFuhslX/173uYqqIeGSJhoFjBkW64pOknUGp9W11Uy86C4YfrmYRJ:sYxAU/1732yGSJho9OaUG3xyl+frmYRJ","tlshash":"ee641932214252359aea82da66514604b3398085f516cfacff3ceddd4c6e9c731fabb4","size":329500,"data":"","first_seen":"2024-09-18T21:59:43Z","last_seen":"2026-04-02T13:08:45.490832Z","times_seen":584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/play.php?vid=a50d4760e","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7bc2250f798e8dd30269772ee8cf4599","sha1":"3fb3ed5ea1a5c052fa3c26e45d4abd3e722b9700","sha256":"cda4eff9500a8b16f33a54c6cd1ce7d2ec3bf66cecddb63d9c736078916c5035","sha512":"3e8e0117e5160dcad1084a50b83f5226f5a9ac659d3e3dd68995bc2706b8c2ae482c3ce2692bab223ad149137a58d792df16a2c996bafd328280806b31ff1a4d","ssdeep":"","tlshash":"fa319946f72c1977663a14ab1c1930cc913e49b52c0426e7fcdc26a45d98f28c3ea99b","size":1833,"data":"","first_seen":"2023-03-07T12:01:39Z","last_seen":"2026-03-29T20:18:02.294258Z","times_seen":354,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.36.2/googima.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.2.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e326dffdd285561fe42061b115c81d05","sha1":"7b5be6ed0aa57ca398fe44b5e343d23edf21b477","sha256":"fc91de238eebbd70ed2e63cf28a4f267ace01d38eb77cb04719de197ce8a6bd3","sha512":"08fbf336980ce3cb63a6a153648e646ee80dd646ba0829400abf832fbd79a1f47066dfe0773439c87861a8bf282e00a58626755bd366afd7c92d737cbf8498f4","ssdeep":"1536:j8shgCMQoN1vkzhFaJ/nyXqw86G+RnwNbpPWr7aEEI7wfTifTwRiwP0NZxY:IlkaJ/y6F6G+RnMbpU7aEEI7mTi0p","tlshash":"3e73d65732a8a43257d498eeb12442027339850f784bc76cf96cedef1d4e98772b6a70","size":78354,"data":"","first_seen":"2024-10-04T10:49:20.825367Z","last_seen":"2026-04-02T13:08:45.513031Z","times_seen":549,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/js/jquery.typewatch.js","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6915a93382a7b35f40987fd648b43f9d","sha1":"b78c77cc774594df414a7b1fb99c28083d85bb80","sha256":"1836dba8922ca00f9ac170122f314b2cd7bbb2eba09c73d8bce215597bd9cd2b","sha512":"e88f5e62ae04a867b1b5ba979e2b653cab8348167c37cf897856d13558114dca318ac33b2c07d611ad3559014c57e60b847823421a46649a47f5328720eceac4","ssdeep":"","tlshash":"6c313f4cb152a15d87e263f6aa7616ee3a7ae3785a001184316512d0a078a8f63d7bd4","size":1745,"data":"","first_seen":"2023-03-07T12:12:06Z","last_seen":"2026-03-29T20:18:02.232774Z","times_seen":387,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/play.php?vid=a50d4760e","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"48b383db8c4b689d51c7fe7520af1108","sha1":"464dbc35d23e717068b6c71c46c7e267bf8bf3c4","sha256":"e23346daaea4662b4e261ddc679f7ef3e914155a66fc2ded5802809568638553","sha512":"55d94e1cb158dcae5d3635335f02fa36c6c70eb0812040f917a54d7191665e22356d712a0036c55d87a4cf2b1b2c1b5c781aab61f4c30623a5481d9146605d21","ssdeep":"","tlshash":"c621d221ff44b79855ba79520965d2b020371572d1084b16f8f3703e9c4429a362dcbf","size":1436,"data":"","first_seen":"2023-03-07T12:12:06Z","last_seen":"2026-03-29T20:18:02.295561Z","times_seen":259,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pl27988627.effectivegatecpm.com/0a/50/71/0a507188a69a9ebeee1fd7e27271db99.js","fqdn":"pl27988627.effectivegatecpm.com","domain":"effectivegatecpm.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b7de4857444860f41b0e677637cf0e0","sha1":"34db9c73e8d6a917cc4091fa50ff8343522a6c49","sha256":"0cc2ad7cbc5f917012c467588ba49677802b408c263ecda092f50c810ddecd13","sha512":"6b106da56f9e7fbfe05cbd2bcce91522d42bde6ebc0aa2f6d042e8117093490a6f7b5ded474850d97adb97ff30f45f60c689eec92f2e5b3b11c6f8b26fa398ad","ssdeep":"3072:Ekl17aMWZ44SXdVY4lDKVVbZ4i3/9j9y1UglGewse:Eklw194Lwse","tlshash":"39a3c788bfd0f06d129a6473223f950ff11a4e42505ce558e907f8e66abc32af47db64","size":106828,"data":"","first_seen":"2026-01-04T22:22:26.180852Z","last_seen":"2026-01-04T22:22:26.180852Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/templates/fushaar/js/jquery.plugins.a.js","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d30d39ea7362e56afcdb14c1919e36b6","sha1":"3d8ad768ea89003210bea45e8aacd038bae1ecf1","sha256":"a01674489d3ae093a5909246b27d46e09a6f49bc6834094f5febfa056910e0e5","sha512":"e150975ba628ff73f1a84d94d9ee2f1473d881e0631731b0ea779d6b92e31708d4cd35ef22d421f590466a04ddb960f77c7f91fd3eecdf29a6c31e7f03c2a6af","ssdeep":"192:er5EO3dPvqWHg3mHxY+HFuArszyuFPsrhLypbNIGRS:a5EONH9mQbHAArszySPsYpb5S","tlshash":"a21251647140736246ef70a6e0af92cf9231a335474bd0c0d0a0faee6e3a97586d3d9d","size":9805,"data":"","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-03-29T20:18:02.12578Z","times_seen":296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.betteradsystem.com/epage.min.css","fqdn":"www.betteradsystem.com","domain":"betteradsystem.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"11671b8dac269c3838ccfff5153e1cc6","sha1":"148bcf3c7cea8629b630cbd9acfda5ee08b77b81","sha256":"ec8e9ed0f461b54d02b77cc7daca42d416b8f083032a32afe77e436d9ecef7ff","sha512":"dc635a64908340eb5f86f69070e420d2deef2918b63a21fabb56d649da0e137b029bd09c361fe56b064ce19495f286f13e3372c04a586e0e0af72a0ea5dc113d","ssdeep":"768:bt9rqAYKKeZzFQ9JsQU+YDngZGihfzmMzhYrTsAysncCWcf5k5sigC3JCntlqonr:bblZzFQ9JsTgZvfzmMzhYrTscpNZp","tlshash":"9c133aaab286282601e742b9503eb316b23305167912d458fcb9cdf96e3dd86117b7fc","size":41943,"data":"","first_seen":"2026-01-01T11:11:22.219786Z","last_seen":"2026-01-04T22:22:26.176773Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/templates/fushaar/js/jquery.plugins.b.js","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"443045e7fcb603ba92e473b0ec11d2b2","sha1":"8d9dd41c01b0f2738d6bd1a3984095570bbeb0df","sha256":"8084ff37c531acc28e0fa45ecb19d9a3c846a91f1b2e101801a9dada0cd31702","sha512":"995f65923b7ceb647c7b81b71d6e9c2f169e27a9b9c2e38476eeb4c7cd6931823a0825cfe344409f39096421d403ed0096eef957da48c6789052ccc120f089d0","ssdeep":"192:drqHYs1VpcjP3+RMCN+8/Hit2eVUUZCDq78JlwyDp/VQ3SI:drSDy2CxaqFcdVdI","tlshash":"1512d8a93292342a62bb516c105ff50ff3219526d18b8050e25899f43ef9c8e3767fbd","size":9535,"data":"","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-03-29T20:18:02.18288Z","times_seen":295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/js/bootstrap-notify.min.js","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ba070af9d1b1a2782851940de30879f","sha1":"d33390fc88bf68bd23eb182d7dbc77f5227081b2","sha256":"a13a07b242c80b57e0cbbacc6cfedb538d4d331ff1f9dff370519ec57407e450","sha512":"3d793cb731b6a060ea4b68dd622b76ee0db7f1ca5536fd4b4831b6f586c8f4f6634fcfc64d7dd93e85298225e9a4aba6d9d44ca3d8fabc2dfd365a02df60abe0","ssdeep":"96:YjcZsiBifeECqrETiqx8D6Eie9tJzg1YkwVgwIuIL3BMLbR7HdvxsyBvoPrrOLKE:kFi4f/7ETi7DcKtJ03LLkp1xs1O","tlshash":"a902768d7112926a825b9277a08e0300f536a615e517f63d3e3ac4e6bdb4de822173f6","size":8216,"data":"","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-04-03T17:07:22.646019Z","times_seen":494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/8d/e9/ae/8de9ae4b0e4b914d604a7e4b56139ffe.js","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"81c010ddfde2faeaf1c598844287df5a","sha1":"cd0fb06af4d1e8878a8c2c8d0311892ef13ff47b","sha256":"44442357bcab05b20364ed17aae2a3ae173b906529612b0e2f7d2217a76e51ab","sha512":"0acadda1dc3bba9f6178ba54356f2aed3dba23fbaf3b53b683fc5dd78eeff47a63ec7815ffbdb1e07041b274646eaa0a71ada2500f181775833f40761fc7cac8","ssdeep":"96:A9+XCx+8Ixmzn2ySej3zqIDNcxE6204l4sNm+E/0NK4Amfnqkk7lDAP2CwU6:A6Cg/S2yPXXWxW04fNPw6K4Amf4DAPA","tlshash":"13d1859c3e80b0a057b26077b97fa019b3696c50657fd80cd012b1a03e7562ad9bbba5","size":6454,"data":"","first_seen":"2025-12-01T12:09:20.892186Z","last_seen":"2026-01-29T12:50:40.978548Z","times_seen":4063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strmup.cc/4b640ff298e0","fqdn":"strmup.cc","domain":"strmup.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"82a9da82cc0fcca78a02487c21f0f887","sha1":"453781f9b1a962c5b463dbcb1d36bb361a07e8ca","sha256":"f53ccfc89cefa85af1e4e8ec27ac6a5920c5327a176bea10b3311a5d7f908432","sha512":"87bdd0035549bb76e583728ccb270c94b71ff100553c729326390335d03524111dfce08eca744f5f6ec5941748787bcaed5e4db0086ff3f2365f612f11232511","ssdeep":"","tlshash":"f631ffe54505b4f9056b63232105ee0a123ba6a69ae340382e3a1f19158ff86b3d4f6f","size":1744,"data":"","first_seen":"2026-01-04T22:22:26.210496Z","last_seen":"2026-01-04T22:22:26.210496Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strmup.cc/4b640ff298e0","fqdn":"strmup.cc","domain":"strmup.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"80b4c40574582bdc2037ec3ed37cccf4","sha1":"c6636ad9f5df9b12540c2309bfb2c55d5af39728","sha256":"4883a912fe8707db14874741beb22f295074a41864fda2154bdac89dbe6924ad","sha512":"2fa8bad58d505d5a9940f7d5d00235b82a4cbb928f239ff19c475fba37f6e39ca6b2f2146a023e5f4dc0af8f5b64966db46f36725bd830e47c2e6337fdef607f","ssdeep":"","tlshash":"f4500000c00c03c3000000000003c00000000000003000300000030000000c00300000","size":8,"data":"","first_seen":"2026-01-04T22:22:26.212039Z","last_seen":"2026-01-04T22:22:26.212039Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/js/melody.dev.js","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e238acf58475d3cdb95d614582134b24","sha1":"b13c1da1f5254cb14f4f187bd5174ed0feb08a23","sha256":"f3a4cbf3a8090b121a0d6d6dd8feda9f92831cdb5a070a7eb9ef58234c1f4eab","sha512":"7209c4cb8692e5a1fce4c6bad8081361c857d45b179b935a7291b0682c514409584e10b29bb56905dafd5d3dc8831d82c78cf9895c7b59ac2239552f6abf1f2b","ssdeep":"384:krC7SV8zve0Nfenff87NLRld9gTSOW6VUH:krC7+860lRLRGTdK","tlshash":"f5a25405f2ed1e6600b334360cafa4853a3c99b798048d59fd5d21e85f6cb7ca972f4a","size":23108,"data":"","first_seen":"2023-03-07T12:12:06Z","last_seen":"2026-03-29T20:18:02.23372Z","times_seen":492,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strmup.cc/4b640ff298e0","fqdn":"strmup.cc","domain":"strmup.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"347076fdc711189bc74480d6b4720262","sha1":"b567bd3cf710702649aa58ef2383ec70b2b6ae0b","sha256":"898233dbbe0ec5cbc763c6bc038ca7ca81ea7e34f132061c19751b60e70d29ce","sha512":"3f209d11dea591e71935c163101632ba5e16b4d28914fdbdcb1c9dd5bf5f0b9617d9d0909dda2dbcf04573f46eddc1953d5593c6fd2facca49b6f012a4699621","ssdeep":"","tlshash":"92c02bcc310a0c7085f727008b3fba00f002332494d46931484933044d30e13e744810","size":153,"data":"","first_seen":"2025-04-02T00:26:38.946274Z","last_seen":"2026-01-21T21:43:11.335247Z","times_seen":198,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strmup.cc/4b640ff298e0","fqdn":"strmup.cc","domain":"strmup.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"111de9d5d9bc635a59adbebff2776a0a","sha1":"19e7f29fc9aa2fb6b827826bed1f6e89686b0cc9","sha256":"cb137fc41eb444563e4631d53b14f0d9e82875035cc85b5a00b22cb5ac666a8e","sha512":"36f79e3c67bb14df147a687a9eedf73369ec98b488538150fc4f27dfb0e87c81a2081d13d92c8bb8bb7265be7651af8668f2287ac5695e4dcd1cd7477034fb55","ssdeep":"","tlshash":"82500000c00333000c0cccc000000300300c000000c000003c00000000000c000000c0","size":10,"data":"","first_seen":"2026-01-04T22:22:26.214449Z","last_seen":"2026-01-04T22:22:26.214449Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/core/bridge3.735.0_en.html?gdpr=1#deid=%22%22\u0026eventfe_experiment_ids=%5B%5D\u0026fid=%22goog_1565491064%22\u0026genotype_experiment_data=%7B%22experimentStateProto%22%3A%22%5B%5B%5B45713128%2Cnull%2Cnull%2C%5B%5D%5D%2C%5Bnull%2C749060184%2Cnull%2C%5Bnull%2C100%5D%5D%2C%5B45722344%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45706017%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45740207%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45668885%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45685340%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45734716%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45735891%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45663239%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45715032%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45661356%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45676441%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45675307%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45675308%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5Bnull%2C45645574%2Cnull%2C%5B%5D%5D%2C%5B45688859%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45656766%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45710689%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45710688%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45685601%2Cnull%2Cnull%2C%5B%5D%5D%2C%5Bnull%2C45685602%2Cnull%2C%5Bnull%2C500%5D%5D%2C%5B45747172%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B775241416%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B781107959%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B781107958%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B792614055%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B781107957%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45729602%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45658982%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45725657%2Cnull%2Cnull%2C%5B%5D%5D%5D%2C%5B%5B16%2C%5B%5B1%2C%5B%5B31089630%5D%2C%5B31089631%2C%5B%5B45668885%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B1000%2C%5B%5B95332046%5D%5D%5D%2C%5Bnull%2C%5B%5B95332047%5D%5D%5D%2C%5B10%2C%5B%5B95333808%5D%2C%5B95333809%2C%5B%5B635466687%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B10%2C%5B%5B95338769%2C%5B%5Bnull%2C45645574%2Cnull%2C%5Bnull%2C1%5D%5D%5D%5D%2C%5B95338770%2C%5B%5Bnull%2C45645574%2Cnull%2C%5Bnull%2C2%5D%5D%5D%5D%5D%5D%2C%5B10%2C%5B%5B95345206%5D%2C%5B95345207%2C%5B%5B45661356%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5Bnull%2C%5B%5B95351425%5D%2C%5B95351426%2C%5B%5B45676441%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B10%2C%5B%5B95356068%5D%2C%5B95356069%2C%5B%5B45685601%2Cnull%2Cnull%2C%5B%5D%5D%2C%5Bnull%2C45685602%2Cnull%2C%5B%5D%5D%5D%5D%2C%5B95356070%2C%5B%5B45685601%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5Bnull%2C45685602%2Cnull%2C%5B%5D%5D%5D%5D%2C%5B95356071%2C%5B%5B45685601%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5Bnull%2C45685602%2Cnull%2C%5Bnull%2C100%5D%5D%5D%5D%5D%5D%2C%5B10%2C%5B%5B95372277%5D%2C%5B95372278%2C%5B%5Bnull%2C745150931%2Cnull%2C%5Bnull%2C1%5D%5D%5D%5D%5D%5D%2C%5B1%2C%5B%5B95373378%2C%5B%5B792614055%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%2C%5B95373379%2C%5B%5B45747172%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B781107959%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B792614055%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B781107957%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B50%2C%5B%5B95375505%5D%2C%5B95375506%2C%5B%5Bnull%2C749060184%2Cnull%2C%5B%5D%5D%5D%5D%5D%5D%2C%5Bnull%2C%5B%5B95375930%5D%2C%5B95375931%2C%5B%5B45734716%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%2C%5B95376520%2C%5B%5B45734716%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45735891%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5Bnull%2C%5B%5B95378095%5D%2C%5B95378096%2C%5B%5B45740207%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B1%2C%5B%5B95378629%5D%2C%5B95378630%2C%5B%5B45729602%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%5D%5D%5D%2Cnull%2Cnull%2C%5Bnull%2C1000%2C1%2C1000%5D%5D%22%7D\u0026imalib_experiments=%5B95322027%2C95331589%2C95332046%5D\u0026is_eap_loader=false\u0026managed_js_experiment_id=0\u0026page_correlator=956442821057389\u0026pvsid=1666379283780804\u0026top_accessible_page_url=%22https%3A%2F%2Ffushaar.lol%2F%22","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"56b0d0e8272fed6b9a44d08c14e5b1be","sha1":"0b2e66a7ca8c0319310adca7ba8d02b643526f9e","sha256":"b045c748093c314660ce2985a8dd0d6c3feb6af1026dc2b02229b2538c0da6ff","sha512":"a35fc7c77ba761303aff78d51b8fe387bbf1c8892861ad6655984ea7f43598e5d9b769c2607013d9ebdc08417e578e1a7e81043f346083de7accb7a90425f259","ssdeep":"","tlshash":"0ee0269dfa8a09384c1238a16f6f329483aa916fe228e264f81de7445f1044dd06b3e6","size":358,"data":"","first_seen":"2025-02-20T21:14:35.914719Z","last_seen":"2026-04-03T18:48:07.005567Z","times_seen":10112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/play.php?vid=a50d4760e","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0b5c6ecfd31b214438c017f7840cab7d","sha1":"5b0d464bbab33735e654f6d0b47dd2bcd47f8e5c","sha256":"e0d679f66eea8fae589016f89ff238618cabb4b802add68fcbf4d70498356ea1","sha512":"c5bcf7b3ad3cd5e65ef4a944e7430ef7a9483af6f499f7e9359146112442aaa246c69fc09c9fd3d7eb0326eebb4b72d90859897d869d06b299c8b0b835473a7b","ssdeep":"","tlshash":"dad07d80ecfd56010a7b75392c79ef8f923331011f03451156a9281f4e84bc7b163475","size":291,"data":"","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-03-29T20:18:02.302583Z","times_seen":382,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.36.2/jwplayer.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.2.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5454f51ab2c9ba10955938c3458ef45d","sha1":"207795d527b8205d07fecb668a2d3a150db56f9f","sha256":"ee28fb495ac5b28ae38033e36a640d41dfeb2528c5124ff0203b09b06c05a36d","sha512":"4b4e4358522d6cec1e32343e5c219658535fdf01ab5805d6d9f7a0d98e94eaba4a69c0c5862ca7bf0985367b48287e071617b81f62c43c35b97f4a3ee1cb4124","ssdeep":"1536:VCLyl/ByE1iqx9JaGB2lAqU6ePRtwoIWz0Bk+5VH3wen+LhUi3LhflsqKkcRPUeV:VVbpk+Ui3LhddhHwSy","tlshash":"a3e33aa631c2f4a617e264c7e47a4101f1790988744de864faacecda3916947b1b3ffc","size":148627,"data":"","first_seen":"2024-09-28T01:51:51Z","last_seen":"2026-04-02T13:08:45.491402Z","times_seen":546,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/sdkloader/ima3.js","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8fbc3c7ee8b75cb4c02aca63b6858f2","sha1":"c7590ff9a1c7712216e8d12f7361d9fc3e9162f9","sha256":"18dcd8914407bda94e1ff0d00dc953f949fd72c5c6a56a5092a944a2fc1c112b","sha512":"24d8272eee013d2db32946fc758c68419f3b7656b53aae6535db73db7ca3d51c6b9bcbc6fda9d38d47f69d2b8fc60e8a9902e6a6c3513da40411a553f7a79e68","ssdeep":"6144:gz2SPdwdFdGlWgZzvfKyBMbvvNeQT2lorPyV:MZrHBK3NxyorPyV","tlshash":"b8a4facdb6a674669363f4b5403f014bb23ba866f408886cb649d9e27e7480d4277f7c","size":461806,"data":"","first_seen":"2026-01-04T22:22:26.126451Z","last_seen":"2026-01-04T22:22:26.126451Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strmup.cc/4b640ff298e0","fqdn":"strmup.cc","domain":"strmup.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ee2ccaec14b48f4979b47fdfd6cfe712","sha1":"b910f6bba0338f7967854d061c0e80abb9398b99","sha256":"143aedf1735ec3c1c954076f332fb6c960f77f0f8971dc8c5c2f43fc7cb89f62","sha512":"d780670a98b48dbb4a4c7df6dbc439bcf335ef394ef84a17881ea9aeeaa98c27f4ef84e9ad8e09d16e9352cc038666763f54710f9dcfdeedfb2834a2e67732c6","ssdeep":"768:Ns28jH21spfgS9J7yr5PbfmDJEX6shV4o:K2ugcGrlbfmSXDhKo","tlshash":"e7c2f7eb326e79594329953110ff2c91b2dd49c0318f5678ea14e16639e393182fbef8","size":27837,"data":"","first_seen":"2026-01-04T22:22:26.219643Z","last_seen":"2026-01-04T22:22:26.219643Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/play.php?vid=a50d4760e","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"901d05a394689754b24c53a14ff0bb94","sha1":"16e6750d0db26beda439d20147af2cdf6ee85f6c","sha256":"c8d34bfa528cee7507080fac65baab9a6eacb046b4c097cc3201ff3bba0d09c1","sha512":"4ee2e549e7bf56480b4d2ffcbd59903b4f9f55ee6ee6b15ac161d70b08297ae3662e91f1cfdd2c6832601a30079245c722674147287d384efdcbe158048e63b9","ssdeep":"","tlshash":"44d0a738fc7da01104bd38ba38f74d487a36387020032845447c96e45b9aea44581c15","size":216,"data":"","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-04-03T17:07:22.65821Z","times_seen":455,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/templates/fushaar/js/jasny-bootstrap.min.js","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6b6e524d29d54ada53e4172b9d91cf7","sha1":"427153c7a2d83d2ca800e397779f29b857801ad2","sha256":"e7ad856551c720cb7c6a24a8bf4a9d6b6b24c24f07109cde96366338e53a4ff8","sha512":"13c01f28dd38a2b10ce27bc4dc60d510b2067e408ba1c0a26b0eb7fd39dd4300265278d529925e56d40bdc06a32d024558ca10a20d1ced6c186cc9ac263cc36d","ssdeep":"384:rKLCtf00Rd7HyeSOjjWhuU4AHL6JLeUxVM1MJsisNV+bocACk3N7K1nj:rbR00DHyNOjKhuVAWLxA1MJsisNV+boo","tlshash":"4e92664579b0225903ffa17601db4749f336eb28984a411cb4789ad76e39d0a72bbf3c","size":20042,"data":"","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-03-29T20:18:02.152883Z","times_seen":582,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strmup.cc/4b640ff298e0","fqdn":"strmup.cc","domain":"strmup.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d0b29033d2d7a701738bf938ec0cfae","sha1":"6a34817a5f72a104953ec4a352242a37de9011e4","sha256":"f00d7360776a63b7f4b306c0260c3599294dd09afef1139e7d845775f2748407","sha512":"d1d6c6e934f1db637b15dd1823fdcf3d991ec31b68fd9ac6a5d35ff26dd0cf56b3971aed418a42e1fe890d7653c6672060a5fc1cb956c9cd03ef69f134f8ad12","ssdeep":"","tlshash":"aec080b679e59531145400da3176dbf57c7431187952b080c4dd7c2c9564fd31852c65","size":179,"data":"","first_seen":"2025-07-31T01:18:02.962396Z","last_seen":"2026-01-04T22:22:26.223236Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.36.2/jwpsrv.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.2.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9449982aabf38639d014274af3ad474","sha1":"f99f5ba761f1945f19da3cf4a9ca52c1aeee47d5","sha256":"fb1c762c222ed003d9bd932a1bf94a36879b73967f3aaf2797cae7f6d5302352","sha512":"f4c80f0c7c44b72303aa3494f19d164095b24bf83e013ddf92d20b75fc618cbaa505c183557bbb14cb9a836c514b21fcb623c00059ef7e9d04ffe16ae4a12fc3","ssdeep":"768:DiDjPSAlvbtXral8WK/2R7pr1oJl92LCaA1YL9ncpgW:+nPlZral8WK/GEJl92LCcLWpV","tlshash":"fd63d78d3685b16a5a6770b8806fb546723d1dd6308dc250ea50eec93c3de5ee237b2c","size":67288,"data":"","first_seen":"2025-02-26T11:57:34.810186Z","last_seen":"2026-04-02T10:05:07.835879Z","times_seen":3984,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/play.php?vid=a50d4760e","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"86a6965e541a781a37d669b260561c55","sha1":"d507b1712d0947c35ca109d78453ad0706543594","sha256":"d08064727885699b455486366ac7a1b6e9e298d7cb1d94d4e491088d0bb8ab94","sha512":"083bdf45ad8995c0ec36c921ed717a940848bf6490fb897aa3a9a9d98be61fe38d2f4284960bd6863558a922318a7a42ec756dbbda4a3e1511e1fb28ea3a15dc","ssdeep":"","tlshash":"a3f0270ab2a4993780b231885a5a4bf9766854cee508183230a8d78d1371dd4a2babb6","size":439,"data":"","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-04-03T17:07:22.659118Z","times_seen":456,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bvtpk.com/tag.min.js","fqdn":"bvtpk.com","domain":"bvtpk.com","tld":"com"},"ip":{"addr":"172.67.154.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6105483638bf5e8a75281fe5e1724593","sha1":"eda0189eb558b183b96f986dc5d19383f38d0cef","sha256":"14de16fbe0c19c617049209624382077fc976dec843e4c62b49ba9ad492231f0","sha512":"13b76442e6e3e2af5315da9b98e1ae6902c966521edf1b12373e7fc488902639d73b5fb515c085c6ee0c6e666ffbf4adda3acfb8ed8f5353fbea2cdec7771133","ssdeep":"3072:tXki1TG8YlAVRzIqwL76WJHpYx85/MVzUL:6WTGvlVqw5JJdQza","tlshash":"7db3295673a277d21a6e60d42d57d60573fd8c80488f8867e3c8787972d081cd3abbea","size":112428,"data":"","first_seen":"2025-12-18T11:35:07.715482Z","last_seen":"2026-01-08T09:54:56.313421Z","times_seen":771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/hls.js@latest","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"69991b6ecc5d57cf73bad5b3a1296058","sha1":"5c7108b1d0ee56af5c9fc4cf18124998c0017632","sha256":"413a83e2bb0c77ed0bf0be105d539d17ef45dfd984a0b13ecd3b14a901383938","sha512":"09256a7386bbb67fad8b30cdb7e783a159f67d7600c0c0e908baf01a55ab3a4b4d7d943d829e1d28a49c12531e465ac889f865897b346b4e812da52098c94253","ssdeep":"6144:ax52zYCo5VplapfQn4RzVt2tFPR5Szfmm6faVqKxh7U4StP1BHTO1OMAt2TMQxIu:a959aB7RzT2tF4lVqKxKld24Q9","tlshash":"35b429ed36a5a01643c2b169903f5507633a7d0a284cc12cfa2be9d72d7994db13bf74","size":541870,"data":"","first_seen":"2025-11-19T18:04:40.578466Z","last_seen":"2026-04-03T19:27:44.883265Z","times_seen":1353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strmup.cc/4b640ff298e0","fqdn":"strmup.cc","domain":"strmup.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d8c81442e74e2aee0929479d20170ae0","sha1":"9de4f4b80c02779e4ae982e0638d2075b48db354","sha256":"a5a0d9be349f2f79e82bb0780285442f54e42939e5e4783db7843956e2ced445","sha512":"9b29a0f8504c6d1add7120c2278afbc4f13f7505f666a23669378c6834aaeeb07c9ec1012c247a8b694caebdffa0f0f5ff2d3f135434924682de4ea6eefda8e3","ssdeep":"","tlshash":"678000080ab880b830032a00ac00002222088f80a8a03ac0380e03bb0ca2c000802a2c","size":31,"data":"","first_seen":"2024-12-27T13:53:56.215783Z","last_seen":"2026-04-02T13:08:45.530769Z","times_seen":1081,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.36.2/provider.hlsjs.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.2.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"283d59c375ad57728e89bd2fd1b6af1d","sha1":"1ae8e4b8bf7141cecc15442f9d83dc10a066fcdb","sha256":"423fb0c266f4a755fb3e2d9093f92b92a7e9bfe4c0c4a900b4342c5b9f6ea0cb","sha512":"fe8272ea849648c625e7810dd76a9ffec8d9877cf63f0c9a2bb18ba7feec6c97f559bbbfe51324a68039ca3b1bd06802124af02e833ced161128555d17434486","ssdeep":"6144:h49gZtOST1zXBUkGHZu08Q9Eu969j3/nqJxgEMmew9rrqIZk6:Gy1VGHZu0pU9TqJxgEXZF","tlshash":"2ea43bdd77a5a02642c2a1a5903f4607633b7d0a740dc1acfa2be9d75db8849b03bf74","size":461432,"data":"","first_seen":"2024-09-18T21:59:43Z","last_seen":"2026-04-02T13:08:45.484612Z","times_seen":582,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/play.php?vid=a50d4760e","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d0f0b5b79e9f10c796e8a416e57dd2d","sha1":"acca3a159098bbc8a6313d6f496cfeef362c3171","sha256":"452c276bbd878d6970a8f3a2b5ebea89fcc866c5aa58e5e56afcdc9c53c2b78f","sha512":"e27276b5b768d17d9973211aed03b558904dc0b9d04d39390bfe27493d783c5c64f98dd6b676bfad19f0060eab18fd0ef3d4ffb492b0353585c3b09253e7fcf6","ssdeep":"96:u+cdSxFAl+7furhwsTulBaahwlXYDIxCrh6sTuDHO65:uXdSxFAl+7mrhNulbwlXYDIxCrhzuD/","tlshash":"bab1b909ff7a4a9b996b316075dfb1ca435f6972f30b0e1afe215c1c12e4562e063a06","size":5271,"data":"","first_seen":"2023-03-07T12:01:39Z","last_seen":"2026-04-03T17:07:22.660317Z","times_seen":450,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/play.php?vid=a50d4760e","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c070828794e3692be0a52440af066ad7","sha1":"a22ab13f7ad1693710e700a1e4af7b0b9a5d13c0","sha256":"ef97c53f57f9b726c0bdc02f4fb9bb0e6e8d0e9f37f3c24d3f913abcc06ae14b","sha512":"a52c33c68004604eb2f48ff0ce91bbcf08d9eb96fa8c0f73446ba894515479054e85675ca024c74717601fd20769e2cce674b72ccc3be7d77516e18884b26bcc","ssdeep":"","tlshash":"fe01d019b2452b28825fe658943e315878376003ef017d09fc3c515a8f70d6528e1f4f","size":850,"data":"","first_seen":"2023-03-13T17:01:24Z","last_seen":"2026-03-29T20:18:02.312243Z","times_seen":177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/play.php?vid=a50d4760e","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e3e44506796956c9a0a36c1e016e595","sha1":"77bdf0003f80f77027b61e073c892fa7430a1ae1","sha256":"46042706d6bf00c6739c4f2627626abeafb83cf634611f70ab422716e4d06344","sha512":"2c693228bcc6d4824585c928526247fd20010ca5603f24a961f0c651bd149fd9629cac8b0e6d11c0f356c929935522093500993f2ab2fe71777ed9b2b3927279","ssdeep":"","tlshash":"f901be0d3167a82b51bf326b5a3f95013b5da55f8206cd40faac5ee10f1065876a750f","size":686,"data":"","first_seen":"2023-03-12T20:33:55Z","last_seen":"2026-03-10T08:04:45.561343Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-04-03T19:33:07.084004Z","times_seen":13131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dr.groufsesquih.com/r9tUSU7Wz9sV/82239","fqdn":"dr.groufsesquih.com","domain":"groufsesquih.com","tld":"com"},"ip":{"addr":"188.42.241.221","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","size":5,"data":"","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-04-03T18:52:28.641166Z","times_seen":14758,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strmup.cc/assets/js/new100.js?v=1","fqdn":"strmup.cc","domain":"strmup.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d417c5dbae8a3d933a478e1a0d886a5","sha1":"e3fc7ca463c6e4a759866790911ee6aa23a4b842","sha256":"3718b865d7162567322249682a0c6113ad4ddc91bb48c33285cdc5d491dde1bc","sha512":"dbb728632688f60dbbcc3a8bf2e5ba00d53cc9b1ab3552d605ba500e19c1b944413e4dc0e44f3b9c651ffdb3d62f67a1470727127fb0666f5b0268569e0c85a6","ssdeep":"","tlshash":"b7115c767ce4763031ea094a3427a185f0f20b642d19e574519c0b6a38a8e4d9d37afd","size":928,"data":"","first_seen":"2025-04-02T00:26:38.94272Z","last_seen":"2026-04-02T13:08:45.497397Z","times_seen":519,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/sweetalert/2.1.0/sweetalert.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe0f18cd4d5f1d03dd247211c5667669","sha1":"99e239bbca743fe70220e684ebe98e57ffacd4e4","sha256":"15211e0be73438987ed05236dc4ce90962f7c46452427364446576505e66697b","sha512":"a2b27f39c521ae136483cc2036b7b9946714272863d49b28b7f4129d128a8abcbc92c1af0296c70446eaec06ccb134afe0b9e77d1dcd49a8c240516c1067bc8a","ssdeep":"384:/BLa4qL1li0jldLUuuRcdNU/CfFqLyX9ye1hAbj/i5Yy/kyyeu8pgUqaF2XSSHEj:ZLahUodNU/CNqWX9ye1hWz8+B3c2Bkj","tlshash":"b4031996758470a643e398f191ef020ef2359523b84798d5b361e8e88ff4e8d10a7f1b","size":40802,"data":"","first_seen":"2023-03-07T01:10:29Z","last_seen":"2026-04-03T14:27:23.500409Z","times_seen":920,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-migrate-1.2.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb05d8d73b5b13d8d84308a4751ece96","sha1":"743052320809514fb788fe1d3df37fc87ce90452","sha256":"1e67d8dbcca1f6fd94e077c85c2fb40fa1c2756c99238daa8da882144260a68d","sha512":"7b68a43a22a41404a2ff58e0da6a237492cad0fc3e56d216980802b4d5fb483895262a7e049340d6670002bdf899ba88c319239e60d0aae1ac31d98556b0ad6e","ssdeep":"96:tBySz91Gwyk35YrfBewIt9jKLKDs2SFNK7wIDBRANyCfVJ45NI:zySzvGw/35YbMx9jKLKD3UIDBR8VVUq","tlshash":"3fe196dc72aab5611ffa30a8503bd21b72b25aec140d95a4f08ccde5392cc5d413ab7e","size":7199,"data":"","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-04-03T19:25:10.846227Z","times_seen":19786,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strmup.cc/4b640ff298e0","fqdn":"strmup.cc","domain":"strmup.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bf7b38523024c85ba7d58adce06782d","sha1":"e59fece7ba043dc5e369cd5e109eb848c43b7bc6","sha256":"ead6750342664e83f06fb64f826a27a5a7e896aceda7c7f419e170222d837508","sha512":"15d97206fca24c9c6d29519d389f1b5457b337688c8c5f26096e964d352357d92b1ab34c9a9ecc1f1d486f5f3324ff965609fab204be4b54271b2e53b024c8c1","ssdeep":"","tlshash":"368004041cd4dd7430054c41341070d311134f11c0007400f54c471704c054d5c1075c","size":38,"data":"","first_seen":"2024-12-27T13:53:56.12858Z","last_seen":"2026-04-02T13:08:45.540035Z","times_seen":1089,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strmup.cc/4b640ff298e0","fqdn":"strmup.cc","domain":"strmup.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ed355111dbd500ea0a0c93f5f7bd13e3","sha1":"813c450b6a8f50473baf2e23d92d3ea7991d90d2","sha256":"323f46bb7e20f525675f81b63622f3c2175869db3f9ba572425afbe1539e583e","sha512":"babd7ec138aed607022243c969fab4de3410e206e611a9b3f63b8176db5a0283fd415bba6aee0b4d483e7c5031931ba03515ba77346c765ac722907a356e3fee","ssdeep":"","tlshash":"a8e05c7f0b707cf947b0a4d01b176214e9a778039dd69581c124086b1d19b63123d549","size":433,"data":"","first_seen":"2025-10-29T06:26:50.423178Z","last_seen":"2026-01-04T22:22:26.230305Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/templates/fushaar/js/melody.dev.js","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3bde81760af5b3df4d0c56ba06a0fca","sha1":"ecf2f46def386ad8f62fad28edc36c8440f339cc","sha256":"c6f149f7dcbe38ff7b1391b1fab3462f06309f79df7bf9135ba1e75b13189af8","sha512":"7b8e060be27ba820f50b8905cabc32507f821d5dc8ca768cfcd26521ee90568fc5b4e43181f08b587eec7e6be5c201679a7cb1a8ce8fc3976a1159a4b423f95c","ssdeep":"192:EcGikGJsJfwbyN3DkPMnBE4c+mqa5F9iiN8lwwIJiN8lwwb:f4yyN3DuMnBjL+PL+u","tlshash":"d9f15498b39d679eccf63266553d9404cd3ec1328203c2687d3d61941ff8ec52a76aae","size":7961,"data":"","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-03-29T20:18:02.218986Z","times_seen":269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/play.php?vid=a50d4760e","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e408bb6c5cc920da777a7e4ff45c9822","sha1":"2097e43727758bb6202dfca84112971f0f7ab2fc","sha256":"8419419ecd939e5b114b1ac4d1603a625cb9e6771b55c6885abf50e7bf7ce38a","sha512":"d1632154c290041830a2076ac9c53bf6b2e795b5af32cd5423063f758aa0f8882631dbc52b9e30171af0d59ca441282abb5d07c43dc8eb11c2b58fc55c0ee5ca","ssdeep":"","tlshash":"22c02b8c214a0c7341f727408b3fb700b012f22494d06d31482923048d31f23d744c10","size":153,"data":"","first_seen":"2025-12-22T05:00:21.314846Z","last_seen":"2026-03-15T10:12:21.039051Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netdna.bootstrapcdn.com/bootstrap/3.2.0/js/bootstrap.min.js","fqdn":"netdna.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"abda843684d022f3bc22bc83927fe05f","sha1":"26908395e7a9a4eab607d80aa50a81d65f3017cb","sha256":"24cc29533598f962823c4229bc280487646a27a42a95257c31de1b9b18f3710f","sha512":"3f1b46e9ea0fb6be507605a2783af406c6b4f885dedaa4401bff204b0fe9056656717411021594e2512e98a4e398e3238267a7deafeba1b57e443decab0477ea","ssdeep":"768:xoBFw1wl+WRydWDRQgn8WI0fBQLrX84XCqc:SAr2MRCqc","tlshash":"43e28446b23031a107dfb2e5515f020b723a6a6de906907c38b999f53db9c48727bf39","size":31819,"data":"","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-04-03T18:23:32.936183Z","times_seen":7129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/play.php?vid=a50d4760e","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"11a14bbd06f4bd2d5146b54fed496ffb","sha1":"a7edcd744145a38cdc78174d0dcae7604f0a106c","sha256":"4f785abf8c85539b2d8902e8b1f286c02d0c7de70840fadccd9a1ec6d623113f","sha512":"df97a00e9ca37f87e883f1ddeb6263ccd60902eee4de424db905322e74f9366eda20f861cf1145fd5c978e651405e8a17681695ed98720478c3bfcce3d6849d5","ssdeep":"","tlshash":"52c0c0f474b49530001800d9307fc7e83c30300877a27080c4cd7c1c9d74ed30852ca8","size":188,"data":"","first_seen":"2025-12-21T10:54:50.417198Z","last_seen":"2026-03-13T13:51:01.921887Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bvtpk.com/tag.min.js","fqdn":"bvtpk.com","domain":"bvtpk.com","tld":"com"},"ip":{"addr":"172.67.154.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6105483638bf5e8a75281fe5e1724593","sha1":"eda0189eb558b183b96f986dc5d19383f38d0cef","sha256":"14de16fbe0c19c617049209624382077fc976dec843e4c62b49ba9ad492231f0","sha512":"13b76442e6e3e2af5315da9b98e1ae6902c966521edf1b12373e7fc488902639d73b5fb515c085c6ee0c6e666ffbf4adda3acfb8ed8f5353fbea2cdec7771133","ssdeep":"3072:tXki1TG8YlAVRzIqwL76WJHpYx85/MVzUL:6WTGvlVqw5JJdQza","tlshash":"7db3295673a277d21a6e60d42d57d60573fd8c80488f8867e3c8787972d081cd3abbea","size":112428,"data":"","first_seen":"2025-12-18T11:35:07.715482Z","last_seen":"2026-01-08T09:54:56.313421Z","times_seen":771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strmup.cc/4b640ff298e0","fqdn":"strmup.cc","domain":"strmup.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f148e6d1ea17b03b03b3fb5ce6284c52","sha1":"92533b0b45004623d0e26c6495083650f71ab837","sha256":"0ee992ac0b16a8b081fd651db0beadfb49a51851f2498c83787c55975687751b","sha512":"17ddd4a9f61599026e106829eed3bc97d6d4966a8013bb9c544490831393cdf6cd7c6f0097ba81723b27afa896ef8480bc99af4b10985fa054deecf2598aa2d1","ssdeep":"","tlshash":"7611882c6405ab2731c2647d843bec296db24196974869ddb8ffb0940331cc30c06bd8","size":959,"data":"","first_seen":"2025-12-23T18:47:43.336877Z","last_seen":"2026-01-04T22:22:26.237202Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"fushaar.lol/templates/fushaar/css/custom2.css","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /templates/fushaar/css/custom2.css HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/play.php?vid=a50d4760e\r\nCookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; watched_video_list=NTM3MQ%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 12 Nov 2025 23:32:51 GMT\r\nexpires: Tue, 03 Feb 2026 15:48:44 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 23577\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ft3NR7qOmRccnbQ4P8W4YyLRpx3xr7PuJpuOeJobNxp8WUK0Z0yQbN6sp5D53ydSbHoYvocaYEV3nrULNiFmZ1M8kCXR5Eb3wW1T\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8e21633d0e5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":45056,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6169), with CRLF line terminators","md5":"c5ca8c94a778d649128348e2217426d3","sha1":"56fcc16b8220644f20443f0b005ebcdc8cebe4ef","sha256":"717399bc3bdfd0aaa2c418328dee08a8e756f73fae1effd1c8f221130971dca1","sha512":"4a3964e9502c0f33639325301a46835f16548d182349793d947eefd6958fcee95c426c8256bd31c62a7bbb42fe80ccb357419f4e2b928acb67b962b05492eb7c","ssdeep":"384:nr9gYYqf/lqYztAYr5nwJ9txor4jRmdjRmBjRuBQVsvQ9gOstdaT6L+B:reBy/lqYzOYm9wvy1AdaTPB","tlshash":"4213c9a5da11164a7137d6a5aba207c9df2c0083eb03067dfba573248fbe4984572fcd","first_seen":"2025-12-22T05:00:21.250414Z","last_seen":"2026-03-15T10:12:20.999062Z","times_seen":10,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/templates/fushaar/js/jquery.readmore.js","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:43.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /templates/fushaar/js/jquery.readmore.js HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/play.php?vid=a50d4760e\r\nCookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; watched_video_list=NTM3MQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:43 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 12 Nov 2025 23:32:51 GMT\r\nexpires: Tue, 03 Feb 2026 15:48:45 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 23577\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5BLzCb7FO06Y7dJ7kqxSf1sNUk7FO%2BvLCHs6hNgsEJtWRDcaFIMt2%2Fn%2Ffb5b%2BaXmLnGUNfs9OxvRnG1llAJJkhAzp9tk1hIcCFoG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8e2167fdfd5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3430,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (531), with CRLF line terminators","md5":"081fe3d90aad9b9f11e4b1c0569530df","sha1":"ff566498ce6f25f4a3b28c0e2bb92b6b86fea6ed","sha256":"98e825583e6fb4f7e8a65f9063fb7ea2d34aee8f9aa480dfee285ea27f4fca02","sha512":"cf242d2562e01ce001f00b847c0855d090f3c2883ede50cb65298cad502e2ae1fa6648a16eab883bdac88e2cdbe0366f4dcad0967bf3cf0e02ef979bf7f2b2f7","ssdeep":"","tlshash":"ec61f169b323f642c4a720e2705f530a663bf128835580547777dae86f7c80e7863a7e","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-03-29T20:18:02.153633Z","times_seen":319,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usrpubtrk.com/ut/hb.php?cb=0.7987811906787441\u0026v=1","fqdn":"usrpubtrk.com","domain":"usrpubtrk.com","tld":"com"},"ip":{"addr":"172.67.186.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://strmup.cc/4b640ff298e0","date":"2026-01-04T22:21:46.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usrpubtrk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Dec 2025 12:57:52 GMT","end":"Tue, 10 Mar 2026 13:56:16 GMT"},"fingerprint":{"sha1":"77:2A:71:0C:1C:F9:2B:14:04:DB:13:5F:A6:57:67:6D:B3:A9:A0:95","sha256":"E0:53:FF:DF:EC:31:75:79:08:DF:B9:B1:56:18:5A:48:15:62:EF:8B:BB:4C:1B:05:1C:E8:DD:3F:0C:A4:80:41"}}},"request":{"raw":"POST /ut/hb.php?cb=0.7987811906787441\u0026v=1 HTTP/1.1\r\nHost: usrpubtrk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 1416\r\nOrigin: https://strmup.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strmup.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1416,"data":"{\"clientHints\":{},\"isScrollable\":0,\"totalClicks\":0,\"sessionLength\":3,\"ippMissclicks\":0,\"visible\":1,\"caught\":1,\"lastevent\":0,\"isFullscreen\":0,\"isTabFocused\":1,\"eventImps\":0,\"retryCounts\":0,\"isScrolled\":0,\"isMouseMoved\":0,\"pagePercentageSeen\":100,\"belowTheFoldSeen\":100,\"touchEnd\":0,\"touchMove\":0,\"clicksByType\":{\"idle\":0,\"input\":0,\"video\":0,\"button\":0,\"link\":0,\"img\":0},\"browsingTopics\":[],\"ufp\":\"Win32/Mozilla/Netscape/true/false/1280x10240en-USunknown4824 bits\",\"sessionStartTime\":1767565304,\"sessionId\":\"6144a6a548b6c6456a39ebf61de36941\",\"timeZoneOffset\":0,\"zones\":[],\"pUrl\":\"https%3A%2F%2Ffushaar.lol%2F\",\"pReferrer\":\"https%3A%2F%2Ffushaar.lol%2F\",\"pTitle\":\"\",\"pDescription\":\"\",\"pKeywords\":\"\",\"pHasIframes\":6,\"pWidth\":1162,\"pHeight\":671,\"vWidth\":1162,\"vHeight\":671,\"inIframe\":1,\"bsd\":\"eyJwcm9iYWJpbGl0eSI6MC4wMSwicGVyU2lnbmFsIjp7ImlzV2ViRHJpdmVyUHJlc2VudCI6MCwiaXNDRFBEZXRlY3RlZCI6MCwiYXV0b21hdGVkQnJvd3Nlckdsb2JhbHMiOjAsImlzV2luZG93Q0RDIjowLCJkb2VzVUFDb250YWluSGVhZGxlc3NLZXl3b3JkIjowLCJpc0ZpcmVmb3hNaXNtYXRjaCI6MCwiaW5jb25zaXN0ZW5jaWVzIjowLCJpc0Nocm9tZUZvclRlc3RpbmciOjAsImRldGVjdENTU0Fub21hbGllcyI6MCwiaXNIZWFkbGVzc1Blcm1pc3Npb25NYXRjaGVkIjowLCJkZXRlY3RMb2NhbFN0b3JhZ2UiOjAsIm5vUGx1Z2luc1ByZXNlbnQiOjAsIm1pc3NpbmdXZWJSVEMiOjAsIm1pc3NpbmdBdWRpb1ZpZGVvIjowLCJtaXNzaW5nQ2FudmFzIjowLCJtb3VzZU1vdmVTY29yZSI6MCwiY2VudGVyZWRDbGlja1BlcmNlbnRhZ2UiOjAsInNjcm9sbFN1c3BpY2lvdXNTY29yZSI6MH19\",\"sentTimestamp\":1767565306636}"}},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 04 Jan 2026 22:21:46 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w9%2BSFuvvWIClgyFk9%2BIoE7CsP0rguMIBopvYnia0mIqR%2FcjwL74CJ8moGc2kvjZh9sWY47DSulNCEDOLg5mqJChbNInlhJ13Svid\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8e217f4f4156bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":42,"dns":19,"connect":3,"send":0,"wait":156,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/include/securimage_show.php?sid=3ba1d8f06e805ec4ae9388b0eff03c53","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /include/securimage_show.php?sid=3ba1d8f06e805ec4ae9388b0eff03c53 HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/play.php?vid=a50d4760e\r\nCookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; watched_video_list=NTM3MQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncontent-type: image/png\r\nexpires: Mon, 26 Jul 1997 05:00:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\nx-nginx-upstream-cache-status: BYPASS\r\nx-server-powered-by: Engintron\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QmYaipZBwNbUfTotMNl2SLGF6a%2Be0wzFvSWJyLg%2F%2BOr8ddQq2P0hQak9Hk23461PItoKBeVAY%2BcN2UjIPTgRZJurmt6J0ESHl1yp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8e21637d2b5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1531,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 158 x 35, 8-bit/color RGB, non-interlaced","md5":"30273f5ec64e72f33a6be8db4cd96a67","sha1":"dde4d9ff3140d268b66e8f210a320c281d79b24f","sha256":"da726e7fdeace512d8d8f96fed66f5c42b25825609f775ce1ae6cd7332b2949a","sha512":"185f3fa015830612dab8b2a782b3638d66eae265b0688344558a4a4ec1ed5dc996322d0d4cf4f6c595f8264bc714970807a7be0c79344e72f6355500e9cbba65","ssdeep":"","tlshash":"8731f9b3c61e504aa7ff92ae64fd884bc772540e720857be87394e57f1e48516408f2d","first_seen":"2026-01-04T22:22:26.101332Z","last_seen":"2026-01-04T22:22:26.101332Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/js/melody.dev.js","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /js/melody.dev.js HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/play.php?vid=a50d4760e\r\nCookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; watched_video_list=NTM3MQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 12 Nov 2025 23:32:52 GMT\r\nexpires: Tue, 03 Feb 2026 15:48:45 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 23577\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=krvHGuDVqoUDP7HpEQ3OP2ryRmgkD1D76VSSMW0zDJbOPSLI2H42nHQUCxPy0TSFHwJFH%2Bf70O9E6Pjd%2FYhB9qjynC%2FhjnjzKeuN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8e21637d325ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23108,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"e238acf58475d3cdb95d614582134b24","sha1":"b13c1da1f5254cb14f4f187bd5174ed0feb08a23","sha256":"f3a4cbf3a8090b121a0d6d6dd8feda9f92831cdb5a070a7eb9ef58234c1f4eab","sha512":"7209c4cb8692e5a1fce4c6bad8081361c857d45b179b935a7291b0682c514409584e10b29bb56905dafd5d3dc8831d82c78cf9895c7b59ac2239552f6abf1f2b","ssdeep":"384:krC7SV8zve0Nfenff87NLRld9gTSOW6VUH:krC7+860lRLRGTdK","tlshash":"f5a25405f2ed1e6600b334360cafa4853a3c99b798048d59fd5d21e85f6cb7ca972f4a","first_seen":"2023-03-07T12:12:06Z","last_seen":"2026-03-29T20:18:02.23372Z","times_seen":492,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/sweetalert/2.1.0/sweetalert.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strmup.cc/4b640ff298e0","date":"2026-01-04T22:21:43.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/sweetalert/2.1.0/sweetalert.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strmup.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 22:21:43 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 10495\r\ncf-ray: 9b8e216c7b0376ef-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ff8-9f62\"\r\nlast-modified: Mon, 04 May 2020 16:16:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1379639\r\nexpires: Fri, 25 Dec 2026 22:21:43 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LXY4aqa9Blzrz54JYPE2EKtqdcYgBE1SxKrkDrlgpuolshn%2FPirWiCChvBWTa5UMbSzVUwQoO1xp1LktgZLAa47OCZQpLfM%2B6%2BJBedyHU4b0QXYlzeRea3UB85nYxNuVIshB2ftg\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40802,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (40802), with no line terminators","md5":"fe0f18cd4d5f1d03dd247211c5667669","sha1":"99e239bbca743fe70220e684ebe98e57ffacd4e4","sha256":"15211e0be73438987ed05236dc4ce90962f7c46452427364446576505e66697b","sha512":"a2b27f39c521ae136483cc2036b7b9946714272863d49b28b7f4129d128a8abcbc92c1af0296c70446eaec06ccb134afe0b9e77d1dcd49a8c240516c1067bc8a","ssdeep":"384:/BLa4qL1li0jldLUuuRcdNU/CfFqLyX9ye1hAbj/i5Yy/kyyeu8pgUqaF2XSSHEj:ZLahUodNU/CNqWX9ye1hWz8+B3c2Bkj","tlshash":"b4031996758470a643e398f191ef020ef2359523b84798d5b361e8e88ff4e8d10a7f1b","first_seen":"2023-03-07T01:10:29Z","last_seen":"2026-04-03T14:27:23.500409Z","times_seen":920,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":21,"dns":1,"connect":1,"send":0,"wait":12,"receive":1,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=72c91de3-1139-44e4-8ca3-1dba481eb2cd\u0026eb=827a263eb28f23810b5c1b7200426bdc\u0026te=84a2a724eadce75bf316db7855135b3e\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=0a507188a69a9ebeee1fd7e27271db99\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=22","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:45.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 22:13:33 GMT","end":"Sat, 28 Mar 2026 22:13:32 GMT"},"fingerprint":{"sha1":"A3:08:82:4A:9A:ED:6E:4C:29:FC:10:0D:1D:8F:8B:68:0E:D0:49:72","sha256":"B4:01:36:5D:F9:70:75:BF:F6:56:67:76:BB:CC:A2:D3:BA:69:61:33:56:FC:C7:21:69:6E:04:BE:95:D7:B2:F5"}}},"request":{"raw":"GET /pxf.gif?uuid=72c91de3-1139-44e4-8ca3-1dba481eb2cd\u0026eb=827a263eb28f23810b5c1b7200426bdc\u0026te=84a2a724eadce75bf316db7855135b3e\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=0a507188a69a9ebeee1fd7e27271db99\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=22 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 04 Jan 2026 22:21:45 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 0\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 85723e35e7fcc81a7f312e0339fedf6a\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":675,"timings":{"blocked":284,"dns":1,"connect":93,"send":0,"wait":97,"receive":0,"ssl":196},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adsco.re/p","fqdn":"adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://strmup.cc/4b640ff298e0","date":"2026-01-04T22:21:47.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"POST /p HTTP/1.1\r\nHost: adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Length: 2824\r\nOrigin: https://strmup.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strmup.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 04 Jan 2026 22:21:47 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAS-P-1: OK lon123\r\nAS-P-2: OK\r\nAS-P-3: OK\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: no-transform\r\nAccept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR\r\nAccess-Control-Allow-Origin: https://strmup.cc\r\nAccess-Control-Allow-Credentials: true\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1170,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (1170), with no line terminators","md5":"844664dd5d869ded2794f6238a8c660e","sha1":"097dbfd9e8158791ac96a7f5cca3704f94c38c60","sha256":"bf290b66356415e7ee03a2dcc5d29f0f8fb21294e4c8970dd0c0af26aee2dd67","sha512":"ab4f817bb76df17537551d226d9aa8d07ef252765858d7cdd7484c4f5f76b6e5f801db1502b9f64b5c4b8b9128749c92a5e94bfd2749f19ac0dd737516ff2f2a","ssdeep":"","tlshash":"6521a7dab4e8e93367ebbccb9738b142c84646631c0563634518526dfc345d02e0d464","first_seen":"2026-01-04T22:22:26.104766Z","last_seen":"2026-01-04T22:22:26.104766Z","times_seen":1,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":85,"dns":1,"connect":26,"send":0,"wait":53,"receive":1,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3-hls2-cdn58.strmupcdn.com/hls/8BQgu7eXHqeZLtre3RxJFAXYf6ydgO/seg_1454x720_000.ts","fqdn":"s3-hls2-cdn58.strmupcdn.com","domain":"strmupcdn.com","tld":"com"},"ip":{"addr":"67.159.6.170","port":443,"asn":30058,"as":"FDCSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://strmup.cc/4b640ff298e0","date":"2026-01-04T22:21:47.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3-hls2-cdn58.strmupcdn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 17:33:08 GMT","end":"Mon, 02 Mar 2026 17:33:07 GMT"},"fingerprint":{"sha1":"69:BD:51:1A:04:3A:20:E8:5C:66:0D:B5:C0:31:BF:64:52:82:B3:2B","sha256":"53:C5:D0:91:1C:3F:B0:80:D0:75:F8:D7:6A:37:93:7E:BA:62:6B:58:B4:BA:A5:74:34:86:5E:55:4F:53:31:EC"}}},"request":{"raw":"GET /hls/8BQgu7eXHqeZLtre3RxJFAXYf6ydgO/seg_1454x720_000.ts HTTP/1.1\r\nHost: s3-hls2-cdn58.strmupcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://strmup.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strmup.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 22:21:47 GMT\r\ncontent-type: video/mp2t\r\ncontent-length: 2126468\r\nlast-modified: Sun, 04 Jan 2026 19:20:06 GMT\r\netag: \"695abd66-207284\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Range\r\naccess-control-expose-headers: Content-Length, Content-Range\r\nx-cache: HIT\r\ncache-control: public, max-age=259200, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2126468,"size_decoded":0,"mime_type":"video/mp2t","magic":"data","md5":"849a23feadae1a0d96ed3e0285a77e2a","sha1":"21902f27e762d68ce2c97b2f21c3c36238861bfe","sha256":"aa3bdba88402e55eba9296b978a431795ce3e70bfc03bda6ef69bd8d5a0e4b34","sha512":"e3d753455fc9c02e9a6590386ab7455364cb8d50e8e14481784a33a6d30f9de9091ef3a74c699a120e89a9c3bc06ccb775acf010441e5f522d5acec31af0b016","ssdeep":"24576:L5LJnl+Bb8YNLJWSukC3s8kFX/9yznD48EL7Cx3PCs47Anv5v+nXdv6tK:tLRlaHJWyss7FX1yrE8PCTUcNvH","tlshash":"7325120c17bc8ddae85ad0d10a9cebeb7961ac044f805f9e054b7b2dfcb42d6d8b1469","first_seen":"2026-01-04T22:22:26.106541Z","last_seen":"2026-01-04T22:22:26.106541Z","times_seen":1,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":156,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/play.php?vid=a50d4760e","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-04T22:21:41.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /play.php?vid=a50d4760e HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-frame-options: DENY, DENY\r\ncontent-security-policy: frame-ancestors 'none';, frame-ancestors 'none';\r\nset-cookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; path=/\nwatched_video_list=NTM3MQ%3D%3D; expires=Mon, 05-Jan-2026 22:21:42 GMT; Max-Age=86400; path=/\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\nx-nginx-upstream-cache-status: MISS\r\nx-server-powered-by: Engintron\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H%2F95kRfNywwz54ZT56GkgHBVl2ilNRe%2Bdh6xMExKHtM5TBG5VJgiRI80hohAX%2FE16cZZ4aM3XPi1g5JPN0PRw7vBAWuDeeHVOJSu\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b8e2160bc3535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"BootstrapCDN:3.2.0","description":"BootstrapCDN is a powerful and reliable Content Delivery Network (CDN) that delivers static resources, including CSS, JavaScript, and font files, for the widely-used Bootstrap framework. By leveraging multiple server locations worldwide, BootstrapCDN accelerates website loading times, ensuring a smooth and visually appealing user experience. Additionally, it ensures website compatibility with various devices and browsers. The service reduces bandwidth usage and server load, improving web performance for developers and end-users alike.","website":"https://www.bootstrapcdn.com/","common_platform_enumeration":"","icon":"BootstrapCDN.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Bootstrap:3.2.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:1.11.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery Migrate:1.2.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":65503,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (970), with CRLF, LF line terminators","md5":"5f50009de646a9d1740817da14e5a25b","sha1":"b8a58acb9e5e00f49669b60b75ad9668593bddca","sha256":"7ddca6b94e6fdd69433cb6e6ca04167fb09a28fdf001557b875eafc197a4964f","sha512":"da86a7a5da1213467368c1fc733ad26ab3229afd6d4ea794a2ce5255dd55170dac69913881375eac8aaf496fd65952ad224f8f9512314d44c583474e923873c4","ssdeep":"1536:Q5tDcQBmCsS2XViX75HBTnF0/AtSSn0keAllM2iL4MUe:Q5t+CspXVinTnF0/AtSSnflorUe","tlshash":"dc53f9b3a81d5d37011ba9d9a8767e0cd2ab843bdf23cc40f2ef455a07c3d92991b169","first_seen":"2026-01-04T22:22:26.10863Z","last_seen":"2026-01-04T22:22:26.10863Z","times_seen":1,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":93,"dns":64,"connect":3,"send":0,"wait":186,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-MJZHCJR7Q8","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strmup.cc/4b640ff298e0","date":"2026-01-04T22:21:43.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:40 GMT","end":"Wed, 25 Feb 2026 15:49:39 GMT"},"fingerprint":{"sha1":"A1:49:37:FE:E0:3E:26:88:A3:64:37:DC:04:D7:8D:D1:D3:F3:91:75","sha256":"BB:61:22:1A:6C:67:5D:C0:C8:A6:73:93:B9:53:82:98:95:54:B5:52:8B:33:FC:08:58:01:D2:3B:FF:E6:35:12"}}},"request":{"raw":"GET /gtag/js?id=G-MJZHCJR7Q8 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strmup.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 04 Jan 2026 22:21:43 GMT\r\nexpires: Sun, 04 Jan 2026 22:21:43 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143227\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":433411,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"d504b83907d67b76d4418b666ffd3f8d","sha1":"8772767af1dea2e750ef00ed17db09ae253025b5","sha256":"4df936439e1ef5e3df4a76154bd2d26fac03b1c5d2f6812447ec6865669ec197","sha512":"198b2b415cd4367da34ec3521fb9281bdbfebbd24bc14b597b243e93c1928b928f7a8c76ebddb4e2a33ffdd61c3000e23dc5f923ae384cd151bdc926ab05d44a","ssdeep":"6144:nlIe7ma2bulKY/1u99xHDmHYmyBFzvnsyRO6jJWoNPad4FpC1xY:2C8bu7/1mbrnsy39WbMpb","tlshash":"10941ace73c674269396e078503f118ba57b29e2b45cc896f189cce42d74a9a4237f7c","first_seen":"2026-01-04T22:22:26.109812Z","last_seen":"2026-01-04T22:22:26.109812Z","times_seen":1,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.36.2/jwplayer.core.controls.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.2.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strmup.cc/4b640ff298e0","date":"2026-01-04T22:21:45.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.36.2/jwplayer.core.controls.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strmup.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Thu, 12 Sep 2024 17:51:58 GMT\r\netag: \"96388c8374190b02b1c684940b0c267c\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 22:21:45 GMT\r\nage: 4702981\r\nx-served-by: cache-lga21985-LGA, cache-hel1410032-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 22, 6259\r\nx-timer: S1767565305.057226,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 80695\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":329500,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"96388c8374190b02b1c684940b0c267c","sha1":"c49462b6c0755a6be517da89213c6815a72658cb","sha256":"efd4bdf5c117754802f889555f4396867101f917ce259303d8171371e2903589","sha512":"6ab3adef3c69468d2645c352d6a902d9e6e409b1e88fa5c126b7928a546acd7f3f8ef29cf04ff017db5f1e24ad70a442484d7c5bfceb9b789a34bd0daae65c20","ssdeep":"3072:V+Y7nFuhslX/173uYqqIeGSJhoFjBkW64pOknUGp9W11Uy86C4YfrmYRJ:sYxAU/1732yGSJho9OaUG3xyl+frmYRJ","tlshash":"ee641932214252359aea82da66514604b3398085f516cfacff3ceddd4c6e9c731fabb4","first_seen":"2024-09-18T21:59:43Z","last_seen":"2026-04-02T13:08:45.490832Z","times_seen":584,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.36.2/googima.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.2.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strmup.cc/4b640ff298e0","date":"2026-01-04T22:21:45.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.36.2/googima.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strmup.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=86400, immutable\r\nlast-modified: Thu, 12 Sep 2024 17:52:03 GMT\r\netag: \"e326dffdd285561fe42061b115c81d05\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 22:21:45 GMT\r\nage: 52623\r\nx-served-by: cache-lga21958-LGA, cache-hel1410032-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 6, 54\r\nx-timer: S1767565305.051365,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 22142\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":78354,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e326dffdd285561fe42061b115c81d05","sha1":"7b5be6ed0aa57ca398fe44b5e343d23edf21b477","sha256":"fc91de238eebbd70ed2e63cf28a4f267ace01d38eb77cb04719de197ce8a6bd3","sha512":"08fbf336980ce3cb63a6a153648e646ee80dd646ba0829400abf832fbd79a1f47066dfe0773439c87861a8bf282e00a58626755bd366afd7c92d737cbf8498f4","ssdeep":"1536:j8shgCMQoN1vkzhFaJ/nyXqw86G+RnwNbpPWr7aEEI7wfTifTwRiwP0NZxY:IlkaJ/y6F6G+RnMbpU7aEEI7mTi0p","tlshash":"3e73d65732a8a43257d498eeb12442027339850f784bc76cf96cedef1d4e98772b6a70","first_seen":"2024-10-04T10:49:20.825367Z","last_seen":"2026-04-02T13:08:45.513031Z","times_seen":549,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/uploads/thumbs/b861fff79.jpg","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /uploads/thumbs/b861fff79.jpg HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/play.php?vid=a50d4760e\r\nCookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; watched_video_list=NTM3MQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 87003\r\nlast-modified: Thu, 11 Dec 2025 16:02:21 GMT\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-content-type-options: nosniff, nosniff\r\nexpires: Thu, 05 Mar 2026 16:09:37 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 22324\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QtPqRyP5CJxXBlvdcb8dgAPATK3SRVV%2FcCXA1tciAHMb83nITn2Xiks%2FqbldmE4sRAhXp624VqNBz%2BgQPAUR8sQSIHZ0y7QcKuNZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8e21637d275ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87003,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 1280x720, components 3","md5":"4bf142ca8279d58b7d9d9377e09c863a","sha1":"20387441ee5a4c4c4c5314c7cec5b53f2e55b3e0","sha256":"300bf8d2b9f9f611589b720ee4c54fdfb0824bfce790e865db0093977b7ca355","sha512":"3798de32001fa3e270eb040b38ecf0e1adc166e4d198f552c33dd045676039174f503a7461bd8aa480c1a3c465d51ea97cb0c238755cf1be9db94dbc953b2ac2","ssdeep":"1536:NiscqHebMDQFQ9ctlAWozGLfSaWDlCJ0W6Tp5zQtA0V+ulmyIkjvt5yDsrCGA17Q:LjHebGQxAPzOSahJ0WAMh7MyI0tEICGP","tlshash":"c583d01b8d084783a47997e5bc475e8c2f142f4ca9917aff21221eda7e708b15c4e0af","first_seen":"2026-01-04T22:22:26.113184Z","last_seen":"2026-01-04T22:22:26.113184Z","times_seen":1,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0ae7zwoezyki.l4.adsco.re/","fqdn":"0ae7zwoezyki.l4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"185.200.118.62","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://strmup.cc/4b640ff298e0","date":"2026-01-04T22:21:45.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.l4.adsco.re","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Nov 2025 09:14:30 GMT","end":"Wed, 11 Feb 2026 09:14:29 GMT"},"fingerprint":{"sha1":"44:4A:2D:C5:7F:AC:E8:4E:70:9B:91:5D:F6:AE:99:5F:66:18:51:46","sha256":"3B:1C:F2:20:1E:BC:6C:00:04:8F:3E:30:B9:AC:DE:26:B1:D4:73:CB:C2:6F:2F:F4:1C:E8:C4:A5:FD:38:8D:68"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 0ae7zwoezyki.l4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://strmup.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strmup.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 22:21:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Fri, 02 Jun 2023 14:03:32 GMT\r\netag: \"6479f6b4-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":332,"timings":{"blocked":150,"dns":70,"connect":25,"send":0,"wait":23,"receive":1,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/uploads/thumbs/2b7c69b42.jpg","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /uploads/thumbs/2b7c69b42.jpg HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/play.php?vid=a50d4760e\r\nCookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; watched_video_list=NTM3MQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 115351\r\nlast-modified: Wed, 12 Nov 2025 23:32:50 GMT\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-content-type-options: nosniff, nosniff\r\nexpires: Thu, 05 Mar 2026 16:09:11 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 22350\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kchWYM%2BHk1Y2ZWlUGe%2F26Xi9CTu88DeS9UWX4IdGKlY1ztC%2FO6PKeuDrVF%2F%2BwkMHAis6gGVkvOno2r3NLv8QrQXzkqms%2FfTp235h\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8e21634d125ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":115351,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 1280x720, components 3","md5":"bc424b8a824f5b01ae86ba0e0c905689","sha1":"4a4822b30c16e1dd78d6966fc8f37658dec769d4","sha256":"708bc1b14c5ac8e261b2ab4f8486799c9fbf158b92b99ea0f2706c9306c07dbb","sha512":"0927154b7640ec2666bad026896aabb61eb5d0891b12f84baf2ef178c61b6c0a3f25fb3bc3d7ca589a3f3a6d4bc11cc51892a9089fbbcee8ec12aa41a1bccf9d","ssdeep":"1536:NDcW3I80BX8xg38lqTN/7yVQwk4T1kvEThUUNESF02TayYRt3xuNeA0QVoPAbr:ZcgTQsxg3PTNOVQw/bGSLMRt3xUezcom","tlshash":"41b313ddec726609a7073fc3a1b81b7a405525447bde1bb5f22fb3a86c26a0739b4131","first_seen":"2026-01-04T22:22:26.114956Z","last_seen":"2026-01-04T22:22:26.114956Z","times_seen":1,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/templates/fushaar/js/jquery.readmore.js","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /templates/fushaar/js/jquery.readmore.js HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/play.php?vid=a50d4760e\r\nCookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; watched_video_list=NTM3MQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 12 Nov 2025 23:32:51 GMT\r\nexpires: Tue, 03 Feb 2026 15:48:45 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 23577\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fxxO4drjMstsY6H09ghsemAAfexYTIpYhJO0TrhJy%2BxwPAOqcwfeDiqrHjFYqZQssG92sGwwqXjZiy3GiK0edp%2B9T4e%2BX6LzOS6l\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8e21637d375ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":3430,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (531), with CRLF line terminators","md5":"081fe3d90aad9b9f11e4b1c0569530df","sha1":"ff566498ce6f25f4a3b28c0e2bb92b6b86fea6ed","sha256":"98e825583e6fb4f7e8a65f9063fb7ea2d34aee8f9aa480dfee285ea27f4fca02","sha512":"cf242d2562e01ce001f00b847c0855d090f3c2883ede50cb65298cad502e2ae1fa6648a16eab883bdac88e2cdbe0366f4dcad0967bf3cf0e02ef979bf7f2b2f7","ssdeep":"","tlshash":"ec61f169b323f642c4a720e2705f530a663bf128835580547777dae86f7c80e7863a7e","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-03-29T20:18:02.153633Z","times_seen":319,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"weirdopt.com/ad/advertisers.js","fqdn":"weirdopt.com","domain":"weirdopt.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:43.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"weirdopt.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 00:51:40 GMT","end":"Sun, 29 Mar 2026 00:51:39 GMT"},"fingerprint":{"sha1":"F3:CE:FF:C9:F8:70:23:18:40:13:70:96:1A:D1:FD:34:D3:CD:66:FC","sha256":"07:8C:A3:3F:1D:F1:E0:75:3D:26:20:F5:D5:75:64:CE:F7:40:6E:B7:BB:B9:EC:79:33:27:5F:51:2E:B0:12:E7"}}},"request":{"raw":"GET /ad/advertisers.js HTTP/1.1\r\nHost: weirdopt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 04 Jan 2026 22:21:43 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 0\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 17250133df614fc3c5d7309243e05cb3\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":59,"dns":3,"connect":19,"send":0,"wait":19,"receive":1,"ssl":41},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.36.2/jwplayer.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.2.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strmup.cc/4b640ff298e0","date":"2026-01-04T22:21:43.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.36.2/jwplayer.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strmup.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Thu, 12 Sep 2024 17:51:59 GMT\r\netag: \"5454f51ab2c9ba10955938c3458ef45d\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 22:21:43 GMT\r\nage: 3853151\r\nx-served-by: cache-lga21958-LGA, cache-hel1410032-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 3, 5350\r\nx-timer: S1767565304.885749,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 50436\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":148627,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65144)","md5":"5454f51ab2c9ba10955938c3458ef45d","sha1":"207795d527b8205d07fecb668a2d3a150db56f9f","sha256":"ee28fb495ac5b28ae38033e36a640d41dfeb2528c5124ff0203b09b06c05a36d","sha512":"4b4e4358522d6cec1e32343e5c219658535fdf01ab5805d6d9f7a0d98e94eaba4a69c0c5862ca7bf0985367b48287e071617b81f62c43c35b97f4a3ee1cb4124","ssdeep":"1536:VCLyl/ByE1iqx9JaGB2lAqU6ePRtwoIWz0Bk+5VH3wen+LhUi3LhflsqKkcRPUeV:VVbpk+Ui3LhddhHwSy","tlshash":"a3e33aa631c2f4a617e264c7e47a4101f1790988744de864faacecda3916947b1b3ffc","first_seen":"2024-09-28T01:51:51Z","last_seen":"2026-04-02T13:08:45.491402Z","times_seen":546,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":135,"dns":39,"connect":28,"send":0,"wait":27,"receive":30,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:400,300,500,700|Noticia+Text:400,400italic,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"43:D3:3F:93:6C:4F:F7:67:58:9D:D5:48:20:4C:74:A2:69:DB:13:9F","sha256":"8C:DB:D2:85:E1:AB:12:7B:1D:5A:65:A7:EC:22:67:6F:B3:A6:65:01:28:29:FA:D2:3B:01:8D:10:7E:4D:09:52"}}},"request":{"raw":"GET /css?family=Roboto:400,300,500,700|Noticia+Text:400,400italic,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 04 Jan 2026 22:21:42 GMT\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25205,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"76282e95e9c97c6bad47db0af3a35875","sha1":"54ad4f6355d59e67ec0202e5f788d528fb8172e6","sha256":"64ec85737c3d09ed30c1426a902d6d108c6da143aecf6ebecfb4acb8f2e63579","sha512":"94ec20737705ce9a61e35583c6abf38356bcfa3d9ea024e1cfd2bf6f85d33ab08e4c145cf449e2e0c3d9d2dc5973784cfbc9fecf655b0fd90c5405bebf1aa21b","ssdeep":"768:b8XguBSivFRa1KRzBfiiMgFK1GIBEiNnr7gr8yBOijh1X:QJiWp","tlshash":"c6b21ca1041b540097834ce223cebe31fe4f92507042d0b5ebfdab6baddbd66526936d","first_seen":"2025-11-25T21:26:44.056624Z","last_seen":"2026-02-19T18:07:29.807994Z","times_seen":74,"resource_available":false,"data":null}},"time_used":810,"timings":{"blocked":361,"dns":1,"connect":40,"send":0,"wait":46,"receive":0,"ssl":355},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/uploads/thumbs/a1cab0d12.jpg","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /uploads/thumbs/a1cab0d12.jpg HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/play.php?vid=a50d4760e\r\nCookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; watched_video_list=NTM3MQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 80102\r\nlast-modified: Wed, 12 Nov 2025 23:32:51 GMT\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-content-type-options: nosniff, nosniff\r\nexpires: Thu, 05 Mar 2026 16:09:37 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 22324\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KDrGlumMf590XmupDaYzKK2fJ5FeZ8t2gGvLN0sRUEj%2FqKqWG8HPJh93yPBrIFfFMzjfizaf2hrVAavKVN1dVvVTgg8KAUBb6h3p\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8e21634d135ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":80102,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 1280x720, components 3","md5":"4f87144504af838422dda385dccbef68","sha1":"e3cb7d047cecd76f3e2e648e2ef5ae3d4a7ea6b3","sha256":"acd9fe82bedf3c8ca0301d2f1b289e0dad5a947a5fe8f3a2703751dc337ab51a","sha512":"c3de4d743731e8a502a0bf03a4b53af84d9beb66b9e8a5c0e2c6b89f6de9b1b45bb9f5d28cc18608f46e9721f51f2afd40657a1f7c410e2a4fefd60d76fa031b","ssdeep":"1536:Np6SPxIZl5EY/5Wyl4rF0LJ51GprIwesr0uPMWt3qP4R7Yhw:j6SPxI5WuNphqqm7F","tlshash":"5c7312de0037d0778a0f921ceae62e8c54203afe7c5c3afe76045d788556dba9d09a31","first_seen":"2026-01-04T22:22:26.117871Z","last_seen":"2026-01-04T22:22:26.117871Z","times_seen":1,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/uploads/thumbs/957b9d86d.jpg","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /uploads/thumbs/957b9d86d.jpg HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/play.php?vid=a50d4760e\r\nCookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; watched_video_list=NTM3MQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 110311\r\nlast-modified: Wed, 12 Nov 2025 23:32:50 GMT\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-content-type-options: nosniff, nosniff\r\nexpires: Thu, 05 Mar 2026 16:09:11 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 22350\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NWjCexi1f8SW8ikw5qr2z5IoW9ENtF2EuiLPeQ%2FSz35KuomCDJtkEREveayEg8d2zG75M7ec7x1gDmlxLzsIYJWZgED%2FPEeh5sWt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8e21636d205ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110311,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 1280x720, components 3","md5":"877a63c499b3593f9926ff17e03e7b4a","sha1":"ad28ae5f74f4112c3a76fa653abebf6ba7e7138e","sha256":"e5874ecbd949f08167e1785d6ea1891da7bee7c6e71d62ca6b4002fd30c21318","sha512":"f227c3288b7a10fd27c51062c14268abe3daff0a47d03663df617916df6fcb094160879453626f2342df23864236257b02ed4162d7da42c8215f406b264e9f61","ssdeep":"3072:9yurQuOdg/chADJa8PJzCbG/6E5m7IqxT:9LQuOd8cCDh5m7Iq1","tlshash":"a4b312839ade60f0c117c77fb2ed910d4a66b7394932d9e699b084f11801e9ed21f9b2","first_seen":"2026-01-04T22:22:26.119392Z","last_seen":"2026-01-04T22:22:26.119392Z","times_seen":1,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:43.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 23:36:36 GMT","end":"Sat, 28 Mar 2026 23:36:35 GMT"},"fingerprint":{"sha1":"0E:EE:1D:ED:80:5A:CA:0C:1E:93:89:94:78:B7:34:91:38:D4:89:51","sha256":"CF:77:1B:FB:04:67:32:02:DF:D9:38:24:27:3D:A5:98:54:0C:4D:BA:C5:1B:62:FD:C1:E1:17:57:6F:63:B3:BF"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 04 Jan 2026 22:21:43 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e4413548e42aa4fa0130576d37f648fd\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-04-03T19:33:07.084004Z","times_seen":13131,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":70,"dns":0,"connect":17,"send":0,"wait":21,"receive":18,"ssl":55},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strmup.cc/4b640ff298e0","fqdn":"strmup.cc","domain":"strmup.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://strmup.cc/4b640ff298e0","date":"2026-01-04T22:21:44.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strmup.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 05:44:19 GMT","end":"Wed, 11 Feb 2026 06:42:55 GMT"},"fingerprint":{"sha1":"06:BD:96:6E:78:F9:FF:CC:F8:63:8C:1D:02:E5:4A:41:3A:43:92:EA","sha256":"AF:8E:C1:77:34:2E:CF:95:49:BD:A5:67:A5:B0:C2:E6:5C:84:F5:EA:8A:55:B6:B5:14:E2:11:DF:19:F6:18:AB"}}},"request":{"raw":"HEAD /4b640ff298e0 HTTP/1.1\r\nHost: strmup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strmup.cc/4b640ff298e0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 22:21:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=3u7rv06m5vp2dojk696nd87mi4; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1yLK3fQ%2FizWG7CWcHGVbURvFux%2Fwheg4ngIGuHa7cSpg48ONoRHc274h0jTMZSmV%2Fp3n7lGgjuN9NMj0GxNi%2FHShmEHIRecrlw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b8e2170b82d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":557,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":556,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/templates/fushaar/css/echo.rtl.css","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /templates/fushaar/css/echo.rtl.css HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/play.php?vid=a50d4760e\r\nCookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; watched_video_list=NTM3MQ%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 12 Nov 2025 23:32:51 GMT\r\nexpires: Tue, 03 Feb 2026 15:48:44 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 23577\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AJQU3%2BfUpEjJHcXvL%2BqIOKR7Qvy9pNAJr9w%2B%2FkvoHL9sfcVZjfmsap4GWRS6rpeiemGJVZhtSV6LaYrxzIPQTGwnp2Fe1XJPIC63\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8e21633d0a5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":22855,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF, LF line terminators","md5":"133de044f542e50c4a5eae2799e148ac","sha1":"c028504cf9a957ca86d7f1a06371fdc085deaace","sha256":"e64aa5acc7482eb1a727ee2962407ce824e6f3cb5e22ceda2f27a0dd72072743","sha512":"5f0ef6b93bc8d1aef4f02a13f18aa3d35794aca3e99eb4ba8b1c99ea091e5c7f4789277562b2f4152c960486cccd09a407e0043093267f9d6d215f693519c124","ssdeep":"192:lUY0e3kfSH7h4Rli4Umjqq6+ndCng6TZoVN+nPIqAeK:K1ibq6+ngpT6+da","tlshash":"d6a2f166fe5060872432cf78e262ccd3eb5600d3c40657b9bf9ec1549b6a68c172df9a","first_seen":"2023-04-07T18:47:56Z","last_seen":"2026-03-29T20:18:02.130184Z","times_seen":183,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/uploads/thumbs/61693e223.jpg","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /uploads/thumbs/61693e223.jpg HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/play.php?vid=a50d4760e\r\nCookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; watched_video_list=NTM3MQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 97137\r\nlast-modified: Mon, 08 Dec 2025 22:33:03 GMT\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-content-type-options: nosniff, nosniff\r\nexpires: Thu, 05 Mar 2026 16:09:11 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 22350\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QdRGjxWZuJSt9A8eYJWiP2umDvDxy4dWNCGAGIO6xT6HgWPbrUtiCdZMpnj6nXy0HbhbEkziWM5zbLdJkjmGUcKCVsXEa20csa4K\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8e21636d1f5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97137,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 1280x720, components 3","md5":"b32942c36967d2cb471fa5881bddcb0e","sha1":"e6d2a699e0b55562cabdf8ec784ebefa8044071f","sha256":"b0ad1301f7f335918fc56b143f259f468a3af0125027e3e71e23cd425f440dc3","sha512":"4b1c585187340a839441c5c2f7ce2415552ce112a3e034f81db2deffd1d3859a4c68edbec775aa57a213caf7965748b11f8a9c7c8bf7a0c645920efbdafa3def","ssdeep":"1536:NMXNYO3c/np/tYEeuXSQcWxYnoxFlAuaPGAyFhupoU+E2+kt7477M+p6rKiMQOBw:8e/fp/tqmZcaHfApl+uoU+E27VY6rK7Y","tlshash":"8893029ba1447a35931167fcaa512bb3d844039d91e53af3c69e10f83537db3db088ea","first_seen":"2026-01-04T22:22:26.123051Z","last_seen":"2026-01-04T22:22:26.123051Z","times_seen":1,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re:2087/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":2087,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://strmup.cc/4b640ff298e0","date":"2026-01-04T22:21:45.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://strmup.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strmup.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 04 Jan 2026 22:21:45 GMT\r\nContent-Type: text/plain;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type\r\nAccess-Control-Allow-Origin: https://strmup.cc\r\nAccess-Control-Expose-Headers: *\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: private, max-age=300, immutable, stale-if-error=300, stale-while-revalidate=300\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":85,"dns":1,"connect":28,"send":0,"wait":30,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netdna.bootstrapcdn.com/font-awesome/4.4.0/css/font-awesome.min.css","fqdn":"netdna.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 04:05:50 GMT","end":"Thu, 05 Feb 2026 05:05:47 GMT"},"fingerprint":{"sha1":"CE:AE:8E:FE:2A:86:03:2B:16:43:FF:98:36:53:B2:ED:10:BF:FD:23","sha256":"95:CB:A8:7B:9C:88:98:F1:EF:D6:C9:79:E1:98:63:76:71:B7:BD:E2:89:6D:CD:55:61:DB:C0:4E:B1:1E:67:F7"}}},"request":{"raw":"GET /font-awesome/4.4.0/css/font-awesome.min.css HTTP/1.1\r\nHost: netdna.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: 9b8e2163aed40883-OSL\r\ncdn-pullzone: 252412\r\ncdn-uid: b1941f61-b576-4f40-80de-5677acb38f74\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"0831cba6a670e405168b84aa20798347\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:54 GMT\r\ncdn-cachedat: 02/22/2025 16:50:44\r\ncdn-proxyver: 1.19\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1047\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 42e3c4a62d8856e8d46263b832aab469\r\ncdn-cache: HIT\r\nage: 2639434\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26711,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (26548)","md5":"0831cba6a670e405168b84aa20798347","sha1":"05ea25bc9b3ac48993e1fee322d3bc94b49a6e22","sha256":"936ffccdc35bc55221e669d0e76034af76ba8c080c1b1149144dbbd3b5311829","sha512":"655f4a6b01b62de824c29de7025c4b21516e7536ae5ae0690b5d2e11a7cc1d82f449aaebcf903b1bbf645e1e7ee7ec28c50e47339e7d5d7d94663309dfa5a996","ssdeep":"384:/i5yWeTUKW+KlkJ5de2UYmydfwYUas8l8yQ/7:klr+Klk3YlKfwYUf8l8yQ/7","tlshash":"5ec240e8e54c01d66731c48bff85b36862b6f73dd5804da9f01f690c29d22a522c5fba","first_seen":"2023-04-05T03:42:18Z","last_seen":"2026-04-03T19:06:16.579577Z","times_seen":15988,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":23,"dns":1,"connect":1,"send":0,"wait":20,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netdna.bootstrapcdn.com/bootstrap/3.2.0/js/bootstrap.min.js","fqdn":"netdna.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 04:05:50 GMT","end":"Thu, 05 Feb 2026 05:05:47 GMT"},"fingerprint":{"sha1":"CE:AE:8E:FE:2A:86:03:2B:16:43:FF:98:36:53:B2:ED:10:BF:FD:23","sha256":"95:CB:A8:7B:9C:88:98:F1:EF:D6:C9:79:E1:98:63:76:71:B7:BD:E2:89:6D:CD:55:61:DB:C0:4E:B1:1E:67:F7"}}},"request":{"raw":"GET /bootstrap/3.2.0/js/bootstrap.min.js HTTP/1.1\r\nHost: netdna.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncf-ray: 9b8e2163ef8f0883-OSL\r\ncdn-pullzone: 252412\r\ncdn-uid: b1941f61-b576-4f40-80de-5677acb38f74\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"abda843684d022f3bc22bc83927fe05f\"\r\nlast-modified: Mon, 25 Jan 2021 22:03:57 GMT\r\ncdn-cachedat: 04/15/2025 20:24:26\r\ncdn-proxyver: 1.23\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1055\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 2fa5e87e316d7b7ab6b76631d1291de7\r\ncdn-cache: HIT\r\ncf-cache-status: HIT\r\nage: 1454346\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31819,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (31650)","md5":"abda843684d022f3bc22bc83927fe05f","sha1":"26908395e7a9a4eab607d80aa50a81d65f3017cb","sha256":"24cc29533598f962823c4229bc280487646a27a42a95257c31de1b9b18f3710f","sha512":"3f1b46e9ea0fb6be507605a2783af406c6b4f885dedaa4401bff204b0fe9056656717411021594e2512e98a4e398e3238267a7deafeba1b57e443decab0477ea","ssdeep":"768:xoBFw1wl+WRydWDRQgn8WI0fBQLrX84XCqc:SAr2MRCqc","tlshash":"43e28446b23031a107dfb2e5515f020b723a6a6de906907c38b999f53db9c48727bf39","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-04-03T18:23:32.936183Z","times_seen":7129,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":28,"dns":10,"connect":2,"send":0,"wait":18,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/sdkloader/ima3.js","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strmup.cc/4b640ff298e0","date":"2026-01-04T22:21:43.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /js/sdkloader/ima3.js HTTP/1.1\r\nHost: imasdk.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strmup.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ndate: Sun, 04 Jan 2026 22:21:44 GMT\r\nexpires: Sun, 04 Jan 2026 22:21:44 GMT\r\ncache-control: private, max-age=900, stale-while-revalidate=3600\r\ncontent-type: text/javascript; charset=UTF-8\r\netag: 10418750025349912411\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\nserver: cafe\r\ncontent-length: 145456\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":461806,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2831)","md5":"e8fbc3c7ee8b75cb4c02aca63b6858f2","sha1":"c7590ff9a1c7712216e8d12f7361d9fc3e9162f9","sha256":"18dcd8914407bda94e1ff0d00dc953f949fd72c5c6a56a5092a944a2fc1c112b","sha512":"24d8272eee013d2db32946fc758c68419f3b7656b53aae6535db73db7ca3d51c6b9bcbc6fda9d38d47f69d2b8fc60e8a9902e6a6c3513da40411a553f7a79e68","ssdeep":"6144:gz2SPdwdFdGlWgZzvfKyBMbvvNeQT2lorPyV:MZrHBK3NxyorPyV","tlshash":"b8a4facdb6a674669363f4b5403f014bb23ba866f408886cb649d9e27e7480d4277f7c","first_seen":"2026-01-04T22:22:26.126451Z","last_seen":"2026-01-04T22:22:26.126451Z","times_seen":1,"resource_available":true,"data":null}},"time_used":583,"timings":{"blocked":244,"dns":42,"connect":8,"send":0,"wait":39,"receive":22,"ssl":224},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b7510.com/5/10304134/?oo=1\u0026js_build=iclick-v1.1670.0\u0026userId=0802b438b9544621ee061088ecc12e78\u0026dmn=bvtpk.com\u0026tt=2\u0026ix=0","fqdn":"b7510.com","domain":"b7510.com","tld":"com"},"ip":{"addr":"139.45.197.115","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:44.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b7510.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Oct 2025 05:16:54 GMT","end":"Mon, 19 Jan 2026 05:16:53 GMT"},"fingerprint":{"sha1":"D4:41:24:3C:CF:C7:8C:56:F0:95:50:DF:63:59:AA:07:08:41:B7:48","sha256":"DF:09:31:9E:FB:30:04:94:33:7D:77:61:1E:14:8B:26:7D:32:A7:F7:3C:CC:ED:BD:06:FE:FC:B9:E7:52:70:5E"}}},"request":{"raw":"POST /5/10304134/?oo=1\u0026js_build=iclick-v1.1670.0\u0026userId=0802b438b9544621ee061088ecc12e78\u0026dmn=bvtpk.com\u0026tt=2\u0026ix=0 HTTP/1.1\r\nHost: b7510.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3422\r\nOrigin: https://fushaar.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3422,"data":"{\"sync\":\"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\",\"async\":\"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\",\"quality_options\":{\"hil\":1,\"jsp\":1,\"ng\":false,\"ix\":false,\"pt\":false,\"np\":false,\"nw\":true,\"nb\":true,\"sw\":1280,\"sh\":1024,\"pl\":\"https://fushaar.lol/play.php?vid=a50d4760e\",\"wy\":0,\"wx\":0,\"ww\":1280,\"wh\":1024,\"cw\":1280,\"wiw\":1280,\"wih\":1024,\"wfc\":2,\"sah\":1024,\"navlng\":\"en-US\",\"drf\":\"\",\"wgl\":\"llvmpipe\",\"tb\":false,\"btz\":\"UTC\",\"bto\":0,\"pnt\":0,\"pnrc\":0,\"bml\":0,\"bmi\":false,\"vsbl\":true},\"client_hints\":{}}"}},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 22:21:44 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://fushaar.lol\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\npragma: no-cache, no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":99,"dns":2,"connect":31,"send":0,"wait":28,"receive":1,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.36.2/provider.hlsjs.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.2.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strmup.cc/4b640ff298e0","date":"2026-01-04T22:21:45.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.36.2/provider.hlsjs.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strmup.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Thu, 12 Sep 2024 17:52:00 GMT\r\netag: \"283d59c375ad57728e89bd2fd1b6af1d\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 22:21:45 GMT\r\nage: 3911912\r\nx-served-by: cache-lga21989-LGA, cache-hel1410032-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 22, 6440\r\nx-timer: S1767565305.059136,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 128674\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":461432,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"283d59c375ad57728e89bd2fd1b6af1d","sha1":"1ae8e4b8bf7141cecc15442f9d83dc10a066fcdb","sha256":"423fb0c266f4a755fb3e2d9093f92b92a7e9bfe4c0c4a900b4342c5b9f6ea0cb","sha512":"fe8272ea849648c625e7810dd76a9ffec8d9877cf63f0c9a2bb18ba7feec6c97f559bbbfe51324a68039ca3b1bd06802124af02e833ced161128555d17434486","ssdeep":"6144:h49gZtOST1zXBUkGHZu08Q9Eu969j3/nqJxgEMmew9rrqIZk6:Gy1VGHZu0pU9TqJxgEXZF","tlshash":"2ea43bdd77a5a02642c2a1a5903f4607633b7d0a740dc1acfa2be9d75db8849b03bf74","first_seen":"2024-09-18T21:59:43Z","last_seen":"2026-04-02T13:08:45.484612Z","times_seen":582,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/templates/fushaar/css/bootstrap.min.css","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /templates/fushaar/css/bootstrap.min.css HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/play.php?vid=a50d4760e\r\nCookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; watched_video_list=NTM3MQ%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 12 Nov 2025 23:32:51 GMT\r\nexpires: Tue, 03 Feb 2026 15:48:44 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 23577\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hCLfLwQhvUhdlqaQ%2F7ASdAirKDbEaGKsgSZGcvGB6xsNibvXf9sG8g3oYBfpzXqKfsuusR%2BrhdB%2FMtakWCmUuQ8R2i8wowfALS99\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8e21632d035ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121253,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65360), with CRLF line terminators","md5":"057c5534becfdb2d50350cbacfb8fa8c","sha1":"aee8eea23cc9ade1f7e3de672f57a9f79e9e1516","sha256":"00cce1553100d450fad1142957e5a2c793a1c5ba7877f5a119c704eb6acc1313","sha512":"f705ef7a7222f0348bb70dc451afa475dfe8f53d3f2d1908524789f7cade4fe6e425b1689c47e7155db535e20008a36349a974c7ce161188017df032c35ca033","ssdeep":"768:m5Gxw/jc/+WlJxtQ8IuiHlsLmzI4X8OAduFKbv2ctg2Bd8JP7ec8VvH1F1:Jw/oXBIuiHlsLmN8lDbNmPbW","tlshash":"c0c3c7a0f21031ea7333c55a75d0ed872219a153e66a4fb7f22f25d88f845ca1673f1a","first_seen":"2023-04-07T18:47:56Z","last_seen":"2026-03-29T20:18:02.202168Z","times_seen":225,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/include/securimage_show.php?sid=386332c82dac796b05f57fd2bb1f7671","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /include/securimage_show.php?sid=386332c82dac796b05f57fd2bb1f7671 HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/play.php?vid=a50d4760e\r\nCookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; watched_video_list=NTM3MQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncontent-type: image/png\r\nexpires: Mon, 26 Jul 1997 05:00:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\nx-nginx-upstream-cache-status: BYPASS\r\nx-server-powered-by: Engintron\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4%2BorpfEPHaBHbffdn83hYNv5jIZP8%2FvqBF22vjJHD%2B0GgU1LrAAbw8ugeZZLarQJes7pMGYhlmWiWZYVoG%2BdHnEaXhKv8WH0H09k\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8e21634d145ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":1548,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 158 x 35, 8-bit/color RGB, non-interlaced","md5":"45bbebdf7d65b1dce1cb3dcbf2fe0766","sha1":"a56528c594987a320258e064244d9b3a8d75ce7b","sha256":"814a892e898ca290663a6073b325bba020f15d3d8f635b05e1a3200546d8cf28","sha512":"865d54693b3f8aa90992282ec7890b46e5896c46fd8d987c870c6ab131a11346fbbfcdf77cc759d10d2a170e03dc6cf0a144d32fef9e1c002cda953f1879346d","ssdeep":"","tlshash":"5131da5f7815d6d971482ce6ccb600d78912bc9f26f36909bbc155852f433402b57b88","first_seen":"2026-01-04T22:22:26.13049Z","last_seen":"2026-01-04T22:22:26.13049Z","times_seen":1,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/favicons/favicon-16x16.png","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:43.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /favicons/favicon-16x16.png HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/play.php?vid=a50d4760e\r\nCookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; watched_video_list=NTM3MQ%3D%3D; _ga_7K5TWT1S74=GS2.1.s1767565303$o1$g0$t1767565303$j60$l0$h0; _ga=GA1.1.724187975.1767565303; dom3ic8zudi28v8lr6fgphwffqoz0j6c=72c91de3-1139-44e4-8ca3-1dba481eb2cd%3A1%3A1; pp_main_0a507188a69a9ebeee1fd7e27271db99=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 1017\r\nlast-modified: Wed, 12 Nov 2025 23:32:51 GMT\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-content-type-options: nosniff, nosniff\r\nexpires: Thu, 05 Mar 2026 17:25:17 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 17785\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g9D80aHDzfexh1sgccMXqrWBJwZeCxQqrIGnmIzoEWHLom%2BcEPUB74kBy7QDmxzwM4z5y2oYEEuGbXJbF%2FBr%2BOZMVrOZ5dJmV8WW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8e216c0f545ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1017,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"2f9e3795889ec567bbb1124b6b1f73c8","sha1":"1587f8e10111dda099a9453850224807334ec44b","sha256":"c994effa2226581104a4963c1c0ced8b6009e06a8ac49b4cdb09ce1c84443a65","sha512":"f66166f1d05d9592e8ac696529dcee357e999be34d135e28a1131e61bb3723f8a58704976156fd66386ea4568476b2713dd1f9ab119a63b8ac234bf887850011","ssdeep":"","tlshash":"fe11d8f401808972ad13a23f482e8310a4db1bd817d5e080597675cdc1c63d93ae2ab3","first_seen":"2023-05-02T11:02:06Z","last_seen":"2026-03-29T20:18:02.124338Z","times_seen":190,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/hls.js@latest","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strmup.cc/4b640ff298e0","date":"2026-01-04T22:21:43.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/hls.js@latest HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strmup.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 1.6.15\r\nx-jsd-version-type: version\r\netag: W/\"844ae-XHEIsdDuVq9cn8TPGBJJmMABdjI\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 22:21:43 GMT\r\nage: 36308\r\nx-served-by: cache-fra-eddf8230058-FRA, cache-hel1410026-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 162728\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":541870,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"69991b6ecc5d57cf73bad5b3a1296058","sha1":"5c7108b1d0ee56af5c9fc4cf18124998c0017632","sha256":"413a83e2bb0c77ed0bf0be105d539d17ef45dfd984a0b13ecd3b14a901383938","sha512":"09256a7386bbb67fad8b30cdb7e783a159f67d7600c0c0e908baf01a55ab3a4b4d7d943d829e1d28a49c12531e465ac889f865897b346b4e812da52098c94253","ssdeep":"6144:ax52zYCo5VplapfQn4RzVt2tFPR5Szfmm6faVqKxh7U4StP1BHTO1OMAt2TMQxIu:a959aB7RzT2tF4lVqKxKld24Q9","tlshash":"35b429ed36a5a01643c2b169903f5507633a7d0a284cc12cfa2be9d72d7994db13bf74","first_seen":"2025-11-19T18:04:40.578466Z","last_seen":"2026-04-03T19:27:44.883265Z","times_seen":1353,"resource_available":true,"data":null}},"time_used":380,"timings":{"blocked":134,"dns":39,"connect":29,"send":0,"wait":27,"receive":64,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/include/securimage_show.php?sid=db806e27405951decfcb515e4599776c","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /include/securimage_show.php?sid=db806e27405951decfcb515e4599776c HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/play.php?vid=a50d4760e\r\nCookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; watched_video_list=NTM3MQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncontent-type: image/png\r\nexpires: Mon, 26 Jul 1997 05:00:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\nx-nginx-upstream-cache-status: BYPASS\r\nx-server-powered-by: Engintron\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cDkaeqQI0RYMUa%2B7riej3blMeSCw4n4SONURl1zhYHwc8nOzDeC%2BzsFEUvdjneEdRmCnfxWvJmipkQjT7UUY8BJg73YeYs6vs8n%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8e21637d2d5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1725,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 158 x 35, 8-bit/color RGB, non-interlaced","md5":"95c1f0ca317b56b1346e8dd61141fae4","sha1":"5a99090f8b0ddd9be91aa7cf1c273ca02b3f2b4b","sha256":"2016af9cea0ea7953641b8422dc073acf83cea75b5460798376027a02a1d05e7","sha512":"65449bbebd13439d5a8efe2333dfb48e8abe674877fd31889187a1c62a7b534af0c117fa9de7e6df00060672c12af15fcc9d5395374fdbd09d81cfb5897eb3b6","ssdeep":"","tlshash":"55311ad34f311821867a606379e671e1fafd0dea091231aae2b5a9f7cba611230c3411","first_seen":"2026-01-04T22:22:26.134047Z","last_seen":"2026-01-04T22:22:26.134047Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"netdna.bootstrapcdn.com/font-awesome/4.4.0/fonts/fontawesome-webfont.woff2?v=4.4.0","fqdn":"netdna.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 04:05:50 GMT","end":"Thu, 05 Feb 2026 05:05:47 GMT"},"fingerprint":{"sha1":"CE:AE:8E:FE:2A:86:03:2B:16:43:FF:98:36:53:B2:ED:10:BF:FD:23","sha256":"95:CB:A8:7B:9C:88:98:F1:EF:D6:C9:79:E1:98:63:76:71:B7:BD:E2:89:6D:CD:55:61:DB:C0:4E:B1:1E:67:F7"}}},"request":{"raw":"GET /font-awesome/4.4.0/fonts/fontawesome-webfont.woff2?v=4.4.0 HTTP/1.1\r\nHost: netdna.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fushaar.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netdna.bootstrapcdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 22:21:43 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 64464\r\ncf-ray: 9b8e2167cfd956bd-OSL\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\netag: \"4b5a84aaf1c9485e060c503a0ff8cadb\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:54 GMT\r\ncdn-cachedat: 08/24/2025 11:31:39\r\ncdn-proxyver: 1.34\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1054\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 9355911c3df102ea918295f0e75c9963\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nage: 50511\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64464,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 64464, version 4.262","md5":"4b5a84aaf1c9485e060c503a0ff8cadb","sha1":"574ea2698c03ae9477db2ea3baf460ee32f1a7ea","sha256":"3c4a1bb7ce3234407184f0d80cc4dec075e4ad616b44dcc5778e1cfb1bc24019","sha512":"05196036c41398616c077925fc4bf252e81f11b6ebef8745047d75cb2c8b80441b8c3593f4d5b2617089e9f3d8d957f9edcdf8e43993661a277be8f4b6a32111","ssdeep":"1536:wOhGmmMET1VwoQNDerkOtxhncPvaAAGzw9jD8RlhANsK1q:JhkhVINDerkO+aAAGA/aANX1q","tlshash":"a753f162a0233101d19918bb7d39ffe22b01c1cee34659c7dda62c5338e5d5472abe2e","first_seen":"2023-04-05T03:42:19Z","last_seen":"2026-04-03T19:46:36.551539Z","times_seen":19363,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":42,"dns":2,"connect":0,"send":0,"wait":13,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dr.groufsesquih.com/r9tUSU7Wz9sV/82239","fqdn":"dr.groufsesquih.com","domain":"groufsesquih.com","tld":"com"},"ip":{"addr":"188.42.241.221","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strmup.cc/4b640ff298e0","date":"2026-01-04T22:21:43.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dr.groufsesquih.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Dec 2025 20:05:55 GMT","end":"Sat, 14 Mar 2026 20:05:54 GMT"},"fingerprint":{"sha1":"37:F4:BD:05:A7:2B:C9:92:5D:F2:69:AC:2B:19:8A:BE:60:1C:0B:25","sha256":"4B:C3:28:10:32:95:A6:DC:43:42:5D:89:7A:E9:14:9D:83:8B:FB:9F:B3:0C:00:1F:54:DD:6E:9C:C2:62:3F:19"}}},"request":{"raw":"GET /r9tUSU7Wz9sV/82239 HTTP/1.1\r\nHost: dr.groufsesquih.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strmup.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 22:21:43 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://strmup.cc\r\naccess-control-allow-headers: content-type, gyfr29qt4j80vdr0zhsj, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\naccess-control-max-age: 600\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nset-cookie: GL_UI4=eJw9jc1OhDAcB%2FkGddnkl%2FAA%2BwgtUtKrF1%2FBI2npn7UKdFMqq28v8eBtDjOZKIqSpka8FyekX0rgwrnsZSdaybpRqlZr2feCaSEZb8U0CTzYbQhKzxQyVNuifBjCniHXXq2mRr44Q3ONUnt338g3KbJVLYTy1Xqa3PdhqA%2FnkfLn7mC7HhwzJG5r0nOF8s2u5ijPj0g4O5%2BKCE%2B3WYXJ%2BWWwpoiRX70yhPgF1agCXZ3%2FQWlo%2BwzuBrjZDP%2F%2B3zi9c4bC0G5HQu7CO%2FlfoWNCFg%3D%3D; expires=Mon, 05-Jan-2026 22:21:43 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJxjYGBgEuEXZMosEOSxNNSzNNAzMdIzNDURZEwXZPLzF2RKzhNk88svKk%2BsFGQsEmQyMBZkKsoT5PYvzslXcM4vzSsBiicLsoD4goyZgnxOOZkVCsH5OaUlmfl5xYJMQMzpnJiUk6rvEuwjyFjAxijIVJIPIotTRBgEGcvYJASZchJ5HHw%2Fv9qcvuAnkJPP46BavzE63G61IFNBsSCLgaGpIQCHOyne; expires=Mon, 05-Jan-2026 22:21:43 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-04-03T18:52:28.641166Z","times_seen":14758,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":134,"dns":81,"connect":23,"send":0,"wait":22,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"dr.groufsesquih.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0ae7zwoezyki.n4.adsco.re/","fqdn":"0ae7zwoezyki.n4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"38.132.109.126","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://strmup.cc/4b640ff298e0","date":"2026-01-04T22:21:45.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.n4.adsco.re","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Nov 2025 09:14:20 GMT","end":"Wed, 11 Feb 2026 09:14:19 GMT"},"fingerprint":{"sha1":"FB:34:12:01:B6:D1:B3:BD:9C:64:10:4B:29:6B:C7:44:FD:21:82:69","sha256":"D8:BD:52:A0:9E:11:2A:7E:51:D4:43:1D:9D:F7:F0:66:68:70:DF:0B:20:4A:38:60:4C:B5:37:82:2C:42:01:6B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 0ae7zwoezyki.n4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://strmup.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strmup.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 22:21:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Fri, 16 Jun 2023 08:37:42 GMT\r\netag: \"648c1f56-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":914,"timings":{"blocked":409,"dns":133,"connect":87,"send":0,"wait":88,"receive":1,"ssl":191},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/templates/fushaar/css/echo.css","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /templates/fushaar/css/echo.css HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/play.php?vid=a50d4760e\r\nCookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; watched_video_list=NTM3MQ%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 12 Nov 2025 23:32:51 GMT\r\nexpires: Tue, 03 Feb 2026 15:48:44 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 23577\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YFsL%2Bup%2BU0zvSFozOHcp1a%2F9D4YUvyqamXTFJ0yXvhNtYY5kHILUNZn4FgBiMgXGUQnSNMkXhrG%2BRzzIL2bXfqo%2BWaxHVOyBKCPE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8e21633d075ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":329217,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"5175cbf007fead7bec81e24198f815f9","sha1":"d6804f3e3615f054d3813cdaedf4f435577767ea","sha256":"e329cc12f92e9370d19d590d7f80dd86cb723b5d94bc5d62fcbcd5e8e960327d","sha512":"803443cf1ee2cf82c4a93e3b649f2aa013583c2715882a1b015b86aae0aecff1b0526185aeafb20deb7f0c3d54a93679e45df1893299039b2c7bfe95d52d71d1","ssdeep":"3072:J/MB8OfBMOdGj+eLdyiQYfBN0ucn4/ULcSLyygLdWxAnZm4T1hbtEhND2INcmeFO:J/MB8OfBMOLpT","tlshash":"55641d63ee5510021a33d3b5e7939665ff2c40a3c20245bdbade655c8fea58881adfcc","first_seen":"2023-05-09T02:55:09Z","last_seen":"2026-03-29T20:18:02.134463Z","times_seen":141,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/uploads/thumbs/c10ec3c1f.jpg","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /uploads/thumbs/c10ec3c1f.jpg HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/play.php?vid=a50d4760e\r\nCookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; watched_video_list=NTM3MQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 77183\r\nlast-modified: Wed, 12 Nov 2025 23:32:50 GMT\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-content-type-options: nosniff, nosniff\r\nexpires: Thu, 05 Mar 2026 16:09:11 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 22350\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l6POPYJt%2Fo6h3zfl0tPGMC0sNnRv7ErgNWDpjQ8IJceXkm2qywhUdPWAOYokNl%2FQfKapJ0MhnKSeZ7UwyCwNYY9w9WQPn9ghchVM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8e21636d215ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":77183,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 1280x720, components 3","md5":"4813505060faac268688bd6dd8e1384d","sha1":"ec7eaf996e9018acce1a591997904512723ba3d3","sha256":"fb174297f318be66b3c3a59e925b664819f9277aff42e964c5025f559f20f249","sha512":"3ee3b4a27a647ecac56e0e7cad3c47f9942b4d5c16d0537880b4091de72ab943fa0c84bff62050e999793de345bde55a9be2f5bd3fcaaf0059707f0960696162","ssdeep":"1536:NXkBKkmTQZYOF+4u5+oXXWWcYibM0G9QLM84xgLtIA/s:sQHU+4Ccq79Qg84OLGD","tlshash":"667302739ef916a257254638ef86355f67147a1c2adbb3fc0cb61ef2f8602f40809855","first_seen":"2026-01-04T22:22:26.138613Z","last_seen":"2026-01-04T22:22:26.138613Z","times_seen":1,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/social-thumb.php?vid=a50d4760e","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /social-thumb.php?vid=a50d4760e HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/play.php?vid=a50d4760e\r\nCookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; watched_video_list=NTM3MQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncontent-type: image/jpeg\r\nx-frame-options: DENY, DENY\r\ncontent-security-policy: frame-ancestors 'none';, frame-ancestors 'none';\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block\r\nx-nginx-upstream-cache-status: BYPASS\r\nx-server-powered-by: Engintron\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iOfwGlzuXUHEh%2F3XjRl5Sz2KDMGnyy3S%2BPJjcUxuGmeu8b4OSL9PXjLBN6jidQaFKV0HmXg1i1amkpfRDVdjOML0uSNjXL%2Bm%2Bavs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8e21637d2c5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4898,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 478x272, components 3","md5":"5aea8ca3eff5c626645961d7e5c4b0cb","sha1":"895768d85801c2c158ded91363b84b37e7ce90de","sha256":"14472a3f9d80596f31449aedf8e2f6a2e063f95c98d1ebb1d9575d1f6fc1fa0d","sha512":"421f1f007e126d1b8abce3ca8cecd19e2bb08e9a70ed4d96baa1c8d8d958ff3067ea00c169df91f76e1b3b7ab2278e8cf1232610e64ce65fa837e1a2c85c9e7f","ssdeep":"96:vY2w6g60h+/0wYxL+hI3tNcTBkeNe4GLe8aERAORzqRyRmRtOGRUxOEZUR4:vM/+/0wYV+BpeH2olxOEZn","tlshash":"0ca195c3ae079752c00c9739b9cb35b76f87ad4f148a845daac14d277724589fcdb0a8","first_seen":"2023-10-21T23:39:58Z","last_seen":"2026-03-01T22:53:40.564462Z","times_seen":15,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/js/jquery.typewatch.js","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /js/jquery.typewatch.js HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/play.php?vid=a50d4760e\r\nCookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; watched_video_list=NTM3MQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 12 Nov 2025 23:32:52 GMT\r\nexpires: Tue, 03 Feb 2026 15:48:45 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 23577\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TpsIrCNs4x8MQvGZtRGX5wpZVJM5%2FkCEH%2Flku2S8PbSG1O9FVUDiMZHhgFXHMKFAIQ06sIs4k6Y0wIJYDjRGkPLrXT515IGzToxB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8e21637d305ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1745,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1440)","md5":"6915a93382a7b35f40987fd648b43f9d","sha1":"b78c77cc774594df414a7b1fb99c28083d85bb80","sha256":"1836dba8922ca00f9ac170122f314b2cd7bbb2eba09c73d8bce215597bd9cd2b","sha512":"e88f5e62ae04a867b1b5ba979e2b653cab8348167c37cf897856d13558114dca318ac33b2c07d611ad3559014c57e60b847823421a46649a47f5328720eceac4","ssdeep":"","tlshash":"6c313f4cb152a15d87e263f6aa7616ee3a7ae3785a001184316512d0a078a8f63d7bd4","first_seen":"2023-03-07T12:12:06Z","last_seen":"2026-03-29T20:18:02.232774Z","times_seen":387,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jnbhi.com/tag.min.js","fqdn":"jnbhi.com","domain":"jnbhi.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strmup.cc/4b640ff298e0","date":"2026-01-04T22:21:43.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jnbhi.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Dec 2025 10:33:25 GMT","end":"Tue, 03 Mar 2026 10:33:24 GMT"},"fingerprint":{"sha1":"64:B0:B5:35:A4:3E:80:F2:9B:4A:AD:1D:6F:38:9E:4B:FA:1E:4E:21","sha256":"F3:74:C2:D2:3A:0E:5A:90:DB:C6:2A:E1:C8:90:71:5E:A1:5A:DE:D8:52:EC:08:67:49:B5:09:42:76:8A:BB:8D"}}},"request":{"raw":"GET /tag.min.js HTTP/1.1\r\nHost: jnbhi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strmup.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 22:21:43 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 112425\r\nserver: nginx\r\nx-trace-id: 409aa783f20c8cea91129c1dadeb3365\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ncache-control: max-age=1800\r\ntiming-allow-origin: *\r\nexpires: Sun, 04 Jan 2026 22:51:43 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":112425,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b105ae11aaf0b47395b2000405b0c592","sha1":"3c1e064f7f5914d976f4a81aea09018b88252773","sha256":"59f1a5a724edcb7907d7734c94ea7893e3c0153854847a1dde214f8c71339e9a","sha512":"3e3a9f1b04582013f15fe140f1aeee984bf74299ec944c6d5752bcd8a14db371f03a7f7f3002eee365d2b98a80791f2a0dc2b380001c80928295458d02be6190","ssdeep":"3072:tXki1TG8YlAVCzIqwL76WJHpYx85/MVzUL:6WTGvlwqw5JJdQza","tlshash":"3ab3295673a277d21a6e60d42d57d60573fd8c80488f8867e3c8787972d081cd3abbea","first_seen":"2025-12-18T15:53:40.958967Z","last_seen":"2026-01-08T02:23:09.116351Z","times_seen":241,"resource_available":true,"data":null}},"time_used":336,"timings":{"blocked":126,"dns":35,"connect":30,"send":0,"wait":35,"receive":39,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/uploads/thumbs/58dcd268a.jpg","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /uploads/thumbs/58dcd268a.jpg HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/play.php?vid=a50d4760e\r\nCookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; watched_video_list=NTM3MQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 104160\r\nlast-modified: Wed, 12 Nov 2025 23:32:51 GMT\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-content-type-options: nosniff, nosniff\r\nexpires: Thu, 05 Mar 2026 16:50:16 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 19885\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mpRzYFc2OswafPC6%2BgAb07ktueKvj2bjcEU0Rtux98PZAACaN%2BecIAtciO9YPDC8dgaPw1Cyh1bWuPdXTRUs5UA9QBQx7KcplOFX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8e21634d155ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104160,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 1280x720, components 3","md5":"554525c724b3d20deb0790f9f33fa4f7","sha1":"de106c6070f352d221a0f0b73f956794b226c059","sha256":"a532b8879e97e75f175789c4ef8974bd2801478a66eb8bc9860afe1b2735416f","sha512":"de4bd348ed581b637720791ef21b99dc14716409e723b66aad7cb595c4c00873bd54e7c11175d751b9bf94d921d06d0fe34837f150ce63201a3cc7aa1b951731","ssdeep":"1536:NTaVZlNeYNzZ46oj193JoHqSKMRFoxskMcblfDeWi4oQbG4MntgX00NQVTi63FPg:x4MY9Z4vQHqMROpfDeWlo/Nn1XiCit","tlshash":"92a3d083cc095793926597fcbe435f9a1f692f1cb8863bea01230e9b3e24a164c5f15d","first_seen":"2026-01-04T22:22:26.143907Z","last_seen":"2026-01-04T22:22:26.143907Z","times_seen":1,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strmup.cc/panel/assets/css/jwplayer.css?v=5","fqdn":"strmup.cc","domain":"strmup.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://strmup.cc/4b640ff298e0","date":"2026-01-04T22:21:43.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strmup.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 05:44:19 GMT","end":"Wed, 11 Feb 2026 06:42:55 GMT"},"fingerprint":{"sha1":"06:BD:96:6E:78:F9:FF:CC:F8:63:8C:1D:02:E5:4A:41:3A:43:92:EA","sha256":"AF:8E:C1:77:34:2E:CF:95:49:BD:A5:67:A5:B0:C2:E6:5C:84:F5:EA:8A:55:B6:B5:14:E2:11:DF:19:F6:18:AB"}}},"request":{"raw":"GET /panel/assets/css/jwplayer.css?v=5 HTTP/1.1\r\nHost: strmup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strmup.cc/4b640ff298e0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 22:21:43 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 16 May 2025 03:51:01 GMT\r\nvary: Accept-Encoding\r\netag: \"6826b625-c0f9\"\r\nexpires: Mon, 05 Jan 2026 02:36:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 27942\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CoY3NrcWwa%2BLF3BayHSGVpbHRZO0R4eqTmQIH5C4yO97hx9VzYKKjNWNKb6QAwE4DtnwcZon43%2Bqp4pl%2FJvTg9w3GygX%2B1SPXg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8e216c3bd4783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49401,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text","md5":"aee1cc505893eae9bac231f379bcbe05","sha1":"f8699e76b0bda33e724e6bb71382c5b2e08f7d14","sha256":"f0e29054154a4b18f0ceb547f8ecda934e5fd172f50089d07695c76232db26a2","sha512":"0531311755b2b9cafb4ef2aac45b6250777637929b029d348845c640882639687ec726735a212873836156c4074e49470af071b9b77fd3a470feb29dad44553b","ssdeep":"1536:AQV8FxnYgpery2vYsRwq9AOOGvC4DfNaYj3RD:AQVMxnYTy2v/AOOkJRD","tlshash":"0c239522a7812c0cf06bd1b67d6197d6233e4053d92b1f7c7ab93578c28e4e85173b9a","first_seen":"2025-06-22T15:21:23.733231Z","last_seen":"2026-04-02T13:08:45.491951Z","times_seen":531,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strmup.cc/ajax/stream?filecode=4b640ff298e0","fqdn":"strmup.cc","domain":"strmup.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://strmup.cc/4b640ff298e0","date":"2026-01-04T22:21:44.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strmup.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 05:44:19 GMT","end":"Wed, 11 Feb 2026 06:42:55 GMT"},"fingerprint":{"sha1":"06:BD:96:6E:78:F9:FF:CC:F8:63:8C:1D:02:E5:4A:41:3A:43:92:EA","sha256":"AF:8E:C1:77:34:2E:CF:95:49:BD:A5:67:A5:B0:C2:E6:5C:84:F5:EA:8A:55:B6:B5:14:E2:11:DF:19:F6:18:AB"}}},"request":{"raw":"GET /ajax/stream?filecode=4b640ff298e0 HTTP/1.1\r\nHost: strmup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://strmup.cc/4b640ff298e0\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 22:21:44 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=0jbtavg8d2bnbtd85bpqiv7akc; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wxy0TELImPEdRo6ebTYQDRNJr7Im0BHkubPbybyrwqLN7OPvbd0qWzhwgyq35iyPZe9k1yYai%2BqqAFojzioFcBv6RlEpKf9luQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8e216fddef783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":447,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"52d1137484c0d01fb66648a19c8390ca","sha1":"97ab0c17c3ea13da61b3372794a264eb0843d7c5","sha256":"162fa22b802ba88787c2a62006a8d1b95d65f10950075a2f50f3f89d7944df11","sha512":"e4c114f1a626072a622c864d328ac6080315d778a96bbada2f5983f40e0d00d2edf9d97232364e176fca391302139c3ff0b168035267d9dba0b0395cde2a3806","ssdeep":"","tlshash":"8af023f8242559222ed885cc28783c7c6297810f4989d89e1b540e400d282b1de5a297","first_seen":"2026-01-04T22:22:26.150192Z","last_seen":"2026-01-04T22:22:26.150192Z","times_seen":1,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":431,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strmup.cc/4b640ff298e0","fqdn":"strmup.cc","domain":"strmup.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strmup.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 05:44:19 GMT","end":"Wed, 11 Feb 2026 06:42:55 GMT"},"fingerprint":{"sha1":"06:BD:96:6E:78:F9:FF:CC:F8:63:8C:1D:02:E5:4A:41:3A:43:92:EA","sha256":"AF:8E:C1:77:34:2E:CF:95:49:BD:A5:67:A5:B0:C2:E6:5C:84:F5:EA:8A:55:B6:B5:14:E2:11:DF:19:F6:18:AB"}}},"request":{"raw":"GET /4b640ff298e0 HTTP/1.1\r\nHost: strmup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 22:21:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=64mrt5il2700go0tp602o26rsp; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n8Xwn66KI3QglhJYw3LT3TWj71WYS7AoGMa7aaWqUQMmyla6m%2Bya3LxO1wHBhuwihfcSfZMH4AAOnvnzBsBm1z4dGn8d5I2giw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b8e2167988ca41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"SweetAlert","description":"SweetAlert is a JavaScript library that provides alternative alert and modal dialog boxes for web applications, with customisable features, aiming to improve the user interface of the default browser dialogs.","website":"https://sweetalert.js.org","common_platform_enumeration":"","icon":"SweetAlert.png","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"JW Player","description":"JW Player is a online video player with video engagement analytics, custom video player skins, and live video streaming capability.","website":"https://www.jwplayer.com","common_platform_enumeration":"","icon":"JW Player.svg","categories":["Video players"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37753,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (28030)","md5":"da510a9fcb80ccf711b0a17928e86393","sha1":"708f604ab631da200ea1c65352e2622c0f59563d","sha256":"2a0b6cae970a2c7ff16e2b5b369dc5fe5b3fdc5e90cf595665d2198b93fedd8f","sha512":"56732a40389ca5722c294bb718bc73afc99e28e7eb7b0861bee9fa637101e4cab6950962302415f7e3dc5baa2dc69924c0c32ba389e7883be741aea39fd55c90","ssdeep":"768:7C82RPvAuxS4GYt9J3ss28jH21spfgS9J7yr5PbfmDJEX6shV4vg:uHVxSD43X2ugcGrlbfmSXDhKvg","tlshash":"56033ab73669b9580325557120ff2848b2ec88c1718f5678e624f12939e7a3291f7ff8","first_seen":"2026-01-04T22:22:26.152138Z","last_seen":"2026-01-04T22:22:26.152138Z","times_seen":1,"resource_available":false,"data":null}},"time_used":694,"timings":{"blocked":35,"dns":22,"connect":4,"send":0,"wait":600,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://strmup.cc/4b640ff298e0","date":"2026-01-04T22:21:44.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 17:37:04 GMT","end":"Tue, 24 Mar 2026 18:37:01 GMT"},"fingerprint":{"sha1":"05:4F:CA:93:1E:46:6C:B4:A4:49:3A:2A:0C:AD:DB:CA:8C:CF:BC:9C","sha256":"81:B0:0B:B9:30:D8:5D:FE:11:36:CE:28:36:04:4F:41:74:05:00:57:EE:04:F0:1D:44:B3:B4:6F:A6:4F:D8:FD"}}},"request":{"raw":"GET /gid.js HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://strmup.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strmup.cc/\r\nCookie: ID=0802b438b9544621ee061088ecc12e78\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 22:21:44 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://strmup.cc\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=0802b438b9544621ee061088ecc12e78; expires=Mon, 04 Jan 2027 22:21:44 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9b8e217199f456a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e0148d4e2d1eebca72792bd986c38a7e","sha1":"8542a78a5e712a86bad9d7c1e06c9bd896518fef","sha256":"66557a0f3b82da4c6902a3636f28e564932bd8a2ce48a3f5f48855dc4d285d7d","sha512":"70bbd393d9cf437ce4bd747ecaeec1f29ffcf177757f30722a96f501d721022c638ac4453a3fa19afc8fbd58e067a7908c9b68ef07bf866e8e61c600c667226b","ssdeep":"","tlshash":"36a002410da81695a8d439e5398b9e6b450a00825a5b560c51e5c04526c7a6d6757e40","first_seen":"2026-01-04T22:22:26.156Z","last_seen":"2026-01-04T22:22:26.156Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re:2087/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.83.77","port":2087,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://strmup.cc/4b640ff298e0","date":"2026-01-04T22:21:45.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://strmup.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strmup.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 22:21:45 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 45\r\ncf-ray: 9b8e21764ad723eb-OSL\r\naccess-control-allow-origin: https://strmup.cc\r\ncache-control: private, max-age=300, immutable, stale-if-error=300, stale-while-revalidate=300\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 2592000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":2087\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":55,"dns":33,"connect":7,"send":0,"wait":14,"receive":1,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7K5TWT1S74","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:40 GMT","end":"Wed, 25 Feb 2026 15:49:39 GMT"},"fingerprint":{"sha1":"A1:49:37:FE:E0:3E:26:88:A3:64:37:DC:04:D7:8D:D1:D3:F3:91:75","sha256":"BB:61:22:1A:6C:67:5D:C0:C8:A6:73:93:B9:53:82:98:95:54:B5:52:8B:33:FC:08:58:01:D2:3B:FF:E6:35:12"}}},"request":{"raw":"GET /gtag/js?id=G-7K5TWT1S74 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\nexpires: Sun, 04 Jan 2026 22:21:42 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143192\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":433021,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"0c9222b670875414762e09651daf9074","sha1":"3def621ae4ad92d38c040df23ce9f4c7527fbf88","sha256":"ca0e219a86f1b6e7801dec15667fae59857d0319afbbdd95dbfe1b8649bd63ed","sha512":"c18b43890145d8da85ffc90b0c0f9d8c618c666656fab9b2fe97c74aae2e6c27ff6cd13111b55e22f74e6263fdd3244b00b557f009598359025a245e80fe353d","ssdeep":"6144:1NIe7ma2bulKY/1u99xHDmHYmyBFzvnsyRO6jJWoNPad4FpC1xY:4C8bu7/1mbrnsy39WbMpb","tlshash":"ca941ace73c674269396e078503f118ba57b29e2b45cc896f189cce41e74a9a4237f7c","first_seen":"2026-01-04T22:22:26.158842Z","last_seen":"2026-01-04T22:22:26.158842Z","times_seen":1,"resource_available":true,"data":null}},"time_used":771,"timings":{"blocked":293,"dns":3,"connect":19,"send":0,"wait":47,"receive":63,"ssl":336},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.83.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://strmup.cc/4b640ff298e0","date":"2026-01-04T22:21:45.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://strmup.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strmup.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 22:21:45 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 45\r\ncf-ray: 9b8e21764e3a0731-OSL\r\naccess-control-allow-origin: https://strmup.cc\r\ncache-control: private, max-age=300, immutable, stale-if-error=300, stale-while-revalidate=300\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 2592000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":55,"dns":38,"connect":2,"send":0,"wait":12,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3-hls2-cdn58.strmupcdn.com/hls/8BQgu7eXHqeZLtre3RxJFAXYf6ydgO/index_1454x720.m3u8?token=f9526c3a4561e815d87587bfe74caff5-1767594135-91.90.42.154-ec6c433ef7bb7dfbd678f9a134d9ff82dab184750aa1feaa31bac00f55e50f4b","fqdn":"s3-hls2-cdn58.strmupcdn.com","domain":"strmupcdn.com","tld":"com"},"ip":{"addr":"67.159.6.170","port":443,"asn":30058,"as":"FDCSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://strmup.cc/4b640ff298e0","date":"2026-01-04T22:21:46.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3-hls2-cdn58.strmupcdn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 17:33:08 GMT","end":"Mon, 02 Mar 2026 17:33:07 GMT"},"fingerprint":{"sha1":"69:BD:51:1A:04:3A:20:E8:5C:66:0D:B5:C0:31:BF:64:52:82:B3:2B","sha256":"53:C5:D0:91:1C:3F:B0:80:D0:75:F8:D7:6A:37:93:7E:BA:62:6B:58:B4:BA:A5:74:34:86:5E:55:4F:53:31:EC"}}},"request":{"raw":"GET /hls/8BQgu7eXHqeZLtre3RxJFAXYf6ydgO/index_1454x720.m3u8?token=f9526c3a4561e815d87587bfe74caff5-1767594135-91.90.42.154-ec6c433ef7bb7dfbd678f9a134d9ff82dab184750aa1feaa31bac00f55e50f4b HTTP/1.1\r\nHost: s3-hls2-cdn58.strmupcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://strmup.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strmup.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 22:21:47 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Range\r\naccess-control-expose-headers: Content-Length, Content-Range\r\nx-cache: MISS\r\ncache-control: no-store\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22995,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"7b20ba79ad196299a10e08503f576a59","sha1":"b316df648a2d40f80976a080244135c1031bbe48","sha256":"fcb7335f6734a8ce043be2398bce9fec1662633aceceaea648d074c62ce6d67e","sha512":"6f4d32824bc5308fe06600728a5590a8446204cdfab03d529c8f0f8f0a6bf4f15188ecb399026d3c29822c8e537e63349baf6001348d2c3250b8241845a83669","ssdeep":"192:wjbpb0iFshFUXxHqltyGKG/2OoOyrbJLpj:wZb+hiGKJlfj","tlshash":"61a2f284e18ca1c1e05e5e31f782f0d990157c3aaac5ed8056e91fd19cfa3e327a5637","first_seen":"2026-01-04T22:22:26.164882Z","last_seen":"2026-01-04T22:22:26.164882Z","times_seen":1,"resource_available":false,"data":null}},"time_used":640,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":640,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.36.2/jwpsrv.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.2.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strmup.cc/4b640ff298e0","date":"2026-01-04T22:21:45.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.36.2/jwpsrv.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strmup.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=900, immutable\r\nlast-modified: Tue, 25 Feb 2025 08:24:55 GMT\r\netag: \"e9449982aabf38639d014274af3ad474\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 22:21:45 GMT\r\nage: 521\r\nx-served-by: cache-lga21962-LGA, cache-hel1410032-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 50, 9\r\nx-timer: S1767565305.055095,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 19075\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":67288,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e9449982aabf38639d014274af3ad474","sha1":"f99f5ba761f1945f19da3cf4a9ca52c1aeee47d5","sha256":"fb1c762c222ed003d9bd932a1bf94a36879b73967f3aaf2797cae7f6d5302352","sha512":"f4c80f0c7c44b72303aa3494f19d164095b24bf83e013ddf92d20b75fc618cbaa505c183557bbb14cb9a836c514b21fcb623c00059ef7e9d04ffe16ae4a12fc3","ssdeep":"768:DiDjPSAlvbtXral8WK/2R7pr1oJl92LCaA1YL9ncpgW:+nPlZral8WK/GEJl92LCcLWpV","tlshash":"fd63d78d3685b16a5a6770b8806fb546723d1dd6308dc250ea50eec93c3de5ee237b2c","first_seen":"2025-02-26T11:57:34.810186Z","last_seen":"2026-04-02T10:05:07.835879Z","times_seen":3984,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b7510.com/5/9646226/?oo=1\u0026js_build=iclick-v1.1670.0\u0026userId=0802b438b9544621ee061088ecc12e78\u0026dmn=bvtpk.com\u0026tt=2\u0026ix=1","fqdn":"b7510.com","domain":"b7510.com","tld":"com"},"ip":{"addr":"139.45.197.115","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://strmup.cc/4b640ff298e0","date":"2026-01-04T22:21:47.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b7510.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Oct 2025 05:16:54 GMT","end":"Mon, 19 Jan 2026 05:16:53 GMT"},"fingerprint":{"sha1":"D4:41:24:3C:CF:C7:8C:56:F0:95:50:DF:63:59:AA:07:08:41:B7:48","sha256":"DF:09:31:9E:FB:30:04:94:33:7D:77:61:1E:14:8B:26:7D:32:A7:F7:3C:CC:ED:BD:06:FE:FC:B9:E7:52:70:5E"}}},"request":{"raw":"POST /5/9646226/?oo=1\u0026js_build=iclick-v1.1670.0\u0026userId=0802b438b9544621ee061088ecc12e78\u0026dmn=bvtpk.com\u0026tt=2\u0026ix=1 HTTP/1.1\r\nHost: b7510.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3436\r\nOrigin: https://strmup.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strmup.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3436,"data":"{\"sync\":\"TBtSUh8cJhwUBWcfHEsSAwEFUA5MXwMBbAIlKz9KWUBcHAtKQ1AVSQZbGgxbGwkDVkYLASoQTktDCFBbQkkARB5PDQ4KGlgQAwdXWAlFW04WNRkDLUMHGmhOWl4lEwE3AhtnAAFmFgwNNAFVBjJEUWxFDTsKCQI9Wx4mWglIVF9eFhoeaF1WQh8HDQ0RQAJYVRsLGRsKUA5fQRVXQ2kKAFtSQU4aARBVQ1BaR1BBBwkVAwMaWAALDldYCEVbSQ1IVFteFgAKFQMCGlgQA0pPUxRLF1tDUF5HUFoPHRUDAhpYFA1KT1IUSxxPAAZMUUMYTAVUGwkGVkYdBVdYCEVbSxUeTFFDGEwOX2ZcVBBGQ1hZQFYeJk4FSFRbXhYBHlRJRhRAVVVKHQtcDRxXQ1BeR1BXBjJYW1lpEwodDQ1AAlhVGxYDADQZURceaFVWWB0QEUpPUxRLGlYNBRw0FlEeGV8bCQZWRg8NGwZXG1sDUEZMDBNZCx1WXUAUQFRVShsOZwcVSkNQX0dQVwEBWEtsURsJDBxXWAxFW0kHBkxRQxhMDkRQEQxKSFsLGRYaU0kVQwAdG1AOXkEVSV1CWF5IRFcSVhsaG1tbQkkCWA8ZUVZBWyUAHBwQAUwGCxtbXEJJHFEdTw0KC0tWRgsBV1gaBRVPDBoHGxcWQk9FTxEMWCkcGxRAFEsLSRFIVFheFhoXWBsJBlZGDh9XWAlbQQlNSBkDUA5fXQUNHxQNDQ5KT1MJX0sVQx0HA1AOWFoGFRFBAkZDWFlATxBbA1FGTAIKFlRcGxtEUBlGQ1lZQEsIERtbW15ZRhhMHl8bCQdKVk1EVxFPS0MIU1JeR1BHDxoVAwIEQlRVSgERZw0cTQQJGg4WFlRdGxtZRQ8FW1JXL1cTEFUNC0FeXARORWBQXVIVEwpIOzYYWEkXUVFOPBtaWFkMGUsATl9ZGgNYCVpNF1FDTiwXVwUCGAsDB0pUSFhEQn4AC1wHBRZEQwdaQwcbHxQUFFtSRE4aGR0bW0gHBQZRHANWVR5GHgJUHhwHTwwLAwgZPiJJXQAZUktdVxZJCQwTT04AHE4EGFQCAWQnVl5XR1MIChgEWBJcD1RPCA8ZDgAOBx5ncAhfFBAcGhsDVEQJXQdHGAIXQwsfDVBAZjNfEAYBB0oHGFVMGgoNX0IHCEBcQQwTFykhTkAUSxFQDUhUWl4WGwRTGwlYDwgVRFcGSg9bA0MCGh8CR1RCGF9GRRIFGBpbDlcFVhtNSB4HUA5MBUNNQ0VAS1YbARBVHAkXAglBXxACWl1RXwEPQgFJSllAVg5bA1FGTB8IFlRPYm1wFFZGFwpXWAlFW1cAGkxRUGMHAwQLERpYFA1KT1IUSxxPAAZMUUEDQk9fWhEMTlxVShEPGlNUCE1IHB8GFlRABhURVRI7FgofQAJZVRsPHUxRQxhMGlMbCVAbCAoNWUBXGhpJFEhUST5dABhPGUsOTDtPXFdOGgEQXQUPAElIUg8BRFwfFBkMJgcXCGcAF10EEkxRXwVCT0BQXWkRAQAbKg5dBx5NCUhUWUsGQk9UVl9ZCDsdDQUWUEtDC1VGTB0XWgoCRRsJFFhIWw8UD10ZGF0SSFRbXhYAARUDEVMUSSw7V04aBxVKQ1BMDhwZOz4bXF0UVkYaBxkNSjYeWAwfGklIFh0fUFsRGlgUHwRXWBpLVRsCBhpJSE8TQRVTQEZYXkhEVxJWHVsDUUZMGxxGDU8NCR8UCggYHBMNSgQmXQQeCwgGWxxPDUIRXwk7GAYREFcAHRtbDA8HAVFCT15KbEIIDR0NGxYaUx9YDRkLR1BdHTJUUUFZFw0MBSpaDjYWSz4ECxwXRkxXUVhfRR9IWwEGPVsBC1YMAxsGUA4IDFtKVhpYDQo3EAZfDFsDBwsCGBcYTAREZlRTGQ8WSk8WShwcFUMDHTQFUQwyXFBHFEACGAQGBxRLEEo+HQsJLV8HGWgPAwAlCws3GwdPDAsbWwwPBwFRQk9eSmxSHxcSHBoSZxoYXwAYB0lIUg8BRFwfFBMXJgsdEFcEEEwMNQEbF0YPTw1fUloJAQREVwxdGlsDQ1haUkYGWFkECgIUVkYaBBwHVh0mUAVIVEkHWgUDWE5dFFZGGA4TC1QAGE0ENQcPUA5MTxsbR0QbAh8BFj1LBgxLAg8xAhYWVE8VFRFXHhIcGgELSwwLZggOTFFQFkJPVFheRhsNHgYqC1xLQxtDRkwIB0caAlpmWlIlVVtSV0AUSxpMEh4BBi1dCjIFGwkUWEhbCxkLWwImUAVIVElQGEwOWEpHFEBGW0RXD10dEVYFSFRJGEcaDFAbHxQIOwwBEUACS1sVQwUPNBtQTFcVGx8UGwAdAQELVwcYVT4DChhQDjUwSg==\",\"async\":\"TBtXQwgXW1IOQFoIDRtbW0JJGl0AGUQbCQVWRhsEAQoaU0sVQwIHDxZRADJeX0FXFwFbUkZXFEsNVhULAklIB1gQGxtRVw5GQxNXC0s2G1gVSFRbXhYNBVZLVF8UA1tSRU4aChFYEw0HBRVrGgRaXBEMSkhbDBwRWwEYSwYDAAwtQAcAUhsJBlZGFQ0DB1RLQwkcRkwDG1oaHhUDSEtWRhsEAQoaUwIbEh8eGx1GGghTGwlQGwgKDVlAWR8YUA0LDAcXFlQLVlVAU1ZGCw0UEVcHWwNDBAFGHFUYBFBYR1kISRsEAAdMBhZNCUgTR1BcBwlTXF1pEwILCRgHGlNJFUMJAgIXWhoyXl0RDFgRFwMbDU8HWxVDCwgNG1gHDENcbF8eRkNKV04aHQtYBwwHCC1HARhFWlZpEwBbUldAFEsYXRcPHB8bRwsfaFBXFEBGW0RXAVkECVgIDQA0G1BMVxUbHxQZEQocGg9nAB1mUEhUSVAYTA5CSkdZFzsQDCpQGlNbG01IDQcbVwUyXl0RDFhGVUoWDUsdWwNDSEJJH1EaBVhdEQxYDgocFAUaRVtLPh8HD1AOTE8bG1xXJQ0dSk9AGkVbWAUOBx8bWwAMW2ZaUglGQzMoHw==\",\"quality_options\":{\"hil\":1,\"jsp\":1,\"ng\":false,\"ix\":true,\"pt\":false,\"np\":false,\"nw\":true,\"nb\":true,\"sw\":1280,\"sh\":1024,\"pl\":\"https://strmup.cc/4b640ff298e0\",\"wy\":0,\"wx\":0,\"ww\":1280,\"wh\":1024,\"cw\":1162,\"wiw\":1162,\"wih\":671,\"wfc\":6,\"sah\":1024,\"navlng\":\"en-US\",\"drf\":\"https://fushaar.lol/\",\"wgl\":\"llvmpipe\",\"tb\":false,\"btz\":\"UTC\",\"bto\":0,\"pnt\":0,\"pnrc\":0,\"bml\":0,\"bmi\":false,\"vsbl\":true},\"client_hints\":{}}"}},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 22:21:47 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://strmup.cc\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\npragma: no-cache, no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/uploads/thumbs/9b52c43b6.jpg","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /uploads/thumbs/9b52c43b6.jpg HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/play.php?vid=a50d4760e\r\nCookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; watched_video_list=NTM3MQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 77183\r\nlast-modified: Wed, 12 Nov 2025 23:32:50 GMT\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-content-type-options: nosniff, nosniff\r\nexpires: Thu, 05 Mar 2026 16:09:37 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 22324\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cGnEwPzvHxAdznAJ1kwI6Drtm86GIc9Mw3x5sq9LzXhmxvDk9ZNyfE08X4EEi34VIxN71cWg8wqCX%2Bs6ctYquw3feKFREKD%2B9LVh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8e21637d295ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77183,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 1280x720, components 3","md5":"4813505060faac268688bd6dd8e1384d","sha1":"ec7eaf996e9018acce1a591997904512723ba3d3","sha256":"fb174297f318be66b3c3a59e925b664819f9277aff42e964c5025f559f20f249","sha512":"3ee3b4a27a647ecac56e0e7cad3c47f9942b4d5c16d0537880b4091de72ab943fa0c84bff62050e999793de345bde55a9be2f5bd3fcaaf0059707f0960696162","ssdeep":"1536:NXkBKkmTQZYOF+4u5+oXXWWcYibM0G9QLM84xgLtIA/s:sQHU+4Ccq79Qg84OLGD","tlshash":"667302739ef916a257254638ef86355f67147a1c2adbb3fc0cb61ef2f8602f40809855","first_seen":"2026-01-04T22:22:26.138613Z","last_seen":"2026-01-04T22:22:26.138613Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"entitlements.jwplayer.com/GCCG.json","fqdn":"entitlements.jwplayer.com","domain":"jwplayer.com","tld":"com"},"ip":{"addr":"52.84.50.29","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://strmup.cc/4b640ff298e0","date":"2026-01-04T22:21:46.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwplayer.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 25 Dec 2024 00:00:00 GMT","end":"Sat, 24 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"73:5F:22:36:72:E7:49:11:8F:B7:80:90:DA:4D:43:52:ED:0A:89:13","sha256":"E0:7A:FC:22:76:89:11:1A:58:F4:9F:05:51:C6:71:29:F8:0B:7B:AB:0B:3B:F9:C3:67:76:84:5E:50:04:C4:DF"}}},"request":{"raw":"GET /GCCG.json HTTP/1.1\r\nHost: entitlements.jwplayer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://strmup.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strmup.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ncontent-type: application/json\r\ncontent-length: 71\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 19:32:17 GMT\r\ncache-control: max-age=1800, s-maxage=21360\r\naccess-control-allow-origin: *\r\nx-cache: Error from cloudfront\r\nvia: 1.1 b5699d1b7e44f0e87927693889ab2666.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: nrbeDe9evadwSkaWWlwML8G5lAHiBcr1_vFziibNMNZNyb8NmHZEZA==\r\nage: 10169\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":71,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5534f424f1d6586164a58758f3e2c51a","sha1":"ef37ca3d8831aaad699430dcaa9967469542d602","sha256":"f28df38bea81995fd78f9077bff2dfc9d60ee13b8c414bc426c61c0e1b0bee86","sha512":"de8d4f36c7f0f85b1fb1a52e22e511fd2e52e7ba6010b39947d72eceb752a60b7578be34dc4c44be6add327cef42a82442099d803bcc3251d84ec05d26fe4d15","ssdeep":"","tlshash":"0da0023eec5654030de616dc3cdae44612f4135c1754544c8e8915ac1adfef24f13311","first_seen":"2023-05-03T00:46:19Z","last_seen":"2026-04-02T13:08:45.489116Z","times_seen":981,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":118,"dns":65,"connect":2,"send":0,"wait":3,"receive":1,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"43:D3:3F:93:6C:4F:F7:67:58:9D:D5:48:20:4C:74:A2:69:DB:13:9F","sha256":"8C:DB:D2:85:E1:AB:12:7B:1D:5A:65:A7:EC:22:67:6F:B3:A6:65:01:28:29:FA:D2:3B:01:8D:10:7E:4D:09:52"}}},"request":{"raw":"GET /ajax/libs/jquery/1.11.3/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33507\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 29 Dec 2025 10:05:28 GMT\r\nexpires: Tue, 29 Dec 2026 10:05:28 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 562574\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":95992,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32038)","md5":"f03e5a3bf534f4a738bc350631fd05bd","sha1":"37b1db88b57438f1072a8ebc7559c909c9d3a682","sha256":"aec3d419d50f05781a96f223e18289aeb52598b5db39be82a7b71dc67d6a7947","sha512":"8eeeaefb86cf5f9d09426814f7b60e1805e644cac3f5ab382c4d393dd0b7ab272c1909a31a57e6d38d5acf207555f097a64a6dd62f60a97093e97bb184126d2a","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmm:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"1793d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","first_seen":"2023-03-07T01:02:11Z","last_seen":"2026-04-03T18:43:15.69985Z","times_seen":20563,"resource_available":true,"data":null}},"time_used":733,"timings":{"blocked":330,"dns":10,"connect":22,"send":0,"wait":16,"receive":16,"ssl":333},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/templates/fushaar/js/jquery.plugins.a.js","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /templates/fushaar/js/jquery.plugins.a.js HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/play.php?vid=a50d4760e\r\nCookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; watched_video_list=NTM3MQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 12 Nov 2025 23:32:51 GMT\r\nexpires: Tue, 03 Feb 2026 15:48:45 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 23577\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vRQJ7i3630yVc9eQsHxbaLUtiO8YcYP3VsjFysG8kwQIw8fY45eBnEiZIJH%2BlmuXCjr6XRyKL1kkkAy5sM9PC4JIyq00htvyZa%2Bl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8e21637d2f5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9805,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5325), with CRLF line terminators","md5":"d30d39ea7362e56afcdb14c1919e36b6","sha1":"3d8ad768ea89003210bea45e8aacd038bae1ecf1","sha256":"a01674489d3ae093a5909246b27d46e09a6f49bc6834094f5febfa056910e0e5","sha512":"e150975ba628ff73f1a84d94d9ee2f1473d881e0631731b0ea779d6b92e31708d4cd35ef22d421f590466a04ddb960f77c7f91fd3eecdf29a6c31e7f03c2a6af","ssdeep":"192:er5EO3dPvqWHg3mHxY+HFuArszyuFPsrhLypbNIGRS:a5EONH9mQbHAArszySPsYpb5S","tlshash":"a21251647140736246ef70a6e0af92cf9231a335474bd0c0d0a0faee6e3a97586d3d9d","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-03-29T20:18:02.12578Z","times_seen":296,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/templates/fushaar/js/jquery.plugins.b.js","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /templates/fushaar/js/jquery.plugins.b.js HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/play.php?vid=a50d4760e\r\nCookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; watched_video_list=NTM3MQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 12 Nov 2025 23:32:51 GMT\r\nexpires: Tue, 03 Feb 2026 15:48:45 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 23577\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=alq4wEkboJIgv5Fggda0TtE2r%2BPgJy2Qnn2%2FbtrP%2BN5HwqJB6dqlDcx3wHgnJAlD5Zrl%2BIQ0tbVF9bzksunILE7536DYfXgoanyH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8e21637d345ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9535,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5838), with CRLF line terminators","md5":"443045e7fcb603ba92e473b0ec11d2b2","sha1":"8d9dd41c01b0f2738d6bd1a3984095570bbeb0df","sha256":"8084ff37c531acc28e0fa45ecb19d9a3c846a91f1b2e101801a9dada0cd31702","sha512":"995f65923b7ceb647c7b81b71d6e9c2f169e27a9b9c2e38476eeb4c7cd6931823a0825cfe344409f39096421d403ed0096eef957da48c6789052ccc120f089d0","ssdeep":"192:drqHYs1VpcjP3+RMCN+8/Hit2eVUUZCDq78JlwyDp/VQ3SI:drSDy2CxaqFcdVdI","tlshash":"1512d8a93292342a62bb516c105ff50ff3219526d18b8050e25899f43ef9c8e3767fbd","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-03-29T20:18:02.18288Z","times_seen":295,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/templates/fushaar/css/animate.min.css","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /templates/fushaar/css/animate.min.css HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/play.php?vid=a50d4760e\r\nCookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; watched_video_list=NTM3MQ%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 12 Nov 2025 23:32:51 GMT\r\nexpires: Tue, 03 Feb 2026 15:48:44 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 23577\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VbAFCFtNAjKyVJPgLJckip5oRpOaGj9js0tEhpKwWdDJTlMKJ4eO9SgN2rvcvchmn5Ey%2Fxy8bHNqmTqlvhpf2zFw1DqE517j1gor\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8e21633d095ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57990,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (319)","md5":"3d0a26b7c254da8c0d297e753ff23f65","sha1":"877d0bcad6716a05066d9b6dab07e264f631a5f0","sha256":"f1f0041c0c62f37ee475d174370f574a62afd842055e79a86dc4c722532de6bb","sha512":"cd0a8d03e95d1cc8cc7f9ea733b1ed7d6eaff7cc36baccbeee492b11e91aa10c165e43ac33f0e29990e5dcf7826a4b49b0b0409114da5b4822a4a5f7fb37d594","ssdeep":"768:dkZFpVIBIEwQ1oAhkIDz3gy65VraeX0UTGsXsV:dkZUwQ1oAhkIDz3gy65VraeX0UTS","tlshash":"b74346ae5891238a91674fa2c3dd5e64473dc67314621cee3381684b8f87f9e33da247","first_seen":"2023-04-07T18:47:56Z","last_seen":"2026-03-29T20:18:02.188656Z","times_seen":367,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/uploads/avatars/default.gif","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /uploads/avatars/default.gif HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/play.php?vid=a50d4760e\r\nCookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; watched_video_list=NTM3MQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncontent-type: image/gif\r\ncontent-length: 2327\r\nlast-modified: Wed, 12 Nov 2025 23:32:51 GMT\r\nexpires: Thu, 05 Mar 2026 15:48:45 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 23577\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FAIDIV%2BbOEj%2Bip8%2FlIRMeJGp8f%2FgWH3IUcrN%2BSM1P32OINmhGaKQyGb8sht7MC1lTJaC7yL3tNlmniQAXCSE1ZiKC9sO4oLJQHoZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8e21634d105ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2327,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 66 x 66","md5":"09e2544297338b84eee1c2cd0eac23d8","sha1":"4c07242aef5a58da166e675443bd1808e6b1c44c","sha256":"bc5b030f6f3d3d309ee03d6e75e4391dd2ec1a380390c5d33fe0ea654b5fc968","sha512":"08ffe6cf681a7e087086c77f7adc3af6c37533c4aa4daa09558696b06151c91602661759b9a504fa0745ac46c475f28a2dcaf94eb9d08bd94a891214ae0b3178","ssdeep":"","tlshash":"fe41f808f88778c1d25d213179f6917735124580c5f4a9bbf84cc48607a80f589ad4fb","first_seen":"2023-05-02T20:16:10Z","last_seen":"2026-03-22T13:55:09.206617Z","times_seen":163,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/uploads/thumbs/de83be925.jpg","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /uploads/thumbs/de83be925.jpg HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/play.php?vid=a50d4760e\r\nCookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; watched_video_list=NTM3MQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 89383\r\nlast-modified: Wed, 31 Dec 2025 00:06:27 GMT\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-content-type-options: nosniff, nosniff\r\nexpires: Thu, 05 Mar 2026 16:09:37 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 22324\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KOTJVZV7XxXFdfqRNOP0vtspTVb%2FgI4K5h97bGc7ZENO1DOnhArHNM6cDRn0MUqyfHj0j9D19Y2fAp%2BPIuqqvC%2BR5u0bzHg%2FR1XO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8e21637d285ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89383,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 1280x720, components 3","md5":"57682feae5f63590648f3b876dcd61ce","sha1":"fcb58edf65e8b8bb770b1751807a271dafcb35c8","sha256":"142ec23d4288e2e38b137dc419dcf6f2c8301d027631265755e05ff8890716f8","sha512":"799af2447ca8f2f99c10940dc532a022bd81b37e202c44c4bff38f34e110eb7678b1457956541d21b29d1e29559a787450874370b7a02728277a35c3f95ea9ef","ssdeep":"1536:Nwg5mQscsWqH+pgrLm8P/igI02pWvVGs2nzG2QQDKmULU5JYLkfsJenx3pxjDIV8:pcc7pgrLmu6goWN2nzhQ4Km2U5eLkfsU","tlshash":"1b930242ec06138973e709c49fe865765e0e1204936c39ee39b6ac38ceb5cf6ac14d6d","first_seen":"2026-01-04T22:22:26.17263Z","last_seen":"2026-01-04T22:22:26.17263Z","times_seen":1,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/templates/fushaar/img/icon-play-32.png","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /templates/fushaar/img/icon-play-32.png HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/templates/fushaar/css/echo.css\r\nCookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; watched_video_list=NTM3MQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 2413\r\nlast-modified: Wed, 12 Nov 2025 23:32:51 GMT\r\nexpires: Thu, 05 Mar 2026 15:48:45 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 23577\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NzcUkUOtBlOHC8i5%2BKUG4w7yxgN3wURtNGQJaJIHqltS79hRjGlg6lhMFAfdF8MfdqZOwP77aL3GuTTrmNHe9yDJgZb88gwAt1f7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8e21677dd15ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":2413,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"35bd95e97ff446debcc363482550378d","sha1":"91c8d90e0524e5346aa4f3ae0806893db5d95959","sha256":"eee224146191f9cc5fabac0a105fe5b9b34750f8afe16823dbb593259d8a1d75","sha512":"cb1e95ff009f563b6d436c90b3b10c9efd2d6be53fcd8938d8c027c4839e3c94cdb8994441ee44c1af35b06611912903ba7e66f258b58af8943e7fee632d8ad5","ssdeep":"","tlshash":"8041e84dfe422c30c288e5727de4a093a8375cc482c0a563bcdcc16398b04fbb92cad2","first_seen":"2023-05-09T02:55:10Z","last_seen":"2026-03-29T20:18:02.14383Z","times_seen":235,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1124\u0026rd=1124\u0026fd=637\u0026bv=25.12.4806\u0026tmpl=70","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:43.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 23:46:27 GMT","end":"Sat, 28 Mar 2026 23:46:26 GMT"},"fingerprint":{"sha1":"14:D8:A4:21:72:37:E4:C0:CE:53:5D:C0:99:88:BB:F5:AB:09:9F:77","sha256":"E0:A6:B2:57:A8:ED:75:A3:DB:37:93:9B:8F:60:2D:A9:97:B8:E8:E5:77:A2:C7:8E:B2:CF:E2:E9:F7:6A:43:C7"}}},"request":{"raw":"GET /pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1124\u0026rd=1124\u0026fd=637\u0026bv=25.12.4806\u0026tmpl=70 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 04 Jan 2026 22:21:43 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":693,"timings":{"blocked":297,"dns":1,"connect":95,"send":0,"wait":97,"receive":0,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.betteradsystem.com/epage.min.css","fqdn":"www.betteradsystem.com","domain":"betteradsystem.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strmup.cc/4b640ff298e0","date":"2026-01-04T22:21:44.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1285643437.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 16:38:13 GMT","end":"Tue, 10 Feb 2026 16:38:12 GMT"},"fingerprint":{"sha1":"EA:E4:C9:AE:61:81:6F:11:4B:72:3C:2A:46:18:ED:C4:47:6A:00:25","sha256":"C4:02:72:06:98:CF:DB:E4:B2:89:0B:79:BB:F3:E0:5E:5C:18:99:7E:B8:7A:94:20:38:B7:12:52:2A:86:05:BE"}}},"request":{"raw":"GET /epage.min.css HTTP/1.1\r\nHost: www.betteradsystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://strmup.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strmup.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 22:21:44 GMT\r\ncontent-type: application/x-javascript\r\npopads-node: wb5\r\nexpires: Thu, 08 Jan 2026 06:09:52 GMT\r\naccess-control-allow-origin: https://strmup.cc\r\nlink: \u003chttps://betteradsystem.com/\u003e;rel=preconnect\r\ncache-control: public, max-age=604800\r\nx-77-nzt: EwwBX63NDQHXq9cEAAwBuUwKDAH3nAAAAAwBw7WvBgG3AQAAAA\r\nx-77-nzt-ray: 2a494a15f13c030f1de85a697e9dc91f\r\nx-77-cache: HIT\r\nx-77-age: 317355\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":41943,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1568)","md5":"11671b8dac269c3838ccfff5153e1cc6","sha1":"148bcf3c7cea8629b630cbd9acfda5ee08b77b81","sha256":"ec8e9ed0f461b54d02b77cc7daca42d416b8f083032a32afe77e436d9ecef7ff","sha512":"dc635a64908340eb5f86f69070e420d2deef2918b63a21fabb56d649da0e137b029bd09c361fe56b064ce19495f286f13e3372c04a586e0e0af72a0ea5dc113d","ssdeep":"768:bt9rqAYKKeZzFQ9JsQU+YDngZGihfzmMzhYrTsAysncCWcf5k5sigC3JCntlqonr:bblZzFQ9JsTgZvfzmMzhYrTscpNZp","tlshash":"9c133aaab286282601e742b9503eb316b23305167912d458fcb9cdf96e3dd86117b7fc","first_seen":"2026-01-01T11:11:22.219786Z","last_seen":"2026-01-04T22:22:26.176773Z","times_seen":4,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":80,"dns":51,"connect":5,"send":0,"wait":9,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betteradsystem.com/phlkkcbbczgmufkv?IoAqUMwl=BQNiAAAAAAAACZUAAmVhdMmFxPUKZt4ud1BJ0YwNkk-tKp4277nMBdl7pzeQ4R8AcErvSagTd20c81Q2EEWZXJuWWfW_Q5q-KtdIpOfHLLmXkDJNRCRvxCKzkNFRWu97vyECMFvI9mWJX7bEOVNuwqpXgREtUM528WgopY5LKzoD0Jiu2wVIs7SH5jPbYeNWRJ1blAVFIk82rqNH1PbMmgLYUYTLyJY9PTX1hHJF6P-flO2S5tSmblhIF6lx1fxqd7p6zhTt2r96VZH2mf9UavXJMsGolK_KaaPpwaR3Po-8MyzHBYoP8KfiE6UfUr2RmxHG3t1PtSnZ7umqniBkff0_H91VGXvB6bVQ5uCsy13avv7wAE2bh7lM0QtCgo1VNqQZXRqSKLDbSGhWCLOT45TMZXeqpIE65AdgS2-G0CzabfvnoCXJE6BEGE4VY5x8EuWPg4zpmLDIJF8kvqxw4nVnASQtTc4m_2ZNAL-JfYOu54GnO7S1NWxW7xmVFZ-hH-RNBAKuR9lXdUsbPo0gb7x91gQKxfAfin2usSeFhFI6aplorGSmdMrQ-PwBS_Pi13LsRlQjSNNb8eQNGK0RjpnuMkh4CjJHlyPtRpjh3ujKZYres-ZvRnG_hyqYfObAmWd9QPzykVAWorYVmgOrTZyMuGIzcGvkSAF-QiCxxY6KeSkaqDbQdifrEQglPIxZWO-guZ00lKLu1-K44uUpfnq5P3sV1hF9wdQDKp4mjCVQ1hSruw3Dcjfx928LrC1sQorr6kk-bhjljVEmI-Bs3Mgk14RHB2NXVYSK3YbD60cHjoPCsbWGsJB78TpX7Geq7Vfa5DtI6z0Z0KiPCKMjyTWewWNWey8So1462QKzhMIIH0YBv1XaLGfs3DHg01FkyswLIInoogdbPtZN2ZnyqhVzih1x6AX-1Rcwg7nO7O_2vydiHJrsxPx0wfcOUwLYxRw5Gh3tdyDpixK9QvSKWmkRTfGQGOJlAgJ7RyTldT_vrpTwZR0qzJ2Ue-KRsg05xLYwhpQC4R6hDE8yqHEhGM9_OH6tL3Qg1fboYP_8aNhib1vc9vRNVh2CGMBV6fKN5D7Gjz1og5aBQxqqV-ZOAU4NaroByNNNxLS1ail8ntfSQkQR9ITppFDHfAL_KrBaX8eRZm7gP503kqpwxQ\u0026KbxwPvDl=4\u0026rfPCuKic=5210309\u0026gHzMoIbi=\u0026YugSkPLi=0,0\u0026iVEHlAMn=\u0026BMhLxNpT=https%3A%2F%2Ffushaar.lol%2F\u0026aJxRjnvs=1280,1024,1,1280,1024,1","fqdn":"betteradsystem.com","domain":"betteradsystem.com","tld":"com"},"ip":{"addr":"162.252.213.208","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strmup.cc/4b640ff298e0","date":"2026-01-04T22:21:48.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"betteradsystem.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 04 Apr 2025 00:00:00 GMT","end":"Tue, 05 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"29:D5:01:0D:84:B1:3A:6E:02:EB:59:F2:DF:E2:63:E9:58:AF:A1:F5","sha256":"AB:3A:88:05:75:BF:A5:4F:5E:42:5A:7C:45:3C:10:A5:08:40:8E:2A:B2:89:38:57:A6:D8:BA:96:21:91:F2:61"}}},"request":{"raw":"GET /phlkkcbbczgmufkv?IoAqUMwl=BQNiAAAAAAAACZUAAmVhdMmFxPUKZt4ud1BJ0YwNkk-tKp4277nMBdl7pzeQ4R8AcErvSagTd20c81Q2EEWZXJuWWfW_Q5q-KtdIpOfHLLmXkDJNRCRvxCKzkNFRWu97vyECMFvI9mWJX7bEOVNuwqpXgREtUM528WgopY5LKzoD0Jiu2wVIs7SH5jPbYeNWRJ1blAVFIk82rqNH1PbMmgLYUYTLyJY9PTX1hHJF6P-flO2S5tSmblhIF6lx1fxqd7p6zhTt2r96VZH2mf9UavXJMsGolK_KaaPpwaR3Po-8MyzHBYoP8KfiE6UfUr2RmxHG3t1PtSnZ7umqniBkff0_H91VGXvB6bVQ5uCsy13avv7wAE2bh7lM0QtCgo1VNqQZXRqSKLDbSGhWCLOT45TMZXeqpIE65AdgS2-G0CzabfvnoCXJE6BEGE4VY5x8EuWPg4zpmLDIJF8kvqxw4nVnASQtTc4m_2ZNAL-JfYOu54GnO7S1NWxW7xmVFZ-hH-RNBAKuR9lXdUsbPo0gb7x91gQKxfAfin2usSeFhFI6aplorGSmdMrQ-PwBS_Pi13LsRlQjSNNb8eQNGK0RjpnuMkh4CjJHlyPtRpjh3ujKZYres-ZvRnG_hyqYfObAmWd9QPzykVAWorYVmgOrTZyMuGIzcGvkSAF-QiCxxY6KeSkaqDbQdifrEQglPIxZWO-guZ00lKLu1-K44uUpfnq5P3sV1hF9wdQDKp4mjCVQ1hSruw3Dcjfx928LrC1sQorr6kk-bhjljVEmI-Bs3Mgk14RHB2NXVYSK3YbD60cHjoPCsbWGsJB78TpX7Geq7Vfa5DtI6z0Z0KiPCKMjyTWewWNWey8So1462QKzhMIIH0YBv1XaLGfs3DHg01FkyswLIInoogdbPtZN2ZnyqhVzih1x6AX-1Rcwg7nO7O_2vydiHJrsxPx0wfcOUwLYxRw5Gh3tdyDpixK9QvSKWmkRTfGQGOJlAgJ7RyTldT_vrpTwZR0qzJ2Ue-KRsg05xLYwhpQC4R6hDE8yqHEhGM9_OH6tL3Qg1fboYP_8aNhib1vc9vRNVh2CGMBV6fKN5D7Gjz1og5aBQxqqV-ZOAU4NaroByNNNxLS1ail8ntfSQkQR9ITppFDHfAL_KrBaX8eRZm7gP503kqpwxQ\u0026KbxwPvDl=4\u0026rfPCuKic=5210309\u0026gHzMoIbi=\u0026YugSkPLi=0,0\u0026iVEHlAMn=\u0026BMhLxNpT=https%3A%2F%2Ffushaar.lol%2F\u0026aJxRjnvs=1280,1024,1,1280,1024,1 HTTP/1.1\r\nHost: betteradsystem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strmup.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\npopads-node: wb3\r\naccess-control-allow-origin: *\r\nasf: 9\r\npopads-ec: ASB\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 44\r\ndate: Sun, 04 Jan 2026 22:21:48 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"d5f0a25e4d3522d56d48ce7bc3e518fb","sha1":"86794caff58f7fee6e684c2ba7195f970a8d6f4c","sha256":"9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5","sha512":"a3a81801f516a4eb11f00d6f56dab0ed4b8a79219e6b4f5436993479f09dae08f14cffbab3327ff66fb39201d8eba1153ae7114f7705a01cc6f0edf840ef1616","ssdeep":"","tlshash":"789002801814116115d1500b8d5159d01259b1a4540801324446ca502dc7883a415774","first_seen":"2023-03-07T01:17:45Z","last_seen":"2026-04-03T19:20:48.182223Z","times_seen":22727,"resource_available":true,"data":null}},"time_used":942,"timings":{"blocked":413,"dns":114,"connect":92,"send":0,"wait":115,"receive":0,"ssl":205},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oyo4d.com/5/9646226/?oo=1\u0026js_build=iclick-v1.1670.0\u0026userId=0802b438b9544621ee061088ecc12e78\u0026dmn=jnbhi.com\u0026tt=2\u0026ix=1","fqdn":"oyo4d.com","domain":"oyo4d.com","tld":"com"},"ip":{"addr":"139.45.197.118","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://strmup.cc/4b640ff298e0","date":"2026-01-04T22:21:47.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oyo4d.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Oct 2025 05:07:35 GMT","end":"Sun, 18 Jan 2026 05:07:34 GMT"},"fingerprint":{"sha1":"7E:66:A3:16:7D:47:BC:6E:0F:31:AE:FA:65:A3:03:19:9B:0B:42:93","sha256":"49:F7:10:A4:75:B7:7C:34:65:80:9D:77:29:42:C6:F5:F9:80:CA:7B:2B:A7:5B:D6:12:3A:D7:1C:39:16:7F:65"}}},"request":{"raw":"POST /5/9646226/?oo=1\u0026js_build=iclick-v1.1670.0\u0026userId=0802b438b9544621ee061088ecc12e78\u0026dmn=jnbhi.com\u0026tt=2\u0026ix=1 HTTP/1.1\r\nHost: oyo4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3432\r\nOrigin: https://strmup.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strmup.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3432,"data":"{\"sync\":\"TBtSUh8cJhwUBWcfHEsSAwEFUA5MXwMBbAIlKz9KWUBcHAtKQ1AVSQZbGgxbGwkFVkYLASoQTktDClBGTBkCRExXBA0fFA4eFkpPUxRLDk4+HQY0BV0ZMkBQW2kNHCYfDD1RESZOBwkxGBNcMR5fZkBBJRcYHyoBTzYaUUNQXEdQQB0yU1xHUxkQHAxXWAhFW1MSHw9JSARCT1lJbEYeRkNZWUBQABUbW1hCSQddCk8NCR8UHhYfSk9SFEsJVUNQXkdQWglPDQkfFA4eW1JEThoHGxtbW0JJHFUeTw0JHxQKEFtSRU4aDA9YDUhUW14WBg4VAwMaWAAUSk9TFEsLTRVIVFteFg0FaFZRXFheSURXDE82Dl1DUF5HUFsdDkdMEQxLSFsAHAZcDBcbW1pCSRFcMQJVU2xfFAAcEFdYCEVbTggEMQAXTR0yW1xdUQ4MW1JFThoKFlUOGDEPF0QaBRUDAxpYEhwGEQ1KS0MJTUgJCh9RHgxTShEMSkhbBhk9VgUKG1tbQkkRWwICRWZUVxcRDUpPUhRLCV8NSFRbXhYNHl4bCQZWRhoEAUACWVUbCxkeSUgEQk9HV0cUQFRVSgUMSgpbA1FGTBseVRoLWEteaR4BDQ0WFlcbWwNURkwFF0dMVwQKThpYFhBKT0BUBQ9UEQMeDlAYTB9BGwkUNwEKCVdOGhsJSUNQXEdQQBQCFQMDGlgTDkpPUwpRSRVDHQZJSAVeXwMVEUETE1tSRFMOW1UbFgMGSUgCWVwbG0ROWF5JRFcVQUtDCU1IBxNQDl9BFU5VVVheSERXEVkBWwNQWlxfXhYdBRUDAgZIUFVKBhUaU0gLWVpCSQFVGU8NCAEOSkhbHAY9XAwNXAIeCw9QDl5BFVNAQxtGQ0o4DUIAFVUARVtFQhRGOl5XV1kNF1kmIUIJWVcJWko5AhwCWlYXQQUCQUQLHk9TC11XCUhKKQ4RXwFCBQkCBkpVSVlVJFEbHF8OEkFaQQBAXRUVEVgKRkNZWUBIDVsDQwMAHxdGAAxbFENSHEkPARAVXRtDUBI6J1AbWhoIRVdSWlcUHQ5YFFEMDlwTUAcYIn1VBFlNVkQUBRVFBQZeRA9QBB0LGUhdHT1+AlpYDgELBhQOFRkdX0wcBw4FURxXXkpjf0ENFxwQEFYIFRQRDghGBF0LGlJLCV8JNDBTV04aARBVQ1BfR1BBBwkVA11DFghVShEQXktDGwkeGhsBDkFCUUxAXhsFC0YZDVRGWxVDGgJJSBYGGUNJQAxVSwocBw9NGVdaAkVaCUQAXgtRCwoOH1RbRFcMX0tDCU1IGhFQDkw4Y3oRGlgKG0pPUxRLF1gRSFRJJV0AXgUbHxQKEFtSRU4aDA9YDUhUWEUYTAVUGwkCQkhbDBhAAkRIFUMYGh9QDkNcGxtQXiULGwJXWAhFW1cWSFRaXhYZCRUDVVcWFxxEVw1LCglMQ1BMJxtaGxUXQQsAJVJNSllAUAAdXQQETFEUVQIeUhURVRI7FgofPVEHHVwZSFRGQxhMGl5XbF0fHQo3GQdWDg1RQ1BcUkMYTA5YVVxEJQAcGAEKGlNLDU1IGA4cUAEfFQMRFFZGHgkYB0gIHUpDUF5HUFoCTw0bVlhXMSpKWUBWBQobW0gLBV9hPUFSVxEaWAcWBBoQZw4YVBQeTFFQRxwKVRsfFAoCFUpPQBpFW1oNHkxRCUlCT11KQxRAVVVKBQxMS0MJTUgeBQBXTFcHFRFGFgUNDhoQVTYdXBUPDR8dRkxXTBtaRSUFFwwHDVENWwMHCwIYFxhMBERmR0QTABwGAUACDxhVEg9CSRtHMQ5fS1xbExEUN01UZwYLZg8PGQ4AFlQLVlVAU1ZGEBsqAVAbFlQIHwNJSFIPAURcHxQTFyYNEQVdS0NfAAYdDl4WBx5oXlZVEQtbUgEQTQxVGwgZMRwXVjEGXk0RDBwFFRsQThoACmYWDww0GV0aMgEJBWkVFiYGEBVdG1sDBwsCGBcYTAREZldTCQ8NBwU9SwgfWBMDTFEUVQIeUhURXwk7GgAHDVUADFQ+BR4OAFVMV1FYX0UfGVVKGwdLS0MbU15XX0ACWl4ECBEaWAcVARAMTDYQXUNQTB4cXwACQFcRGlgFHw4cDlEIDVw+AwpJSBZMQRVNQVccAhALKhFXHAtaBDUHD1AOTE8bG1JSDAELHBwRXRsmUAVIVElQGEwOVlRDVxMDFzccBhpTWxtNSA0eAUABAGhQV2lLRkNKV04aCgxKFQUDNBtQMV8VAxEUVkYaBBwBUzYQXUNQTEleFg0CRE0RDFhGVUoYB0wBFl1DUEwBAUAPChUVEUQlERAMV1gaS1UbDgsxAhYWVE8VFRFXHgAQHBwNVggVZggOHUlIbzMQ\",\"async\":\"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\",\"quality_options\":{\"hil\":1,\"jsp\":1,\"ng\":false,\"ix\":true,\"pt\":false,\"np\":false,\"nw\":true,\"nb\":true,\"sw\":1280,\"sh\":1024,\"pl\":\"https://strmup.cc/4b640ff298e0\",\"wy\":0,\"wx\":0,\"ww\":1280,\"wh\":1024,\"cw\":1162,\"wiw\":1162,\"wih\":671,\"wfc\":5,\"sah\":1024,\"navlng\":\"en-US\",\"drf\":\"https://fushaar.lol/\",\"wgl\":\"llvmpipe\",\"tb\":false,\"btz\":\"UTC\",\"bto\":0,\"pnt\":0,\"pnrc\":0,\"bml\":0,\"bmi\":false,\"vsbl\":true},\"client_hints\":{}}"}},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 22:21:48 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://strmup.cc\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\npragma: no-cache, no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":88,"dns":26,"connect":26,"send":0,"wait":35,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/templates/fushaar/js/melody.dev.js","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /templates/fushaar/js/melody.dev.js HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/play.php?vid=a50d4760e\r\nCookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; watched_video_list=NTM3MQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 12 Nov 2025 23:32:51 GMT\r\nexpires: Tue, 03 Feb 2026 15:48:45 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 23577\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J5umnhGULcKW%2BS0zhvyMA8Kdu39X7B0Sx8rifxE5gVfZjKLahMFDrzfj5Gf4APOAk4AwhmFQhZt%2BYJNDY5qEbcrdo4H3oqtF8rH3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8e21637d335ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7961,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"c3bde81760af5b3df4d0c56ba06a0fca","sha1":"ecf2f46def386ad8f62fad28edc36c8440f339cc","sha256":"c6f149f7dcbe38ff7b1391b1fab3462f06309f79df7bf9135ba1e75b13189af8","sha512":"7b8e060be27ba820f50b8905cabc32507f821d5dc8ca768cfcd26521ee90568fc5b4e43181f08b587eec7e6be5c201679a7cb1a8ce8fc3976a1159a4b423f95c","ssdeep":"192:EcGikGJsJfwbyN3DkPMnBE4c+mqa5F9iiN8lwwIJiN8lwwb:f4yyN3DuMnBjL+PL+u","tlshash":"d9f15498b39d679eccf63266553d9404cd3ec1328203c2687d3d61941ff8ec52a76aae","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-03-29T20:18:02.218986Z","times_seen":269,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/ea/droidarabickufi/v6/DroidKufi-Regular.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /ea/droidarabickufi/v6/DroidKufi-Regular.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fushaar.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31248\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 03 Jan 2026 10:14:07 GMT\r\nexpires: Sun, 03 Jan 2027 10:14:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 130056\r\nlast-modified: Wed, 13 Aug 2014 16:50:04 GMT\r\ncontent-type: font/woff2\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31248,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31248, version 1.0","md5":"436938da6ed799ca17110e719e4d2e51","sha1":"b7ef31b6085a9f0963dffe7939abca527724d389","sha256":"a7b09bb9c8e8e2fb189204e08ed94bd8096c118780b5e926847cf2748ca7c5c2","sha512":"7e4d6769197b05994e2ee2d8570e66d235a5322e8250179f97e501dc6bcd7c0d5f9f07e270670977812e9d72d652b736ef5c81c587d180ead66cd83aa4a10f99","ssdeep":"768:FJtbpWa4AHdCpfyRcVsjmk4h348ZOtsQivESLbxl:L6nAHdC86Vs6k4hVZvhl","tlshash":"b6e2e1539eb17dca103a71f14ed1be97c5c148729229a9741ca7b4f820ce49b72fb287","first_seen":"2023-04-11T00:32:28Z","last_seen":"2026-04-03T12:35:42.591024Z","times_seen":1385,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":135,"dns":2,"connect":27,"send":0,"wait":28,"receive":41,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3-hls2-cdn58.strmupcdn.com/hls/8BQgu7eXHqeZLtre3RxJFAXYf6ydgO/master.m3u8?token=f9526c3a4561e815d87587bfe74caff5-1767594135-91.90.42.154-ec6c433ef7bb7dfbd678f9a134d9ff82dab184750aa1feaa31bac00f55e50f4b","fqdn":"s3-hls2-cdn58.strmupcdn.com","domain":"strmupcdn.com","tld":"com"},"ip":{"addr":"67.159.6.170","port":443,"asn":30058,"as":"FDCSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://strmup.cc/4b640ff298e0","date":"2026-01-04T22:21:46.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3-hls2-cdn58.strmupcdn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 17:33:08 GMT","end":"Mon, 02 Mar 2026 17:33:07 GMT"},"fingerprint":{"sha1":"69:BD:51:1A:04:3A:20:E8:5C:66:0D:B5:C0:31:BF:64:52:82:B3:2B","sha256":"53:C5:D0:91:1C:3F:B0:80:D0:75:F8:D7:6A:37:93:7E:BA:62:6B:58:B4:BA:A5:74:34:86:5E:55:4F:53:31:EC"}}},"request":{"raw":"GET /hls/8BQgu7eXHqeZLtre3RxJFAXYf6ydgO/master.m3u8?token=f9526c3a4561e815d87587bfe74caff5-1767594135-91.90.42.154-ec6c433ef7bb7dfbd678f9a134d9ff82dab184750aa1feaa31bac00f55e50f4b HTTP/1.1\r\nHost: s3-hls2-cdn58.strmupcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://strmup.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strmup.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 22:21:46 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Range\r\naccess-control-expose-headers: Content-Length, Content-Range\r\nx-cache: MISS\r\ncache-control: no-store\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":298,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"bf165a0a04cc12179670abbf66bb2d29","sha1":"14b2d39c0e09231f73b88a2ad98dc380c9efca71","sha256":"931bf18ed0154df93c8ebaeff4e2fadf97257cbb53eb6e39cb0732bf20351574","sha512":"476852794a6bce16d1ebe36b169eb48df3b40503e02cb495f94c6651e458f28063b1216a7190e356538005b90c92374e276d908f5041e57115a69110596d42da","ssdeep":"","tlshash":"1be07d84511ec01f385c84c74668623172d6a42902d8e10461bf2540089e461f75e298","first_seen":"2026-01-04T22:22:26.179564Z","last_seen":"2026-01-04T22:22:26.179564Z","times_seen":1,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":64,"dns":20,"connect":17,"send":0,"wait":219,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pl27988627.effectivegatecpm.com/0a/50/71/0a507188a69a9ebeee1fd7e27271db99.js","fqdn":"pl27988627.effectivegatecpm.com","domain":"effectivegatecpm.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"effectivegatecpm.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 21:45:50 GMT","end":"Fri, 06 Mar 2026 21:45:49 GMT"},"fingerprint":{"sha1":"4D:1C:0D:DB:A3:77:74:26:85:B0:AD:E4:B7:D6:63:03:F7:70:5B:C1","sha256":"9A:F3:3F:D6:D1:0C:71:F9:29:9F:CD:B5:C6:5A:D8:DC:57:BB:69:1F:2D:12:B6:B9:74:23:CD:5A:2A:D3:FB:BE"}}},"request":{"raw":"GET /0a/50/71/0a507188a69a9ebeee1fd7e27271db99.js HTTP/1.1\r\nHost: pl27988627.effectivegatecpm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 04 Jan 2026 22:21:42 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 38064\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: pl27988627.effectivegatecpm.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 815780a437b3c22b6d80aee5e3597193\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":106828,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7b7de4857444860f41b0e677637cf0e0","sha1":"34db9c73e8d6a917cc4091fa50ff8343522a6c49","sha256":"0cc2ad7cbc5f917012c467588ba49677802b408c263ecda092f50c810ddecd13","sha512":"6b106da56f9e7fbfe05cbd2bcce91522d42bde6ebc0aa2f6d042e8117093490a6f7b5ded474850d97adb97ff30f45f60c689eec92f2e5b3b11c6f8b26fa398ad","ssdeep":"3072:Ekl17aMWZ44SXdVY4lDKVVbZ4i3/9j9y1UglGewse:Eklw194Lwse","tlshash":"39a3c788bfd0f06d129a6473223f950ff11a4e42505ce558e907f8e66abc32af47db64","first_seen":"2026-01-04T22:22:26.180852Z","last_seen":"2026-01-04T22:22:26.180852Z","times_seen":1,"resource_available":true,"data":null}},"time_used":789,"timings":{"blocked":257,"dns":52,"connect":92,"send":0,"wait":96,"receive":96,"ssl":192},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"pl27988627.effectivegatecpm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"pl27988627.effectivegatecpm.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"pl27988627.effectivegatecpm.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"pl27988627.effectivegatecpm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"35.156.32.205","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:43.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"traffinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Fri, 18 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"11:9F:BE:35:27:7B:7B:85:C9:B3:FF:0E:CA:F6:0D:13:B0:A9:A0:BB","sha256":"81:A4:38:32:0D:BC:66:C8:7B:6D:08:BC:93:91:76:73:A2:BD:D0:53:3C:BF:2F:FD:B8:87:00:C6:EC:3B:6C:77"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://fushaar.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 22:21:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://fushaar.lol\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=72c91de3-1139-44e4-8ca3-1dba481eb2cd:1:1; expires=Wed, 02 Jan 2036 22:21:43 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"93394de0735c0b58e26bf7cb806e9a1e","sha1":"55bfcb2126655d2db8065e12b180db13ee83a495","sha256":"e0c738cef6dd8ab1e804eb6f76eb082443b10e0fdaf8b1974daf75744e6c5a03","sha512":"c0f569917671044fd9e4eb8d641ca1d526fe94212e028dab5b54b83b4a22cc2c3258a2c620d9d0352b450a7355c02fc7ba5f2f25ea6c94e4c7e5ef126c3f07b6","ssdeep":"","tlshash":"8e9002422a92190e44044116106671426c14a41a24404605516ca650c60650216b1550","first_seen":"2026-01-04T22:22:26.182003Z","last_seen":"2026-01-04T22:22:26.182003Z","times_seen":1,"resource_available":false,"data":null}},"time_used":393,"timings":{"blocked":183,"dns":34,"connect":25,"send":0,"wait":21,"receive":1,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:43.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 17:37:04 GMT","end":"Tue, 24 Mar 2026 18:37:01 GMT"},"fingerprint":{"sha1":"05:4F:CA:93:1E:46:6C:B4:A4:49:3A:2A:0C:AD:DB:CA:8C:CF:BC:9C","sha256":"81:B0:0B:B9:30:D8:5D:FE:11:36:CE:28:36:04:4F:41:74:05:00:57:EE:04:F0:1D:44:B3:B4:6F:A6:4F:D8:FD"}}},"request":{"raw":"GET /gid.js HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://fushaar.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 22:21:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://fushaar.lol\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=0802b438b9544621ee061088ecc12e78; expires=Mon, 04 Jan 2027 22:21:43 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9b8e216abe2d56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e0148d4e2d1eebca72792bd986c38a7e","sha1":"8542a78a5e712a86bad9d7c1e06c9bd896518fef","sha256":"66557a0f3b82da4c6902a3636f28e564932bd8a2ce48a3f5f48855dc4d285d7d","sha512":"70bbd393d9cf437ce4bd747ecaeec1f29ffcf177757f30722a96f501d721022c638ac4453a3fa19afc8fbd58e067a7908c9b68ef07bf866e8e61c600c667226b","ssdeep":"","tlshash":"36a002410da81695a8d439e5398b9e6b450a00825a5b560c51e5c04526c7a6d6757e40","first_seen":"2026-01-04T22:22:26.156Z","last_seen":"2026-01-04T22:22:26.156Z","times_seen":1,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":42,"dns":36,"connect":4,"send":0,"wait":33,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bvtpk.com/tag.min.js","fqdn":"bvtpk.com","domain":"bvtpk.com","tld":"com"},"ip":{"addr":"172.67.154.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strmup.cc/4b640ff298e0","date":"2026-01-04T22:21:44.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bvtpk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 20:07:09 GMT","end":"Thu, 05 Feb 2026 21:05:30 GMT"},"fingerprint":{"sha1":"D2:20:C9:EE:4B:2D:3A:82:43:E2:14:9E:C3:25:30:01:9F:8F:BB:C3","sha256":"D2:57:0B:6C:75:32:2D:6D:C0:F7:1B:32:FC:56:BA:06:7F:64:4B:FC:95:E2:29:A1:4F:59:5C:DD:D3:8D:37:7B"}}},"request":{"raw":"GET /tag.min.js HTTP/1.1\r\nHost: bvtpk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strmup.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:44 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nx-trace-id: c5adf305385dffb7816d35f51d8f3532\r\ncache-control: public, max-age=600, s-maxage=1800\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 1341\r\ncf-cache-status: HIT\r\nlast-modified: Sun, 04 Jan 2026 21:59:23 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zpG4hs77VShtiAM%2FAtf7BwhL13Q4b%2B5Q3s1Ktpvp6SCPxzhFnlktMmMYX%2Fgv2l9UlWjUgJ02z8RsC%2FQsY%2BLbJ%2Brgy%2Farh9I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8e2170cfa3b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112428,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6105483638bf5e8a75281fe5e1724593","sha1":"eda0189eb558b183b96f986dc5d19383f38d0cef","sha256":"14de16fbe0c19c617049209624382077fc976dec843e4c62b49ba9ad492231f0","sha512":"13b76442e6e3e2af5315da9b98e1ae6902c966521edf1b12373e7fc488902639d73b5fb515c085c6ee0c6e666ffbf4adda3acfb8ed8f5353fbea2cdec7771133","ssdeep":"3072:tXki1TG8YlAVRzIqwL76WJHpYx85/MVzUL:6WTGvlVqw5JJdQza","tlshash":"7db3295673a277d21a6e60d42d57d60573fd8c80488f8867e3c8787972d081cd3abbea","first_seen":"2025-12-18T11:35:07.715482Z","last_seen":"2026-01-08T09:54:56.313421Z","times_seen":771,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"bvtpk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/templates/fushaar/js/theme.js","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /templates/fushaar/js/theme.js HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/play.php?vid=a50d4760e\r\nCookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; watched_video_list=NTM3MQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 12 Nov 2025 23:32:51 GMT\r\nexpires: Tue, 03 Feb 2026 15:48:45 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 23577\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i0JyVNPKCZk%2BabzWTQm44oLWhkHQIn7I5%2FhQ2WeLRN8KLBt4LdXfbNY6u1ThQEZSpOlKkSX%2Bh2tMtkSx%2Bss1Tn1ZGFrpYT0wXc1Z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8e21637d2e5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44830,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5357), with CRLF line terminators","md5":"d8176b4cb2798d51558fe707c55d7fbb","sha1":"2d49a0b8afb91121d20469c210566fb8d21e82d6","sha256":"497a2c9b733f23e5ec7ba08698be68a7cc7c121213e78be6a9db5ceb3943b8c9","sha512":"35bdf908dd7eeb6cbd0c3d6f746e3ef87b992bb188e16f4ccc4966c26c774086f866dd603978d9dbdc65fe3488c4bdd3346c78daad3b39da835f8d34a1514811","ssdeep":"768:sdsHXBe1s4RPwBTlttO81x93OD4JdbNC6vALeqny+C3s1pR7T8I5HDwLYPLAWyCt:sdS4D4JdbNzvweqny+CQpmeHMYPLNxn","tlshash":"4313ea883182b12787f761f5a05f620bb172a9a5a04da43df579d4d1bef4e881123ff8","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-03-29T20:18:02.125086Z","times_seen":284,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/8d/e9/ae/8de9ae4b0e4b914d604a7e4b56139ffe.js","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:43.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 23:46:27 GMT","end":"Sat, 28 Mar 2026 23:46:26 GMT"},"fingerprint":{"sha1":"14:D8:A4:21:72:37:E4:C0:CE:53:5D:C0:99:88:BB:F5:AB:09:9F:77","sha256":"E0:A6:B2:57:A8:ED:75:A3:DB:37:93:9B:8F:60:2D:A9:97:B8:E8:E5:77:A2:C7:8E:B2:CF:E2:E9:F7:6A:43:C7"}}},"request":{"raw":"GET /8d/e9/ae/8de9ae4b0e4b914d604a7e4b56139ffe.js HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sun, 04 Jan 2026 22:21:43 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3403\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: fd532fc66fc7494cf5323e8643e6c0cb\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6454,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6454), with no line terminators","md5":"81c010ddfde2faeaf1c598844287df5a","sha1":"cd0fb06af4d1e8878a8c2c8d0311892ef13ff47b","sha256":"44442357bcab05b20364ed17aae2a3ae173b906529612b0e2f7d2217a76e51ab","sha512":"0acadda1dc3bba9f6178ba54356f2aed3dba23fbaf3b53b683fc5dd78eeff47a63ec7815ffbdb1e07041b274646eaa0a71ada2500f181775833f40761fc7cac8","ssdeep":"96:A9+XCx+8Ixmzn2ySej3zqIDNcxE6204l4sNm+E/0NK4Amfnqkk7lDAP2CwU6:A6Cg/S2yPXXWxW04fNPw6K4Amf4DAPA","tlshash":"13d1859c3e80b0a057b26077b97fa019b3696c50657fd80cd012b1a03e7562ad9bbba5","first_seen":"2025-12-01T12:09:20.892186Z","last_seen":"2026-01-29T12:50:40.978548Z","times_seen":4063,"resource_available":true,"data":null}},"time_used":678,"timings":{"blocked":286,"dns":1,"connect":97,"send":0,"wait":99,"receive":1,"ssl":184},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strmup.cc/assets/js/new100.js?v=1","fqdn":"strmup.cc","domain":"strmup.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strmup.cc/4b640ff298e0","date":"2026-01-04T22:21:43.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strmup.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 05:44:19 GMT","end":"Wed, 11 Feb 2026 06:42:55 GMT"},"fingerprint":{"sha1":"06:BD:96:6E:78:F9:FF:CC:F8:63:8C:1D:02:E5:4A:41:3A:43:92:EA","sha256":"AF:8E:C1:77:34:2E:CF:95:49:BD:A5:67:A5:B0:C2:E6:5C:84:F5:EA:8A:55:B6:B5:14:E2:11:DF:19:F6:18:AB"}}},"request":{"raw":"GET /assets/js/new100.js?v=1 HTTP/1.1\r\nHost: strmup.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strmup.cc/4b640ff298e0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 22:21:43 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 21 May 2025 23:33:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 05 Jan 2026 04:18:42 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nage: 21812\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8SeuyC9dIRuQnARwkonAkJgtGbPqHbO9xO9kQt2I6RhS0huYHzKCGObDGgSePwQNIMaQKRYg%2F3wXDWdxS0YsbZZ3czuwK9pusA%3D%3D\"}]}\r\netag: W/\"682e62ae-3a0\"\r\ncontent-encoding: br\r\ncf-ray: 9b8e216c4bf9783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":928,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (928), with no line terminators","md5":"9d417c5dbae8a3d933a478e1a0d886a5","sha1":"e3fc7ca463c6e4a759866790911ee6aa23a4b842","sha256":"3718b865d7162567322249682a0c6113ad4ddc91bb48c33285cdc5d491dde1bc","sha512":"dbb728632688f60dbbcc3a8bf2e5ba00d53cc9b1ab3552d605ba500e19c1b944413e4dc0e44f3b9c651ffdb3d62f67a1470727127fb0666f5b0268569e0c85a6","ssdeep":"","tlshash":"b7115c767ce4763031ea094a3427a185f0f20b642d19e574519c0b6a38a8e4d9d37afd","first_seen":"2025-04-02T00:26:38.94272Z","last_seen":"2026-04-02T13:08:45.497397Z","times_seen":519,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/templates/fushaar/img/pm-avatar.png","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /templates/fushaar/img/pm-avatar.png HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/play.php?vid=a50d4760e\r\nCookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; watched_video_list=NTM3MQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 2135\r\nlast-modified: Wed, 12 Nov 2025 23:32:51 GMT\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-content-type-options: nosniff, nosniff\r\nexpires: Thu, 05 Mar 2026 16:09:40 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 22322\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sI7MACZS6YTyxib2kyf7NUUrdoZW%2BnckzWgMQd5AL8W2VHdqTnAmWTd5J2jQqlJcSiRX0gtIZosTd8AYJF9i915WZggkRPx77o%2F7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8e21634d115ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2135,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 140 x 140, 8-bit colormap, non-interlaced","md5":"be7a1517b84d3548fdb863e78c72a3fe","sha1":"91a88cc99f02e7ed22274fc3a6f42c6a3148ef0d","sha256":"bd2021d52dbb110212c08885e0dab9580282334d6f1d1e50b8da0270ce8c475e","sha512":"d3094c9e086c00ac17a657009e49b6d939ceb8ecc81082fda5367a0f564b83a205aa949cd14ff70940388d4e430a9b9e432a1306568bb26fb29e807ce167607b","ssdeep":"","tlshash":"b2413cf5c6be54baa5c44584471bd6255c8a04b7f1287b7fc1cba2f27361302304d959","first_seen":"2023-05-01T20:12:27Z","last_seen":"2026-03-28T18:55:39.035241Z","times_seen":194,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strmup.cc/4b640ff298e0","date":"2026-01-04T22:21:43.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strmup.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 22:21:43 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27433\r\ncf-ray: 9b8e216c7af876ef-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec4-1538f\"\r\nlast-modified: Mon, 04 May 2020 16:11:48 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1384747\r\nexpires: Fri, 25 Dec 2026 22:21:43 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3yRnMNcqefK6vPMx34yLjG3jTFsGa8IsDPPanuakZTvGHsgCcmIZILIe1L7ihJFtqiQqD5%2FOcYY56akOrhBVSmkvG3Wfawj%2B3imcR5r7GOxaFLsc%2FD6tkcFZrU8I4HN3bUSStvP4\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86927,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-03T19:21:00.254169Z","times_seen":118026,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":16,"dns":1,"connect":7,"send":0,"wait":12,"receive":2,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://strmup.cc/4b640ff298e0","date":"2026-01-04T22:21:45.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://strmup.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strmup.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 04 Jan 2026 22:21:45 GMT\r\nContent-Type: text/plain;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type\r\nAccess-Control-Allow-Origin: https://strmup.cc\r\nAccess-Control-Expose-Headers: *\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: private, max-age=300, immutable, stale-if-error=300, stale-while-revalidate=300\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":76,"dns":0,"connect":28,"send":0,"wait":35,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/core/bridge3.735.0_en.html?gdpr=1#deid=%22%22\u0026eventfe_experiment_ids=%5B%5D\u0026fid=%22goog_1565491064%22\u0026genotype_experiment_data=%7B%22experimentStateProto%22%3A%22%5B%5B%5B45713128%2Cnull%2Cnull%2C%5B%5D%5D%2C%5Bnull%2C749060184%2Cnull%2C%5Bnull%2C100%5D%5D%2C%5B45722344%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45706017%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45740207%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45668885%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45685340%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45734716%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45735891%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45663239%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45715032%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45661356%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45676441%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45675307%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45675308%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5Bnull%2C45645574%2Cnull%2C%5B%5D%5D%2C%5B45688859%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45656766%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45710689%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45710688%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45685601%2Cnull%2Cnull%2C%5B%5D%5D%2C%5Bnull%2C45685602%2Cnull%2C%5Bnull%2C500%5D%5D%2C%5B45747172%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B775241416%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B781107959%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B781107958%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B792614055%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B781107957%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45729602%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45658982%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45725657%2Cnull%2Cnull%2C%5B%5D%5D%5D%2C%5B%5B16%2C%5B%5B1%2C%5B%5B31089630%5D%2C%5B31089631%2C%5B%5B45668885%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B1000%2C%5B%5B95332046%5D%5D%5D%2C%5Bnull%2C%5B%5B95332047%5D%5D%5D%2C%5B10%2C%5B%5B95333808%5D%2C%5B95333809%2C%5B%5B635466687%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B10%2C%5B%5B95338769%2C%5B%5Bnull%2C45645574%2Cnull%2C%5Bnull%2C1%5D%5D%5D%5D%2C%5B95338770%2C%5B%5Bnull%2C45645574%2Cnull%2C%5Bnull%2C2%5D%5D%5D%5D%5D%5D%2C%5B10%2C%5B%5B95345206%5D%2C%5B95345207%2C%5B%5B45661356%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5Bnull%2C%5B%5B95351425%5D%2C%5B95351426%2C%5B%5B45676441%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B10%2C%5B%5B95356068%5D%2C%5B95356069%2C%5B%5B45685601%2Cnull%2Cnull%2C%5B%5D%5D%2C%5Bnull%2C45685602%2Cnull%2C%5B%5D%5D%5D%5D%2C%5B95356070%2C%5B%5B45685601%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5Bnull%2C45685602%2Cnull%2C%5B%5D%5D%5D%5D%2C%5B95356071%2C%5B%5B45685601%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5Bnull%2C45685602%2Cnull%2C%5Bnull%2C100%5D%5D%5D%5D%5D%5D%2C%5B10%2C%5B%5B95372277%5D%2C%5B95372278%2C%5B%5Bnull%2C745150931%2Cnull%2C%5Bnull%2C1%5D%5D%5D%5D%5D%5D%2C%5B1%2C%5B%5B95373378%2C%5B%5B792614055%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%2C%5B95373379%2C%5B%5B45747172%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B781107959%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B792614055%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B781107957%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B50%2C%5B%5B95375505%5D%2C%5B95375506%2C%5B%5Bnull%2C749060184%2Cnull%2C%5B%5D%5D%5D%5D%5D%5D%2C%5Bnull%2C%5B%5B95375930%5D%2C%5B95375931%2C%5B%5B45734716%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%2C%5B95376520%2C%5B%5B45734716%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45735891%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5Bnull%2C%5B%5B95378095%5D%2C%5B95378096%2C%5B%5B45740207%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B1%2C%5B%5B95378629%5D%2C%5B95378630%2C%5B%5B45729602%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%5D%5D%5D%2Cnull%2Cnull%2C%5Bnull%2C1000%2C1%2C1000%5D%5D%22%7D\u0026imalib_experiments=%5B95322027%2C95331589%2C95332046%5D\u0026is_eap_loader=false\u0026managed_js_experiment_id=0\u0026page_correlator=956442821057389\u0026pvsid=1666379283780804\u0026top_accessible_page_url=%22https%3A%2F%2Ffushaar.lol%2F%22","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://strmup.cc/4b640ff298e0","date":"2026-01-04T22:21:46.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /js/core/bridge3.735.0_en.html?gdpr=1 HTTP/1.1\r\nHost: imasdk.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strmup.cc/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-doubleclick-instream-static\"\r\nreport-to: {\"group\":\"ads-doubleclick-instream-static\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-instream-static\"}]}\r\ncontent-length: 273670\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 03 Jan 2026 08:47:47 GMT\r\nexpires: Sun, 03 Jan 2027 08:47:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 135239\r\nlast-modified: Thu, 11 Dec 2025 13:36:19 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":921633,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (46282)","md5":"b8a628caa16cf1cacbc31c3a44655229","sha1":"f2b676afc32fa5fe4376f5a4e34ad1f57ee7e3cc","sha256":"2b106434817792f0bee439732b0a03b2ea81c48ae77aacbea3dfa10e72dc0ad4","sha512":"3befe31c23b46b7de49c6915203d1aa922deaaf54672cf9d48e7bf84f50224c079ca02739c76eaf10f8462773e86c9657836bad4c674963eca92a8bbbc347930","ssdeep":"6144:0jM3X7CHpODSsjt/Te2TqDwcUKoiZSyBXJklAWI7qtb8A+DFdPQ+K+8HSuV2Q4+s:Y6fJTLcUKoUSyBXJc6ePsx8Tl73q","tlshash":"7a152b9cb66174268263f4f5503f014f723be866e40889bcf689d9e16e7884a4277f7c","first_seen":"2025-12-06T20:00:47.212919Z","last_seen":"2026-01-09T12:59:00.171018Z","times_seen":1047,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/templates/fushaar/css/bootstrap.min.rtl.css","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /templates/fushaar/css/bootstrap.min.rtl.css HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/play.php?vid=a50d4760e\r\nCookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; watched_video_list=NTM3MQ%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 12 Nov 2025 23:32:51 GMT\r\nexpires: Tue, 03 Feb 2026 15:48:44 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 23577\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HdbRuDcIgmo1KVsQOZmw6%2Br6B21YfcnBTQgtNqjHN9u2OXnSMiCKaxNTynSwayyr4Dw7hhlvYYS5Hd%2BnlAHpNxdesRC8v1G3uim8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8e21633d0b5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34818,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (540), with CRLF line terminators","md5":"50650996f24f8595aca871946cf4bfc7","sha1":"7fa88ac85d0f97dcd3c80c62a62dca78aedf73f2","sha256":"16725d7575da85e45223fc328ae010003775db250fda7bfdec9dc1e1676437a4","sha512":"5e1703ad4922c54176c14ccdf7a25de5c6a9c995dc969e56a77d1aa322513cb1541576b94f9eb73f6cd49ad063c85025a1d04f908a4215330eb5de6b65fb5933","ssdeep":"384:3+tv2XFJh7Laaijc2+vnRLWC+1CxOVK2Mho:3Q27DijczBWC+1CxOVKRo","tlshash":"c1f2a0c88e311944b171c7bfb7a28c46ab1530a7a67bd8a3f6e17d52fb295050423dcb","first_seen":"2023-04-07T18:47:56Z","last_seen":"2026-03-29T20:18:02.152052Z","times_seen":288,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-migrate-1.2.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-migrate-1.2.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-1c1f\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\nage: 2294346\r\nx-served-by: cache-lga21931-LGA, cache-hel1410021-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 5, 43833\r\nx-timer: S1767565302.456490,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 3063\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":7199,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7085)","md5":"eb05d8d73b5b13d8d84308a4751ece96","sha1":"743052320809514fb788fe1d3df37fc87ce90452","sha256":"1e67d8dbcca1f6fd94e077c85c2fb40fa1c2756c99238daa8da882144260a68d","sha512":"7b68a43a22a41404a2ff58e0da6a237492cad0fc3e56d216980802b4d5fb483895262a7e049340d6670002bdf899ba88c319239e60d0aae1ac31d98556b0ad6e","ssdeep":"96:tBySz91Gwyk35YrfBewIt9jKLKDs2SFNK7wIDBRANyCfVJ45NI:zySzvGw/35YbMx9jKLKD3UIDBR8VVUq","tlshash":"3fe196dc72aab5611ffa30a8503bd21b72b25aec140d95a4f08ccde5392cc5d413ab7e","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-04-03T19:25:10.846227Z","times_seen":19786,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":93,"dns":13,"connect":20,"send":0,"wait":14,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/favicons/android-icon-192x192.png","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:43.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /favicons/android-icon-192x192.png HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/play.php?vid=a50d4760e\r\nCookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; watched_video_list=NTM3MQ%3D%3D; _ga_7K5TWT1S74=GS2.1.s1767565303$o1$g0$t1767565303$j60$l0$h0; _ga=GA1.1.724187975.1767565303; dom3ic8zudi28v8lr6fgphwffqoz0j6c=72c91de3-1139-44e4-8ca3-1dba481eb2cd%3A1%3A1; pp_main_0a507188a69a9ebeee1fd7e27271db99=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 22310\r\nlast-modified: Wed, 12 Nov 2025 23:32:51 GMT\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-content-type-options: nosniff, nosniff\r\nexpires: Thu, 05 Mar 2026 15:49:26 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 23536\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eEbEkPMZ9GM%2BUWFjrKjtsCs779%2FUaPnoSeLbnRkD5dNFd781XiFqdMPR4pOH3MP1pmkHR%2FDJKNjd3hwbrIopKy%2Bku9%2FNQdP%2BGVN8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8e216c0f535ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22310,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"dcf7d645053c0bb7e0edd25960004324","sha1":"5951f5ffde7d819e499f69540b0d95cc39d0a8bd","sha256":"ce2f656adb31855d7886fbcf54add26d85fe22f49a1712cde1779bc905384700","sha512":"5efcf7a1990b99d91aa138dd3f9705178718cc56cefcfe3174ff94877d7ac938d0c16de3ea8cbfd67f03048b44ba96a4dfe72286949e2fb94f3c2a8de5b82a01","ssdeep":"384:XSmE2Pqr48wcPGh660ANCE8PR5gs+bGHmVz4LugXdy8HAs+7GZtOaEMT:CHLrPq6xAQE8PosqFV0LZkr7GZtOan","tlshash":"57a2e2d24beea9ab9075097b9435e604f80e049f7f640c941f4ee68fb53a94c561c03b","first_seen":"2023-05-02T11:02:06Z","last_seen":"2026-03-29T20:18:02.172675Z","times_seen":189,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/aclib.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strmup.cc/4b640ff298e0","date":"2026-01-04T22:21:43.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acscdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 00:40:27 GMT","end":"Thu, 05 Feb 2026 01:40:22 GMT"},"fingerprint":{"sha1":"76:9A:7C:2F:34:DA:E3:06:23:B8:73:B7:95:32:FC:FF:34:88:AB:1A","sha256":"F0:CF:B6:C8:DE:7A:81:6A:9A:D8:3E:43:29:D0:90:4D:7B:2A:8F:21:F6:9C:91:59:EA:FF:0E:B5:7E:07:E4:91"}}},"request":{"raw":"GET /script/aclib.js HTTP/1.1\r\nHost: acscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strmup.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 22:21:43 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AHVrFxN2iBpb-t5ZfS7VArRJLFCT_VqFVa-k_zQ-uVo_DGLQ5Kg_G4ZI5UED5xfr9wCf76B8\r\nx-goog-generation: 1765975833874839\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 171200\r\nx-goog-hash: crc32c=Y6PsGw==, md5=SCUDcDR8fy0FQyHgPI45Tw==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Sun, 04 Jan 2026 23:21:43 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Wed, 17 Dec 2025 12:50:33 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: accept-encoding\r\nage: 3297\r\ncf-cache-status: HIT\r\netag: W/\"48250370347c7f2d054321e03c8e394f\"\r\ncontent-encoding: gzip\r\ncf-ray: 9b8e216cbc86723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":171200,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"48250370347c7f2d054321e03c8e394f","sha1":"dce1356dc4ee7b2b650fc3b2fa5c75e2de60c840","sha256":"e3fd6b9ca5d9b8d65c6330aa94f08f24cd2b59e1834cd7c960ea6ea3417acf52","sha512":"37527c5fc8159f26120d652f8477a70703eb6fb1f30126ceb66f9a58e05ddc365a1cb34b82b5bdcb24b694036bfe2a7c3052a50d883b956cccf2e167a7188ae7","ssdeep":"3072:ZcmbG7ee6cW7n8GrMN1HDxlfm1VeDbclbsZpyQ:y/FW78GrufmyclbsZpyQ","tlshash":"f4f395083a9455037b4b6fbb271774e5e9062c4ab894099eb254bc74e2836b3fff1136","first_seen":"2025-12-17T14:33:37.34138Z","last_seen":"2026-01-13T14:12:13.867658Z","times_seen":466,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":73,"dns":34,"connect":1,"send":0,"wait":21,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"acscdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/templates/fushaar/css/jasny-bootstrap.min.css","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /templates/fushaar/css/jasny-bootstrap.min.css HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/play.php?vid=a50d4760e\r\nCookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; watched_video_list=NTM3MQ%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 12 Nov 2025 23:32:51 GMT\r\nexpires: Tue, 03 Feb 2026 15:48:44 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 23577\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AB2tjvSA1X1r8f7W6cIXiK7mIsKaFHtaJjxFtCH0ZUd9%2FrtjPPxAooS7NaElObsKhz3683ZLSb0RWZdqQbIeuCDnC%2FVhsSygvYS%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8e21633d045ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14003,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13803), with CRLF line terminators","md5":"56a224ccaaf1ad3df6ee7dbbc019aeac","sha1":"2ce1ef76b342a8fafda1e03a62b99be5340812bf","sha256":"777a9e5bb5d35fd671e5b252c67a0cf462baa8258db145ef6ea7dadf4de4b481","sha512":"5d4aabc83a5c849c66b818d21dc630da87df200b5fb0cee8f6209f7dfad5982136e2030f7d9fd9bc644a30b5689498aa40b42274ff8880a09f78d3209d64a30e","ssdeep":"96:4jVRNThJA9SfqYUV3KSIu97RC1dCVHvQroKSccwHF964Uv8zc2aHn51P/CtEDBW6:Q3uSfZDHu97RC1QVHvKDUv8zc2adB97P","tlshash":"ec52bdd17ca47a8a9e13820f90d5d6f0db1218519d982ab7f1b333895d0b78d82f9f2d","first_seen":"2023-04-07T18:47:56Z","last_seen":"2026-03-29T20:18:02.133771Z","times_seen":415,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/js/bootstrap-notify.min.js","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /js/bootstrap-notify.min.js HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/play.php?vid=a50d4760e\r\nCookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; watched_video_list=NTM3MQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 12 Nov 2025 23:32:52 GMT\r\nexpires: Tue, 03 Feb 2026 15:48:45 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 23577\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HLCY8r2bfx8vD9h79RVmXDRmt5ZxXyZEZzJ%2BCtYFETFLn6Zgja1f9dSk8Ft6xa14g5Ac8V3fSyAhHjhazAsLDtqiqIxS%2FBbJaIAh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8e21637d315ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":8216,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (595)","md5":"5ba070af9d1b1a2782851940de30879f","sha1":"d33390fc88bf68bd23eb182d7dbc77f5227081b2","sha256":"a13a07b242c80b57e0cbbacc6cfedb538d4d331ff1f9dff370519ec57407e450","sha512":"3d793cb731b6a060ea4b68dd622b76ee0db7f1ca5536fd4b4831b6f586c8f4f6634fcfc64d7dd93e85298225e9a4aba6d9d44ca3d8fabc2dfd365a02df60abe0","ssdeep":"96:YjcZsiBifeECqrETiqx8D6Eie9tJzg1YkwVgwIuIL3BMLbR7HdvxsyBvoPrrOLKE:kFi4f/7ETi7DcKtJ03LLkp1xs1O","tlshash":"a902768d7112926a825b9277a08e0300f536a615e517f63d3e3ac4e6bdb4de822173f6","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-04-03T17:07:22.646019Z","times_seen":494,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/templates/fushaar/js/jasny-bootstrap.min.js","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /templates/fushaar/js/jasny-bootstrap.min.js HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/play.php?vid=a50d4760e\r\nCookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; watched_video_list=NTM3MQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 12 Nov 2025 23:32:51 GMT\r\nexpires: Tue, 03 Feb 2026 15:48:45 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 23577\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BEx%2F%2B4HXWyrZt6GHIiARambjdvBjfOKaH5ig9aUzIQJZUOdl5w8%2B3ZnyD18ZehO4zhhqtRW%2BIUUlx5Fd0GqMC98PilmJZj%2B0KIvH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8e21637d355ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20042,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (343)","md5":"f6b6e524d29d54ada53e4172b9d91cf7","sha1":"427153c7a2d83d2ca800e397779f29b857801ad2","sha256":"e7ad856551c720cb7c6a24a8bf4a9d6b6b24c24f07109cde96366338e53a4ff8","sha512":"13c01f28dd38a2b10ce27bc4dc60d510b2067e408ba1c0a26b0eb7fd39dd4300265278d529925e56d40bdc06a32d024558ca10a20d1ced6c186cc9ac263cc36d","ssdeep":"384:rKLCtf00Rd7HyeSOjjWhuU4AHL6JLeUxVM1MJsisNV+bocACk3N7K1nj:rbR00DHyNOjKhuVAWLxA1MJsisNV+boo","tlshash":"4e92664579b0225903ffa17601db4749f336eb28984a411cb4789ad76e39d0a72bbf3c","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-03-29T20:18:02.152883Z","times_seen":582,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/templates/fushaar/js/jquery.cropit.js","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /templates/fushaar/js/jquery.cropit.js HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/play.php?vid=a50d4760e\r\nCookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; watched_video_list=NTM3MQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 12 Nov 2025 23:32:51 GMT\r\nexpires: Tue, 03 Feb 2026 15:48:45 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nage: 23577\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N7IGG11hqgiBAgwSFmCNWGH%2FXGqEV%2BHiJjuJl97Cfa0kqZJe%2BOPG3imUN03F1GGYE8Yh2X%2FopcLyJNCVZjzAdfOr3GLqrn1Smo1C\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b8e21637d3a5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27578,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (27266)","md5":"cd82e0edbcecf087be901e8e7ed0d035","sha1":"2cedce9f87501152efa36eb1949d95c0ca4ff200","sha256":"b8a0d09df5a79e5e9494b3061eeff55883870c66714879886348c5095faa7840","sha512":"972ad1b4fe72296e7123bebe0c1e18aaf1fe1617ed41762b0e0b3afc9a7e58c0a4f9e5354094808d94bcebcd8f7c1d12b9c794ae17c47bc9cb3586ca9899193f","ssdeep":"384:b4Ku+vsSCLma/KSUOW5Gur0433Pfmoz8DKNzmavSbnCIjcIOHinWK0inVcaTJX5s:XWmaiSO5Gu/wemaybVtPJXm","tlshash":"4fc2b4193ba1367742a7f1a0760f800c1275e975e446e38cb638d8fa9af18148a77f76","first_seen":"2023-03-07T12:01:39Z","last_seen":"2026-03-29T20:18:02.154507Z","times_seen":606,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fushaar.lol/uploads/thumbs/fba277bb0.jpg","fqdn":"fushaar.lol","domain":"fushaar.lol","tld":"lol"},"ip":{"addr":"172.67.201.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:42.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fushaar.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:54:56 GMT","end":"Wed, 01 Apr 2026 21:52:41 GMT"},"fingerprint":{"sha1":"B6:9A:05:B3:00:88:AD:98:61:72:F9:02:0B:A1:95:CE:D4:76:31:FF","sha256":"AD:6B:00:F7:DE:3E:70:8F:E2:71:65:1B:29:7E:42:32:16:E1:EE:D4:5A:AE:21:BA:BA:8B:D0:60:6A:10:45:F5"}}},"request":{"raw":"GET /uploads/thumbs/fba277bb0.jpg HTTP/1.1\r\nHost: fushaar.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/play.php?vid=a50d4760e\r\nCookie: PHPSESSID=e5206b2de5aedeb2e18bf3310a74b86f; watched_video_list=NTM3MQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 22:21:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 133108\r\nlast-modified: Mon, 15 Dec 2025 15:34:51 GMT\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-content-type-options: nosniff, nosniff\r\nexpires: Thu, 05 Mar 2026 16:08:45 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nage: 22376\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kq1lZggbLZsmtLyAu9Lun%2FUHFgBVRtlphfN7am9010VAQwncf28JlrLSNBQx4cVvAwC4liw1IubwjzQwGV1ng0pdJ8OYXqx5xbuY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8e21637d2a5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":133108,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 1271x720, components 3","md5":"fdb6da4f2026bb7ff2c085d74ca57689","sha1":"8d47d4f72c7df1ad5955e42253a87e4af51e711e","sha256":"77723d7200ddcfefada835357579410c1d1216b4b81b8a724a4e818bf9d4875f","sha512":"d96ef1bcb8c7bfe3d719fba2839f3818d5e6c2cb6ec9819291dfd94dd72429dc31ad1228c62579403d8d63568def630ce9489448816e833fab3e3341d7ed1bf5","ssdeep":"3072:nsIB1LZQQPfg6mhh53/wlxjo0Vijr1hEwK93uOxX1K:ns21LZHQ6074/oPjr1hEwK93usXk","tlshash":"9cd3123ac4432feb560f36866e834c8a8f19513054dffb39161be3819930e651cb67ea","first_seen":"2026-01-04T22:22:26.202597Z","last_seen":"2026-01-04T22:22:26.202597Z","times_seen":1,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"fushaar.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bvtpk.com/tag.min.js","fqdn":"bvtpk.com","domain":"bvtpk.com","tld":"com"},"ip":{"addr":"172.67.154.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fushaar.lol/play.php?vid=a50d4760e","date":"2026-01-04T22:21:43.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bvtpk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 20:07:09 GMT","end":"Thu, 05 Feb 2026 21:05:30 GMT"},"fingerprint":{"sha1":"D2:20:C9:EE:4B:2D:3A:82:43:E2:14:9E:C3:25:30:01:9F:8F:BB:C3","sha256":"D2:57:0B:6C:75:32:2D:6D:C0:F7:1B:32:FC:56:BA:06:7F:64:4B:FC:95:E2:29:A1:4F:59:5C:DD:D3:8D:37:7B"}}},"request":{"raw":"GET /tag.min.js HTTP/1.1\r\nHost: bvtpk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fushaar.lol/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 22:21:43 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-trace-id: c5adf305385dffb7816d35f51d8f3532\r\ncache-control: public, max-age=600, s-maxage=1800\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 1339\r\ncf-cache-status: HIT\r\nlast-modified: Sun, 04 Jan 2026 21:59:23 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BAZBoPKc22X3VqZ8EzFKSANf1KmuJvCIhhaqlcNvITpm7VG4XBab%2BQ9reORqjhbc7uprb%2Fai8D1dDpcc7qOqyNvMxtqxunvxHQ%3D%3D\"}]}\r\ncf-ray: 9b8e21691cf1dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112428,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6105483638bf5e8a75281fe5e1724593","sha1":"eda0189eb558b183b96f986dc5d19383f38d0cef","sha256":"14de16fbe0c19c617049209624382077fc976dec843e4c62b49ba9ad492231f0","sha512":"13b76442e6e3e2af5315da9b98e1ae6902c966521edf1b12373e7fc488902639d73b5fb515c085c6ee0c6e666ffbf4adda3acfb8ed8f5353fbea2cdec7771133","ssdeep":"3072:tXki1TG8YlAVRzIqwL76WJHpYx85/MVzUL:6WTGvlVqw5JJdQza","tlshash":"7db3295673a277d21a6e60d42d57d60573fd8c80488f8867e3c8787972d081cd3abbea","first_seen":"2025-12-18T11:35:07.715482Z","last_seen":"2026-01-08T09:54:56.313421Z","times_seen":771,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":100,"dns":46,"connect":6,"send":0,"wait":7,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"bvtpk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0ae7zwoezyki.s4.adsco.re/","fqdn":"0ae7zwoezyki.s4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"185.200.116.60","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://strmup.cc/4b640ff298e0","date":"2026-01-04T22:21:45.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.s4.adsco.re","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Nov 2025 09:14:21 GMT","end":"Wed, 11 Feb 2026 09:14:20 GMT"},"fingerprint":{"sha1":"7A:03:26:53:17:4A:DA:4B:6B:97:17:4A:3D:39:18:9E:5A:E0:99:3D","sha256":"BC:B6:01:45:97:52:31:7E:50:44:A4:6C:B3:E7:A3:3D:8E:5A:1E:32:79:2D:E0:BF:94:ED:5C:36:3A:0D:94:6E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 0ae7zwoezyki.s4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://strmup.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://strmup.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 22:21:46 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Tue, 03 Oct 2023 13:29:59 GMT\r\netag: \"651c1757-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":1137,"timings":{"blocked":-1,"dns":351,"connect":183,"send":0,"wait":227,"receive":1,"ssl":375},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}