{"report_id":"2eb7cea7-42e1-4257-ae90-1e61f89b11e3","version":6,"status":"done","tags":[],"date":"2025-11-17T09:40:19Z","url":{"schema":"http","addr":"y825.zordodating.net/DwkA?prid=1011470444542304257\u0026sub1=103671139\u0026usid=10073468","fqdn":"y825.zordodating.net","domain":"zordodating.net","tld":"net"},"ip":{"addr":"104.21.33.56","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"h1r66dating.net/SQAA/12177/oth/2319?i=E_K9qWka7Ws\u0026u=2158176018091404650","fqdn":"h1r66dating.net","domain":"h1r66dating.net","tld":"net"},"title":"Webangocams","dom":{"size":75472,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (30800)","md5":"2d74669a5d3f39ef1fe9b4394a6fb4ec","sha1":"8c575369f5945eba25fce3dc62e63f9a41dd7d87","sha256":"9d13fe948054552928121b1f07d020bb5fe823915778b9241a4359bc9352ee81","sha512":"a71e42428dab9553e96918e8562f6046b7b6fe137742b07408dcc6391946d577b0060d1782effa87b4a7cfef6164462670b4bf8ab2b4f36fe5a7e9c2c119ba4e","ssdeep":"1536:pjwhQyBegiMBV4APm9jnKDgKWdQeHICFad0DpN87z6h9lVRQDXTj:pjwhQyBegiMBV4APmBKbsQeHKr","tlshash":"d073e64664f3222602a370a56baf73027067a007b84ded81be6d07d5df55c1ab3e3f99","dom_hash":"domhash601947017d411c40eeb5d33b0ed11325","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"y825.zordodating.net/DwkA?prid=1011470444542304257\u0026sub1=103671139\u0026usid=10073468","fqdn":"y825.zordodating.net","domain":"zordodating.net","tld":"net"},"ip":{"addr":"104.21.33.56","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-22T09:40:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"y825.zordodating.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"y825.zordodating.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"y825.zordodating.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"y825.zordodating.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"h1r66dating.net","ip":{"addr":"104.21.50.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-10-03","domain_rank":0,"first_seen":"2025-11-09T07:26:33.917096Z","last_seen":"2025-11-09T07:26:33.917096Z","alert_count":0,"request_count":24,"received_data":698806,"sent_data":10622,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"www2-eu.zordodating.net","ip":{"addr":"104.21.33.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-10-03","domain_rank":0,"first_seen":"2025-11-08T07:34:45.897781Z","last_seen":"2025-11-08T07:34:45.897781Z","alert_count":0,"request_count":1,"received_data":76779,"sent_data":1000,"comment":"","tags":null,"fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-11-16T22:13:25.550079Z","alert_count":0,"request_count":2,"received_data":52098,"sent_data":1100,"comment":"","tags":null,"fingerprints":null},{"fqdn":"alexatracker.com","ip":{"addr":"104.21.85.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-07-27","domain_rank":160760,"first_seen":"2020-10-28T18:44:06Z","last_seen":"2025-11-11T06:03:15.316027Z","alert_count":0,"request_count":1,"received_data":9017,"sent_data":663,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"apptrck.metatrckpixel.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-08-07","domain_rank":1706398,"first_seen":"2025-01-16T04:03:58.770954Z","last_seen":"2025-11-12T22:34:25.664307Z","alert_count":0,"request_count":1,"received_data":4047,"sent_data":507,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"browser.sentry-cdn.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2018-05-30","domain_rank":23677,"first_seen":"2018-07-13T11:42:06Z","last_seen":"2025-11-16T23:45:37.600386Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":486,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-11-16T22:13:25.532985Z","alert_count":0,"request_count":2,"received_data":10437,"sent_data":834,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"y825.zordodating.net","ip":{"addr":"104.21.33.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-10-03","domain_rank":0,"first_seen":"2025-11-17T09:40:20.108756Z","last_seen":"2025-11-17T09:40:20.108757Z","alert_count":20,"request_count":5,"received_data":29191,"sent_data":3045,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2025-11-16T22:32:29.145509Z","alert_count":0,"request_count":1,"received_data":88519,"sent_data":409,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"h1r66dating.net/SQAA/12177/oth/2319?i=E_K9qWka7Ws\u0026u=2158176018091404650","fqdn":"h1r66dating.net","domain":"h1r66dating.net","tld":"net"},"ip":{"addr":"104.21.50.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"afbb39609d4a3f56931294998edfefce","sha1":"055c6ec0200c2d94c414b8a648e2ffbdbfbeb99b","sha256":"16951f8aa9a7ee3684b4519f6f687b69d7a69fce7e0a70e9892d553eee6ba4fa","sha512":"ef9e505636b855ee5aa02be719b8fcf94dc408a4c8fefaef9c47ebc0dc81b9525b4f9872584666fd6272dbb1a5d269dd642f5a6dec0f3a90d81adaa24f6ff966","ssdeep":"","tlshash":"24800455714110034f57155050171c44443c007155407cc001c0d4511d51030110545c","size":35,"data":"","first_seen":"2025-06-22T03:23:30.168642Z","last_seen":"2026-03-26T19:52:32.932442Z","times_seen":281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-04-06T05:07:59.567798Z","times_seen":136826,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1r66dating.net/SQAA/12177/oth/2319?i=E_K9qWka7Ws\u0026u=2158176018091404650","fqdn":"h1r66dating.net","domain":"h1r66dating.net","tld":"net"},"ip":{"addr":"104.21.50.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"732ed39973344e0a9c3103115e207173","sha1":"253af9e03bad18a8b64325a01c2df8609bcc313d","sha256":"109d9e38be76272365fb0ac528da1aa0cfe2ac7c35217cab1692673fc69ef07f","sha512":"4a98f2db8f1966139e6a790531a66beabfc7866a1338a6819e1a8eac6e0d2be5a03d93e97275b7ea1fe5f61239315019b30e40f0c67da3d2e7e3a21fb8c91785","ssdeep":"1536:iwhQyBegiMBV4APm9jnKDgKWdQeHICFad0DpN87z6h9lVRQDXTe:iwhQyBegiMBV4APmBKbsQeHKm","tlshash":"7a53e98a64f3212145a3b4e55b6fb3427077a003788ded51be6c0b85df1185ab3f6f8a","size":62810,"data":"","first_seen":"2025-11-09T07:26:39.751798Z","last_seen":"2025-12-29T15:50:07.624182Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apptrck.metatrckpixel.com/js-sdk-loader/92285f7346cf7608a050e34f7bbe2bbd.min.js","fqdn":"apptrck.metatrckpixel.com","domain":"metatrckpixel.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f20c0f34033e682a57ce92014db821b","sha1":"5115f8996fcca5b342fbe58de5a6344d07b8ad66","sha256":"f8c9f66b168867f1b57c45529e167b404d72567a8396dabf20746406ea3ae6ef","sha512":"4eea7f32d0c09d3bfffd7c4820143b3efdb58e30805e7d153f2cca3a92f8b3add79a21091e8b0d086b9b0da02127b520a0a21c5fc432b2f6002779bbcea4344b","ssdeep":"","tlshash":"3a51b6a47fcdbcb34ba73b31407f280573b269996449c6805a19fa942c61819779fe4c","size":2811,"data":"","first_seen":"2025-02-12T19:11:40.465147Z","last_seen":"2026-04-06T03:43:02.411228Z","times_seen":778,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y825.zordodating.net/DwkA/?prid=1011470444542304257\u0026sub1=103671139\u0026usid=10073468\u0026gr64=KS3wSWka7Wo\u0026tbsession=2158176018091404650\u0026c=890077925","fqdn":"y825.zordodating.net","domain":"zordodating.net","tld":"net"},"ip":{"addr":"104.21.33.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"14ef502473786ce37fbc1240398d28bf","sha1":"65758ba9d2f4d9d963623e035820b400663260a2","sha256":"5dd60af8bdd01d204d93ee43e20000e9a8e240a3b461e2e26b505c7712f0a63d","sha512":"6e0fc357ed767184c64d9b67ec7c46f9079115a4c2d9d352f2030db1ee5204c33ec3c8fbf70e24bc493a89fc93ede90e4efac1dfd8af15128a98dc754e33f6a5","ssdeep":"","tlshash":"1e21c4c5f4e56203467b3924125a8044b5b5c57b2655a854383dcf085fc283d73e736f","size":1171,"data":"","first_seen":"2025-04-16T04:05:26.915307Z","last_seen":"2026-04-06T03:43:02.44032Z","times_seen":763,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y825.zordodating.net/DwkA/?prid=1011470444542304257\u0026sub1=103671139\u0026usid=10073468\u0026gr64=KS3wSWka7Wo\u0026tbsession=2158176018091404650\u0026c=890077925","fqdn":"y825.zordodating.net","domain":"zordodating.net","tld":"net"},"ip":{"addr":"104.21.33.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a4ca5ae0afe4377df23c6f9c56daf71b","sha1":"7c6d1b73c8d2e2c369e45733287616860760b5a7","sha256":"74757c1b90defcdfacdd0e1998276f7d3549f0c44e3b3f53d3bca2ee5ecf8d35","sha512":"781d98e7162a155375829e89e56ee6d8159adc808f301f438506b07c10c8d17e7c6ffe598f1d1f735133a6a191b4acebe68b126e2bba5ca43bedb921ced048fa","ssdeep":"","tlshash":"10014cd9a0b31d4a51b332c35b53ae0a3222016632d1d945ba8f4e183f18f2ab1d6dcc","size":832,"data":"","first_seen":"2025-11-17T09:40:24.259745Z","last_seen":"2025-11-17T09:40:24.259745Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y825.zordodating.net/static/js/build/bd.js","fqdn":"y825.zordodating.net","domain":"zordodating.net","tld":"net"},"ip":{"addr":"104.21.33.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ba5abc0286df08c9b252375cd286fa6","sha1":"c65b1f1ad7a263569e4e712c8ea841f7cae51445","sha256":"6f9dd1abb570bb9010d444c79700165f4948dd910b40e87ab8602ae8aac87c9b","sha512":"201611a7578e013dc9329debbb8b8a9085c6368afa5abad1942b2085868fa8f217fbe073b46b9e060da528d50f7600203b52b7c0b37f6f33752c52210c555126","ssdeep":"192:dUJUp00JUS/M+7dhsM3U3L07yCpODpIAg5wpgEMHNU:dUEtXM+7dyzCo1zg5jEMO","tlshash":"9412d8636e32e5f442f21045343ba788f67e16bd5036a4b1b1dcce88d58c547e972b72","size":9515,"data":"","first_seen":"2025-03-04T00:32:26.464982Z","last_seen":"2026-04-06T03:43:02.394883Z","times_seen":778,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y825.zordodating.net/DwkA/?prid=1011470444542304257\u0026sub1=103671139\u0026usid=10073468\u0026gr64=KS3wSWka7Wo\u0026tbsession=2158176018091404650\u0026c=890077925","fqdn":"y825.zordodating.net","domain":"zordodating.net","tld":"net"},"ip":{"addr":"104.21.33.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d6f344768967524e20ff1f770860e1e","sha1":"11f350bde2f2a4cc12ec751be098e2c39e92096d","sha256":"eccacb00a9ccf76cd55c8d749108d0fd1200222c62a4656a7543a4f87f027c75","sha512":"3e1b3ee14e3670fdf345838c4211dea981361012f31073faf5fa1b4b2d1260bf055e9c009cda98b018e4d1addeffd1a8e538d26d3fa3c4f5083a1a21c077c199","ssdeep":"","tlshash":"8721ad19a062419006f371910b7fb2156877626b3080dcc47a5dc3417f7ee977e826e9","size":1183,"data":"","first_seen":"2025-11-17T09:40:24.261912Z","last_seen":"2025-11-17T09:40:24.261912Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"h1r66dating.net/static/LgAA/pics-for-bg/pic-22.jpg","fqdn":"h1r66dating.net","domain":"h1r66dating.net","tld":"net"},"ip":{"addr":"104.21.50.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h1r66dating.net/SQAA/12177/oth/2319?i=E_K9qWka7Ws\u0026u=2158176018091404650","date":"2025-11-17T09:39:56.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1r66dating.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 04:43:47 GMT","end":"Sat, 07 Feb 2026 05:41:27 GMT"},"fingerprint":{"sha1":"7E:FF:1F:56:F3:6F:FF:71:0F:35:43:D1:FF:4B:6E:54:C3:C2:31:0F","sha256":"A3:B8:6B:84:72:A2:4D:B7:32:C3:C3:40:2C:42:E4:A3:58:2E:D6:F9:FB:BA:7A:BC:CE:41:C3:AD:FE:CE:11:15"}}},"request":{"raw":"GET /static/LgAA/pics-for-bg/pic-22.jpg HTTP/1.1\r\nHost: h1r66dating.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 17 Nov 2025 09:39:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 43104\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 06 Jul 2020 13:43:08 GMT\r\netag: \"5f032a6c-a860\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1725\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VUQzIzEoaVin4k4HLjHV7BMe1e5oliuKCqnf1Smavw1l2WcsdZQfsycy48r1bMY1o3ZuC%2FglC2%2BwPOXf%2BePxeEkQgDgYYLtqkkCYM88%3D\"}]}\r\ncf-ray: 99fe43864c847127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43104,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 430x430, components 3","md5":"84f78a1e10827f883c8d8f5fd1a333fe","sha1":"80a1aac9b299da85ae42e386d6b6f3f38d83e15a","sha256":"127ef6c205fe53ad15b69f3ad3331bb642cabbf958452cceb692d9df426e0a1a","sha512":"fdf0e86aa4466c435006500bc9776f970b622087bc0bef36b2795f952b1f7ceb83c2a224cd983ea1f8356c0ac6c58f297655df748e257becb6bb523593c83850","ssdeep":"768:ZphLgS8MPPHRYJYDO6dHtfV0K5bQV1UeP2fUNxCJl7O9ABFo3Ukjitw:7h8S8MDtSie1Nx39A/kjX","tlshash":"bf13f13fd077cf80686fa32897ff21576b2717e2562135baa4153b6c2e1b3643948493","first_seen":"2024-12-12T07:23:06.780753Z","last_seen":"2025-12-29T15:50:07.605527Z","times_seen":31,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1r66dating.net/static/LgAA/favicon-150x150.png","fqdn":"h1r66dating.net","domain":"h1r66dating.net","tld":"net"},"ip":{"addr":"104.21.50.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h1r66dating.net/SQAA/12177/oth/2319?i=E_K9qWka7Ws\u0026u=2158176018091404650","date":"2025-11-17T09:39:57.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1r66dating.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 04:43:47 GMT","end":"Sat, 07 Feb 2026 05:41:27 GMT"},"fingerprint":{"sha1":"7E:FF:1F:56:F3:6F:FF:71:0F:35:43:D1:FF:4B:6E:54:C3:C2:31:0F","sha256":"A3:B8:6B:84:72:A2:4D:B7:32:C3:C3:40:2C:42:E4:A3:58:2E:D6:F9:FB:BA:7A:BC:CE:41:C3:AD:FE:CE:11:15"}}},"request":{"raw":"GET /static/LgAA/favicon-150x150.png HTTP/1.1\r\nHost: h1r66dating.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 17 Nov 2025 09:39:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 8160\r\npriority: u=6,i=?0\r\nlast-modified: Tue, 07 Jul 2020 11:47:24 GMT\r\netag: \"5f0460cc-1fe0\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1663\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dpoQR7pLUGBxL1baz3Dx%2BDmCwk1FbSh0CbmPfkwwu3kAmnpm8yoFiS5Sg9Enj1BFbzFUKdPyB9t%2BR%2Fyv2NWvxDihVnPWFUhomKOmXTvr8w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 99fe4389bfce783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8160,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"585c8f17126dd3ba0d52b5af80a5ad34","sha1":"161a95931d5ae691138f5431352454828c132868","sha256":"44d952f7b2062053c3f4174a2e80b584ef18a4cdf20d0c1d860f69b5c2265683","sha512":"89fdf261647dd5688fcd4e5546f0915a37b841b41a67ab809bf90b3063d883112a7ae497276c3f5d2b15e627c72be0777925a7a9c81d8b9e3d5188dba5055987","ssdeep":"192:I7Fb9xz7My8tw7TQ18oWCyOwvprVIy2jcsLo09B04V:IHxzIdtIMVOrVIyC9","tlshash":"90f1bf6cd806f841f74673ea01ff604d2373f680ebb26af2a51dd985b9603e429216d8","first_seen":"2023-05-03T17:23:48Z","last_seen":"2026-02-16T16:29:42.342448Z","times_seen":165,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1r66dating.net/stats","fqdn":"h1r66dating.net","domain":"h1r66dating.net","tld":"net"},"ip":{"addr":"104.21.50.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h1r66dating.net/SQAA/12177/oth/2319?i=E_K9qWka7Ws\u0026u=2158176018091404650","date":"2025-11-17T09:39:57.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1r66dating.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 04:43:47 GMT","end":"Sat, 07 Feb 2026 05:41:27 GMT"},"fingerprint":{"sha1":"7E:FF:1F:56:F3:6F:FF:71:0F:35:43:D1:FF:4B:6E:54:C3:C2:31:0F","sha256":"A3:B8:6B:84:72:A2:4D:B7:32:C3:C3:40:2C:42:E4:A3:58:2E:D6:F9:FB:BA:7A:BC:CE:41:C3:AD:FE:CE:11:15"}}},"request":{"raw":"POST /stats HTTP/1.1\r\nHost: h1r66dating.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 10085\r\nOrigin: https://h1r66dating.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 17 Nov 2025 09:39:57 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6dUWGu%2FSl5Pgc9Pjz9%2FIEwfUEDDo%2Bth5nuiVOoJVPoZHORer7iT6XMPP76jSUjz7CiNl%2BsehSzP183HYMEdBiWOmv458aTiZD4tuGshL%2Fw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99fe438a1fda783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-04-06T05:11:39.684757Z","times_seen":227965,"resource_available":true,"data":null}},"time_used":405,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":405,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y825.zordodating.net/static/js/build/bd.js","fqdn":"y825.zordodating.net","domain":"zordodating.net","tld":"net"},"ip":{"addr":"104.21.33.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y825.zordodating.net/DwkA/?prid=1011470444542304257\u0026sub1=103671139\u0026usid=10073468\u0026gr64=KS3wSWka7Wo\u0026tbsession=2158176018091404650\u0026c=890077925","date":"2025-11-17T09:39:55.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zordodating.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 20:45:35 GMT","end":"Fri, 06 Feb 2026 21:44:15 GMT"},"fingerprint":{"sha1":"A1:D3:F1:FF:EF:63:90:BD:21:57:9A:7D:C6:01:BE:AD:24:FE:01:D5","sha256":"B3:62:34:26:C0:76:F7:54:3E:0C:F6:06:79:5C:C8:1C:09:1D:B4:3B:0F:5B:FF:46:1C:D0:67:D8:9A:FF:97:4F"}}},"request":{"raw":"GET /static/js/build/bd.js HTTP/1.1\r\nHost: y825.zordodating.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y825.zordodating.net/DwkA/?prid=1011470444542304257\u0026sub1=103671139\u0026usid=10073468\u0026gr64=KS3wSWka7Wo\u0026tbsession=2158176018091404650\u0026c=890077925\r\nCookie: trbaruid=2158176018091404650\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GH5aOu6cJgKyXSgXzc4ehAdzZXrSj4aWdqMPRkRPDrcqODBPNh5nFvgN6yE%2FStG3aSKvyGArz%2FnyQ%2BxDC9A3yy5OObExbM4DRRrxm4SSf%2F3OfcN5\"}]}\r\ncontent-encoding: br\r\ndate: Mon, 17 Nov 2025 09:39:55 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"static/js/build/bd.0eb0a99b62.js\"\r\ncf-ray: 99fe437e6a591525-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nage: 36279\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9515,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7944)","md5":"9ba5abc0286df08c9b252375cd286fa6","sha1":"c65b1f1ad7a263569e4e712c8ea841f7cae51445","sha256":"6f9dd1abb570bb9010d444c79700165f4948dd910b40e87ab8602ae8aac87c9b","sha512":"201611a7578e013dc9329debbb8b8a9085c6368afa5abad1942b2085868fa8f217fbe073b46b9e060da528d50f7600203b52b7c0b37f6f33752c52210c555126","ssdeep":"192:dUJUp00JUS/M+7dhsM3U3L07yCpODpIAg5wpgEMHNU:dUEtXM+7dyzCo1zg5jEMO","tlshash":"9412d8636e32e5f442f21045343ba788f67e16bd5036a4b1b1dcce88d58c547e972b72","first_seen":"2025-03-04T00:32:26.464982Z","last_seen":"2026-04-06T03:43:02.394883Z","times_seen":778,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"y825.zordodating.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"y825.zordodating.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"y825.zordodating.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"y825.zordodating.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1r66dating.net/static/LgAA/bondage-img.jpg","fqdn":"h1r66dating.net","domain":"h1r66dating.net","tld":"net"},"ip":{"addr":"104.21.50.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h1r66dating.net/SQAA/12177/oth/2319?i=E_K9qWka7Ws\u0026u=2158176018091404650","date":"2025-11-17T09:39:56.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1r66dating.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 04:43:47 GMT","end":"Sat, 07 Feb 2026 05:41:27 GMT"},"fingerprint":{"sha1":"7E:FF:1F:56:F3:6F:FF:71:0F:35:43:D1:FF:4B:6E:54:C3:C2:31:0F","sha256":"A3:B8:6B:84:72:A2:4D:B7:32:C3:C3:40:2C:42:E4:A3:58:2E:D6:F9:FB:BA:7A:BC:CE:41:C3:AD:FE:CE:11:15"}}},"request":{"raw":"GET /static/LgAA/bondage-img.jpg HTTP/1.1\r\nHost: h1r66dating.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 17 Nov 2025 09:39:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 58384\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 27 Sep 2021 08:26:50 GMT\r\netag: \"6151804a-e410\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4812\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cOMQOd8H%2BDlsS%2B1v0Obn22Z8DpyWkTu%2BXhHCnOqz9vQPsdTxN9jFo1la5jKJY2gWdv%2FfY1vRpFXrhO1fmziFu7bfg%2FiazpZDgE8ASf0%3D\"}]}\r\ncf-ray: 99fe43861c3c7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58384,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 430x430, components 3","md5":"01c6b521499692c9024ce910b424b72e","sha1":"b887aa4da4f462d0770cc722bc3ec950a9fd0832","sha256":"398fcb48f7904683251ad3662e5fb0101ca8053706b21379d744941b142084d7","sha512":"fe8795421e9b1f58601f023c6998e0749a17ea0658d0295c65e24588c4c037327e0f23efc78308ec7eaf6852c2a67287ca07ab9d77a760e3a80ca245b0da6add","ssdeep":"1536:+UaNWQmjYDqVJK+FxcJIgTMbjVuE6DBDgyzCt:IQQIY2bTxgIgTw/4RgyzCt","tlshash":"314301c8b3522135db155b771dd7a2cb800161024aef65f8b5c4c0ab29eb2dbbba86d1","first_seen":"2024-12-12T07:23:06.77331Z","last_seen":"2025-12-29T15:50:07.604111Z","times_seen":31,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1r66dating.net/static/LgAA/pics-for-bg/pic-5.webp","fqdn":"h1r66dating.net","domain":"h1r66dating.net","tld":"net"},"ip":{"addr":"104.21.50.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://h1r66dating.net/SQAA/12177/oth/2319?i=E_K9qWka7Ws\u0026u=2158176018091404650","date":"2025-11-17T09:39:56.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1r66dating.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 04:43:47 GMT","end":"Sat, 07 Feb 2026 05:41:27 GMT"},"fingerprint":{"sha1":"7E:FF:1F:56:F3:6F:FF:71:0F:35:43:D1:FF:4B:6E:54:C3:C2:31:0F","sha256":"A3:B8:6B:84:72:A2:4D:B7:32:C3:C3:40:2C:42:E4:A3:58:2E:D6:F9:FB:BA:7A:BC:CE:41:C3:AD:FE:CE:11:15"}}},"request":{"raw":"GET /static/LgAA/pics-for-bg/pic-5.webp HTTP/1.1\r\nHost: h1r66dating.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 17 Nov 2025 09:39:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20640\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 03 Jul 2020 10:31:26 GMT\r\netag: \"5eff08fe-50a0\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1725\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Aa1Rx0663bomLoljab%2B5TwQVbZ5xuHTsljzJPVVUUTukTDA7rBgvpARScidzfvCZOU27TLexo8L%2BFNlp3oCMZOG%2FaZbc%2Fq3OCle6daY%3D\"}]}\r\ncf-ray: 99fe43863c697127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20640,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"09ce2a659b023468211d269738eb98a4","sha1":"53bff0b606a9118fdfb7ec0330d5687ca81374a4","sha256":"c26d2443c1efb7dc23c13e829e11b7268fc4b62d4f7713d5f4e2756303eed5ac","sha512":"4599cc366b57e044efc6d789e86977bd0abfa17b264bfa48bd8d114c3b517e1c2340641cc54286c7044a282678a3b82f9ec5b59fadb1e305f31b4918f1760551","ssdeep":"384:oAmdIdr1G0ZmpT6a8jZGI0H9s5u1eYnJ/rHowiHb2va9+K4pYhsH:E6drfZWN8s/eYnJ/rIwiH+rYhsH","tlshash":"3f92d1b53009fb12dac96ea348ba58ef9e0d5c80c69792705ba4c1237c5adf14e21e4a","first_seen":"2023-05-03T17:23:48Z","last_seen":"2026-02-16T16:29:42.362559Z","times_seen":169,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1r66dating.net/static/LgAA/foot-img.jpg","fqdn":"h1r66dating.net","domain":"h1r66dating.net","tld":"net"},"ip":{"addr":"104.21.50.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h1r66dating.net/SQAA/12177/oth/2319?i=E_K9qWka7Ws\u0026u=2158176018091404650","date":"2025-11-17T09:39:56.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1r66dating.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 04:43:47 GMT","end":"Sat, 07 Feb 2026 05:41:27 GMT"},"fingerprint":{"sha1":"7E:FF:1F:56:F3:6F:FF:71:0F:35:43:D1:FF:4B:6E:54:C3:C2:31:0F","sha256":"A3:B8:6B:84:72:A2:4D:B7:32:C3:C3:40:2C:42:E4:A3:58:2E:D6:F9:FB:BA:7A:BC:CE:41:C3:AD:FE:CE:11:15"}}},"request":{"raw":"GET /static/LgAA/foot-img.jpg HTTP/1.1\r\nHost: h1r66dating.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 17 Nov 2025 09:39:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15239\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 21 Apr 2022 14:11:37 GMT\r\netag: \"62616619-3b87\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4812\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B0dD%2B6m%2F5SwRXvgnzPbgfftPni%2Bps1bySQHIGydxG%2BW%2FmK%2FOXWtRh%2BUuhIqfl7CvgV4gsb3CdzMSqb8iWG3SbSBkADncD6oSXmFivfA%3D\"}]}\r\ncf-ray: 99fe43862c5f7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15239,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 430x430, components 3","md5":"d77d36528fda14a76d43ad599237804f","sha1":"16285475ca1686e5ffaed47ad874fd03112f6ae9","sha256":"19472c216a9c8ca4d823d36828ec21732900b7ccb7b02e3e03b0baa5a264f86e","sha512":"f0fd50d8aed37574ff2396111ee9044c1a1c4e2f18cf8a43336482bf7419a8bf384df33acafb81b561457705534ba78cffc3c00052688051920809b729909a3b","ssdeep":"384:M12BrxWUVUNKKgzHsFFiFLM8XT8b0fgDz5N0V:M12BrxTVUNKKEIM4b0oxi","tlshash":"b762be0fd361cc20f591937c46b0ce06a1383bab710339a362d8fa56dc19bb71eb2555","first_seen":"2024-12-12T07:23:06.753291Z","last_seen":"2025-12-29T15:50:07.610769Z","times_seen":31,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1r66dating.net/static/LgAA/3-1.png","fqdn":"h1r66dating.net","domain":"h1r66dating.net","tld":"net"},"ip":{"addr":"104.21.50.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h1r66dating.net/SQAA/12177/oth/2319?i=E_K9qWka7Ws\u0026u=2158176018091404650","date":"2025-11-17T09:39:56.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1r66dating.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 04:43:47 GMT","end":"Sat, 07 Feb 2026 05:41:27 GMT"},"fingerprint":{"sha1":"7E:FF:1F:56:F3:6F:FF:71:0F:35:43:D1:FF:4B:6E:54:C3:C2:31:0F","sha256":"A3:B8:6B:84:72:A2:4D:B7:32:C3:C3:40:2C:42:E4:A3:58:2E:D6:F9:FB:BA:7A:BC:CE:41:C3:AD:FE:CE:11:15"}}},"request":{"raw":"GET /static/LgAA/3-1.png HTTP/1.1\r\nHost: h1r66dating.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h1r66dating.net/static/LgAA/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 17 Nov 2025 09:39:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 480\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 03 Jul 2020 10:22:52 GMT\r\netag: \"5eff06fc-1e0\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1725\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pApShp5Q1HllSxxGYXcLMjxupdNg%2Bj9lkME37Ix7Mzi4KOity5U6t97x5Up5Ow1kkR77eYfyS0IeKYAxcsMefmwy451dEXehUdQsltiBhQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 99fe4388ffbc783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":480,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 45 x 32, 8-bit/color RGBA, non-interlaced","md5":"37ad09484eb1a7e103c1bba69ec3408d","sha1":"950c14767d959c154d2ba2ceaa7867b8809731e5","sha256":"1a34fa1f236912eddc8817954583103dfb3ee754301a3745010fa09903c2f2a2","sha512":"767dae11dfff65de6eb44e12c3b9b0a311c39766c83d9485246235f53508377d693103384f1ae5f4cd1be70636578795d7fdf591fe7f16e458c89041c081cf21","ssdeep":"","tlshash":"dff054ff03c865b4c29917fad103c307f4f658843d004fb88148449bc94e30ea241182","first_seen":"2023-05-03T17:23:48Z","last_seen":"2026-04-05T19:31:17.179707Z","times_seen":233,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y825.zordodating.net/DwkA/?prid=1011470444542304257\u0026sub1=103671139\u0026usid=10073468\u0026gr64=KS3wSWka7Wo\u0026tbsession=2158176018091404650\u0026c=890077925","fqdn":"y825.zordodating.net","domain":"zordodating.net","tld":"net"},"ip":{"addr":"104.21.33.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-17T09:39:54.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zordodating.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 20:45:35 GMT","end":"Fri, 06 Feb 2026 21:44:15 GMT"},"fingerprint":{"sha1":"A1:D3:F1:FF:EF:63:90:BD:21:57:9A:7D:C6:01:BE:AD:24:FE:01:D5","sha256":"B3:62:34:26:C0:76:F7:54:3E:0C:F6:06:79:5C:C8:1C:09:1D:B4:3B:0F:5B:FF:46:1C:D0:67:D8:9A:FF:97:4F"}}},"request":{"raw":"GET /DwkA/?prid=1011470444542304257\u0026sub1=103671139\u0026usid=10073468\u0026gr64=KS3wSWka7Wo\u0026tbsession=2158176018091404650\u0026c=890077925 HTTP/1.1\r\nHost: y825.zordodating.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 17 Nov 2025 09:39:55 GMT\r\ncontent-encoding: br\r\ncontent-type: text/html\r\nset-cookie: trbaruid=2158176018091404650; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=zordodating.net; Expires=Tue, 17 Nov 2026 09:39:55 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8uvvK9eMl1GqPf4pNajKLNqPMfgWRDxDgzj4UCwWqq%2FZYIm%2F3cBKxi8dXWEdM1J7SQZ9bgQSc0QlIxa50CAPxCUAVwEHQzXCLqqyhIe3W%2FvKCA4L\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\ncf-ray: 99fe437c7a181525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8209,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text","md5":"7563c72588afd85dac49c74369931ade","sha1":"492ce53fe70f70157db3e5fe058c5e0cc1eaa088","sha256":"b9ac1c86866a70cc40441e6fbde2c9ea6be8858c75f99583de4b2588c6bdbd02","sha512":"12556eb923ab4f17b87daec01924317f0b9f0b7adff9d4493c4880ac0fc379a3451b154c1ad22bf94a2d0aa4e737c162f91c3fb498076d38bfed35a27fb579c5","ssdeep":"192:NvKSCQtdgyRCdtFaKtS17DQOCbpsZqHu0qfXtkOYVyz6LW4kZzgkCP/nxg2d/bEp:GRsozHDsBVQY678","tlshash":"250295d979e30141ba2770a01bff461965b1e0132446dcd8baad028c5f4af5dafe33ac","first_seen":"2025-11-17T09:40:24.232255Z","last_seen":"2025-11-17T09:40:24.232255Z","times_seen":1,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"y825.zordodating.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"y825.zordodating.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"y825.zordodating.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"y825.zordodating.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1r66dating.net/static/LgAA/pics-for-bg/pic-2.webp","fqdn":"h1r66dating.net","domain":"h1r66dating.net","tld":"net"},"ip":{"addr":"104.21.50.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://h1r66dating.net/SQAA/12177/oth/2319?i=E_K9qWka7Ws\u0026u=2158176018091404650","date":"2025-11-17T09:39:56.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1r66dating.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 04:43:47 GMT","end":"Sat, 07 Feb 2026 05:41:27 GMT"},"fingerprint":{"sha1":"7E:FF:1F:56:F3:6F:FF:71:0F:35:43:D1:FF:4B:6E:54:C3:C2:31:0F","sha256":"A3:B8:6B:84:72:A2:4D:B7:32:C3:C3:40:2C:42:E4:A3:58:2E:D6:F9:FB:BA:7A:BC:CE:41:C3:AD:FE:CE:11:15"}}},"request":{"raw":"GET /static/LgAA/pics-for-bg/pic-2.webp HTTP/1.1\r\nHost: h1r66dating.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 17 Nov 2025 09:39:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26094\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 03 Jul 2020 10:31:26 GMT\r\netag: \"5eff08fe-65ee\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1725\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lDveu7fCtVIfXe3lT3f1xWSoqPkTYoOzknNF4HtVy5QIkuSSWL8aP7tB%2FG8JwNIdaJK5mwgd21OfTLEfmjJF1DK5kzc79oTLwAIe6os%3D\"}]}\r\ncf-ray: 99fe43862c4e7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26094,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fa9641591c432043c2d8ae3fc57630f0","sha1":"adf31e12e724346a7ab572062cdc70951a27afe0","sha256":"8a9fd83da647fd29c7a64d67e574edd520a8b6bcfab050c1d87c76e9a68e2b49","sha512":"e98dc692abae7430a4e960958702f1cbdb0457fba825adac0bc067235313f104c9fa51ba38750344c2fa82591cada81db3d80c48b28bd21f876c7f35264303c7","ssdeep":"384:naREb25Fr2y+vdxb/T9AO6aHupkOippJWiwjKVUl0WuFjKpvJdl9cDxlGL2J:naTHhid9HOKOijRwjeUkFjK7z9MGL2J","tlshash":"58c2f20e6c300f15e7e155da77e80631111b3b511ee2bc7ea8ea83d2702e4e28adf994","first_seen":"2024-12-12T07:23:06.750601Z","last_seen":"2025-12-29T15:50:07.619597Z","times_seen":31,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www2-eu.zordodating.net/DwkA/?prid=1011470444542304257\u0026sub1=103671139\u0026usid=10073468\u0026gr64=KS3wSWka7Wo\u0026tbsession=2158176018091404650\u0026c=890077925\u0026sub6=www2-eu\u0026tbrid64=KS3wSWka7Wo\u0026bdata=eyJkYXRhIjp7InZlbmRvciI6Ik1lc2EiLCJyZW5kZXJlciI6Imxsdm1waXBlIiwicGxhdGZvcm0iOiJXaW4zMiJ9LCJleHRyYSI6e30sImVycm9ycyI6eyJpZnJhbWUiOlsiY2FuJ3QgYWNjZXNzIHByb3BlcnR5IFwiYXBwZW5kQ2hpbGRcIiwgZG9jdW1lbnQuYm9keSBpcyBudWxsIl19LCJib3RTY29yZSI6IjQxIn0%253D\u0026bt=1763372395\u0026bth=1287820368","fqdn":"www2-eu.zordodating.net","domain":"zordodating.net","tld":"net"},"ip":{"addr":"104.21.33.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-17T09:39:55.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zordodating.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 20:45:35 GMT","end":"Fri, 06 Feb 2026 21:44:15 GMT"},"fingerprint":{"sha1":"A1:D3:F1:FF:EF:63:90:BD:21:57:9A:7D:C6:01:BE:AD:24:FE:01:D5","sha256":"B3:62:34:26:C0:76:F7:54:3E:0C:F6:06:79:5C:C8:1C:09:1D:B4:3B:0F:5B:FF:46:1C:D0:67:D8:9A:FF:97:4F"}}},"request":{"raw":"GET /DwkA/?prid=1011470444542304257\u0026sub1=103671139\u0026usid=10073468\u0026gr64=KS3wSWka7Wo\u0026tbsession=2158176018091404650\u0026c=890077925\u0026sub6=www2-eu\u0026tbrid64=KS3wSWka7Wo\u0026bdata=eyJkYXRhIjp7InZlbmRvciI6Ik1lc2EiLCJyZW5kZXJlciI6Imxsdm1waXBlIiwicGxhdGZvcm0iOiJXaW4zMiJ9LCJleHRyYSI6e30sImVycm9ycyI6eyJpZnJhbWUiOlsiY2FuJ3QgYWNjZXNzIHByb3BlcnR5IFwiYXBwZW5kQ2hpbGRcIiwgZG9jdW1lbnQuYm9keSBpcyBudWxsIl19LCJib3RTY29yZSI6IjQxIn0%253D\u0026bt=1763372395\u0026bth=1287820368 HTTP/1.1\r\nHost: www2-eu.zordodating.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y825.zordodating.net/\r\nCookie: trbaruid=2158176018091404650\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Mon, 17 Nov 2025 09:39:55 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Lk5sp%2FvmdgbG0IENmpRygAHO5%2FRwEDOHll9xZGmgbCYEqjppOvHSNs5UtHg0BnwUa%2FR6wQ7%2FFpDZxsawqxSBBDYqLm7ahQqnqMhMHl4JK51yyffd4FR\"}]}\r\npriority: u=1,i=?0\r\nset-cookie: PHPSESSID=to6v6tbk2cet9lid4982a2tg02; HttpOnly; Path=/\ntrbarid=8deea3b43286ef7e7f15e06fd87bc1e2c2f339f5531acf885211e5b97bd8c579a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22trbarid%22%3Bi%3A1%3Bs%3A19%3A%222158176018091404650%22%3B%7D; HttpOnly; SameSite=None; Secure; Path=/; Max-Age=63504000; Expires=Mon, 22 Nov 2027 09:39:55 GMT\nlast_cascade_info=27d2985a68b55a6d5bec6bfb7c1a9b0640d01afb6e6bb2212cabce799db6b8c1a%3A2%3A%7Bi%3A0%3Bs%3A17%3A%22last_cascade_info%22%3Bi%3A1%3Bs%3A31%3A%22%7B%22cascade%22%3A59%2C%22campaign%22%3A12177%7D%22%3B%7D; HttpOnly; SameSite=None; Secure; Path=/; Domain=zordodating.net; Max-Age=1800; Expires=Mon, 17 Nov 2025 10:09:55 GMT\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlocation: https://h1r66dating.net/SQAA/12177/oth/2319?i=E_K9qWka7Ws\u0026u=2158176018091404650\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99fe4380ea971525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75328,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T05:11:47.473796Z","times_seen":13406904,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://h1r66dating.net/SQAA/12177/oth/2319?i=E_K9qWka7Ws\u0026u=2158176018091404650","date":"2025-11-17T09:39:56.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:58 GMT","end":"Mon, 19 Jan 2026 08:34:57 GMT"},"fingerprint":{"sha1":"56:14:7E:EF:FA:D2:CF:DD:3B:30:9C:AE:7A:C9:AD:9E:A7:87:3D:E9","sha256":"72:DD:0F:82:4D:8A:09:2D:BB:5B:E6:1B:6F:09:F8:1E:BD:BD:D3:3E:B8:A4:8C:B9:49:13:4D:DC:D7:EF:EA:77"}}},"request":{"raw":"GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30462\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Nov 2025 16:17:00 GMT\r\nexpires: Fri, 13 Nov 2026 16:17:00 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nlast-modified: Tue, 12 Sep 2023 02:38:22 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 321776\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":87533,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-04-06T05:07:59.567798Z","times_seen":136826,"resource_available":true,"data":null}},"time_used":318,"timings":{"blocked":126,"dns":1,"connect":35,"send":0,"wait":33,"receive":22,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1r66dating.net/static/LgAA/face-1.jpg","fqdn":"h1r66dating.net","domain":"h1r66dating.net","tld":"net"},"ip":{"addr":"104.21.50.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h1r66dating.net/SQAA/12177/oth/2319?i=E_K9qWka7Ws\u0026u=2158176018091404650","date":"2025-11-17T09:39:56.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1r66dating.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 04:43:47 GMT","end":"Sat, 07 Feb 2026 05:41:27 GMT"},"fingerprint":{"sha1":"7E:FF:1F:56:F3:6F:FF:71:0F:35:43:D1:FF:4B:6E:54:C3:C2:31:0F","sha256":"A3:B8:6B:84:72:A2:4D:B7:32:C3:C3:40:2C:42:E4:A3:58:2E:D6:F9:FB:BA:7A:BC:CE:41:C3:AD:FE:CE:11:15"}}},"request":{"raw":"GET /static/LgAA/face-1.jpg HTTP/1.1\r\nHost: h1r66dating.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 17 Nov 2025 09:39:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 54753\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 28 Sep 2021 09:55:24 GMT\r\netag: \"6152e68c-d5e1\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4812\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hY6gzpMBdBVCycmCK0zGFfgygSF3GCugvzFT85Z6ZyWl1Yjbve%2BqOhnfR4Y%2FNK3OBD3xxJyL2FdSsSSHq4MdzsWe4Mer33kSETPpJAU%3D\"}]}\r\ncf-ray: 99fe43861c487127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54753,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 430x430, components 3","md5":"e1181d2bfac00751a9ef4dcd0981cc3a","sha1":"ba66e7d50e512d0fd842f542f8b96b5da2e18101","sha256":"43c0d611b86dd9a329bb949f0d71ef32c261aafc36031f2b1d586428439e2501","sha512":"462755545896af487cdd3e0930df5c54d0c697afdede5d6195b046d7956c3ae284b4bf34a66d90763e622a59d4f84e94855b145f65e6237c9a3a63724594f723","ssdeep":"1536:uBIRRQeHak6xK2a8pDrli3XElTAydOtpV:umRRTaQ/gtyV","tlshash":"903302008a84ea93c48efb42c5ff5e75996d1a8478f8c22af9a773c677b241d45425c2","first_seen":"2024-12-12T07:23:06.775462Z","last_seen":"2025-12-29T15:50:07.616196Z","times_seen":31,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oswald/v57/TK3_WkUHHAIjg75cFRf3bXL8LICs1xZosUZiZQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://h1r66dating.net/SQAA/12177/oth/2319?i=E_K9qWka7Ws\u0026u=2158176018091404650","date":"2025-11-17T09:39:56.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/oswald/v57/TK3_WkUHHAIjg75cFRf3bXL8LICs1xZosUZiZQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://h1r66dating.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 12672\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 12 Nov 2025 14:15:52 GMT\r\nexpires: Thu, 12 Nov 2026 14:15:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:46:10 GMT\r\ncontent-type: font/woff2\r\nage: 415445\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12672,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12672, version 1.0","md5":"665f37b2d0e8235c8c351a8277eee8dd","sha1":"f691ee17ef07ec6870a74ffe8da9bf97cc7effbb","sha256":"aae665c75af89ea7cb7d8ccc8b0911ea72267442ebcd84f6e3efa041ad3b3c16","sha512":"1795a5343e91129ce9baa63cfdbba3a9253f296149ddb0f0a92f5fbffa2ba53c15b186b5d140ddc4ddf2ea1f33abaed5b11e3599b4a9d65d033324f60917cc5e","ssdeep":"384:YkT9mVAqlCkVuRV39ZnFfPTorP+HovZnK3Jr1j:UVnlCkVuRZ3FPWZnSnj","tlshash":"4642d0eb17ef074cc6b5f1e7b01dc8ca9196377817ba6889850610c67a60cee63c24b7","first_seen":"2025-09-11T17:05:43.86731Z","last_seen":"2026-04-06T03:33:22.457948Z","times_seen":2635,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":68,"dns":1,"connect":7,"send":0,"wait":8,"receive":1,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1r66dating.net/static/LgAA/favicon-16x16.png","fqdn":"h1r66dating.net","domain":"h1r66dating.net","tld":"net"},"ip":{"addr":"104.21.50.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h1r66dating.net/SQAA/12177/oth/2319?i=E_K9qWka7Ws\u0026u=2158176018091404650","date":"2025-11-17T09:39:57.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1r66dating.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 04:43:47 GMT","end":"Sat, 07 Feb 2026 05:41:27 GMT"},"fingerprint":{"sha1":"7E:FF:1F:56:F3:6F:FF:71:0F:35:43:D1:FF:4B:6E:54:C3:C2:31:0F","sha256":"A3:B8:6B:84:72:A2:4D:B7:32:C3:C3:40:2C:42:E4:A3:58:2E:D6:F9:FB:BA:7A:BC:CE:41:C3:AD:FE:CE:11:15"}}},"request":{"raw":"GET /static/LgAA/favicon-16x16.png HTTP/1.1\r\nHost: h1r66dating.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 17 Nov 2025 09:39:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 1427\r\npriority: u=6,i=?0\r\nlast-modified: Tue, 07 Jul 2020 11:47:24 GMT\r\netag: \"5f0460cc-593\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 202\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J02ST1IHGy6cWBbFUePv0WbpwhyzMt%2FnHn8qVvI8wL5j742MiXGp9504EfGyzjojnkBGAbfNP8vtQrfnUQrFyODjiDLHDr%2BXOuXpZBE1vg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 99fe4389bfcf783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"6bcb33eea3fd28288c096719dcd92422","sha1":"b6a08fbba7fd2fa1d2113a270fa0bdd7a51b6d3d","sha256":"5dfce491745407831ba88729eea8380ac01de3b87f91a034e854f42dbfe99982","sha512":"2c0e088e9b688f36b5996f871da63c27809fa1b73114e33d027bb24b720b638d09882c7bd9e4425ac180641bb76b311a0422295e94bfc975b775ed0d42f41522","ssdeep":"","tlshash":"fb21e99ea1d4e8c19945dd1228e5202378332284ced0e6f5bccfcc9a247c4f0918e1c7","first_seen":"2023-05-03T17:23:48Z","last_seen":"2026-02-16T16:29:42.333745Z","times_seen":165,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alexatracker.com/?r=aHR0cHM6Ly95ODI1LnpvcmRvZGF0aW5nLm5ldC9Ed2tBLz9wcmlkPTEwMTE0NzA0NDQ1NDIzMDQyNTcmc3ViMT0xMDM2NzExMzkmdXNpZD0xMDA3MzQ2OCZncjY0PUtTM3dTV2thN1dv\u0026h=811d579f335f4e4c602ca2aa9e4f2f7b","fqdn":"alexatracker.com","domain":"alexatracker.com","tld":"com"},"ip":{"addr":"104.21.85.99","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-17T09:39:54.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alexatracker.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Nov 2025 05:36:02 GMT","end":"Sat, 31 Jan 2026 06:35:52 GMT"},"fingerprint":{"sha1":"1B:D1:52:25:21:F5:BE:1C:58:EE:66:80:3B:E2:7E:07:EA:CB:4B:54","sha256":"6A:4B:69:86:3D:F3:17:A8:95:D1:8B:E0:1C:6D:DF:F2:43:AD:D7:31:6C:6C:09:E9:C8:18:CD:15:97:CF:57:8E"}}},"request":{"raw":"GET /?r=aHR0cHM6Ly95ODI1LnpvcmRvZGF0aW5nLm5ldC9Ed2tBLz9wcmlkPTEwMTE0NzA0NDQ1NDIzMDQyNTcmc3ViMT0xMDM2NzExMzkmdXNpZD0xMDA3MzQ2OCZncjY0PUtTM3dTV2thN1dv\u0026h=811d579f335f4e4c602ca2aa9e4f2f7b HTTP/1.1\r\nHost: alexatracker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 17 Nov 2025 09:39:54 GMT\r\ncontent-length: 0\r\nlocation: https://y825.zordodating.net/DwkA/?prid=1011470444542304257\u0026sub1=103671139\u0026usid=10073468\u0026gr64=KS3wSWka7Wo\u0026tbsession=2158176018091404650\u0026c=890077925\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gwJBfSm9J2SI8tb1k8A2dkaS2wzhrIYice8L%2FkS06uZGHFYQlG7jkjsKJNoGPnxw0ojBZQzy43X51FoM8vAMRn8FzakeM%2Fl7tqMPcWFP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nset-cookie: trbarid=2158176018091404650; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=alexatracker.com; Expires=Thu, 21 May 2026 09:39:54 GMT\r\ncf-ray: 99fe437c686cb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8209,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T05:11:47.473796Z","times_seen":13406904,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":52,"dns":32,"connect":1,"send":0,"wait":7,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y825.zordodating.net/beacon","fqdn":"y825.zordodating.net","domain":"zordodating.net","tld":"net"},"ip":{"addr":"104.21.33.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://y825.zordodating.net/DwkA/?prid=1011470444542304257\u0026sub1=103671139\u0026usid=10073468\u0026gr64=KS3wSWka7Wo\u0026tbsession=2158176018091404650\u0026c=890077925","date":"2025-11-17T09:39:55.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zordodating.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 20:45:35 GMT","end":"Fri, 06 Feb 2026 21:44:15 GMT"},"fingerprint":{"sha1":"A1:D3:F1:FF:EF:63:90:BD:21:57:9A:7D:C6:01:BE:AD:24:FE:01:D5","sha256":"B3:62:34:26:C0:76:F7:54:3E:0C:F6:06:79:5C:C8:1C:09:1D:B4:3B:0F:5B:FF:46:1C:D0:67:D8:9A:FF:97:4F"}}},"request":{"raw":"POST /beacon HTTP/1.1\r\nHost: y825.zordodating.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: multipart/form-data; boundary=---------------------------343036683832426998112699042968\r\nContent-Length: 916\r\nOrigin: https://y825.zordodating.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y825.zordodating.net/DwkA/?prid=1011470444542304257\u0026sub1=103671139\u0026usid=10073468\u0026gr64=KS3wSWka7Wo\u0026tbsession=2158176018091404650\u0026c=890077925\r\nCookie: trbaruid=2158176018091404650\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 17 Nov 2025 09:39:55 GMT\r\npriority: u=6,i=?0\r\ncontent-type: text/plain;charset=UTF-8\r\nserver: cloudflare\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2FB6CJcxcnysC99eVFunmeT8P7n%2FQLUQRyyd23CzXJU1WoeDP8Vgcbndd%2B%2FiDl7xdSh3HbQpsgYGlH8U0Q%2FLJNHCWn9qpO9RoN9IM%2FEjGKvZXylt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99fe437f7a7d1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-06T05:06:05.183125Z","times_seen":258610,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"y825.zordodating.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"y825.zordodating.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"y825.zordodating.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"y825.zordodating.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1r66dating.net/SQAA/12177/oth/2319?i=E_K9qWka7Ws\u0026u=2158176018091404650","fqdn":"h1r66dating.net","domain":"h1r66dating.net","tld":"net"},"ip":{"addr":"104.21.50.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-17T09:39:55.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1r66dating.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 04:43:47 GMT","end":"Sat, 07 Feb 2026 05:41:27 GMT"},"fingerprint":{"sha1":"7E:FF:1F:56:F3:6F:FF:71:0F:35:43:D1:FF:4B:6E:54:C3:C2:31:0F","sha256":"A3:B8:6B:84:72:A2:4D:B7:32:C3:C3:40:2C:42:E4:A3:58:2E:D6:F9:FB:BA:7A:BC:CE:41:C3:AD:FE:CE:11:15"}}},"request":{"raw":"GET /SQAA/12177/oth/2319?i=E_K9qWka7Ws\u0026u=2158176018091404650 HTTP/1.1\r\nHost: h1r66dating.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://y825.zordodating.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 17 Nov 2025 09:39:56 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xOUs59keqDLZ1EcGBTuroLApcIW2TRPUc7UqW%2BQWIgLizf5DfOWfo18%2BtF45UpKbaQ1WGzNpOfLKeUgQHkOUgLYRIEIa4Lpir2CnJfE%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 99fe4382585a7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75328,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (30800), with CRLF, LF line terminators","md5":"3442ced3d2e57f8a6a7c75f397aa2331","sha1":"e8d213b97fddca753da30cb3095b46f3f946aa95","sha256":"97be0d1da5e0580ff2ae609a3f33a8a284dfe59e81d867fcb1eb4d2844483cd7","sha512":"9b93268bfc9fae5ce2ef2350707b6a90b04de674289078dfa00655581bc3225cc51c29f4f53034a82b97ef372bcac9f32a9b7d24c721d1240679e043be2f9107","ssdeep":"1536:DLwhQyBegiMBV4APm9jnKDgKWdQeHICFad0DpN87z6h9lVRQDXTi:DLwhQyBegiMBV4APmBKbsQeHKq","tlshash":"fc73e74664e3212602b370a55b6fb341b0679007b84ded81beac07d69f65c1ab3f3f99","first_seen":"2025-11-09T07:26:39.731008Z","last_seen":"2025-11-17T09:40:24.241146Z","times_seen":3,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":35,"dns":20,"connect":1,"send":0,"wait":453,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1r66dating.net/static/LgAA/female-domin-img.jpg","fqdn":"h1r66dating.net","domain":"h1r66dating.net","tld":"net"},"ip":{"addr":"104.21.50.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h1r66dating.net/SQAA/12177/oth/2319?i=E_K9qWka7Ws\u0026u=2158176018091404650","date":"2025-11-17T09:39:56.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1r66dating.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 04:43:47 GMT","end":"Sat, 07 Feb 2026 05:41:27 GMT"},"fingerprint":{"sha1":"7E:FF:1F:56:F3:6F:FF:71:0F:35:43:D1:FF:4B:6E:54:C3:C2:31:0F","sha256":"A3:B8:6B:84:72:A2:4D:B7:32:C3:C3:40:2C:42:E4:A3:58:2E:D6:F9:FB:BA:7A:BC:CE:41:C3:AD:FE:CE:11:15"}}},"request":{"raw":"GET /static/LgAA/female-domin-img.jpg HTTP/1.1\r\nHost: h1r66dating.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 17 Nov 2025 09:39:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 57085\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 27 Sep 2021 08:26:50 GMT\r\netag: \"6151804a-defd\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 6943\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hiq%2BBzageF1S7gkwaxG42nMKhQtG8VuMlpcRvV5WVr233%2B8EnAeNsmRmwtwFt8mR%2BDEsKcU%2F35JrCOveWPpEbrm1oPRenGDZhghcb2E%3D\"}]}\r\ncf-ray: 99fe43860c347127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57085,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 430x430, components 3","md5":"bf97970c1fb0d7679ca91fa8e8437370","sha1":"08f1f73cdabdf76acdbbb4467f78fd23450969cf","sha256":"33bc90fb3dcc0b87e666c25588b9b349ab1683d8f475d4763ecc47d84609413a","sha512":"85eb2a7d00ff2d93f1471ef36936b8ddf6190fe55d6b589c9df9b974c14337b837b66f4662d68a8e065b09968cdfe50bae17b816809957dc28c93d3f91cb888c","ssdeep":"1536:yz5zSXSy2t/Lc13gsXVbKLLxeKrNzYZOju:ynyM/g3jVbKLLxeKRzqV","tlshash":"bd430279dda77254318eb9b4a44f733db42f52275856823e84edc6a07e7803c8c36653","first_seen":"2024-12-12T07:23:06.76957Z","last_seen":"2025-12-29T15:50:07.606651Z","times_seen":31,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1r66dating.net/static/LgAA/pics-for-bg/pic-35.jpg","fqdn":"h1r66dating.net","domain":"h1r66dating.net","tld":"net"},"ip":{"addr":"104.21.50.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h1r66dating.net/SQAA/12177/oth/2319?i=E_K9qWka7Ws\u0026u=2158176018091404650","date":"2025-11-17T09:39:56.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1r66dating.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 04:43:47 GMT","end":"Sat, 07 Feb 2026 05:41:27 GMT"},"fingerprint":{"sha1":"7E:FF:1F:56:F3:6F:FF:71:0F:35:43:D1:FF:4B:6E:54:C3:C2:31:0F","sha256":"A3:B8:6B:84:72:A2:4D:B7:32:C3:C3:40:2C:42:E4:A3:58:2E:D6:F9:FB:BA:7A:BC:CE:41:C3:AD:FE:CE:11:15"}}},"request":{"raw":"GET /static/LgAA/pics-for-bg/pic-35.jpg HTTP/1.1\r\nHost: h1r66dating.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 17 Nov 2025 09:39:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 78274\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 25 Nov 2021 14:44:08 GMT\r\netag: \"619fa138-131c2\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1725\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NC5A1XmA3sOGTt9TVVaDdud0rHodQ6uirivtsoJvmIpTz9Fmn751IPbZbIxllURoxGUUpeuHYrc1fM3wx0hhXqXbOrefmKCE762TKFs%3D\"}]}\r\ncf-ray: 99fe43862c4d7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78274,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 430x430, components 3","md5":"24a7f5c358dc9971298214f90931c1c7","sha1":"51d9bdba3ce04cbf961d14f487710d90e0d3e14b","sha256":"48b069abd6c4f0cd7b8376f18ca50c3029666553484f2c71fe6847f4a97ad951","sha512":"28daa701e96f75ba09e4efbd71b47eadc0ea81ec4ac225921aef284a38f12f0b59308df05a5e93e2d046b657bc54acc1c9649c06a2e43e4550e7a65b71531cb6","ssdeep":"1536:jrXlMjVpYbe97wpjevnSwQdtd3Eq1fBBXmmIjeQpNHF7FkZK:jTlM3MkEpjevMfd3z1Jk3nFkZK","tlshash":"817302611117170ee92abbdfd4407335a3400b0be663663a278977dab3592f29a0fc7d","first_seen":"2024-12-12T07:23:06.74798Z","last_seen":"2025-12-29T15:50:07.611658Z","times_seen":31,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1r66dating.net/static/LgAA/pics-for-bg/pic-29.webp","fqdn":"h1r66dating.net","domain":"h1r66dating.net","tld":"net"},"ip":{"addr":"104.21.50.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://h1r66dating.net/SQAA/12177/oth/2319?i=E_K9qWka7Ws\u0026u=2158176018091404650","date":"2025-11-17T09:39:56.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1r66dating.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 04:43:47 GMT","end":"Sat, 07 Feb 2026 05:41:27 GMT"},"fingerprint":{"sha1":"7E:FF:1F:56:F3:6F:FF:71:0F:35:43:D1:FF:4B:6E:54:C3:C2:31:0F","sha256":"A3:B8:6B:84:72:A2:4D:B7:32:C3:C3:40:2C:42:E4:A3:58:2E:D6:F9:FB:BA:7A:BC:CE:41:C3:AD:FE:CE:11:15"}}},"request":{"raw":"GET /static/LgAA/pics-for-bg/pic-29.webp HTTP/1.1\r\nHost: h1r66dating.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 17 Nov 2025 09:39:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28848\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 07 Jul 2020 07:03:34 GMT\r\netag: \"5f041e46-70b0\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1725\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xu9vF%2BEEFro3QQG88A6iW8yg5hXV6QGEeQTlIcU5juLwjgi%2FjZNDoWwPHDU%2FP%2F1jqiVa0%2BlTitzVYlDFP%2FJh7SsCPekbbhCv08%2Bmnxc%3D\"}]}\r\ncf-ray: 99fe43864c807127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28848,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0e31cfe67a0d9096a9509dbd0789e2dd","sha1":"536cc6f42b8b2c4ee600d799b5d841c804bdcb0a","sha256":"e9294f68bf5e7b1847a4274721ec5d7d812551687c691356909dc6d22afdd8fb","sha512":"afc0faece82bafceb33b27f70647c9de573d66e4a00c511cd7c28bc7d4980588de4559a13ce016ee394cfdc8184e72aba0d5ddf08922a121b8c423280201515d","ssdeep":"768:bEA7Sl95MN/09g7qjwGz8TcB5976mYc5/e17lgIB:bEAul9o0dLgIB5omYcY7lgO","tlshash":"65d2e1267e61f930a95c8b8d3196c2dd87ab09c3fda10070f5d1e5de9b2841f1a9fa18","first_seen":"2023-05-03T17:23:48Z","last_seen":"2026-02-16T16:29:42.35125Z","times_seen":169,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apptrck.metatrckpixel.com/js-sdk-loader/92285f7346cf7608a050e34f7bbe2bbd.min.js","fqdn":"apptrck.metatrckpixel.com","domain":"metatrckpixel.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y825.zordodating.net/DwkA/?prid=1011470444542304257\u0026sub1=103671139\u0026usid=10073468\u0026gr64=KS3wSWka7Wo\u0026tbsession=2158176018091404650\u0026c=890077925","date":"2025-11-17T09:39:55.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metatrckpixel.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Sep 2025 04:38:32 GMT","end":"Wed, 24 Dec 2025 05:37:05 GMT"},"fingerprint":{"sha1":"4E:E0:15:DD:A0:E5:93:B3:E1:45:8F:E0:35:EF:BF:84:92:E6:07:99","sha256":"9C:EE:8E:2A:A3:0C:A9:7D:37:E8:99:C5:50:D4:AC:70:0D:9E:F0:CB:E2:5B:BF:F0:75:70:77:51:23:56:B8:27"}}},"request":{"raw":"GET /js-sdk-loader/92285f7346cf7608a050e34f7bbe2bbd.min.js HTTP/1.1\r\nHost: apptrck.metatrckpixel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://y825.zordodating.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y825.zordodating.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 17 Nov 2025 09:39:55 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000\r\nsurrogate-key: project/4 sdk/8.40.0 sdk-loader\r\nx-frame-options: deny\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy-report-only: connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io; worker-src 'none'; default-src 'none'; frame-ancestors 'none'; style-src 'unsafe-inline' *; media-src *; script-src 'self' 'unsafe-inline' 'report-sample'; img-src blob: data: *; font-src 'self' data:; object-src 'none'; base-uri 'none'\r\ncf-cache-status: EXPIRED\r\nlast-modified: Mon, 17 Nov 2025 09:39:55 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0JqPa%2BQecPz7mTgkdBmgzgx%2Buwz1%2BlZfjxPXBQnrxF7tVyrofoyKqgogODDhvX9ktrBRQ3yDmskfVYX8tvlUKjGkZ7hP8h0L7ija%2FVE%2FDJmETUfEXxvMTUk%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 99fe437e98e48deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2811,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2810)","md5":"9f20c0f34033e682a57ce92014db821b","sha1":"5115f8996fcca5b342fbe58de5a6344d07b8ad66","sha256":"f8c9f66b168867f1b57c45529e167b404d72567a8396dabf20746406ea3ae6ef","sha512":"4eea7f32d0c09d3bfffd7c4820143b3efdb58e30805e7d153f2cca3a92f8b3add79a21091e8b0d086b9b0da02127b520a0a21c5fc432b2f6002779bbcea4344b","ssdeep":"","tlshash":"3a51b6a47fcdbcb34ba73b31407f280573b269996449c6805a19fa942c61819779fe4c","first_seen":"2025-02-12T19:11:40.465147Z","last_seen":"2026-04-06T03:43:02.411228Z","times_seen":778,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":30,"dns":22,"connect":1,"send":0,"wait":99,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"browser.sentry-cdn.com/8.40.0/bundle.tracing.replay.min.js","fqdn":"browser.sentry-cdn.com","domain":"sentry-cdn.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y825.zordodating.net/DwkA/?prid=1011470444542304257\u0026sub1=103671139\u0026usid=10073468\u0026gr64=KS3wSWka7Wo\u0026tbsession=2158176018091404650\u0026c=890077925","date":"2025-11-17T09:39:55.622Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /8.40.0/bundle.tracing.replay.min.js HTTP/1.1\r\nHost: browser.sentry-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://y825.zordodating.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y825.zordodating.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T05:11:47.473796Z","times_seen":13406904,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1r66dating.net/static/LgAA/pics-for-bg/pic-36.jpg","fqdn":"h1r66dating.net","domain":"h1r66dating.net","tld":"net"},"ip":{"addr":"104.21.50.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h1r66dating.net/SQAA/12177/oth/2319?i=E_K9qWka7Ws\u0026u=2158176018091404650","date":"2025-11-17T09:39:56.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1r66dating.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 04:43:47 GMT","end":"Sat, 07 Feb 2026 05:41:27 GMT"},"fingerprint":{"sha1":"7E:FF:1F:56:F3:6F:FF:71:0F:35:43:D1:FF:4B:6E:54:C3:C2:31:0F","sha256":"A3:B8:6B:84:72:A2:4D:B7:32:C3:C3:40:2C:42:E4:A3:58:2E:D6:F9:FB:BA:7A:BC:CE:41:C3:AD:FE:CE:11:15"}}},"request":{"raw":"GET /static/LgAA/pics-for-bg/pic-36.jpg HTTP/1.1\r\nHost: h1r66dating.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 17 Nov 2025 09:39:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 70925\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 25 Nov 2021 14:44:08 GMT\r\netag: \"619fa138-1150d\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1727\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KCJL8H8VUdrG0TkKdFpdmr0f0o7NY7QAccRjZJMs0S33o4VtZqAL4zvqlWuD6m0SCv53XrWKX3XuBcog3GW8mc4BPSNZgjRWYhmeFiw%3D\"}]}\r\ncf-ray: 99fe43861c367127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70925,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 430x430, components 3","md5":"f35eed117ced85825eb35062da7f5669","sha1":"d0959aaa6a90a334ca940c2a00c5f3d668be28db","sha256":"4c1fb30554687946702b7ba8375cf1e243d727fe934fcbb7f936fcc418843fca","sha512":"e649c4ef4a78223a5c0c84b295c01dce85de664a1def85f994c0afc9dcb4dbe0b32429a4da2d4fd94871834e678e92a70b055dd2a2a569d2a61d68109c8f520f","ssdeep":"1536:NlsnpAxPibk3rVMaQ3CzyzajUkSTBidggIhgdYGMgB/v4wbVR:NlsnGxKbk7VzQStwjM2gIhgmoBHFJR","tlshash":"0463022f6f7bb4f116a04977e892c3354b3e36d0258813917ae5a1ce1bb3c235a9095f","first_seen":"2024-12-12T07:23:06.771274Z","last_seen":"2025-12-29T15:50:07.607213Z","times_seen":31,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1r66dating.net/static/LgAA/trampling-img.jpg","fqdn":"h1r66dating.net","domain":"h1r66dating.net","tld":"net"},"ip":{"addr":"104.21.50.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h1r66dating.net/SQAA/12177/oth/2319?i=E_K9qWka7Ws\u0026u=2158176018091404650","date":"2025-11-17T09:39:56.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1r66dating.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 04:43:47 GMT","end":"Sat, 07 Feb 2026 05:41:27 GMT"},"fingerprint":{"sha1":"7E:FF:1F:56:F3:6F:FF:71:0F:35:43:D1:FF:4B:6E:54:C3:C2:31:0F","sha256":"A3:B8:6B:84:72:A2:4D:B7:32:C3:C3:40:2C:42:E4:A3:58:2E:D6:F9:FB:BA:7A:BC:CE:41:C3:AD:FE:CE:11:15"}}},"request":{"raw":"GET /static/LgAA/trampling-img.jpg HTTP/1.1\r\nHost: h1r66dating.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 17 Nov 2025 09:39:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27347\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 21 Apr 2022 14:11:37 GMT\r\netag: \"62616619-6ad3\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4812\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MTQXMY8ZWKHMalw8EepSu221ExYoE7Ph6HZzMPJqNKuM%2FG0yRPFqec32H%2F0%2FunVaPuFJZjVhf3e2R%2FJDlcglfPv3oxALhVA1pVMNc%2BE%3D\"}]}\r\ncf-ray: 99fe43862c5c7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27347,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 430x430, components 3","md5":"0214691b3d01f42edfacadd19e1a0c38","sha1":"76cf62efe2df08411a94dd3e85db58a2fd4019e5","sha256":"f7646def56e70efd48a26b64ead5af1b885cdef5c1c2904b344e358918fd6d26","sha512":"bcc4e27b5c208793e1fcb064a1693177843e7eddb58bf71d4284d97d86fcc56b0f96c4cad42c1f0f6baa5ba51d48554b22a4fe728fdba338634497fb8f63e563","ssdeep":"768:RD8+k4bCsTD8uF09LoyWZX3DCdpWFBlp6WxxSIHpEOj/AL:mIbXD1oLoyWJDiiDPSw6Ojw","tlshash":"13c2f2dcfe88b642df74f01db94c826e65190db065adcdaf78666c5bd0f72800da042b","first_seen":"2024-12-12T07:23:06.778193Z","last_seen":"2025-12-29T15:50:07.600865Z","times_seen":31,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1r66dating.net/static/LgAA/pics-for-bg/pic-33.webp","fqdn":"h1r66dating.net","domain":"h1r66dating.net","tld":"net"},"ip":{"addr":"104.21.50.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://h1r66dating.net/SQAA/12177/oth/2319?i=E_K9qWka7Ws\u0026u=2158176018091404650","date":"2025-11-17T09:39:56.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1r66dating.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 04:43:47 GMT","end":"Sat, 07 Feb 2026 05:41:27 GMT"},"fingerprint":{"sha1":"7E:FF:1F:56:F3:6F:FF:71:0F:35:43:D1:FF:4B:6E:54:C3:C2:31:0F","sha256":"A3:B8:6B:84:72:A2:4D:B7:32:C3:C3:40:2C:42:E4:A3:58:2E:D6:F9:FB:BA:7A:BC:CE:41:C3:AD:FE:CE:11:15"}}},"request":{"raw":"GET /static/LgAA/pics-for-bg/pic-33.webp HTTP/1.1\r\nHost: h1r66dating.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 17 Nov 2025 09:39:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30368\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 07 Jul 2020 07:03:34 GMT\r\netag: \"5f041e46-76a0\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1725\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qbKF9801Fdeg8Qca7hfiJf3d1%2FkfWVkZ%2BsZlkQKLtYEs8LBUMQ7SiQCs9zE3W3DOa7uEfzY0C0VtebJ%2B5XhAqlzC7Fcd5BJknoeEaEY%3D\"}]}\r\ncf-ray: 99fe43863c6a7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30368,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"57202a93e46a6a25f4a77d6fa7ba96b5","sha1":"b185f52e218c63b3313a14dd129a45e971c14ae6","sha256":"1a46ce827393f6f4c2d25df09c3473cf633f309021aa0866bcdec7d7d5f86e57","sha512":"d7b665ae7ecfa02faac200f61b0fe8a0f3294709ee1194e5c185395fd8e4483b87e21e1b476d64d837f68345602ac72f3e698b19dd5f8186963ff26e05b5dceb","ssdeep":"768:ZkIKTCs/4EAJXjGRQDSoWHSW9HB1Eah6kqL/YmWrTJB:Rs/4E+SRQDSoWH79HkaULRATH","tlshash":"42d2f14ec591a2a49bf42dfae087140baf10465742924584facfce055cdfae4ac46eec","first_seen":"2023-05-03T17:23:48Z","last_seen":"2026-02-16T16:29:42.337263Z","times_seen":170,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1r66dating.net/stats","fqdn":"h1r66dating.net","domain":"h1r66dating.net","tld":"net"},"ip":{"addr":"104.21.50.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://h1r66dating.net/SQAA/12177/oth/2319?i=E_K9qWka7Ws\u0026u=2158176018091404650","date":"2025-11-17T09:39:56.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1r66dating.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 04:43:47 GMT","end":"Sat, 07 Feb 2026 05:41:27 GMT"},"fingerprint":{"sha1":"7E:FF:1F:56:F3:6F:FF:71:0F:35:43:D1:FF:4B:6E:54:C3:C2:31:0F","sha256":"A3:B8:6B:84:72:A2:4D:B7:32:C3:C3:40:2C:42:E4:A3:58:2E:D6:F9:FB:BA:7A:BC:CE:41:C3:AD:FE:CE:11:15"}}},"request":{"raw":"POST /stats HTTP/1.1\r\nHost: h1r66dating.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: multipart/form-data; boundary=---------------------------38729338063790686662328779664\r\nContent-Length: 2202\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 17 Nov 2025 09:39:57 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BwryuGh0Fodt8DDalCGefNCfdLJDeCVjt%2FIoPxPqeNPD6rq4sg6VtCO3zyPDiCNwF5%2FW6zWx879lFn5r1HjCh%2Fy32UEFr1kQbIt3SJuEew%3D%3D\"}]}\r\npriority: u=6,i=?0\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99fe4387df98783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-04-06T05:11:39.684757Z","times_seen":227965,"resource_available":true,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":442,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1r66dating.net/static/LgAA/3-2.png","fqdn":"h1r66dating.net","domain":"h1r66dating.net","tld":"net"},"ip":{"addr":"104.21.50.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://h1r66dating.net/SQAA/12177/oth/2319?i=E_K9qWka7Ws\u0026u=2158176018091404650","date":"2025-11-17T09:39:56.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1r66dating.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 04:43:47 GMT","end":"Sat, 07 Feb 2026 05:41:27 GMT"},"fingerprint":{"sha1":"7E:FF:1F:56:F3:6F:FF:71:0F:35:43:D1:FF:4B:6E:54:C3:C2:31:0F","sha256":"A3:B8:6B:84:72:A2:4D:B7:32:C3:C3:40:2C:42:E4:A3:58:2E:D6:F9:FB:BA:7A:BC:CE:41:C3:AD:FE:CE:11:15"}}},"request":{"raw":"GET /static/LgAA/3-2.png HTTP/1.1\r\nHost: h1r66dating.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://h1r66dating.net/static/LgAA/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 17 Nov 2025 09:39:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 535\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 03 Jul 2020 10:22:52 GMT\r\netag: \"5eff06fc-217\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1725\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LnAWJzYzI8H74AWk8iwG2kuB4OQbI6aDqR%2FOW8bJGKa1GDJrbS5R0Euq1%2BAfgn1SCJHBa4kL%2BlZo9U7zUpqmw5U4sVNut5qmLJTwMovE%2FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 99fe4388ffbd783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":535,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"7621845db78d7540608060c63a721252","sha1":"b24bca5f9e3ca0daf6f0f4822d66febc5c65d169","sha256":"5368506adbbdfa70cffa4f9cf91127edd324af89c40e14cc273fe7e0d322adf1","sha512":"fe02e22cc60ff118794b99a21b4a5ed572fbecefa0a1345bdc2da7a7426779db92730239f6b5316afe13d88c7cc91b61934d99ef4c25cc15b44b66b5597c99bb","ssdeep":"","tlshash":"1cf020a339859ea5db6255379e274078e17bcac0821ca11b5945c077481d80f6e64292","first_seen":"2023-05-03T17:23:48Z","last_seen":"2026-04-05T19:31:17.216172Z","times_seen":233,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1r66dating.net/stats","fqdn":"h1r66dating.net","domain":"h1r66dating.net","tld":"net"},"ip":{"addr":"104.21.50.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://h1r66dating.net/SQAA/12177/oth/2319?i=E_K9qWka7Ws\u0026u=2158176018091404650","date":"2025-11-17T09:39:57.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1r66dating.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 04:43:47 GMT","end":"Sat, 07 Feb 2026 05:41:27 GMT"},"fingerprint":{"sha1":"7E:FF:1F:56:F3:6F:FF:71:0F:35:43:D1:FF:4B:6E:54:C3:C2:31:0F","sha256":"A3:B8:6B:84:72:A2:4D:B7:32:C3:C3:40:2C:42:E4:A3:58:2E:D6:F9:FB:BA:7A:BC:CE:41:C3:AD:FE:CE:11:15"}}},"request":{"raw":"POST /stats HTTP/1.1\r\nHost: h1r66dating.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 475\r\nOrigin: https://h1r66dating.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 17 Nov 2025 09:39:57 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ST5ZARkuAjtqcIpSd%2BsKi%2FwwDz4Oh0b2bZ6Ivnq4%2BmuzA%2B9AreQx%2BCeJxEeFS%2BlqfkgrSnhItWhCPE%2Bo2jhjwVhY10LrL3%2BmsMs0%2BNTxtA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99fe4389bfd2783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":481,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c7920aa23010018134c35f060d35c72f","sha1":"a0f9d6e2976ef16857ebcd06e1566dd8dd9828cd","sha256":"d5bb60cf0b49a6fbb7003ee648329170b1e719d76c185467cc0854a713494ce6","sha512":"724dd7a4b72b949097d096e95419a8f0acc44553afe191e5a32d4858a3fc621ebdfbd14580440bc583df1b580e5b4836b9877cfca0f79dc18303ba5ea7a7507d","ssdeep":"","tlshash":"38f02779d40e1478e5a3b42de549ff029cbc9023bb0a4a88f2cc4f0a00ea848a2c0743","first_seen":"2025-11-17T09:40:24.249586Z","last_seen":"2025-11-17T09:40:24.249586Z","times_seen":1,"resource_available":false,"data":null}},"time_used":469,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":469,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y825.zordodating.net/DwkA?prid=1011470444542304257\u0026sub1=103671139\u0026usid=10073468","fqdn":"y825.zordodating.net","domain":"zordodating.net","tld":"net"},"ip":{"addr":"104.21.33.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-17T09:39:54.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zordodating.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 20:45:35 GMT","end":"Fri, 06 Feb 2026 21:44:15 GMT"},"fingerprint":{"sha1":"A1:D3:F1:FF:EF:63:90:BD:21:57:9A:7D:C6:01:BE:AD:24:FE:01:D5","sha256":"B3:62:34:26:C0:76:F7:54:3E:0C:F6:06:79:5C:C8:1C:09:1D:B4:3B:0F:5B:FF:46:1C:D0:67:D8:9A:FF:97:4F"}}},"request":{"raw":"GET /DwkA?prid=1011470444542304257\u0026sub1=103671139\u0026usid=10073468 HTTP/1.1\r\nHost: y825.zordodating.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 17 Nov 2025 09:39:54 GMT\r\ncontent-length: 0\r\nlocation: https://alexatracker.com/?r=aHR0cHM6Ly95ODI1LnpvcmRvZGF0aW5nLm5ldC9Ed2tBLz9wcmlkPTEwMTE0NzA0NDQ1NDIzMDQyNTcmc3ViMT0xMDM2NzExMzkmdXNpZD0xMDA3MzQ2OCZncjY0PUtTM3dTV2thN1dv\u0026h=811d579f335f4e4c602ca2aa9e4f2f7b\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wDjG65w6fwxNeoxVzM2kDhEqvH%2Bw718HNBEu1UOgEpf9iMsYo9ER7zci5vkyW0Jv6hg08bjGCXRMr3iyivjnDIg4FxxTN0JyIF4RluWrR0fRRQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 99fe437ae8f75684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8209,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T05:11:47.473796Z","times_seen":13406904,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":27,"dns":9,"connect":1,"send":0,"wait":182,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"y825.zordodating.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"y825.zordodating.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"y825.zordodating.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"y825.zordodating.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y825.zordodating.net/favicon.ico","fqdn":"y825.zordodating.net","domain":"zordodating.net","tld":"net"},"ip":{"addr":"104.21.33.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y825.zordodating.net/DwkA/?prid=1011470444542304257\u0026sub1=103671139\u0026usid=10073468\u0026gr64=KS3wSWka7Wo\u0026tbsession=2158176018091404650\u0026c=890077925","date":"2025-11-17T09:39:55.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zordodating.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 20:45:35 GMT","end":"Fri, 06 Feb 2026 21:44:15 GMT"},"fingerprint":{"sha1":"A1:D3:F1:FF:EF:63:90:BD:21:57:9A:7D:C6:01:BE:AD:24:FE:01:D5","sha256":"B3:62:34:26:C0:76:F7:54:3E:0C:F6:06:79:5C:C8:1C:09:1D:B4:3B:0F:5B:FF:46:1C:D0:67:D8:9A:FF:97:4F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: y825.zordodating.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y825.zordodating.net/DwkA/?prid=1011470444542304257\u0026sub1=103671139\u0026usid=10073468\u0026gr64=KS3wSWka7Wo\u0026tbsession=2158176018091404650\u0026c=890077925\r\nCookie: trbaruid=2158176018091404650\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 17 Nov 2025 09:39:55 GMT\r\ncontent-length: 47\r\ncontent-type: image/gif\r\nserver: cloudflare\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9vGkmZSqNeX%2FFC6zrJgmH9JELohcSjyOf3EM4thLoEJx0%2BcIX%2BJ8YaBhX92Hhqr%2FpBH49SqF2rnpPAN2r0%2BkuRHI9S%2BDFDeacrjXdc%2Brwb72siGL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 99fe43807a8a1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-06T05:11:58.496241Z","times_seen":770738,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"y825.zordodating.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"y825.zordodating.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"y825.zordodating.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-17","alert":"Sinkholed","trigger":"y825.zordodating.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h1r66dating.net/static/LgAA/style.css","fqdn":"h1r66dating.net","domain":"h1r66dating.net","tld":"net"},"ip":{"addr":"104.21.50.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h1r66dating.net/SQAA/12177/oth/2319?i=E_K9qWka7Ws\u0026u=2158176018091404650","date":"2025-11-17T09:39:56.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1r66dating.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 04:43:47 GMT","end":"Sat, 07 Feb 2026 05:41:27 GMT"},"fingerprint":{"sha1":"7E:FF:1F:56:F3:6F:FF:71:0F:35:43:D1:FF:4B:6E:54:C3:C2:31:0F","sha256":"A3:B8:6B:84:72:A2:4D:B7:32:C3:C3:40:2C:42:E4:A3:58:2E:D6:F9:FB:BA:7A:BC:CE:41:C3:AD:FE:CE:11:15"}}},"request":{"raw":"GET /static/LgAA/style.css HTTP/1.1\r\nHost: h1r66dating.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 17 Nov 2025 09:39:56 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 27 Sep 2021 06:34:14 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6AqytFWS71mEBlVqtLCtrHxanlamn3QGWD%2FN%2F46ETF0adiu253VBf7wsRyX95aM%2Fzl5tb6p1O2eeVIsjMYPPT9coWOMlk1g4p0oa3SA%3D\"}]}\r\naccess-control-allow-origin: *\r\nage: 6943\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"615165e6-23cc\"\r\ncontent-encoding: br\r\ncf-ray: 99fe4385fc1a7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9164,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (325), with CRLF line terminators","md5":"f33d20b13bc5eeec5a920372af7d3b45","sha1":"811af0e487b728a720c49bcef58bfa2e3e214602","sha256":"cbf5d899efbae5c9cbb76642e0a968008054ed1e08f06a0bb94ebc33fb15005e","sha512":"af0399bb5e3268f2478bc71f8b87b6bd99b6f9cef503d2f14d227711f7b728d3b573bf53b433ce05c55c6242e1306d51cc44fd35d4933e160685c60afbbe024a","ssdeep":"96:SofBCynI9VSb3xBL88vdBvGlC4USom98v/gj62JJc/nyf5BfKqgge0M26NvFd30d:Sw/I9cb3xBgkh4Lb8v4XnKqk269Fd3ha","tlshash":"7e125327a8401208f127d845abb1e776aefe8113d14792f5b9873454c7cfa8b97722cb","first_seen":"2025-09-16T15:29:23.457143Z","last_seen":"2025-12-29T15:50:07.620858Z","times_seen":28,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Oswald:700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h1r66dating.net/SQAA/12177/oth/2319?i=E_K9qWka7Ws\u0026u=2158176018091404650","date":"2025-11-17T09:39:56.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:58 GMT","end":"Mon, 19 Jan 2026 08:34:57 GMT"},"fingerprint":{"sha1":"56:14:7E:EF:FA:D2:CF:DD:3B:30:9C:AE:7A:C9:AD:9E:A7:87:3D:E9","sha256":"72:DD:0F:82:4D:8A:09:2D:BB:5B:E6:1B:6F:09:F8:1E:BD:BD:D3:3E:B8:A4:8C:B9:49:13:4D:DC:D7:EF:EA:77"}}},"request":{"raw":"GET /css?family=Oswald:700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 17 Nov 2025 09:39:56 GMT\r\ndate: Mon, 17 Nov 2025 09:39:56 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1797,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"66097bcd338b49ab463aec437bb4ad98","sha1":"bed53ad8af49c122c611772ca4f916396ee83dda","sha256":"fb02690d853200cf4e0529482d60fc45913d05fc45c2a5808c9f401c753708f3","sha512":"2cf52f06ba7d19756501d8ef8cdbc69841eee04ba641872ab927639395478fa08c2e1f1b7acc850548520841ace5e5ff497f9e0532e1edff7512964adbb28b7e","ssdeep":"","tlshash":"8f31bc62482f94806b4b1cd237df3d329e8e621a345589215ffd1c6c9caae36132974d","first_seen":"2025-09-14T22:41:06.169425Z","last_seen":"2026-04-05T19:31:17.198922Z","times_seen":346,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":145,"dns":0,"connect":20,"send":0,"wait":17,"receive":0,"ssl":132},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1r66dating.net/static/LgAA/pics-for-bg/pic-19.webp","fqdn":"h1r66dating.net","domain":"h1r66dating.net","tld":"net"},"ip":{"addr":"104.21.50.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://h1r66dating.net/SQAA/12177/oth/2319?i=E_K9qWka7Ws\u0026u=2158176018091404650","date":"2025-11-17T09:39:56.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1r66dating.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 04:43:47 GMT","end":"Sat, 07 Feb 2026 05:41:27 GMT"},"fingerprint":{"sha1":"7E:FF:1F:56:F3:6F:FF:71:0F:35:43:D1:FF:4B:6E:54:C3:C2:31:0F","sha256":"A3:B8:6B:84:72:A2:4D:B7:32:C3:C3:40:2C:42:E4:A3:58:2E:D6:F9:FB:BA:7A:BC:CE:41:C3:AD:FE:CE:11:15"}}},"request":{"raw":"GET /static/LgAA/pics-for-bg/pic-19.webp HTTP/1.1\r\nHost: h1r66dating.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 17 Nov 2025 09:39:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18680\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 03 Jul 2020 10:45:54 GMT\r\netag: \"5eff0c62-48f8\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1725\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U6QV7GAKv%2B%2F4HX8ZIj1Jl1YJP4soHtb8I%2FlzxGzjjvtUV7UGxhH2xvlFphFip%2BN7JtVJDjHxXmnTfazpjfQDoCly8Ay0OVCfchMsYMo%3D\"}]}\r\ncf-ray: 99fe43863c797127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18680,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"943a0391596b631963d8f7c651920eca","sha1":"d92e19f7e005abd3653e7a09ff36f6b15ea48d8a","sha256":"c181965f2365bcb845cceafc6296551272e48ad227d64eba7180edbe46110879","sha512":"45be595d9f51ae43f6d1bdd1573523c9ca573e657da862735b4f8ef663854f07de591b1d45f520942103b9ca3628a6157562b90eeb7c95cf956d08765f4d2655","ssdeep":"384:kRTg0X1K+fPaxv4JU2kSbAziqmkmotR3RNx+N8Dg5:agkKcPaF4JdbAzYkh3DxPg5","tlshash":"a282d1cc9fc16bc46d6623ed8698266a5b5304f3e001489f0357de91883e04acabf3de","first_seen":"2024-12-12T07:23:06.76152Z","last_seen":"2025-12-29T15:50:07.617919Z","times_seen":31,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://h1r66dating.net/SQAA/12177/oth/2319?i=E_K9qWka7Ws\u0026u=2158176018091404650","date":"2025-11-17T09:39:56.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://h1r66dating.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 11 Nov 2025 21:43:02 GMT\r\nexpires: Wed, 11 Nov 2026 21:43:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 475015\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-04-06T05:08:19.470283Z","times_seen":310119,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":51,"dns":1,"connect":7,"send":0,"wait":9,"receive":8,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1r66dating.net/static/LgAA/pics-for-bg/pic-23.webp","fqdn":"h1r66dating.net","domain":"h1r66dating.net","tld":"net"},"ip":{"addr":"104.21.50.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://h1r66dating.net/SQAA/12177/oth/2319?i=E_K9qWka7Ws\u0026u=2158176018091404650","date":"2025-11-17T09:39:56.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1r66dating.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 04:43:47 GMT","end":"Sat, 07 Feb 2026 05:41:27 GMT"},"fingerprint":{"sha1":"7E:FF:1F:56:F3:6F:FF:71:0F:35:43:D1:FF:4B:6E:54:C3:C2:31:0F","sha256":"A3:B8:6B:84:72:A2:4D:B7:32:C3:C3:40:2C:42:E4:A3:58:2E:D6:F9:FB:BA:7A:BC:CE:41:C3:AD:FE:CE:11:15"}}},"request":{"raw":"GET /static/LgAA/pics-for-bg/pic-23.webp HTTP/1.1\r\nHost: h1r66dating.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 17 Nov 2025 09:39:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29386\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 06 Jul 2020 14:19:32 GMT\r\netag: \"5f0332f4-72ca\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1725\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B8Vjw%2FcJw6qq%2Fe7L2j84mPd18AdV45EOOQioL4Wkc4aPoOBvfq7Dk858OEyiWvuxyDe2%2BQQzhN1L%2F8uBQb%2BKsJtd%2BsxZvVNFe4%2FUEgo%3D\"}]}\r\ncf-ray: 99fe43864c817127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29386,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3be5374ac980aaa61a9384cb9c4d897b","sha1":"fc196752587621900ab6273d40b73c73a5c79f4c","sha256":"0b32a2e85c3d3bbb4854f1129534a63384e8cf7358ca93165e9b2d127b5d3b31","sha512":"39326a5ed3958274bd6fe371c4b60883dc8f76af9060c40635a9036d0d4222a88753136d08fb12afc21e698e23153522082814b0a055b5773a446722b5a67e0e","ssdeep":"384:cV3UXIb+CEgvlwDeTBLAwxsYHyQeS6d/Ds6ZvttW8INNdxjUmpmAEevPhZ4CdwXX:c/iRg9EWBUFJ4f6kfjdCF0hDkPcZc9","tlshash":"ebd2f2996703e819a7c758ddc0b212dfc801ecf0a9225117b6eec0a2843c9b5af55d6e","first_seen":"2024-12-12T07:23:06.767047Z","last_seen":"2025-12-29T15:50:07.604992Z","times_seen":31,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:100,400,700,900","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://h1r66dating.net/SQAA/12177/oth/2319?i=E_K9qWka7Ws\u0026u=2158176018091404650","date":"2025-11-17T09:39:56.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:58 GMT","end":"Mon, 19 Jan 2026 08:34:57 GMT"},"fingerprint":{"sha1":"56:14:7E:EF:FA:D2:CF:DD:3B:30:9C:AE:7A:C9:AD:9E:A7:87:3D:E9","sha256":"72:DD:0F:82:4D:8A:09:2D:BB:5B:E6:1B:6F:09:F8:1E:BD:BD:D3:3E:B8:A4:8C:B9:49:13:4D:DC:D7:EF:EA:77"}}},"request":{"raw":"GET /css?family=Montserrat:100,400,700,900 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 17 Nov 2025 09:39:56 GMT\r\ndate: Mon, 17 Nov 2025 09:39:56 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7268,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ed9d71d028a72f97b4af6bbdbede0744","sha1":"8952d4042d31943e12b1d5d39ad21040b7bd9b11","sha256":"2bec154fe312fbf893d26168ad535d49bcc58c35b5bc31854fea516881616e36","sha512":"41d7ecdbcc4525b90377bb57ac77249fb3710a4bff3321681b8cb410eee81c9e16bd627d48bad03b6e6a15a77142e03d24cd6e3737e8f0cd0d97b9289a1a573b","ssdeep":"192:N7Rd77o7Q7OP7u1Ra7h5OsuQRD780ORuuRZ7y6Oru8:NVdPoMiySVnyFm","tlshash":"34e1ae51151ae500a7432cc923cf7e26cd4e21667494c5367ffe2ca8ade6c365321b3d","first_seen":"2025-09-16T15:29:23.438184Z","last_seen":"2026-04-05T19:31:17.203553Z","times_seen":207,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":130,"dns":0,"connect":7,"send":0,"wait":30,"receive":0,"ssl":126},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h1r66dating.net/static/LgAA/pics-for-bg/pic-21.webp","fqdn":"h1r66dating.net","domain":"h1r66dating.net","tld":"net"},"ip":{"addr":"104.21.50.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://h1r66dating.net/SQAA/12177/oth/2319?i=E_K9qWka7Ws\u0026u=2158176018091404650","date":"2025-11-17T09:39:56.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h1r66dating.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 04:43:47 GMT","end":"Sat, 07 Feb 2026 05:41:27 GMT"},"fingerprint":{"sha1":"7E:FF:1F:56:F3:6F:FF:71:0F:35:43:D1:FF:4B:6E:54:C3:C2:31:0F","sha256":"A3:B8:6B:84:72:A2:4D:B7:32:C3:C3:40:2C:42:E4:A3:58:2E:D6:F9:FB:BA:7A:BC:CE:41:C3:AD:FE:CE:11:15"}}},"request":{"raw":"GET /static/LgAA/pics-for-bg/pic-21.webp HTTP/1.1\r\nHost: h1r66dating.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 17 Nov 2025 09:39:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27432\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 06 Jul 2020 14:10:04 GMT\r\netag: \"5f0330bc-6b28\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1725\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pw7rSdMCoq5ArqJJ59ejm58ssUF5wc0CNNfqaTmirMyQf8YUF9I7CCvVEHJNCpV9S2Y3xPn76z1YAsWAKBm6mz3BbwtEDwLbEzU9av8%3D\"}]}\r\ncf-ray: 99fe43861c467127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27432,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7f36e413a7c14f2da3a5c0ffa3b1f0bf","sha1":"cc82c98b5549c2529afb237a7d0eeabc1d2240f6","sha256":"24e77949209d0278fe0fbee90a3135a3d55284c246b15631b01a004413bdd6e6","sha512":"352df98bffa4c8f33fee0fe5d5a70c4e8a6acfd1c5784050baec719a05b71360fdce5869d05099b23ec69e5f068110e51f31ef2e164d5c7c4e3e9abbcd64fc52","ssdeep":"768:3eSfgnl7phkOJOzlBMTsLPvSMNUePI+8SXcrMTZVD:3eSfgnN6zgs3LA+8SXcr0","tlshash":"f9c2e0c5a92b7c44c7d8fd891cdcf649f41e3fc90a61c6960855f8b929028d286cdef1","first_seen":"2023-05-03T17:23:48Z","last_seen":"2026-02-16T16:29:42.332643Z","times_seen":170,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}