{"report_id":"303da420-005a-4fcf-b7e8-74232aae4dc7","version":6,"status":"done","tags":[],"date":"2026-01-03T10:30:25Z","url":{"schema":"http","addr":"sexynymhp.com","fqdn":"sexynymhp.com","domain":"sexynymhp.com","tld":"com"},"ip":{"addr":"193.42.111.122","port":0,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"exygirl.com/","fqdn":"exygirl.com","domain":"exygirl.com","tld":"com"},"title":"exy girl Nudity","dom":{"size":82267,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (386)","md5":"1f08387cb3fb09eb3d48c87ea77d766b","sha1":"78e77531fd11236d5050db3f1f242414897b3347","sha256":"08f17647eb9c180a84f281a20cef522a88fcd86133eeb3b0f2d617e3337bdffc","sha512":"88ec7ba1abae145b8f42386b444b34f77dea3d4dbdfa465983bb4fa4d98cb73ca06e3f7df0025388bb91189f6510bf2b74afabb12c250ba7cbb3396232925e92","ssdeep":"1536:mAIFliVejY0/aGdeNCiQ604TQHqP0M9KQF8Zd9KgDUpO7TITGiNpu:m5Flw6aGmCiQ604TQHqP0M9Km8Zd9TEg","tlshash":"99837320418d9f3b461707eb64e03b4974ff9b75e16955c1b2fb86398ec6ea1aa0f007","dom_hash":"domhashe06b9eb162821d4b6e7c086fe10ef694","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"sexynymhp.com","fqdn":"sexynymhp.com","domain":"sexynymhp.com","tld":"com"},"ip":{"addr":"193.42.111.122","port":0,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-07T10:30:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-03T10:30:03Z","timestamp":1767436203,"ip_dst":{"addr":"172.18.0.15","port":44284,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"185.43.220.10","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"The Netherlands","country_code":"NL"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2026-01-03T10:30:03.430349+0000\",\"flow_id\":1032685957616994,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"185.43.220.10\",\"src_port\":443,\"dest_ip\":\"172.18.0.15\",\"dest_port\":44284,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=18top.link\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"00:DE:F4:82:FF:BA:B6:00:E7:B8:5A:3F:97:F3:79:28:3C\",\"fingerprint\":\"d8:f1:ae:85:cb:da:db:92:8e:6f:7a:37:91:78:a6:24:b5:7f:77:c6\",\"sni\":\"18top.link\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-11-07T00:00:00\",\"notafter\":\"2026-02-05T23:59:59\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"77aba8c2fc7af389a21affb0253db465\",\"string\":\"771,49195,0-65281-11\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1164,\"bytes_toclient\":3691,\"start\":\"2026-01-03T10:30:03.267618+0000\"}}"}],"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"lktops.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"lovnymph.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"nmodel.cc","ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-05-12","domain_rank":2007852,"first_seen":"2023-05-27T10:37:03Z","last_seen":"2025-06-06T07:09:15.61006Z","alert_count":0,"request_count":1,"received_data":19058,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"18top.link","ip":{"addr":"185.43.220.10","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"The Netherlands","country_code":"NL"},"domain_registered":"2019-01-30","domain_rank":567409,"first_seen":"2019-01-31T22:21:24Z","last_seen":"2025-12-21T12:11:29.197191Z","alert_count":0,"request_count":2,"received_data":9804,"sent_data":807,"comment":"","tags":null,"fingerprints":[{"name":"PHP:5.3.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"sexynymhp.com","ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2022-03-21","domain_rank":4236876,"first_seen":"2022-11-01T12:15:28Z","last_seen":"2023-07-07T14:17:32Z","alert_count":0,"request_count":1,"received_data":81489,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2025-12-28T22:36:42.452939Z","alert_count":0,"request_count":1,"received_data":97367,"sent_data":441,"comment":"","tags":null,"fingerprints":null},{"fqdn":"exygirl.com","ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":22,"received_data":509500,"sent_data":13030,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:1.11.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"XenForo","description":"XenForo is a PHP-based forum hosting program for communities that is designed to be deployed on a remote web server.","website":"https://xenforo.com","common_platform_enumeration":"","icon":"XenForo.png","categories":["Message boards"]}]},{"fqdn":"i.ibb.co","ip":{"addr":"45.43.142.4","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"domain_registered":"2010-07-20","domain_rank":21643,"first_seen":"2018-11-25T10:13:48Z","last_seen":"2025-12-29T14:46:03.227372Z","alert_count":0,"request_count":1,"received_data":121013,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"lovnymph.top","ip":{"addr":"104.21.17.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-01-02","domain_rank":1797448,"first_seen":"2020-01-06T09:12:02Z","last_seen":"2026-01-02T15:52:34.474686Z","alert_count":1,"request_count":1,"received_data":17235,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"teenmodelsclub.website","ip":{"addr":"104.21.42.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-17","domain_rank":0,"first_seen":"2025-10-13T15:36:31.763675Z","last_seen":"2026-01-02T15:52:34.211458Z","alert_count":0,"request_count":1,"received_data":48560,"sent_data":452,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}]},{"fqdn":"lktops.top","ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-09-08","domain_rank":0,"first_seen":"2025-10-14T03:58:12.187673Z","last_seen":"2026-01-02T15:52:34.306791Z","alert_count":1,"request_count":1,"received_data":6505,"sent_data":427,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"exygirl.com/js/VietXfAdvStats/frontend.js?_v=6fde550f","fqdn":"exygirl.com","domain":"exygirl.com","tld":"com"},"ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b1584a91b67abe64c26d47ef5d49126","sha1":"082635a061eb87fc5b5fe156f1c4cdbc7e317886","sha256":"d833f74cce06d5a2fa030d1c4bb3f438f2b6a10c77936b51e03fe0b0410e349d","sha512":"52452069a8af22986e2d3e072cd939f7ee0a34594cad6050189006ce43b73c53a0fb6665301027dec143dfec475cac4ea33a6b2b90514b74ec4cf1ae8ebda00d","ssdeep":"192:UuG1CfEpoOLCnHibAKYubJsmsiwv0pLrU4KbHy7ABZJ24:UuGMHibAKYubJs5iossbHy7ABB","tlshash":"22e1eea5335dac6e8bd7327d507764c1dd2cd0b6d00a00b9b8a570d4c9fc41993daa3e","size":7189,"data":"","first_seen":"2023-06-15T18:12:11Z","last_seen":"2026-05-01T12:25:02.420495Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fc25e27d42774aeae6edbc0a18b72aa","sha1":"b66ed708717bf0b4a005a4d0113af8843ef3b8ff","sha256":"b294e973896f8f874e90a8eb1a8908ac790980d034c4c4bdf0fc3d37b8abf682","sha512":"87d90a665c15d71ac872bd8bc003d9863964c7ec7ada6370b902b93c0bbd7770fe25730d946c7c6a465baa95efa74bc0e78af3f83aea615af35060cc8702a6c1","ssdeep":"1536:EPpEy5BMibZGOj/bEe8v+/UWf4IhvAuCh/jqkODZ2D5N9Rag0MOIdSZAgtgoX5Yn:bIO/e2D5c4LgtImLja98HrK","tlshash":"cc93e8d9b6d2706297b730a851bf510bb17698eab80c4c60f058d8e47eb4e8d507bf2d","size":96381,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-07T02:03:49.401786Z","times_seen":29690,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exygirl.com/","fqdn":"exygirl.com","domain":"exygirl.com","tld":"com"},"ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"800b4a0db12c5fa7059aa51934a636a7","sha1":"256a8e727207a1c83ece63985fcb236bc03890ed","sha256":"8176c15bd952d17f4653248ac6792f99a057c609f02d0b94f9fc31145761524a","sha512":"652606b011ebdec9c51e2e854619f87e7a3a2a9c1b7b4de6e7341db1225525be1504ba5078b3ab13b0ac22e968ffb0ab08feb8bcd812672b31cedad7c40e70aa","ssdeep":"","tlshash":"61c09bd7918541395a5714e510f4f0d9716e540c085dac51ce5dc541f655b852c73a85","size":131,"data":"","first_seen":"2026-01-03T10:30:33.281423Z","last_seen":"2026-01-03T10:30:33.281423Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"moz-extension","addr":"moz-extension://afd36e3c-6115-4459-8b56-4bb832c26172/lib/shim_messaging_helper.js","fqdn":"moz-extension","domain":"moz-extension","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"865f01cbb34eb505834e826380d7dc2e","sha1":"c239ccc37191f1be78dfaa6bb3f1da5d314fdf9e","sha256":"30ed6392b8de4590bd974a4a797ee0b12b382f2141738115bfd2d692cfa6ec17","sha512":"9e37cd2e9fb9e4e926e2d1e1232c4c4ba3531d89b1d165293708849e0f88df6a40711d87c2b267ced9b6c4a27ac13079b5cb907334e2e297b588318df629b9ee","ssdeep":"","tlshash":"9e31ba1959fa0d1c0063b4a977673403722a90271149fe92bedcc3536f9652bc6f2bc8","size":1684,"data":"","first_seen":"2023-05-05T22:33:37Z","last_seen":"2026-06-07T01:17:26.629504Z","times_seen":182751,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.facebook.net/en_US/sdk.js","fqdn":"connect.facebook.net","domain":"facebook.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b938e0b835c600209bdaae9d8ccda6d7","sha1":"d5ee79d277057e05f002a18381722b5eb75d3883","sha256":"d1b95aeb57c3285042e1e24c00cc56a8560d16daf7ee5cdfd5c75296b21ac91b","sha512":"f519d10ba250add8cdb46a82b3cddc68e01735c6c80b24d4af37aa0ca108340b59a21bd2cc19bcd4753f66ff5a5dc17f6e3500e91be6436fdd90c954a6ed3800","ssdeep":"384:Ps5FfMCDA9SQM/Psw1A9uW1HVMJDXMlS3RpU9JCo4wiLF:kU9SVjoHqXMA3CJCodiLF","tlshash":"1672b51e46f31232456370766b4b72047235d0473a0afe993f9c87542f8aa6e86f27ec","size":16896,"data":"","first_seen":"2023-05-05T22:33:37Z","last_seen":"2026-06-07T01:17:26.614489Z","times_seen":177251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exygirl.com/","fqdn":"exygirl.com","domain":"exygirl.com","tld":"com"},"ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"db9ccd2e0e5b0a02613f4c1e8dd3b0fa","sha1":"49b9b4f6350fb207d19543b184ecdd1b6a80d458","sha256":"ae4b570d919de37ed9b51e8a9833570d1ce5ae82b2fa0615991c5e7bdb8327d8","sha512":"a99afb68e7358a8fd32316a11a132b8820f866a5a419bd875f6145b92ac2f38300ad99966c0382e2026915ecdd0860376a2448d2f58138fb0017c7354744503a","ssdeep":"","tlshash":"eeb02b2c0811af0cd17050c4e832d17834f4b104f500c4858524001d1264749000f840","size":127,"data":"","first_seen":"2023-03-10T09:24:23Z","last_seen":"2026-06-04T17:49:21.900223Z","times_seen":2701,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exygirl.com/js/Siropu/AM/display.min.js?_v=104","fqdn":"exygirl.com","domain":"exygirl.com","tld":"com"},"ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c8140b39b0de28aeeeebf674eac435a","sha1":"111ecb4de8a87c90b8c43cf9e910bf71411f55e0","sha256":"3dbc13e9f9836fc7ce1ca3870fe16747f8f909e2046e777dd7bb161efe803753","sha512":"d9233d5a0b00093bd0be9c762945778bf3ad615fb704a6d518d9f243de2132231205da4dc724b83639dda5566ee0da835ba4394b5e5bf31ef7ecaace1c701cfc","ssdeep":"","tlshash":"2381432bb1003423b6fb61b8147f0106f371f83b4b4ac5e29466c8595eb5e1c6e67e2c","size":3990,"data":"","first_seen":"2023-03-08T05:39:30Z","last_seen":"2026-06-04T17:49:21.87588Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exygirl.com/js/xenforo/xenforo.js?_v=6fde550f","fqdn":"exygirl.com","domain":"exygirl.com","tld":"com"},"ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"143c1f519fd29284c9d4e0672911a353","sha1":"42753d001f1d9f75a78e2efd9d60cc6df279da42","sha256":"d4abe0ab3ebdcc83eccd33a616828aef540e3eb1392169c9cd97ea71ac6dff2e","sha512":"8a0b7e886d319efc2d12eb6450fd642fcb21695faf24f36a8a04bf1d0d916cfbd3d93a657e0eb08396d40116cfb9f82ed808d0eb9746785deead1f82dbb39f89","ssdeep":"3072:pulrhnAh+VhITl8XsTKFrlQZ0+NuS26cTLGTjLIHzch258te:pufr43mYG+NuStYG8Hzch258te","tlshash":"65f30aa973b1715393fb3078502f0105623268bee50e8974b4a998e65dbcf486277f3d","size":169799,"data":"","first_seen":"2023-03-14T05:56:06Z","last_seen":"2026-06-02T18:11:12.730486Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exygirl.com/","fqdn":"exygirl.com","domain":"exygirl.com","tld":"com"},"ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"89cc45f0d51a7f9be5bc9b321bdf7bb0","sha1":"7a86e3b2f6b9cc6df0fb4353f025e7f03e65e2a4","sha256":"4d7d7e6c0b6b7c900c5c2db8d64cb8c67844d7ea4e1c9e6d372047be2f0b76ef","sha512":"a3a2363d94c83af9abde991aac82102b1595d868552bc6e6e4a7bf88ab09dd473fd5443f61c40debb5a09944e630a8a6accef4f48dd9cfb0bec81fb886044893","ssdeep":"","tlshash":"d2800404451141453c0d40745400740c0111447d054545014cc3440d1c4d43714c0071","size":35,"data":"","first_seen":"2023-06-14T16:59:12Z","last_seen":"2026-05-20T04:08:31.032704Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exygirl.com/","fqdn":"exygirl.com","domain":"exygirl.com","tld":"com"},"ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"f8bcfbe7a5d149ca949b74a841166bb8","sha1":"ceaaad59c6f4f0f3de8f1d41140ac280a0c02ab6","sha256":"1884c81bdfc18fccac10bfd75a0b2f2e95685569429711cf8df6106b3027b30c","sha512":"0f7d1e26ad38cc36f90f31554457dcfa3066ccacb79afbf56c0c1fbcfe72e3b085f67c3ca816c0dc59b65a28e87e5d6d9db938a9059c3d3c6e282b03e3a18f1c","ssdeep":"","tlshash":"7eb012c95a86b030cbaa1240b00f8240f834f9896c089614c34810795440621d735e9d","size":90,"data":"","first_seen":"2023-03-07T16:04:44Z","last_seen":"2026-05-23T04:23:04.380775Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exygirl.com/","fqdn":"exygirl.com","domain":"exygirl.com","tld":"com"},"ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"128fa30c8c13de7feda9e16a5072f0b9","sha1":"8d86d51da09d9f7efe8ac4d411f8ad62869be3f2","sha256":"eb35658852a5fc9ec3f76f2396b958b6796eb8dfc1fd243a57e87eca7bdb5c56","sha512":"8ba9abaed07638cc173e98fbd39cf07fa90315e9ec01e7edae0a3560ef2edbfb38735927bf985c31799b91a8567293768086e1cab139c2dffaf3a59c243f9ed1","ssdeep":"","tlshash":"b141415a500842b2c7ea073de82ebfc63f7d47b3854e165df28c503aa464b4b29cb407","size":1973,"data":"","first_seen":"2026-01-03T10:30:33.30094Z","last_seen":"2026-01-03T10:30:33.30094Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exygirl.com/","fqdn":"exygirl.com","domain":"exygirl.com","tld":"com"},"ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"68f4712b7e2f5c3dc35a9f39c1bd8b04","sha1":"fd9f66479abd11d579c2383d1eda8b664164576f","sha256":"88e080c422e0a81d0aa8878065c76dcd8f36c811dc22c9e2e7d9f6cf713ce67c","sha512":"4e5ae15644334b1a5ecf548f2bd0e308b7c0888ef4c989004c3b82ddc3a40ad3d1720709288828248d2fcfc7be8e68c6accf714cb9e569bf952c5cf2a0007fce","ssdeep":"","tlshash":"a641b0d0ebbd280f5077032ac24d409d927fd4b780856863ff155b2ca580a5ff69ee54","size":1906,"data":"","first_seen":"2023-11-12T03:45:54Z","last_seen":"2026-05-01T12:25:02.469672Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exygirl.com/","fqdn":"exygirl.com","domain":"exygirl.com","tld":"com"},"ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"bbac404cbf8ba89dece33dd5f1fe8e17","sha1":"3999bf135942774f3f9e871cf9b4cd797a698ddd","sha256":"ac283c0d76bf68ee39531578e207fa77dae901b4e4646017bff43faaca694b2a","sha512":"f90ebdfbb85cb5ae7c837f4f7b9ab6f6666deede1c42b12365f1f0424610636c82d0a2969def4db5f1800313391d0d3a1a2479e15daf3b256d80a5632c982c61","ssdeep":"","tlshash":"86f00e942cd884258373002a27bb9149b43969292c0aed14f94c84812f99ea808bb94c","size":514,"data":"","first_seen":"2026-01-03T10:30:33.308147Z","last_seen":"2026-01-03T10:30:33.308147Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"lktops.top/te/topl.png","fqdn":"lktops.top","domain":"lktops.top","tld":"top"},"ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exygirl.com/","date":"2026-01-03T10:30:03.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lktops.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Dec 2025 14:27:24 GMT","end":"Wed, 18 Mar 2026 14:27:23 GMT"},"fingerprint":{"sha1":"48:D0:0B:31:2A:52:BD:08:E8:95:A2:7B:88:08:08:DC:0B:FE:7F:35","sha256":"DF:A7:62:06:FE:57:D1:0D:01:A0:B5:1C:15:B8:AC:63:01:56:1F:1C:44:62:52:AA:87:F8:CA:8B:8F:8C:5C:84"}}},"request":{"raw":"GET /te/topl.png HTTP/1.1\r\nHost: lktops.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 10:29:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 6202\r\nLast-Modified: Fri, 19 Sep 2025 10:08:07 GMT\r\nConnection: keep-alive\r\nETag: \"68cd2b87-183a\"\r\nExpires: Sun, 04 Jan 2026 10:29:46 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6202,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 88 x 31, 8-bit/color RGBA, non-interlaced","md5":"553b7dc749c02aedb519c818a1bfefb5","sha1":"739c49ab8a8f2a42cd29466c24413d5c14451b15","sha256":"0f3f202840e2606ddf47bd97cbd310e2494f347f221a8e72a98a6efa2f06d62f","sha512":"496e7934889a570ad32569d3abbd98ec0bc2e89822e46a9e964042acf5ed2029a9475592ccd0bd5f03556d6882e3166a3256b09d8c4e82ec9d739dd58a55ebb9","ssdeep":"96:2kBSBvwsT5rUYmUBbcHezOekh7QvxRw9YCiPzMFVFNENZtVToXDStIXs:2kBSBnT5bcHAkoCSzMA3TptJ","tlshash":"4cd18ee747945d0dec6d6f27a6b71820ca02791d510bf60510b6b9bb2a9c3ec67ec830","first_seen":"2025-10-30T05:36:34.493868Z","last_seen":"2026-05-01T12:25:02.415123Z","times_seen":6,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":196,"dns":1,"connect":24,"send":0,"wait":22,"receive":1,"ssl":43},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"lktops.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exygirl.com/images/sexy_256.png","fqdn":"exygirl.com","domain":"exygirl.com","tld":"com"},"ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exygirl.com/","date":"2026-01-03T10:30:03.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exygirl.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Oct 2025 10:43:17 GMT","end":"Wed, 21 Jan 2026 10:43:16 GMT"},"fingerprint":{"sha1":"DC:86:CC:F2:50:69:11:6A:C4:B0:7D:3A:57:E2:0F:CD:1D:7F:87:61","sha256":"0A:F1:DA:98:26:BC:DF:A9:13:FA:3D:CD:C7:8F:87:35:5F:E8:E9:86:E1:79:43:01:39:DA:5C:5E:F6:99:D6:96"}}},"request":{"raw":"GET /images/sexy_256.png HTTP/1.1\r\nHost: exygirl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exygirl.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: xf_session=87fda31d9e8912caab34748b88fd2896\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 10:29:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 29449\r\nLast-Modified: Sun, 22 Sep 2024 18:09:00 GMT\r\nConnection: keep-alive\r\nETag: \"66f05d3c-7309\"\r\nExpires: Sun, 04 Jan 2026 10:29:47 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29449,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"171d81b316f3d8a4cbb440eebb5fe13b","sha1":"b670df0f4bf9bf86e156fb10a1e9fc04c575ff03","sha256":"d51ad8c463d5509a0f3e15d3e65f6a8655becb15cf5ffbd189d9f29326bc1a48","sha512":"e40d61d579a232ca675bad15bdf708d327104c4fd9d15d5d97624b4c19cb67ec0f10de122e750243bb9a9784f7a419bbf7e4762928321b29d53f1fe6a7c06ab6","ssdeep":"768:vLqLLWpTJJZEAhlPqRSLXBclX7eoPwTBO:vL2WLvEc9xLXBEX73Pws","tlshash":"41d2e18ae5a09816b10aec444ded3503b9b74a097e15d0a3b8dbcc5389101ee536efee","first_seen":"2023-11-12T03:45:55Z","last_seen":"2026-01-03T10:30:33.117813Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exygirl.com/styles/default/xenforo/post_old.gif","fqdn":"exygirl.com","domain":"exygirl.com","tld":"com"},"ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exygirl.com/","date":"2026-01-03T10:30:03.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exygirl.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Oct 2025 10:43:17 GMT","end":"Wed, 21 Jan 2026 10:43:16 GMT"},"fingerprint":{"sha1":"DC:86:CC:F2:50:69:11:6A:C4:B0:7D:3A:57:E2:0F:CD:1D:7F:87:61","sha256":"0A:F1:DA:98:26:BC:DF:A9:13:FA:3D:CD:C7:8F:87:35:5F:E8:E9:86:E1:79:43:01:39:DA:5C:5E:F6:99:D6:96"}}},"request":{"raw":"GET /styles/default/xenforo/post_old.gif HTTP/1.1\r\nHost: exygirl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exygirl.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: xf_session=87fda31d9e8912caab34748b88fd2896\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 10:29:46 GMT\r\nContent-Type: image/gif\r\nContent-Length: 67\r\nLast-Modified: Sun, 22 Sep 2024 18:09:00 GMT\r\nConnection: keep-alive\r\nETag: \"66f05d3c-43\"\r\nExpires: Sun, 04 Jan 2026 10:29:46 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":67,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 11 x 7","md5":"7b3c4ebaa0cdbb66b38a9fc0626f226c","sha1":"453e4035232bb637e76603a1a72e45ab17f38cd6","sha256":"c23f390d4cd127a842254079c5a09dd66c04283b0f71b953fd036b0132428336","sha512":"c10c5c1732d4560f1dee8753b302be5aae8eeb254d3ffce6e0e6cf390f068bbd8c00a3f81b49da0d96cc0f8e099dd03681dcaf5cc2242db10dfa34c983584c8d","ssdeep":"","tlshash":"9aa02202a0c0e380f0082b328c0bcb200202c800c303c00e22c8b30ba38b033a033030","first_seen":"2023-06-12T12:13:12Z","last_seen":"2026-05-01T12:25:02.422043Z","times_seen":18,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":202,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exygirl.com/styles/default/xenforo/node-sprite.png","fqdn":"exygirl.com","domain":"exygirl.com","tld":"com"},"ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exygirl.com/","date":"2026-01-03T10:30:03.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exygirl.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Oct 2025 10:43:17 GMT","end":"Wed, 21 Jan 2026 10:43:16 GMT"},"fingerprint":{"sha1":"DC:86:CC:F2:50:69:11:6A:C4:B0:7D:3A:57:E2:0F:CD:1D:7F:87:61","sha256":"0A:F1:DA:98:26:BC:DF:A9:13:FA:3D:CD:C7:8F:87:35:5F:E8:E9:86:E1:79:43:01:39:DA:5C:5E:F6:99:D6:96"}}},"request":{"raw":"GET /styles/default/xenforo/node-sprite.png HTTP/1.1\r\nHost: exygirl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exygirl.com/css.php?css=VietXfAdvStats,login_bar,node_category,node_forum,node_link,node_list,notices,panel_scroller,sidebar_share_page,siropu_ads_manager_ad_common,siropu_ads_manager_ad_type_code,thread_list_simple,velour\u0026style=5\u0026dir=LTR\u0026d=1761656641\r\nCookie: xf_session=87fda31d9e8912caab34748b88fd2896\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 10:29:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 2672\r\nLast-Modified: Sun, 22 Sep 2024 18:09:00 GMT\r\nConnection: keep-alive\r\nETag: \"66f05d3c-a70\"\r\nExpires: Sun, 04 Jan 2026 10:29:46 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2672,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 36, 8-bit colormap, non-interlaced","md5":"b3347ac2b14cc8f460a18ca1fc48e062","sha1":"9afe0642deb1bfe172a81c85068107ad8209d27b","sha256":"61448c860facc88d10432ab1dd84afae5e52f847a986ec1f458f189deef52207","sha512":"6fcd9a92a11a36a76f54df09e3e7283e6aea0afc9db11adbb59c697118c59ae17adeb9203448056095cc8e6e59ad31829b5fd6a54ed1134e6c3374716c24bffc","ssdeep":"","tlshash":"db515e7e06fd6a7dd88f69702f0d9aaf346ead4739483c40663b087700054d579c955e","first_seen":"2023-06-12T12:13:12Z","last_seen":"2026-06-06T04:46:17.379584Z","times_seen":31,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exygirl.com/js/VietXfAdvStats/frontend.js?_v=6fde550f","fqdn":"exygirl.com","domain":"exygirl.com","tld":"com"},"ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exygirl.com/","date":"2026-01-03T10:30:03.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exygirl.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Oct 2025 10:43:17 GMT","end":"Wed, 21 Jan 2026 10:43:16 GMT"},"fingerprint":{"sha1":"DC:86:CC:F2:50:69:11:6A:C4:B0:7D:3A:57:E2:0F:CD:1D:7F:87:61","sha256":"0A:F1:DA:98:26:BC:DF:A9:13:FA:3D:CD:C7:8F:87:35:5F:E8:E9:86:E1:79:43:01:39:DA:5C:5E:F6:99:D6:96"}}},"request":{"raw":"GET /js/VietXfAdvStats/frontend.js?_v=6fde550f HTTP/1.1\r\nHost: exygirl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exygirl.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: xf_session=87fda31d9e8912caab34748b88fd2896\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 10:29:46 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sun, 22 Sep 2024 18:09:00 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"66f05d3c-1c15\"\r\nExpires: Sun, 04 Jan 2026 10:29:46 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7189,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"5b1584a91b67abe64c26d47ef5d49126","sha1":"082635a061eb87fc5b5fe156f1c4cdbc7e317886","sha256":"d833f74cce06d5a2fa030d1c4bb3f438f2b6a10c77936b51e03fe0b0410e349d","sha512":"52452069a8af22986e2d3e072cd939f7ee0a34594cad6050189006ce43b73c53a0fb6665301027dec143dfec475cac4ea33a6b2b90514b74ec4cf1ae8ebda00d","ssdeep":"192:UuG1CfEpoOLCnHibAKYubJsmsiwv0pLrU4KbHy7ABZJ24:UuGMHibAKYubJs5iossbHy7ABB","tlshash":"22e1eea5335dac6e8bd7327d507764c1dd2cd0b6d00a00b9b8a570d4c9fc41993daa3e","first_seen":"2023-06-15T18:12:11Z","last_seen":"2026-05-01T12:25:02.420495Z","times_seen":9,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":66,"dns":1,"connect":32,"send":0,"wait":39,"receive":6,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exygirl.com/data/avatars/s/7/7575.jpg?1578072199","fqdn":"exygirl.com","domain":"exygirl.com","tld":"com"},"ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exygirl.com/","date":"2026-01-03T10:30:03.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exygirl.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Oct 2025 10:43:17 GMT","end":"Wed, 21 Jan 2026 10:43:16 GMT"},"fingerprint":{"sha1":"DC:86:CC:F2:50:69:11:6A:C4:B0:7D:3A:57:E2:0F:CD:1D:7F:87:61","sha256":"0A:F1:DA:98:26:BC:DF:A9:13:FA:3D:CD:C7:8F:87:35:5F:E8:E9:86:E1:79:43:01:39:DA:5C:5E:F6:99:D6:96"}}},"request":{"raw":"GET /data/avatars/s/7/7575.jpg?1578072199 HTTP/1.1\r\nHost: exygirl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exygirl.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: xf_session=87fda31d9e8912caab34748b88fd2896\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 10:29:46 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1576\r\nLast-Modified: Sun, 22 Sep 2024 18:09:00 GMT\r\nConnection: keep-alive\r\nETag: \"66f05d3c-628\"\r\nExpires: Sun, 04 Jan 2026 10:29:46 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1576,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 85\", baseline, precision 8, 48x48, components 3","md5":"eab1189e011ebf4007f654835fa64882","sha1":"301b4f3fddc598e43a611c96abd88682dd7e6a60","sha256":"3fe2f708a7a788f47a34b88aec374b06c0ecec87b902951beb13a8514d1216c5","sha512":"8bfcb45bd2ec31cef71086d58a310693244e4c0acbfd8bbef37404253ee19284cfe3abe0eb539984e2381c987bb03c42672065d47d18a9a4fd91dc93234d99d3","ssdeep":"","tlshash":"4331fc7992825361c95fa1bf5e0a33d582c7625330942d103ff7c5e5936014ce08fc0a","first_seen":"2026-01-03T10:30:33.153983Z","last_seen":"2026-01-03T10:30:33.153983Z","times_seen":1,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":200,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exygirl.com/styles/default/velour/widgets/quicknav.png","fqdn":"exygirl.com","domain":"exygirl.com","tld":"com"},"ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exygirl.com/","date":"2026-01-03T10:30:03.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exygirl.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Oct 2025 10:43:17 GMT","end":"Wed, 21 Jan 2026 10:43:16 GMT"},"fingerprint":{"sha1":"DC:86:CC:F2:50:69:11:6A:C4:B0:7D:3A:57:E2:0F:CD:1D:7F:87:61","sha256":"0A:F1:DA:98:26:BC:DF:A9:13:FA:3D:CD:C7:8F:87:35:5F:E8:E9:86:E1:79:43:01:39:DA:5C:5E:F6:99:D6:96"}}},"request":{"raw":"GET /styles/default/velour/widgets/quicknav.png HTTP/1.1\r\nHost: exygirl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exygirl.com/css.php?css=xenforo,form,public\u0026style=5\u0026dir=LTR\u0026d=1761656641\r\nCookie: xf_session=87fda31d9e8912caab34748b88fd2896\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 10:29:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 95\r\nLast-Modified: Sun, 22 Sep 2024 18:09:00 GMT\r\nConnection: keep-alive\r\nETag: \"66f05d3c-5f\"\r\nExpires: Sun, 04 Jan 2026 10:29:46 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":95,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 14 x 14, 8-bit/color RGBA, non-interlaced","md5":"c32ef4c892f19290a02fa0a575805073","sha1":"f2366f03398825a966b967b40d597fa957ffcd2e","sha256":"be4b950a2475d656381b511f07429035ca24ebc3005f0f9f332db8896c59442a","sha512":"66f22201d4d7d825001325863c5e99b1457842cabed3cff7812752da02f3e0cef47c0534e21091da27e64b7f0bc1bd4ca24a2b8b61757ba8852f0758d98a5642","ssdeep":"","tlshash":"58b012e659593e7cc2c5417351082463e472014c4c585d1cc019e8381214540d0c47a2","first_seen":"2023-11-12T03:45:55Z","last_seen":"2026-05-01T12:25:02.455241Z","times_seen":4,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/F43s91cb/1-125.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.4","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exygirl.com/","date":"2026-01-03T10:30:03.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 07:17:47 GMT","end":"Mon, 16 Mar 2026 07:17:46 GMT"},"fingerprint":{"sha1":"DD:3D:A5:50:70:7F:39:42:46:31:C9:98:9F:15:65:82:62:1B:CB:64","sha256":"F9:9D:18:4C:82:20:26:63:14:76:0A:30:CD:96:1F:CE:F9:77:EB:76:34:EC:DF:EE:6E:54:50:88:39:05:C5:C2"}}},"request":{"raw":"GET /F43s91cb/1-125.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 10:30:03 GMT\r\ncontent-type: image/gif\r\ncontent-length: 120649\r\nlast-modified: Tue, 28 Oct 2025 12:58:03 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":120649,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 125 x 125","md5":"36e7f86c7925a02690f6b38507d38dc9","sha1":"790d9d60c441a30e4c691fb88588c40aedda5411","sha256":"6aa675a3658ffd597343cadd12dd23a2a9f879aa4306d62a83370abe9653db49","sha512":"65642d2e1f4c4a195d74b9f26b492493ec38a934dcc5f63a557f40cd005347201445f03e8c02f602eec4fdea57da59716783206d70b78b079634c901ee538cb2","ssdeep":"3072:m5ACwSWxR6MukC3heXMjfPXBPhgU2Y0xnTiRopJqpf0b2sxEe:m5AlxUMukC3haMjf/Vhk3dTiyWFaue","tlshash":"e9c312f6cca39842ea059e685bb5cbe514931c1b3ca94673c8e08d29f604dde4d5cd8b","first_seen":"2025-10-13T15:36:38.372614Z","last_seen":"2026-05-01T12:25:02.397901Z","times_seen":9,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":198,"dns":1,"connect":24,"send":0,"wait":21,"receive":70,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exygirl.com/styles/default/velour/widgets/arrowWidget-sprite.png","fqdn":"exygirl.com","domain":"exygirl.com","tld":"com"},"ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exygirl.com/","date":"2026-01-03T10:30:03.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exygirl.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Oct 2025 10:43:17 GMT","end":"Wed, 21 Jan 2026 10:43:16 GMT"},"fingerprint":{"sha1":"DC:86:CC:F2:50:69:11:6A:C4:B0:7D:3A:57:E2:0F:CD:1D:7F:87:61","sha256":"0A:F1:DA:98:26:BC:DF:A9:13:FA:3D:CD:C7:8F:87:35:5F:E8:E9:86:E1:79:43:01:39:DA:5C:5E:F6:99:D6:96"}}},"request":{"raw":"GET /styles/default/velour/widgets/arrowWidget-sprite.png HTTP/1.1\r\nHost: exygirl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exygirl.com/css.php?css=VietXfAdvStats,login_bar,node_category,node_forum,node_link,node_list,notices,panel_scroller,sidebar_share_page,siropu_ads_manager_ad_common,siropu_ads_manager_ad_type_code,thread_list_simple,velour\u0026style=5\u0026dir=LTR\u0026d=1761656641\r\nCookie: xf_session=87fda31d9e8912caab34748b88fd2896\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 10:29:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 147\r\nLast-Modified: Sun, 22 Sep 2024 18:09:00 GMT\r\nConnection: keep-alive\r\nETag: \"66f05d3c-93\"\r\nExpires: Sun, 04 Jan 2026 10:29:46 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":147,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 28 x 6, 8-bit/color RGBA, non-interlaced","md5":"658ab9d83fb1b0c8b927aff52324ba2a","sha1":"dfa1175397429f028d113cacf10ba2f8e504bfbd","sha256":"4d023afd7272221fb9c49ad23c2e5bf60173f11865392f8cce6ebe7cc83f5390","sha512":"c1c67d171bb1950f8051bb952d5003a7fe61e4157d8fccf46f03c9cc8e4add0b703ae704a32857100f9e52df00000c72183a8abb57a6e24e9960bd24ccc31f5b","ssdeep":"","tlshash":"93c02be7915a8f3ecaa0f337bb1100b5e0710693a7f210afe6c11073201310108807ee","first_seen":"2023-11-12T03:45:55Z","last_seen":"2026-05-01T12:25:02.424625Z","times_seen":4,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exygirl.com/styles/default/xenforo/listbg.gif","fqdn":"exygirl.com","domain":"exygirl.com","tld":"com"},"ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exygirl.com/","date":"2026-01-03T10:30:03.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exygirl.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Oct 2025 10:43:17 GMT","end":"Wed, 21 Jan 2026 10:43:16 GMT"},"fingerprint":{"sha1":"DC:86:CC:F2:50:69:11:6A:C4:B0:7D:3A:57:E2:0F:CD:1D:7F:87:61","sha256":"0A:F1:DA:98:26:BC:DF:A9:13:FA:3D:CD:C7:8F:87:35:5F:E8:E9:86:E1:79:43:01:39:DA:5C:5E:F6:99:D6:96"}}},"request":{"raw":"GET /styles/default/xenforo/listbg.gif HTTP/1.1\r\nHost: exygirl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exygirl.com/css.php?css=VietXfAdvStats,login_bar,node_category,node_forum,node_link,node_list,notices,panel_scroller,sidebar_share_page,siropu_ads_manager_ad_common,siropu_ads_manager_ad_type_code,thread_list_simple,velour\u0026style=5\u0026dir=LTR\u0026d=1761656641\r\nCookie: xf_session=87fda31d9e8912caab34748b88fd2896\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 10:29:46 GMT\r\nContent-Type: image/gif\r\nContent-Length: 142\r\nLast-Modified: Sun, 22 Sep 2024 18:09:00 GMT\r\nConnection: keep-alive\r\nETag: \"66f05d3c-8e\"\r\nExpires: Sun, 04 Jan 2026 10:29:46 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":142,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 208 x 20","md5":"96872853385b69cce7785ab796b81b74","sha1":"dcc25c7580a5c8d647a799f01a9a91b4fda7f1cd","sha256":"80d456052b437d440a009b2bbb1e2f0c5622f537f1f375a5613998c1c433b944","sha512":"7694fd8105a4b5a103fc58055982a58da3dd34601c1c541e18da7bcba368a263dd89ec70ced18f536bec0cc29875916affc49bc022145bc016eda51a461eb3bc","ssdeep":"","tlshash":"3ec02bef5080d11390de2d7fecf045629a0b0734472c563e0407e1d01a07bdb100520d","first_seen":"2023-06-12T12:13:12Z","last_seen":"2026-05-11T06:23:13.094694Z","times_seen":25,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exygirl.com/styles/default/velour/theme-brown/node-forum.png","fqdn":"exygirl.com","domain":"exygirl.com","tld":"com"},"ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exygirl.com/","date":"2026-01-03T10:30:03.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exygirl.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Oct 2025 10:43:17 GMT","end":"Wed, 21 Jan 2026 10:43:16 GMT"},"fingerprint":{"sha1":"DC:86:CC:F2:50:69:11:6A:C4:B0:7D:3A:57:E2:0F:CD:1D:7F:87:61","sha256":"0A:F1:DA:98:26:BC:DF:A9:13:FA:3D:CD:C7:8F:87:35:5F:E8:E9:86:E1:79:43:01:39:DA:5C:5E:F6:99:D6:96"}}},"request":{"raw":"GET /styles/default/velour/theme-brown/node-forum.png HTTP/1.1\r\nHost: exygirl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exygirl.com/css.php?css=VietXfAdvStats,login_bar,node_category,node_forum,node_link,node_list,notices,panel_scroller,sidebar_share_page,siropu_ads_manager_ad_common,siropu_ads_manager_ad_type_code,thread_list_simple,velour\u0026style=5\u0026dir=LTR\u0026d=1761656641\r\nCookie: xf_session=87fda31d9e8912caab34748b88fd2896\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 10:29:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 1754\r\nLast-Modified: Sun, 22 Sep 2024 18:09:00 GMT\r\nConnection: keep-alive\r\nETag: \"66f05d3c-6da\"\r\nExpires: Sun, 04 Jan 2026 10:29:46 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1754,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"93f970756842021ed91cd319105e5cde","sha1":"b7cb5fb37cef00554de44570f44d84a0f1e20e0f","sha256":"0eb5c3decf6dd5a86d6d5a4138cac9ee7a3bd1e2464655101151067a8946fded","sha512":"f58df8c9cd753cdf22665297d14d631ae463b2cf87f7d1e5cf5a6cb8fca6075a10cbf74c9805c26d2ea3a10b299a9686da771d5a5cab88803246c81fc3e68063","ssdeep":"","tlshash":"c1312bd3be458803046e180b4a8ebc1c5abb9169f7a0f6f5d47ed561481c212e390631","first_seen":"2024-08-19T21:33:57.041597Z","last_seen":"2026-01-03T10:30:33.182636Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exygirl.com/index.php?ajax/ad-action","fqdn":"exygirl.com","domain":"exygirl.com","tld":"com"},"ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://exygirl.com/","date":"2026-01-03T10:30:03.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exygirl.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Oct 2025 10:43:17 GMT","end":"Wed, 21 Jan 2026 10:43:16 GMT"},"fingerprint":{"sha1":"DC:86:CC:F2:50:69:11:6A:C4:B0:7D:3A:57:E2:0F:CD:1D:7F:87:61","sha256":"0A:F1:DA:98:26:BC:DF:A9:13:FA:3D:CD:C7:8F:87:35:5F:E8:E9:86:E1:79:43:01:39:DA:5C:5E:F6:99:D6:96"}}},"request":{"raw":"POST /index.php?ajax/ad-action HTTP/1.1\r\nHost: exygirl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exygirl.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Ajax-Referer: https://exygirl.com/\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 97\r\nOrigin: https://exygirl.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: xf_session=87fda31d9e8912caab34748b88fd2896\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":97,"data":"action=view\u0026id=5\u0026position=ad_above_content\u0026_xfRequestUri=%2F\u0026_xfNoRedirect=1\u0026_xfResponseType=json"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 10:29:47 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 2\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-control: private, max-age=0\r\nSet-Cookie: xf_adAction=a%3A2%3A%7Bi%3A0%3Bb%3A0%3Bi%3A5%3Ba%3A2%3A%7Bs%3A1%3A%22v%22%3Bi%3A1%3Bs%3A2%3A%22vt%22%3Bi%3A1767436187%3B%7D%7D; expires=Sun, 03-Jan-2027 10:29:47 GMT; Max-Age=31536000; path=/; secure\r\nX-Frame-Options: SAMEORIGIN\r\nX-Xss-Protection: 1\r\nLast-Modified: Sat, 03 Jan 2026 10:29:47 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-06-07T01:07:24.546336Z","times_seen":290472,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exygirl.com/css.php?css=xenforo,form,public\u0026style=5\u0026dir=LTR\u0026d=1761656641","fqdn":"exygirl.com","domain":"exygirl.com","tld":"com"},"ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exygirl.com/","date":"2026-01-03T10:30:03.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exygirl.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Oct 2025 10:43:17 GMT","end":"Wed, 21 Jan 2026 10:43:16 GMT"},"fingerprint":{"sha1":"DC:86:CC:F2:50:69:11:6A:C4:B0:7D:3A:57:E2:0F:CD:1D:7F:87:61","sha256":"0A:F1:DA:98:26:BC:DF:A9:13:FA:3D:CD:C7:8F:87:35:5F:E8:E9:86:E1:79:43:01:39:DA:5C:5E:F6:99:D6:96"}}},"request":{"raw":"GET /css.php?css=xenforo,form,public\u0026style=5\u0026dir=LTR\u0026d=1761656641 HTTP/1.1\r\nHost: exygirl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exygirl.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: xf_session=87fda31d9e8912caab34748b88fd2896\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 10:29:46 GMT\r\nContent-Type: text/css; charset=utf-8\r\nContent-Length: 27546\r\nConnection: keep-alive\r\nExpires: Wed, 01 Jan 2020 00:00:00 GMT\r\nLast-Modified: Tue, 28 Oct 2025 13:04:01 GMT\r\nCache-Control: public\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":106220,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1083)","md5":"4151d62b6958c756b88e5c7436681cc0","sha1":"173bf74adc26b117011421e7d5de9c2ff5545ec6","sha256":"2b669335dbc7f0833eff8b4e21da20d552d920ec69e3c70cd5e1c2e1671cde2d","sha512":"63a2d360acbea89a390b2d6da4b313b8d76cb72ec1e52762d8934e5bdeefc82a91b27d9cf4ce19bbd9b95396430054d28db9958d65fe5c48fa9011c84c583418","ssdeep":"3072:/fz/tn3XKywa8otrJBmHO1a5xc1F52hRC9gvVoye1qLbLgpZF:/fz/tn3XKywa8otrJBmHO1a5xc1F52hm","tlshash":"a6a3b833af164d05a23b81a42897dbce736b412397074eaafd7774acabcd0dc8076645","first_seen":"2024-08-19T21:33:57.013538Z","last_seen":"2026-01-03T10:30:33.189419Z","times_seen":2,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nmodel.cc/td/honeymod.jpg","fqdn":"nmodel.cc","domain":"nmodel.cc","tld":"cc"},"ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exygirl.com/","date":"2026-01-03T10:30:03.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nmodel.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 17:46:58 GMT","end":"Tue, 10 Mar 2026 17:46:57 GMT"},"fingerprint":{"sha1":"DA:2F:91:AC:DC:57:27:02:FF:72:5D:3D:37:E6:5F:3C:70:4F:D3:51","sha256":"C3:C0:7C:8E:A0:9D:79:AF:75:BB:8D:FC:C0:8F:AE:F0:0F:22:23:04:F8:12:45:BF:96:9E:82:73:C4:AD:C3:7F"}}},"request":{"raw":"GET /td/honeymod.jpg HTTP/1.1\r\nHost: nmodel.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 10:29:46 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 18753\r\nLast-Modified: Sun, 29 Jun 2025 16:22:29 GMT\r\nConnection: keep-alive\r\nETag: \"68616845-4941\"\r\nExpires: Sun, 04 Jan 2026 10:29:46 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18753,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 468x60, components 3","md5":"8608802a251c9393e0b315e54551717e","sha1":"ad00541c5e7187f08b582e705786a064e1fbb82c","sha256":"43f1f838290941b5dc112c1ced40c85477088cefd17a0bd0fb3313a83baa265d","sha512":"06d4a1f4f4a03fe54a1c90865a1f84bd0083f0cd12c5356cd85396c6d5f7fccb0f4573c79b49975dbbab4df8565ec1820db9c614928afc2d415c51327594d5e9","ssdeep":"384:S6twqf+IfWdCQUQeNY4h84zAlVTug3fxRY0/IYkD2R4y0f0T:xBWgWcQUQcY4h8BlVag35RY0/IYkD2R3","tlshash":"2882d1ffa3677c34dc9c2019ea19c9a94b79b552c99a753dd6217c4332d408ba81805e","first_seen":"2023-05-25T04:25:42Z","last_seen":"2026-04-08T10:38:31.212835Z","times_seen":22,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":204,"dns":1,"connect":24,"send":0,"wait":44,"receive":3,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lovnymph.top/img/topnymp60.png","fqdn":"lovnymph.top","domain":"lovnymph.top","tld":"top"},"ip":{"addr":"104.21.17.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exygirl.com/","date":"2026-01-03T10:30:03.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lovnymph.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 06:27:20 GMT","end":"Fri, 13 Feb 2026 07:27:12 GMT"},"fingerprint":{"sha1":"8B:EF:18:D0:14:08:98:E3:E3:D9:A0:08:64:53:C7:04:9D:74:61:94","sha256":"A4:62:08:B5:6E:45:DD:DD:EB:7B:F3:50:F9:A4:6E:0D:40:84:4A:76:82:67:51:F0:71:B5:78:B1:62:27:27:8D"}}},"request":{"raw":"GET /img/topnymp60.png HTTP/1.1\r\nHost: lovnymph.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 10:30:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 16523\r\nserver: cloudflare\r\nlast-modified: Tue, 18 Feb 2025 21:17:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67b4f8f4-408b\"\r\nexpires: Sun, 04 Jan 2026 08:29:34 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 7211\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sHEBfTei97sBtYmJxc8RkOsQlJ%2By2q5AYH00A%2BcxvDKCRLXlPHW0dGzb%2Box2IXZeb%2Fgh3UKAhAuFP3H1C3uU0OgtU8zQuWRRq6I%3D\"}]}\r\ncf-ray: 9b81d18fced3b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16523,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 468 x 60, 8-bit colormap, non-interlaced","md5":"cbd297915d43a7f97397e93f63c22db9","sha1":"55c0eddfd529c20972a45c1edabe46f15bf7236b","sha256":"146be8408f582074e4111a3ad5da47113d70ac6dea6009bd0ed098b5e7ff1c84","sha512":"430464360993c1dd48f6426ead9d4ccf00f358147a618b7c6b9e1286c28429c499c5097bb81eb6a27e827cd2deae1ca7ea72465c4a37b9f1b226331fe43a6d03","ssdeep":"192:ZYs1ma62mzsfi2H6CvI5qfpV5Ey7CedjEFBniR8Onh5jRxQ4h7JtRL/60vHDol3Y:ZYomuaRZY5bm4KFwjQ4h7JtJTboHna","tlshash":"3072d0fa92bc015519486a0e35ec89d8d23099f9873f43f6db16f82f4d1a1e0664d8ec","first_seen":"2025-10-30T05:36:34.478654Z","last_seen":"2026-03-09T19:05:23.795486Z","times_seen":4,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":195,"dns":1,"connect":1,"send":0,"wait":12,"receive":1,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"lovnymph.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exygirl.com/js/Siropu/AM/display.min.js?_v=104","fqdn":"exygirl.com","domain":"exygirl.com","tld":"com"},"ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exygirl.com/","date":"2026-01-03T10:30:03.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exygirl.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Oct 2025 10:43:17 GMT","end":"Wed, 21 Jan 2026 10:43:16 GMT"},"fingerprint":{"sha1":"DC:86:CC:F2:50:69:11:6A:C4:B0:7D:3A:57:E2:0F:CD:1D:7F:87:61","sha256":"0A:F1:DA:98:26:BC:DF:A9:13:FA:3D:CD:C7:8F:87:35:5F:E8:E9:86:E1:79:43:01:39:DA:5C:5E:F6:99:D6:96"}}},"request":{"raw":"GET /js/Siropu/AM/display.min.js?_v=104 HTTP/1.1\r\nHost: exygirl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exygirl.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: xf_session=87fda31d9e8912caab34748b88fd2896\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 10:29:46 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sun, 22 Sep 2024 18:09:00 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"66f05d3c-f96\"\r\nExpires: Sun, 04 Jan 2026 10:29:46 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3990,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3990), with no line terminators","md5":"9c8140b39b0de28aeeeebf674eac435a","sha1":"111ecb4de8a87c90b8c43cf9e910bf71411f55e0","sha256":"3dbc13e9f9836fc7ce1ca3870fe16747f8f909e2046e777dd7bb161efe803753","sha512":"d9233d5a0b00093bd0be9c762945778bf3ad615fb704a6d518d9f243de2132231205da4dc724b83639dda5566ee0da835ba4394b5e5bf31ef7ecaace1c701cfc","ssdeep":"","tlshash":"2381432bb1003423b6fb61b8147f0106f371f83b4b4ac5e29466c8595eb5e1c6e67e2c","first_seen":"2023-03-08T05:39:30Z","last_seen":"2026-06-04T17:49:21.87588Z","times_seen":18,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":67,"dns":1,"connect":24,"send":0,"wait":38,"receive":1,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"18top.link/button.php?u=exygirl","fqdn":"18top.link","domain":"18top.link","tld":"link"},"ip":{"addr":"185.43.220.10","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exygirl.com/","date":"2026-01-03T10:30:03.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"18top.link","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 07 Nov 2025 00:00:00 GMT","end":"Thu, 05 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D8:F1:AE:85:CB:DA:DB:92:8E:6F:7A:37:91:78:A6:24:B5:7F:77:C6","sha256":"7B:6C:17:23:36:02:EB:70:1C:4E:05:F3:38:6B:F9:CA:F5:3D:EE:17:F6:7C:7E:3E:D6:F3:09:E1:D9:B0:E4:A2"}}},"request":{"raw":"GET /button.php?u=exygirl HTTP/1.1\r\nHost: 18top.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nDate: Sat, 03 Jan 2026 10:30:03 GMT\r\nServer: Apache/2\r\nX-Powered-By: PHP/5.3.29\r\nLocation: http://18top.link/images/button.png\r\nVary: User-Agent\r\nContent-Length: 0\r\nKeep-Alive: timeout=2, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"PHP:5.3.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4626,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T02:09:46.692243Z","times_seen":16200239,"resource_available":true,"data":null}},"time_used":485,"timings":{"blocked":216,"dns":1,"connect":47,"send":0,"wait":50,"receive":0,"ssl":155},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"18top.link/images/button.png","fqdn":"18top.link","domain":"18top.link","tld":"link"},"ip":{"addr":"185.43.220.10","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exygirl.com/","date":"2026-01-03T10:30:03.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"18top.link","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 07 Nov 2025 00:00:00 GMT","end":"Thu, 05 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D8:F1:AE:85:CB:DA:DB:92:8E:6F:7A:37:91:78:A6:24:B5:7F:77:C6","sha256":"7B:6C:17:23:36:02:EB:70:1C:4E:05:F3:38:6B:F9:CA:F5:3D:EE:17:F6:7C:7E:3E:D6:F3:09:E1:D9:B0:E4:A2"}}},"request":{"raw":"GET /images/button.png HTTP/1.1\r\nHost: 18top.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 03 Jan 2026 10:30:04 GMT\r\nServer: Apache/2\r\nLast-Modified: Mon, 06 Jan 2025 08:07:35 GMT\r\nETag: \"1212-62b051efd1fc0\"\r\nAccept-Ranges: bytes\r\nContent-Length: 4626\r\nKeep-Alive: timeout=2, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4626,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 88 x 31, 8-bit/color RGBA, non-interlaced","md5":"b10c84f492e2e3a53e72943877757c42","sha1":"18e090133ff0d527b74c576062b094ddbb816d8c","sha256":"f1a074d59dd35c0baff510b0a9cd9f074ac882371b7ce28b6ad195847fbc42ab","sha512":"dcef3ccdd348699978b1961447c216cfd8173f1d8b40293e263f422ebde9d6f86e32c9a20b4626565d5f6433e886b1ce135e40f1179ca8b390f465c675b8fc33","ssdeep":"96:2IiSSuouzaRwvsqxqaTCO6ViqvdBa2mkuZiBLjpLplovC8jQCLT+C:2InS3qxdTCO0iqFBa2mpeJNB8d","tlshash":"45917df2c073af9f1ea5621b618a3db4cf6104713b07743627f48ce96781a8456b978c","first_seen":"2023-12-02T04:13:42Z","last_seen":"2026-05-30T12:32:50.082099Z","times_seen":52,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exygirl.com/styles/default/velour/logo.png","fqdn":"exygirl.com","domain":"exygirl.com","tld":"com"},"ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exygirl.com/","date":"2026-01-03T10:30:03.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exygirl.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Oct 2025 10:43:17 GMT","end":"Wed, 21 Jan 2026 10:43:16 GMT"},"fingerprint":{"sha1":"DC:86:CC:F2:50:69:11:6A:C4:B0:7D:3A:57:E2:0F:CD:1D:7F:87:61","sha256":"0A:F1:DA:98:26:BC:DF:A9:13:FA:3D:CD:C7:8F:87:35:5F:E8:E9:86:E1:79:43:01:39:DA:5C:5E:F6:99:D6:96"}}},"request":{"raw":"GET /styles/default/velour/logo.png HTTP/1.1\r\nHost: exygirl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exygirl.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: xf_session=87fda31d9e8912caab34748b88fd2896\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 10:29:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 6972\r\nLast-Modified: Fri, 27 Dec 2024 15:09:58 GMT\r\nConnection: keep-alive\r\nETag: \"676ec346-1b3c\"\r\nExpires: Sun, 04 Jan 2026 10:29:46 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6972,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 380 x 100, 8-bit/color RGBA, non-interlaced","md5":"a177a170b61d47122bb4d57c38a19010","sha1":"f1940c0c3d29d23f5a2bc578179e13c957808b79","sha256":"a0d1636f111c07c30ce0d20e15a0d910499019b2238b428aeb80169ea6674dfd","sha512":"a4cf056e4a408bc3f4ee9fc46ec20f822fe6f5443fcdd63bb497e33d11d46ab147ad37a8bdca737351b90c3736e9856a787c71a594d88fe5c96dd0d2fcd4eabd","ssdeep":"192:vlDThH7Vx4yBNyqkIvWwdNV2zmMiLilw02:pB7VWyBUq/vd6wmlc","tlshash":"28e18ef6adfd8826dd712863454284140f542bc892c5bcc7abe29474f7a2b045a15e7f","first_seen":"2026-01-03T10:30:33.216297Z","last_seen":"2026-01-03T10:30:33.216297Z","times_seen":1,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":206,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teenmodelsclub.website/pics/468x62/girlteen.jpg","fqdn":"teenmodelsclub.website","domain":"teenmodelsclub.website","tld":"website"},"ip":{"addr":"104.21.42.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exygirl.com/","date":"2026-01-03T10:30:03.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teenmodelsclub.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 16:21:07 GMT","end":"Thu, 02 Apr 2026 17:18:39 GMT"},"fingerprint":{"sha1":"3A:50:E4:75:F4:A3:75:67:24:58:C1:42:A5:BC:A6:22:9F:FE:E0:A5","sha256":"EA:53:DF:38:23:28:A2:6F:3F:3D:D0:9F:A4:45:BE:6F:D5:FD:02:AE:85:17:7F:0B:BE:48:0D:03:EC:32:F1:8E"}}},"request":{"raw":"GET /pics/468x62/girlteen.jpg HTTP/1.1\r\nHost: teenmodelsclub.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exygirl.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 10:30:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 47790\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Jan 2026 07:49:39 GMT\r\nlast-modified: Sun, 17 Jul 2022 17:55:38 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 268824\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dV8%2Bv4PX1TtLkUbfJrT9Y%2Bp7C3b5%2F9T%2BkTa4L%2B38K%2BRJ2E%2Bv%2B3uJ%2B38e8nXO73Rkh2qaP3HkHZMlcI2eCFXQ8ESRNUgRvQtZ%2BdDc%2FeqaoQdjAFckxwU%3D\"}]}\r\ncf-ray: 9b81d18fce0d5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":47790,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop Elements 18.0 (Windows), datetime=2022:07:17 10:55:36], progressive, precision 8, 468x62, components 3","md5":"ebdd07a8161735fb22efdd5e8a3d7a5f","sha1":"9f918648c9689757eb5189e7068645a6fbd37b64","sha256":"b0665839401431d4e0571fbc89f7dcac7ba2d4d8559f1bdd21874a071e878389","sha512":"3da8aafe62a44c1c834c2c57efe8fba0e362961fa45e3bddc4476e639b09f7b5fe077505eb6d29fcbf9fd22a40042fb49a1c4538ca132ae393d1dd1d5aac594a","ssdeep":"768:NqlVZ7QlVBLdloYyjsh8c3Um3xRvgUILX5qNLpD5fJSlQO1ssFfMa+TI:NA0BLdloKEm3x1ucLpDmlQvsWVTI","tlshash":"8e23d0287b258f50e9c4813e94f2d3467220bf96fa932a10fc5c5901bbb27c5fc9a256","first_seen":"2025-10-13T15:36:38.357412Z","last_seen":"2026-01-03T10:30:33.227681Z","times_seen":6,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":203,"dns":1,"connect":3,"send":0,"wait":9,"receive":3,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exygirl.com/data/avatars/s/0/1.jpg?1621590192","fqdn":"exygirl.com","domain":"exygirl.com","tld":"com"},"ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exygirl.com/","date":"2026-01-03T10:30:03.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exygirl.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Oct 2025 10:43:17 GMT","end":"Wed, 21 Jan 2026 10:43:16 GMT"},"fingerprint":{"sha1":"DC:86:CC:F2:50:69:11:6A:C4:B0:7D:3A:57:E2:0F:CD:1D:7F:87:61","sha256":"0A:F1:DA:98:26:BC:DF:A9:13:FA:3D:CD:C7:8F:87:35:5F:E8:E9:86:E1:79:43:01:39:DA:5C:5E:F6:99:D6:96"}}},"request":{"raw":"GET /data/avatars/s/0/1.jpg?1621590192 HTTP/1.1\r\nHost: exygirl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exygirl.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: xf_session=87fda31d9e8912caab34748b88fd2896\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 10:29:46 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1582\r\nLast-Modified: Sun, 22 Sep 2024 18:09:00 GMT\r\nConnection: keep-alive\r\nETag: \"66f05d3c-62e\"\r\nExpires: Sun, 04 Jan 2026 10:29:46 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1582,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 85\", baseline, precision 8, 48x48, components 3","md5":"51701d6cb426966c6715688756895e6d","sha1":"afc63e181f80f20d19bd499c4432b55039edb470","sha256":"e7fd88907b96b7b249ab5100a9cfaa0da96404514da315ef0f72d2935c55ee91","sha512":"fb9a2ae38f596d2840f23ee3b015bec274ae2eeef62d0c12d0b8302ddecfc5bd5a8b30b1882bc0953d14281b77262e70c25510e578e9f8b7794f8b1497daab67","ssdeep":"","tlshash":"7a31d7bb17428aa0892fc77788587aeae5cb5bc13699b589fda0c1e1c3599ccc04844c","first_seen":"2026-01-03T10:30:33.234181Z","last_seen":"2026-05-01T12:25:02.450261Z","times_seen":2,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":201,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exygirl.com/styles/default/xenforo/gradients/form-button-white-25px.png","fqdn":"exygirl.com","domain":"exygirl.com","tld":"com"},"ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exygirl.com/","date":"2026-01-03T10:30:03.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exygirl.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Oct 2025 10:43:17 GMT","end":"Wed, 21 Jan 2026 10:43:16 GMT"},"fingerprint":{"sha1":"DC:86:CC:F2:50:69:11:6A:C4:B0:7D:3A:57:E2:0F:CD:1D:7F:87:61","sha256":"0A:F1:DA:98:26:BC:DF:A9:13:FA:3D:CD:C7:8F:87:35:5F:E8:E9:86:E1:79:43:01:39:DA:5C:5E:F6:99:D6:96"}}},"request":{"raw":"GET /styles/default/xenforo/gradients/form-button-white-25px.png HTTP/1.1\r\nHost: exygirl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exygirl.com/css.php?css=xenforo,form,public\u0026style=5\u0026dir=LTR\u0026d=1761656641\r\nCookie: xf_session=87fda31d9e8912caab34748b88fd2896\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 10:29:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 192\r\nLast-Modified: Sun, 22 Sep 2024 18:09:00 GMT\r\nConnection: keep-alive\r\nETag: \"66f05d3c-c0\"\r\nExpires: Sun, 04 Jan 2026 10:29:46 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":192,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced","md5":"8a8c1f7af768595e15a3736775bbb0df","sha1":"29ad4d007b1cfeebcf115e7a55b4835201890ed6","sha256":"6a7df56f580bf0b383dfcacf6f1962e04f5acbb343b270fa4749a16864cac5ac","sha512":"9a811a47677f434534e17d68d1e34055001951c6c03c8c83cfd9c195365a7741ec58972eff30d3d5639fc3e619eca8976b3bcaecc76003b418ada05b15f8a3dd","ssdeep":"","tlshash":"13c022c07a988da4c61a29a60890e051883297e002218228368a8d2852f0639e4e8b03","first_seen":"2023-05-14T03:18:21Z","last_seen":"2026-06-04T19:56:58.333796Z","times_seen":125,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exygirl.com/styles/default/xenforo/list.gif","fqdn":"exygirl.com","domain":"exygirl.com","tld":"com"},"ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exygirl.com/","date":"2026-01-03T10:30:03.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exygirl.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Oct 2025 10:43:17 GMT","end":"Wed, 21 Jan 2026 10:43:16 GMT"},"fingerprint":{"sha1":"DC:86:CC:F2:50:69:11:6A:C4:B0:7D:3A:57:E2:0F:CD:1D:7F:87:61","sha256":"0A:F1:DA:98:26:BC:DF:A9:13:FA:3D:CD:C7:8F:87:35:5F:E8:E9:86:E1:79:43:01:39:DA:5C:5E:F6:99:D6:96"}}},"request":{"raw":"GET /styles/default/xenforo/list.gif HTTP/1.1\r\nHost: exygirl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exygirl.com/css.php?css=VietXfAdvStats,login_bar,node_category,node_forum,node_link,node_list,notices,panel_scroller,sidebar_share_page,siropu_ads_manager_ad_common,siropu_ads_manager_ad_type_code,thread_list_simple,velour\u0026style=5\u0026dir=LTR\u0026d=1761656641\r\nCookie: xf_session=87fda31d9e8912caab34748b88fd2896\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 10:29:46 GMT\r\nContent-Type: image/gif\r\nContent-Length: 4210\r\nLast-Modified: Sun, 22 Sep 2024 18:09:00 GMT\r\nConnection: keep-alive\r\nETag: \"66f05d3c-1072\"\r\nExpires: Sun, 04 Jan 2026 10:29:46 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4210,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 24 x 1002","md5":"2572ebb9f1986792f3989475ba33e39d","sha1":"64d95b10034dd1092a216f58fe882e650ff280e3","sha256":"b3c66e6b9d509918f366cdcb1a324bdb7ad8512f2b7216ec8050621abefeacb2","sha512":"b44370990eb1516f079365234ce837ed43fbef9ba50ed6475928bc0965c6e5a7ba01859c6db756c74da494ffb9e79c9633ce5d6567fcff749aa0e17743bd6a37","ssdeep":"96:i1nHqDmVp+78P8/UeErbhlur3Ema3s/nmZ+hdYEZOv8RHPo:sKs8/ilaEma36H/Okq","tlshash":"969109410754d9849f5aecfa84cc1a8c209ce9047811f8aa1d51d4b7a6383eecc7afa7","first_seen":"2023-06-12T12:13:12Z","last_seen":"2026-05-01T12:25:02.45664Z","times_seen":23,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exygirl.com/favicon.png","fqdn":"exygirl.com","domain":"exygirl.com","tld":"com"},"ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exygirl.com/","date":"2026-01-03T10:30:03.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exygirl.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Oct 2025 10:43:17 GMT","end":"Wed, 21 Jan 2026 10:43:16 GMT"},"fingerprint":{"sha1":"DC:86:CC:F2:50:69:11:6A:C4:B0:7D:3A:57:E2:0F:CD:1D:7F:87:61","sha256":"0A:F1:DA:98:26:BC:DF:A9:13:FA:3D:CD:C7:8F:87:35:5F:E8:E9:86:E1:79:43:01:39:DA:5C:5E:F6:99:D6:96"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: exygirl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exygirl.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: xf_session=87fda31d9e8912caab34748b88fd2896\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 10:29:47 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-control: private, max-age=0\r\nX-Frame-Options: SAMEORIGIN\r\nX-Xss-Protection: 1\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:1.11.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"XenForo","description":"XenForo is a PHP-based forum hosting program for communities that is designed to be deployed on a remote web server.","website":"https://xenforo.com","common_platform_enumeration":"","icon":"XenForo.png","categories":["Message boards"]}],"data":{"size":23241,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"b97c3acecbb7557fab2b301e8aa433dd","sha1":"75ab9bbbe98646b0d717269c666faebfcd6aa493","sha256":"cd299271ebefcfc77b46089e4c2fa745a897139d6ae0236f8fcdce497a95f540","sha512":"5155337ed5a284cd167b03e7c89b8d745e5764c3c2bf2a1448829e76823f58ea02eb089790ebb2a8c3fbf5f02b4876021cb92f43ee710ced5c2fa0e9bd8e8ca9","ssdeep":"384:I50qZbeRjtdTdj7eb3sJj3KLUe/ktTTisOA2lp+/qs6335OshhA4Bdndio27TITk:I5HZbeRL57ejpgwd+/qXU2d8o27TITl6","tlshash":"fda20962558c8d3b432341eab11a3b5ca4af4d76c25eccc2f5fb0a2f6ec2e41681f561","first_seen":"2026-01-03T10:30:33.250053Z","last_seen":"2026-01-03T10:30:33.250053Z","times_seen":1,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exygirl.com/","fqdn":"exygirl.com","domain":"exygirl.com","tld":"com"},"ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-03T10:30:02.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exygirl.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Oct 2025 10:43:17 GMT","end":"Wed, 21 Jan 2026 10:43:16 GMT"},"fingerprint":{"sha1":"DC:86:CC:F2:50:69:11:6A:C4:B0:7D:3A:57:E2:0F:CD:1D:7F:87:61","sha256":"0A:F1:DA:98:26:BC:DF:A9:13:FA:3D:CD:C7:8F:87:35:5F:E8:E9:86:E1:79:43:01:39:DA:5C:5E:F6:99:D6:96"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: exygirl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 10:29:46 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-control: private, max-age=0\r\nSet-Cookie: xf_session=87fda31d9e8912caab34748b88fd2896; path=/; secure; httponly\r\nX-Frame-Options: SAMEORIGIN\r\nX-Xss-Protection: 1\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:1.11.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"XenForo","description":"XenForo is a PHP-based forum hosting program for communities that is designed to be deployed on a remote web server.","website":"https://xenforo.com","common_platform_enumeration":"","icon":"XenForo.png","categories":["Message boards"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":81294,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (386)","md5":"df1cf08a0c75c4ece748e904ba2bdb4e","sha1":"764a9cc3f02410f30895faa2efe413201e36e9fc","sha256":"42e6387df5ce01ceecb886e35712268758ddd57308cfca390134747e38c410ea","sha512":"d4984c812fa744f4f37b637647a09fff742ba02d9d930431a6e362eabb28dd617b79f4adbf1cba4639ed1d1490b70dfe7a95ba6e8a9212dbeec27030c2eb5d3c","ssdeep":"1536:FwzwejxpgGeaCiDA0U2axcqBMhhQI5MdVHaNHMpO7TITGiJpt:ahqsCiDA0U2axcqBMhh75MdVHSMO7TIb","tlshash":"fb838420418d5f3b421707eb74e13b4874ff9a72e16955c1b2fb86398fc6ea1aa0b057","first_seen":"2026-01-03T10:30:33.254408Z","last_seen":"2026-01-03T10:30:33.254408Z","times_seen":1,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":74,"dns":21,"connect":22,"send":0,"wait":235,"receive":3,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exygirl.com/css.php?css=VietXfAdvStats,login_bar,node_category,node_forum,node_link,node_list,notices,panel_scroller,sidebar_share_page,siropu_ads_manager_ad_common,siropu_ads_manager_ad_type_code,thread_list_simple,velour\u0026style=5\u0026dir=LTR\u0026d=1761656641","fqdn":"exygirl.com","domain":"exygirl.com","tld":"com"},"ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://exygirl.com/","date":"2026-01-03T10:30:03.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exygirl.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Oct 2025 10:43:17 GMT","end":"Wed, 21 Jan 2026 10:43:16 GMT"},"fingerprint":{"sha1":"DC:86:CC:F2:50:69:11:6A:C4:B0:7D:3A:57:E2:0F:CD:1D:7F:87:61","sha256":"0A:F1:DA:98:26:BC:DF:A9:13:FA:3D:CD:C7:8F:87:35:5F:E8:E9:86:E1:79:43:01:39:DA:5C:5E:F6:99:D6:96"}}},"request":{"raw":"GET /css.php?css=VietXfAdvStats,login_bar,node_category,node_forum,node_link,node_list,notices,panel_scroller,sidebar_share_page,siropu_ads_manager_ad_common,siropu_ads_manager_ad_type_code,thread_list_simple,velour\u0026style=5\u0026dir=LTR\u0026d=1761656641 HTTP/1.1\r\nHost: exygirl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exygirl.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: xf_session=87fda31d9e8912caab34748b88fd2896\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 10:29:46 GMT\r\nContent-Type: text/css; charset=utf-8\r\nContent-Length: 13483\r\nConnection: keep-alive\r\nExpires: Wed, 01 Jan 2020 00:00:00 GMT\r\nLast-Modified: Tue, 28 Oct 2025 13:04:01 GMT\r\nCache-Control: public\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56414,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8c0f2ca8804b94b1d87828017dea36eb","sha1":"6cb0f00e191dd77184ef24e38b219fda3393aa79","sha256":"96f2297d839552aad38d4fe5d85606f915310b0a2e41148c01a7f9a7e908e205","sha512":"1b30149bd5dd3e8237db5081cf63b311a5e6c2bf6e2c168110dbeb2954262bb7a369b643c78fcbe700bc325f0ffd8c7238e93515534370e001f5c36f96d6980b","ssdeep":"1536:gPwERogqKBvZGmYqsXCPcyMnaf30DSB9jNifPmIQfTS1hYsJZk:dERogvYhyMafwSB/IowZk","tlshash":"4a43a536a6570649b23b419979a7eb4e377f8113970f4e6ef63b20e8fb850dc807a150","first_seen":"2026-01-03T10:30:33.259207Z","last_seen":"2026-01-03T10:30:33.259207Z","times_seen":1,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":59,"dns":1,"connect":26,"send":0,"wait":66,"receive":2,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exygirl.com/styles/default/xenforo/xenforo-ui-sprite.png","fqdn":"exygirl.com","domain":"exygirl.com","tld":"com"},"ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exygirl.com/","date":"2026-01-03T10:30:03.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exygirl.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Oct 2025 10:43:17 GMT","end":"Wed, 21 Jan 2026 10:43:16 GMT"},"fingerprint":{"sha1":"DC:86:CC:F2:50:69:11:6A:C4:B0:7D:3A:57:E2:0F:CD:1D:7F:87:61","sha256":"0A:F1:DA:98:26:BC:DF:A9:13:FA:3D:CD:C7:8F:87:35:5F:E8:E9:86:E1:79:43:01:39:DA:5C:5E:F6:99:D6:96"}}},"request":{"raw":"GET /styles/default/xenforo/xenforo-ui-sprite.png HTTP/1.1\r\nHost: exygirl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exygirl.com/css.php?css=VietXfAdvStats,login_bar,node_category,node_forum,node_link,node_list,notices,panel_scroller,sidebar_share_page,siropu_ads_manager_ad_common,siropu_ads_manager_ad_type_code,thread_list_simple,velour\u0026style=5\u0026dir=LTR\u0026d=1761656641\r\nCookie: xf_session=87fda31d9e8912caab34748b88fd2896\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 10:29:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 3894\r\nLast-Modified: Sun, 22 Sep 2024 18:09:00 GMT\r\nConnection: keep-alive\r\nETag: \"66f05d3c-f36\"\r\nExpires: Sun, 04 Jan 2026 10:29:46 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3894,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 57, 8-bit colormap, non-interlaced","md5":"1532d029447a00554657cd413939c0a6","sha1":"7272ee5f4798e9939592e25f0b81083edf869760","sha256":"148805ef840df5f06de10c18349522ea3f2ce394218c5515f54e9265828691e5","sha512":"885803249c137db8507265caba7385d5c9923be3e66a398d320d2c382883936c6b2eeffba42a54c126cc81893b0d78babe80da3f146ba77b446a5c2030026bf5","ssdeep":"","tlshash":"6a816ecbe53d5eccc5934b333a6a06f1420f868585c28752959318d78e91374984da6d","first_seen":"2023-05-21T18:11:02Z","last_seen":"2026-06-06T16:14:20.465071Z","times_seen":192,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sexynymhp.com/","fqdn":"sexynymhp.com","domain":"sexynymhp.com","tld":"com"},"ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-03T10:30:02.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sexynymhp.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 10:58:30 GMT","end":"Tue, 20 Jan 2026 10:58:29 GMT"},"fingerprint":{"sha1":"44:2E:72:97:A7:EB:0E:64:57:8F:4F:51:8E:3E:20:66:5A:BA:2C:91","sha256":"C0:1F:89:AE:4C:84:F9:66:1A:32:8F:D1:02:18:7D:B0:9B:B5:F9:C2:03:81:AD:F8:26:53:A8:6A:5E:29:75:E0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: sexynymhp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 10:29:45 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: https://exygirl.com/\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":81294,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T02:09:46.692243Z","times_seen":16200239,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":82,"dns":28,"connect":22,"send":0,"wait":22,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exygirl.com/","date":"2026-01-03T10:30:03.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /ajax/libs/jquery/1.11.0/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://exygirl.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33576\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 01 Jan 2026 14:24:47 GMT\r\nexpires: Fri, 01 Jan 2027 14:24:47 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 158716\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":96381,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32341)","md5":"8fc25e27d42774aeae6edbc0a18b72aa","sha1":"b66ed708717bf0b4a005a4d0113af8843ef3b8ff","sha256":"b294e973896f8f874e90a8eb1a8908ac790980d034c4c4bdf0fc3d37b8abf682","sha512":"87d90a665c15d71ac872bd8bc003d9863964c7ec7ada6370b902b93c0bbd7770fe25730d946c7c6a465baa95efa74bc0e78af3f83aea615af35060cc8702a6c1","ssdeep":"1536:EPpEy5BMibZGOj/bEe8v+/UWf4IhvAuCh/jqkODZ2D5N9Rag0MOIdSZAgtgoX5Yn:bIO/e2D5c4LgtImLja98HrK","tlshash":"cc93e8d9b6d2706297b730a851bf510bb17698eab80c4c60f058d8e47eb4e8d507bf2d","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-06-07T02:03:49.401786Z","times_seen":29690,"resource_available":true,"data":null}},"time_used":390,"timings":{"blocked":165,"dns":0,"connect":21,"send":0,"wait":22,"receive":22,"ssl":156},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exygirl.com/js/xenforo/xenforo.js?_v=6fde550f","fqdn":"exygirl.com","domain":"exygirl.com","tld":"com"},"ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://exygirl.com/","date":"2026-01-03T10:30:03.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exygirl.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Oct 2025 10:43:17 GMT","end":"Wed, 21 Jan 2026 10:43:16 GMT"},"fingerprint":{"sha1":"DC:86:CC:F2:50:69:11:6A:C4:B0:7D:3A:57:E2:0F:CD:1D:7F:87:61","sha256":"0A:F1:DA:98:26:BC:DF:A9:13:FA:3D:CD:C7:8F:87:35:5F:E8:E9:86:E1:79:43:01:39:DA:5C:5E:F6:99:D6:96"}}},"request":{"raw":"GET /js/xenforo/xenforo.js?_v=6fde550f HTTP/1.1\r\nHost: exygirl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exygirl.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: xf_session=87fda31d9e8912caab34748b88fd2896\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 10:29:46 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sun, 22 Sep 2024 18:09:00 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"66f05d3c-29747\"\r\nExpires: Sun, 04 Jan 2026 10:29:46 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":169799,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7085)","md5":"143c1f519fd29284c9d4e0672911a353","sha1":"42753d001f1d9f75a78e2efd9d60cc6df279da42","sha256":"d4abe0ab3ebdcc83eccd33a616828aef540e3eb1392169c9cd97ea71ac6dff2e","sha512":"8a0b7e886d319efc2d12eb6450fd642fcb21695faf24f36a8a04bf1d0d916cfbd3d93a657e0eb08396d40116cfb9f82ed808d0eb9746785deead1f82dbb39f89","ssdeep":"3072:pulrhnAh+VhITl8XsTKFrlQZ0+NuS26cTLGTjLIHzch258te:pufr43mYG+NuStYG8Hzch258te","tlshash":"65f30aa973b1715393fb3078502f0105623268bee50e8974b4a998e65dbcf486277f3d","first_seen":"2023-03-14T05:56:06Z","last_seen":"2026-06-02T18:11:12.730486Z","times_seen":70,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":68,"dns":0,"connect":24,"send":0,"wait":48,"receive":37,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exygirl.com/data/avatars/s/7/7576.jpg?1578072357","fqdn":"exygirl.com","domain":"exygirl.com","tld":"com"},"ip":{"addr":"193.42.111.122","port":443,"asn":60144,"as":"3W Infra B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://exygirl.com/","date":"2026-01-03T10:30:03.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exygirl.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Oct 2025 10:43:17 GMT","end":"Wed, 21 Jan 2026 10:43:16 GMT"},"fingerprint":{"sha1":"DC:86:CC:F2:50:69:11:6A:C4:B0:7D:3A:57:E2:0F:CD:1D:7F:87:61","sha256":"0A:F1:DA:98:26:BC:DF:A9:13:FA:3D:CD:C7:8F:87:35:5F:E8:E9:86:E1:79:43:01:39:DA:5C:5E:F6:99:D6:96"}}},"request":{"raw":"GET /data/avatars/s/7/7576.jpg?1578072357 HTTP/1.1\r\nHost: exygirl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://exygirl.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: xf_session=87fda31d9e8912caab34748b88fd2896\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 03 Jan 2026 10:29:46 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1467\r\nLast-Modified: Sun, 22 Sep 2024 18:09:00 GMT\r\nConnection: keep-alive\r\nETag: \"66f05d3c-5bb\"\r\nExpires: Sun, 04 Jan 2026 10:29:46 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1467,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 85\", baseline, precision 8, 48x48, components 3","md5":"297a59498ad9b8e369c6d944ad9cea73","sha1":"c0041e3ad943a86bf448627aba5ccd22b6810d6d","sha256":"0d55c9aeabfcbff95308acf361294aba7a7a8cbd9158bf2076a8f82e4d15a3bf","sha512":"664b19a4b330bce075880dd15d2e18f15a8882b5caa8375394cdd3e8c863348af4c5cdc99760f68895d93f5b9d69b84a5dbe4b1dc2c1765e243d0b6be8b3ec91","ssdeep":"","tlshash":"8431086ee6721331cd0f89395e811218b06a9f6278b5230b2ff1b5f28fe95c1c58c64a","first_seen":"2024-08-19T21:33:57.034011Z","last_seen":"2026-05-01T12:25:02.412805Z","times_seen":3,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":199,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}