{"report_id":"325e5bbd-9b43-44e8-a890-3956fb6e55ec","version":6,"status":"done","tags":[],"date":"2025-10-29T15:35:34Z","url":{"schema":"http","addr":"go.cm-trk6.com/aff_c?offer_id=13080\u0026aff_id=90311\u0026url_id=0\u0026aff_sub5=member-area\u0026source=adxet\u0026click_id=7vE292rvxyDf8PRzuaH8z2","fqdn":"go.cm-trk6.com","domain":"cm-trk6.com","tld":"com"},"ip":{"addr":"104.21.2.21","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"flirtooy.xyz/tt2_2","fqdn":"flirtooy.xyz","domain":"flirtooy.xyz","tld":"xyz"},"title":"Dating Service","dom":{"size":8086,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1146)","md5":"01750902f4a463d9bbad83ed78b0ff80","sha1":"25b54a95054558efdad5002f34ae926e5f28fbc1","sha256":"cb33d9e90c87402ba696200c731f34e211d879e636cac84e73f3e4a25fd300b8","sha512":"4f0de68d2a9919ea72ed21c191029a9b1a9f853b2a007f8bc433da42a4bc63e6566daf9337e9e6d6709a277488682541a830174739a2b49dbe651f0a87b24ebb","ssdeep":"192:G3xTqvCJe0KfQcRccR+yHKfHAnZncrHABJq:SxD9A9u","tlshash":"95f1b4592c926403162f5887fb9b2b2d31f5910b4548fc437bad32084fd6f6ce9a169a","dom_hash":"domhash3b1fa13aa07babb992162583222e6c2e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":"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"}},"submit":{"url":{"schema":"http","addr":"go.cm-trk6.com/aff_c?offer_id=13080\u0026aff_id=90311\u0026url_id=0\u0026aff_sub5=member-area\u0026source=adxet\u0026click_id=7vE292rvxyDf8PRzuaH8z2","fqdn":"go.cm-trk6.com","domain":"cm-trk6.com","tld":"com"},"ip":{"addr":"104.21.2.21","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-03T15:35:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-29","alert":"Sinkholed","trigger":"flirtooy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-29","alert":"Sinkholed","trigger":"api.flirtooy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-29","alert":"Sinkholed","trigger":"api.daterix.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-26T22:12:38.002151Z","alert_count":0,"request_count":2,"received_data":81924,"sent_data":1094,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.flirtooy.xyz","ip":{"addr":"172.67.219.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-10-20","domain_rank":0,"first_seen":"2025-09-23T18:53:32.350434Z","last_seen":"2025-10-22T07:11:02.361723Z","alert_count":2,"request_count":2,"received_data":3041,"sent_data":1000,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"api.daterix.io","ip":{"addr":"104.21.69.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-11-10","domain_rank":0,"first_seen":"2025-06-06T22:08:04.052054Z","last_seen":"2025-10-24T08:59:58.200296Z","alert_count":2,"request_count":2,"received_data":1662,"sent_data":973,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"go.cm-trk6.com","ip":{"addr":"172.67.128.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-12-16","domain_rank":0,"first_seen":"2021-12-16T09:20:29Z","last_seen":"2025-10-25T18:19:18.246662Z","alert_count":0,"request_count":3,"received_data":5308,"sent_data":1765,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-26T22:12:37.824968Z","alert_count":0,"request_count":1,"received_data":17441,"sent_data":436,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"flirtooy.xyz","ip":{"addr":"172.67.219.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-10-20","domain_rank":2043941,"first_seen":"2025-09-23T18:53:32.366372Z","last_seen":"2025-10-22T07:11:02.469344Z","alert_count":10,"request_count":10,"received_data":1208179,"sent_data":4446,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"flirtooy.xyz/js/land-LandDirectShortTT2-vue.b2cec9c8.js","fqdn":"flirtooy.xyz","domain":"flirtooy.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6dea61782f7630469c67acb2a4558a3c","sha1":"1609a35141c6253c8d2b06ea49f8f19ee2b2349e","sha256":"d6aeb1bef0f2b5c3fc7fa1d329d1fc757c65c9d4f17da3a39719d26281a0340d","sha512":"09fc8dd18537ec0a789d3380ab3f813f26f9a740d524ac885ac08b747e85d6c56e91b3bedf524636eb68a0108900804f74e068e5d39334740462f3c9ec19ea10","ssdeep":"192:VbTOxaMQJ1TXvZZ1+Rd8Lvourh0eP0uWOaIN4eUsk4qiGBNGi+/Q6LROVY/SsoaB:Vbq4MQjTXsepQKRsY3nMjgfA9Uv12+D3","tlshash":"6722d80fc4e46c185463e22c944f1c15228aba3bad4906bdb7bede762dd4925a718bf0","size":10026,"data":"","first_seen":"2025-02-27T03:38:44.872347Z","last_seen":"2026-03-29T19:09:13.962994Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flirtooy.xyz/?aff_id=8\u0026click_id=33_90311_8666_19ce28796e1a7da5204148a4d9b6c8b8\u0026p10=6eec9fa0-4964-4ae7-a6b0-8edf7a5bd0cd_c37b111b6414224ac4759d649e4cbe46\u0026source=90311\u0026aff_sub=adxet\u0026aff_sub2=member-area","fqdn":"flirtooy.xyz","domain":"flirtooy.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"879a768eba00c35db98d88364cbf0502","sha1":"a759e56ab1311e1fa038779bd7d3af5ce9742c49","sha256":"56f0b6e974b575d2328f7947dc0e1bf13e0f98843e5a6704a7cb09eea6adda2f","sha512":"0f64856443c7cbcd62110ad9194da47e25c5d1254fb992eb700aebb8c9dfb5c57ce209499eb1102e991ffc83cd6a268e1fb15e0e9fc48921c2041a0cc505328a","ssdeep":"","tlshash":"53f02b5682ad983b14b3a02a5f0f2b1a232715c35094ab00bffe4f426fd392a91625d1","size":592,"data":"","first_seen":"2025-03-08T07:35:09.443217Z","last_seen":"2026-03-31T05:34:03.948509Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flirtooy.xyz/?aff_id=8\u0026click_id=33_90311_8666_19ce28796e1a7da5204148a4d9b6c8b8\u0026p10=6eec9fa0-4964-4ae7-a6b0-8edf7a5bd0cd_c37b111b6414224ac4759d649e4cbe46\u0026source=90311\u0026aff_sub=adxet\u0026aff_sub2=member-area","fqdn":"flirtooy.xyz","domain":"flirtooy.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b172b6f180c003404894f505f2a114e","sha1":"42316fde9a6266f171071f8a3a7343bbcad8dd08","sha256":"12c952cba28f3af64db147d2566b783c5e7ca5599cab963616232b5a9ded7651","sha512":"353f83b294fd204ae561c06f33b41f14a83c6f17732c35a3b8addb33cdcc6a6b66ef3d009342dd5a8ea17133ed86dafca8e52535e158eb9639b5509bed970edf","ssdeep":"","tlshash":"fa51ce843de2f15b179e2043f7565aa821fa41a314cdb603f76c350c2fdc62ce169298","size":2465,"data":"","first_seen":"2025-09-05T15:40:48.808744Z","last_seen":"2026-02-19T02:45:17.4259Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flirtooy.xyz/js/chunk-vendors.e59dcb6f.js","fqdn":"flirtooy.xyz","domain":"flirtooy.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0e788eb74920523ad8e94e58c3274e8","sha1":"c1db832c3c03e73022a8d8dbf4046671be78b67a","sha256":"390f15218082d868934a4f5b538733d8b190b0a262873c901860b97467853d6e","sha512":"c9adb484e1dc78ca037d3a5633aa18c8c7cba0515d81b43c02f4c64771c299186a0a62d21f140e09b2daccce0d40a4d92010926672b2453f65681a7372b64221","ssdeep":"3072:66lwU+4RWBRFQUVPkaFYZPpp5NnuAC8TPRkJtz+Ti18FM:66lwU+48xQUVWPpp7uAZGh6S8FM","tlshash":"e014f789b2d2b0e213fa24e0406f550bf27a6959340e94e1f2a4f8d27c7a94e5177f7c","size":199827,"data":"","first_seen":"2024-12-01T21:38:56.369601Z","last_seen":"2026-03-31T05:34:03.945477Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flirtooy.xyz/js/app.c5aee925.js","fqdn":"flirtooy.xyz","domain":"flirtooy.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"43ba4b5864c3d60a0ec560b626cd4e5f","sha1":"d4b41ee22a842005eb27b0f88f1a51b6d36f066b","sha256":"8c9ad145da27e2aa8cbd429406a0679458c01eda0b3bfed095c30682c95e150d","sha512":"a4e996f65bcd787b7bb7e2aec26d5e941f95f67cda9a48845201b478bac970f13c29f8bc995fd065ff15cf207740cc94f6616731a6e7cd72bd710742793e0515","ssdeep":"768:0GWQs/CzOIOOPNbsjZQ0DquIEPTrtMAhLsjrO+dezriPCXhjOdiNsasgqu:3udUwDquIEPTrtyraBRzn/F","tlshash":"01d22cd675e1e07412f741f0db3f1613e21639683b0ad090b35bedda3e29b976122b68","size":29854,"data":"","first_seen":"2025-09-23T18:53:36.598233Z","last_seen":"2026-02-19T02:45:17.391619Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"flirtooy.xyz/js/chunk-vendors.e59dcb6f.js","fqdn":"flirtooy.xyz","domain":"flirtooy.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://flirtooy.xyz/?aff_id=8\u0026click_id=33_90311_8666_19ce28796e1a7da5204148a4d9b6c8b8\u0026p10=6eec9fa0-4964-4ae7-a6b0-8edf7a5bd0cd_c37b111b6414224ac4759d649e4cbe46\u0026source=90311\u0026aff_sub=adxet\u0026aff_sub2=member-area","date":"2025-10-29T15:35:11.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flirtooy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 13:30:34 GMT","end":"Mon, 19 Jan 2026 14:28:13 GMT"},"fingerprint":{"sha1":"E1:66:CD:07:63:04:06:22:98:75:E7:F1:55:6C:E9:0B:1C:F1:3D:41","sha256":"61:23:C4:A5:78:E0:94:F3:E4:CC:EF:1E:BC:82:AD:5D:21:D8:7C:9A:DE:49:16:70:9A:4D:A2:04:11:0C:9B:9D"}}},"request":{"raw":"GET /js/chunk-vendors.e59dcb6f.js HTTP/1.1\r\nHost: flirtooy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 29 Oct 2025 15:35:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 22 Sep 2025 10:36:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hP6qN2dljJ2ULIczZvnCBFBw6bnjx5cT0XiBassYU%2Fmudrhej%2Bm2wn5WMs1f6Xb07Kv83Oo3Jwne2cOf6i7GLB9YqYHlAdF%2Fh1ao3A%3D%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"68d126ae-30c93\"\r\nexpires: Fri, 28 Nov 2025 00:36:17 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: deny\r\ncontent-encoding: gzip\r\nage: 53933\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 9963bdc95ac05ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":199827,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (34752)","md5":"e0e788eb74920523ad8e94e58c3274e8","sha1":"c1db832c3c03e73022a8d8dbf4046671be78b67a","sha256":"390f15218082d868934a4f5b538733d8b190b0a262873c901860b97467853d6e","sha512":"c9adb484e1dc78ca037d3a5633aa18c8c7cba0515d81b43c02f4c64771c299186a0a62d21f140e09b2daccce0d40a4d92010926672b2453f65681a7372b64221","ssdeep":"3072:66lwU+4RWBRFQUVPkaFYZPpp5NnuAC8TPRkJtz+Ti18FM:66lwU+48xQUVWPpp7uAZGh6S8FM","tlshash":"e014f789b2d2b0e213fa24e0406f550bf27a6959340e94e1f2a4f8d27c7a94e5177f7c","first_seen":"2024-12-01T21:38:56.369601Z","last_seen":"2026-03-31T05:34:03.945477Z","times_seen":70,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-29","alert":"Sinkholed","trigger":"flirtooy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flirtooy.xyz/css/app.be4b2513.css","fqdn":"flirtooy.xyz","domain":"flirtooy.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://flirtooy.xyz/?aff_id=8\u0026click_id=33_90311_8666_19ce28796e1a7da5204148a4d9b6c8b8\u0026p10=6eec9fa0-4964-4ae7-a6b0-8edf7a5bd0cd_c37b111b6414224ac4759d649e4cbe46\u0026source=90311\u0026aff_sub=adxet\u0026aff_sub2=member-area","date":"2025-10-29T15:35:11.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flirtooy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 13:30:34 GMT","end":"Mon, 19 Jan 2026 14:28:13 GMT"},"fingerprint":{"sha1":"E1:66:CD:07:63:04:06:22:98:75:E7:F1:55:6C:E9:0B:1C:F1:3D:41","sha256":"61:23:C4:A5:78:E0:94:F3:E4:CC:EF:1E:BC:82:AD:5D:21:D8:7C:9A:DE:49:16:70:9A:4D:A2:04:11:0C:9B:9D"}}},"request":{"raw":"GET /css/app.be4b2513.css HTTP/1.1\r\nHost: flirtooy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 29 Oct 2025 15:35:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 22 Sep 2025 10:35:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8%2FODypQJ02YQwAaAJuSLBrBnTnQT2VemrNipsfaX27wVYcQRgDGM4qOdfHYdvgmDTcN1dF67ywLCUBlNGKcj6tqOTPG2hKJkvYFfpg%3D%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"68d12667-2753\"\r\nexpires: Fri, 28 Nov 2025 15:35:11 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: deny\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\ncf-ray: 9963bdc96ac25ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10067,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10067), with no line terminators","md5":"6ff25e55ae18cd2fc5e2c56aa64d27bc","sha1":"ace3bd9973d909e8980e078c8f56f83e7e523bac","sha256":"f27b8c477dede4c3a68c262252e811151120b85adaa6560b61cd85b7f78eff7a","sha512":"be57d28f57e3414506abe8fb77e0035c155ada8016e4ae28dbf980f688e17754571b4c157430e147fabcb6e4980fe08b0458b554e105d86411c0b9697d6c667f","ssdeep":"192:9bKvNdU1zJRX5Y6NywTjnvzAQUjeU8MCKhinq:9YNG1FRX5YxS7A2U8MCKhr","tlshash":"dc2263b16e44221af937c637114162486311a5ff9cb307faa899305ecfc75ab232f25e","first_seen":"2025-03-08T07:35:09.431541Z","last_seen":"2026-03-31T05:34:03.926648Z","times_seen":67,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-29","alert":"Sinkholed","trigger":"flirtooy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flirtooy.xyz/apple-touch-icon.png","fqdn":"flirtooy.xyz","domain":"flirtooy.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://flirtooy.xyz/?aff_id=8\u0026click_id=33_90311_8666_19ce28796e1a7da5204148a4d9b6c8b8\u0026p10=6eec9fa0-4964-4ae7-a6b0-8edf7a5bd0cd_c37b111b6414224ac4759d649e4cbe46\u0026source=90311\u0026aff_sub=adxet\u0026aff_sub2=member-area","date":"2025-10-29T15:35:12.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flirtooy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 13:30:34 GMT","end":"Mon, 19 Jan 2026 14:28:13 GMT"},"fingerprint":{"sha1":"E1:66:CD:07:63:04:06:22:98:75:E7:F1:55:6C:E9:0B:1C:F1:3D:41","sha256":"61:23:C4:A5:78:E0:94:F3:E4:CC:EF:1E:BC:82:AD:5D:21:D8:7C:9A:DE:49:16:70:9A:4D:A2:04:11:0C:9B:9D"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: flirtooy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 29 Oct 2025 15:35:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 2741\r\nlast-modified: Mon, 22 Sep 2025 10:36:30 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DffzH4%2F7f3sb5QuwSC62nfbj9LtIJ2O2z0bXMLEkn%2FV8NVsVopMTAl%2BITS39tLRUs7poO%2FvR8KFzmY3lhi0WFohJ%2B0U04%2Bu%2BP6EUzw%3D%3D\"}]}\r\netag: \"68d126ae-ab5\"\r\nexpires: Mon, 26 Oct 2026 17:57:45 GMT\r\ncache-control: max-age=31536000\r\nx-frame-options: deny\r\naccept-ranges: bytes\r\nage: 250646\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9963bdcd7bd75ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2741,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"cd074834dcd4c0f465ff045430075b72","sha1":"e74cc435285069b57ea39e3cea7bab46f26c7e3c","sha256":"6e88b3bc673ac2505221b5ce75fbe9cac3991f1de86f5771905c30d779b80170","sha512":"4b91e2e9ad31d520ce4e9426c0d047c9a0cc237e8beb63d62d547111ac05fbc16f65f0a328f8dd98e75bbf4250440113452782cd6b9cd93558ff872909574092","ssdeep":"","tlshash":"a2514cd67cc18ac9cc23d23a4014e99792f37da616c44c1d93accbb532362e8091395f","first_seen":"2023-05-02T21:36:51Z","last_seen":"2026-03-31T05:34:03.946199Z","times_seen":480,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-29","alert":"Sinkholed","trigger":"flirtooy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://flirtooy.xyz/?aff_id=8\u0026click_id=33_90311_8666_19ce28796e1a7da5204148a4d9b6c8b8\u0026p10=6eec9fa0-4964-4ae7-a6b0-8edf7a5bd0cd_c37b111b6414224ac4759d649e4cbe46\u0026source=90311\u0026aff_sub=adxet\u0026aff_sub2=member-area","date":"2025-10-29T15:35:11.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:01 GMT","end":"Wed, 24 Dec 2025 14:34:00 GMT"},"fingerprint":{"sha1":"69:C0:F6:2B:DD:5C:EF:2D:13:DF:E4:02:A5:5A:AE:D0:E8:1D:F6:8A","sha256":"04:A4:17:F9:A5:5F:92:F9:2B:AE:63:97:B2:97:F5:38:94:37:06:AB:1B:75:6E:41:16:74:D5:07:D2:08:E3:6C"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://flirtooy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 28 Oct 2025 19:16:43 GMT\r\nexpires: Wed, 28 Oct 2026 19:16:43 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nage: 73108\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-04T18:44:00.851569Z","times_seen":715047,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":93,"dns":1,"connect":20,"send":0,"wait":21,"receive":26,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.flirtooy.xyz/v1/user/auth","fqdn":"api.flirtooy.xyz","domain":"flirtooy.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://flirtooy.xyz/?aff_id=8\u0026click_id=33_90311_8666_19ce28796e1a7da5204148a4d9b6c8b8\u0026p10=6eec9fa0-4964-4ae7-a6b0-8edf7a5bd0cd_c37b111b6414224ac4759d649e4cbe46\u0026source=90311\u0026aff_sub=adxet\u0026aff_sub2=member-area","date":"2025-10-29T15:35:12.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flirtooy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 13:30:34 GMT","end":"Mon, 19 Jan 2026 14:28:13 GMT"},"fingerprint":{"sha1":"E1:66:CD:07:63:04:06:22:98:75:E7:F1:55:6C:E9:0B:1C:F1:3D:41","sha256":"61:23:C4:A5:78:E0:94:F3:E4:CC:EF:1E:BC:82:AD:5D:21:D8:7C:9A:DE:49:16:70:9A:4D:A2:04:11:0C:9B:9D"}}},"request":{"raw":"POST /v1/user/auth HTTP/1.1\r\nHost: api.flirtooy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 579\r\nOrigin: https://flirtooy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 201 Created\r\nserver: cloudflare\r\ndate: Wed, 29 Oct 2025 15:35:12 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 575\r\nset-cookie: authToken=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VyX2lkIjoiYjc5ZjVkZmQtZWY1My00NWYzLWFjZmItODVkYWM2ZmYwOGIzIiwidmlzaXRfaWQiOiJmNWIwYWFiMy01ZWIwLTQzMWYtYTQxYS04OWQ4MjU4NmVkYjUiLCJmdW5uZWxfaWQiOjMsImFmZl9pZCI6OCwic291cmNlIjoiOTAzMTEiLCJzcGxpdF9pZHMiOlsxMF0sInByZWxhbmRfdXJsIjoidHQyXzIiLCJpYXQiOjE3NjE3NTIxMTIsImV4cCI6MTc5MzMwOTcxMn0.Uo-H06uuPX3vCAENKnX0GcKcinU7TU5XpKDkjpTw_cs; HttpOnly; Secure; Path=/; Max-Age=31536000; Expires=Thu, 29 Oct 2026 15:35:12 GMT\n__cflb=02DiuJcQJjNeW7uBpk1WoM5iwhB6dFAj3e7UjcHAPHdzC; HttpOnly; SameSite=None; Secure; Path=/; Expires=Thu, 30 Oct 2025 14:35:12 GMT\r\nx-powered-by: Express\r\npriority: u=3,i=?0\r\netag: W/\"23f-5+3kRTi38+apMinLyp7ARt9qcjo\"\r\naccess-control-allow-origin: https://flirtooy.xyz\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Content-Type,Authorization,X-Forwarded-For,Origin,x-client-device\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ibv%2B7xTa9MsaC1TeaZ0wERPsIbthBfhQwOqR%2FEj%2B2j7zpVV0g43TBjQkcTp9LOpmmmCqXgFXPBtKVdf%2B5dqWutXvNB6CvftM636jMOnDtX8%3D\"}]}\r\ncf-ray: 9963bdcc0b835ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"Created","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":575,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f687ed52bd35bc21b9d328909319566d","sha1":"e7ede44538b7f3e6a93229cbca9ec046df6a723a","sha256":"b78b87c046f9dacb2012692845b582570c7d192164e03180b06c688125b1ea81","sha512":"6a98b56cfac5bd11de6d1c16f60ff30eca810c79fd9285e8644c8d0b22a337aaf834178ff5ddb8948d95a0337cb1f9d462a89a096aecaf800a062bc5b129a675","ssdeep":"","tlshash":"c3f020ac0e7d001c36f22a406c492624e6dc5b9145787362ebf4a6e9997e0b9b50a067","first_seen":"2025-10-29T15:35:37.003677Z","last_seen":"2025-10-29T15:35:37.003677Z","times_seen":1,"resource_available":false,"data":null}},"time_used":623,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":621,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-29","alert":"Sinkholed","trigger":"api.flirtooy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flirtooy.xyz/favicon-16x16.png","fqdn":"flirtooy.xyz","domain":"flirtooy.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://flirtooy.xyz/?aff_id=8\u0026click_id=33_90311_8666_19ce28796e1a7da5204148a4d9b6c8b8\u0026p10=6eec9fa0-4964-4ae7-a6b0-8edf7a5bd0cd_c37b111b6414224ac4759d649e4cbe46\u0026source=90311\u0026aff_sub=adxet\u0026aff_sub2=member-area","date":"2025-10-29T15:35:12.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flirtooy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 13:30:34 GMT","end":"Mon, 19 Jan 2026 14:28:13 GMT"},"fingerprint":{"sha1":"E1:66:CD:07:63:04:06:22:98:75:E7:F1:55:6C:E9:0B:1C:F1:3D:41","sha256":"61:23:C4:A5:78:E0:94:F3:E4:CC:EF:1E:BC:82:AD:5D:21:D8:7C:9A:DE:49:16:70:9A:4D:A2:04:11:0C:9B:9D"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: flirtooy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 29 Oct 2025 15:35:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 643\r\nlast-modified: Mon, 22 Sep 2025 10:36:30 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gnJw2nxp5NoPBsVc0tJeF3jdcesaiNf19bAv2FCcMq2JEHMWb220RjFlekHdjDyF4CjyxGDsHwRjLc1eGm9gvLqZmyaxpA2hrN7qSw%3D%3D\"}]}\r\netag: \"68d126ae-283\"\r\nexpires: Thu, 29 Oct 2026 00:36:18 GMT\r\ncache-control: max-age=31536000\r\nx-frame-options: deny\r\naccept-ranges: bytes\r\nage: 53933\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9963bdcd7bd85ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":643,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"3a3b585363be5c6055a59bc7400fa4cc","sha1":"9d73945492cf888e5707a855c91cd657f03b27b8","sha256":"495d023418c466bcf2dd0590535fca0c06f3eb318f023ef6b33f06c9e48c8d22","sha512":"2bb27378bcf392dd10e75ba8d5a15ac1ffb02ee01527b93da6da1af798e480908d3775a402f034a2e9412bad37b4bb2c983265b38a9aa2bc2910628e0e6b40dc","ssdeep":"","tlshash":"73f02deeb512c6b1c5cb392a428e2a42e2b9d25b52519c15e2ace10c44003c890b8e8a","first_seen":"2023-05-02T21:36:51Z","last_seen":"2026-03-31T05:34:03.940069Z","times_seen":484,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-29","alert":"Sinkholed","trigger":"flirtooy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flirtooy.xyz/css/land-LandDirectShortTT2-vue.164e45cc.css","fqdn":"flirtooy.xyz","domain":"flirtooy.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://flirtooy.xyz/?aff_id=8\u0026click_id=33_90311_8666_19ce28796e1a7da5204148a4d9b6c8b8\u0026p10=6eec9fa0-4964-4ae7-a6b0-8edf7a5bd0cd_c37b111b6414224ac4759d649e4cbe46\u0026source=90311\u0026aff_sub=adxet\u0026aff_sub2=member-area","date":"2025-10-29T15:35:12.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flirtooy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 13:30:34 GMT","end":"Mon, 19 Jan 2026 14:28:13 GMT"},"fingerprint":{"sha1":"E1:66:CD:07:63:04:06:22:98:75:E7:F1:55:6C:E9:0B:1C:F1:3D:41","sha256":"61:23:C4:A5:78:E0:94:F3:E4:CC:EF:1E:BC:82:AD:5D:21:D8:7C:9A:DE:49:16:70:9A:4D:A2:04:11:0C:9B:9D"}}},"request":{"raw":"GET /css/land-LandDirectShortTT2-vue.164e45cc.css HTTP/1.1\r\nHost: flirtooy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 29 Oct 2025 15:35:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 22 Sep 2025 10:35:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Uc5tJjJzyfZJjm6u9DgxxmP52YV9MJi%2BfZ21T%2FZ4nclSXq4IlraEyUuebuWAsvUaYLbu7luT807nUc5TfGKvSsu0mmCznupR4E2Eg%3D%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"68d12667-5daa\"\r\nexpires: Tue, 25 Nov 2025 17:57:47 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: deny\r\ncontent-encoding: gzip\r\nage: 250645\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 9963bdd00c505ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23978,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (23978), with no line terminators","md5":"8347650ba39269d139255c3ec91e154c","sha1":"7504933a5fce3d12c79e9f244948fb0b3ed1cce7","sha256":"ed267589d0f44b819eaa13bb25b53c8c8506ede74bd15028810be23217cd5e7b","sha512":"c9d27e0e49e89446b1acab1670d9eb9a91674d8683b023c27464bb158dd0891e03739a783bb2152d137010ee8928f766755df24573d008ac3ba8ef7bb33466cf","ssdeep":"384:1sVWNxxn1ERmboQ1begncnsL/n1xRegncnsL/nr:qVWNxx1oofntL/1TfntL/r","tlshash":"6eb2d97db54c34157c37cb2af98165cb6234b3a394220658ed9730688ec73963e6e39b","first_seen":"2024-07-30T11:41:11Z","last_seen":"2026-03-29T19:09:13.957398Z","times_seen":24,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-29","alert":"Sinkholed","trigger":"flirtooy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flirtooy.xyz/media/_2.b1872f63.mp4","fqdn":"flirtooy.xyz","domain":"flirtooy.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://flirtooy.xyz/?aff_id=8\u0026click_id=33_90311_8666_19ce28796e1a7da5204148a4d9b6c8b8\u0026p10=6eec9fa0-4964-4ae7-a6b0-8edf7a5bd0cd_c37b111b6414224ac4759d649e4cbe46\u0026source=90311\u0026aff_sub=adxet\u0026aff_sub2=member-area","date":"2025-10-29T15:35:12.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flirtooy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 13:30:34 GMT","end":"Mon, 19 Jan 2026 14:28:13 GMT"},"fingerprint":{"sha1":"E1:66:CD:07:63:04:06:22:98:75:E7:F1:55:6C:E9:0B:1C:F1:3D:41","sha256":"61:23:C4:A5:78:E0:94:F3:E4:CC:EF:1E:BC:82:AD:5D:21:D8:7C:9A:DE:49:16:70:9A:4D:A2:04:11:0C:9B:9D"}}},"request":{"raw":"GET /media/_2.b1872f63.mp4 HTTP/1.1\r\nHost: flirtooy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Wed, 29 Oct 2025 15:35:12 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 852027\r\nlast-modified: Mon, 22 Sep 2025 10:35:19 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BmUnPBLllF%2B2B%2F7Fa15YHT1givSUU7DkZtDyCj8J%2FOJIy%2FMkLFWl21M%2BxFRiv2Yv1TQG1enRSXQoIm19isIBStwlY2XxFdK%2FQRT6Wg%3D%3D\"}]}\r\netag: \"68d12667-d003b\"\r\nx-frame-options: deny\r\naccept-ranges: bytes\r\ncontent-range: bytes 0-852026/852027\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9963bdd09c685ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":852027,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"8de0d9769d2ede5a4cf813a91385fb2d","sha1":"bb0ef5d5f878fa61a66c2750749d4537a8375e5f","sha256":"d60cb11b7074820e17b7c94ac6d0fe56410b89cba310b17e36de575208e457b6","sha512":"1fdf0df7fdaa8955c7a2a134631658968e0de03ac9e4bb165dd2f8df5b19275e4b4e1e285f777bf8300ae7dcf4d5711ab804a9e50643479375ca3c55af43dff9","ssdeep":"12288:gqrLSaCYM5cIvRodbnsbcjrWATV5qQwW19Ifp7oM6hErRNhph4nMAejRbRwsbvFS:LrLApeIv++cvJYaoRIiH/AAAxr","tlshash":"290523942756629bf202e23e02dba767b4b4c6b20d1b53b30b31a63e4c313af5d576d4","first_seen":"2023-04-06T16:43:57Z","last_seen":"2026-03-26T18:43:36.978014Z","times_seen":4167,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-29","alert":"Sinkholed","trigger":"flirtooy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flirtooy.xyz/js/app.c5aee925.js","fqdn":"flirtooy.xyz","domain":"flirtooy.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://flirtooy.xyz/?aff_id=8\u0026click_id=33_90311_8666_19ce28796e1a7da5204148a4d9b6c8b8\u0026p10=6eec9fa0-4964-4ae7-a6b0-8edf7a5bd0cd_c37b111b6414224ac4759d649e4cbe46\u0026source=90311\u0026aff_sub=adxet\u0026aff_sub2=member-area","date":"2025-10-29T15:35:11.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flirtooy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 13:30:34 GMT","end":"Mon, 19 Jan 2026 14:28:13 GMT"},"fingerprint":{"sha1":"E1:66:CD:07:63:04:06:22:98:75:E7:F1:55:6C:E9:0B:1C:F1:3D:41","sha256":"61:23:C4:A5:78:E0:94:F3:E4:CC:EF:1E:BC:82:AD:5D:21:D8:7C:9A:DE:49:16:70:9A:4D:A2:04:11:0C:9B:9D"}}},"request":{"raw":"GET /js/app.c5aee925.js HTTP/1.1\r\nHost: flirtooy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 29 Oct 2025 15:35:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 22 Sep 2025 10:36:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kcFSkH9LnRBoaD5u30i7uCGHlbnYbA7I6zCX7Z%2FXOXZWvtxKHLJ8GIlBKPhNgZB7X2YfBQ7la8ovkrhC85bbUowGt3UndPRy6sWewQ%3D%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"68d126ae-749e\"\r\nexpires: Fri, 28 Nov 2025 15:35:11 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: deny\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\ncf-ray: 9963bdc96ac15ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29854,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29565), with no line terminators","md5":"43ba4b5864c3d60a0ec560b626cd4e5f","sha1":"d4b41ee22a842005eb27b0f88f1a51b6d36f066b","sha256":"8c9ad145da27e2aa8cbd429406a0679458c01eda0b3bfed095c30682c95e150d","sha512":"a4e996f65bcd787b7bb7e2aec26d5e941f95f67cda9a48845201b478bac970f13c29f8bc995fd065ff15cf207740cc94f6616731a6e7cd72bd710742793e0515","ssdeep":"768:0GWQs/CzOIOOPNbsjZQ0DquIEPTrtMAhLsjrO+dezriPCXhjOdiNsasgqu:3udUwDquIEPTrtyraBRzn/F","tlshash":"01d22cd675e1e07412f741f0db3f1613e21639683b0ad090b35bedda3e29b976122b68","first_seen":"2025-09-23T18:53:36.598233Z","last_seen":"2026-02-19T02:45:17.391619Z","times_seen":33,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-29","alert":"Sinkholed","trigger":"flirtooy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.daterix.io/v1/public/client-visit","fqdn":"api.daterix.io","domain":"daterix.io","tld":"io"},"ip":{"addr":"104.21.69.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://flirtooy.xyz/?aff_id=8\u0026click_id=33_90311_8666_19ce28796e1a7da5204148a4d9b6c8b8\u0026p10=6eec9fa0-4964-4ae7-a6b0-8edf7a5bd0cd_c37b111b6414224ac4759d649e4cbe46\u0026source=90311\u0026aff_sub=adxet\u0026aff_sub2=member-area","date":"2025-10-29T15:35:11.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daterix.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 09:35:01 GMT","end":"Tue, 30 Dec 2025 10:33:47 GMT"},"fingerprint":{"sha1":"62:C9:DA:66:AE:1F:18:8A:56:F7:EB:2D:67:79:29:83:9D:91:0B:0E","sha256":"84:03:E7:A4:45:9E:5B:01:50:A3:EC:45:1C:C4:33:45:25:E0:33:71:AF:73:CF:E4:4A:17:CF:DD:C2:4A:30:4D"}}},"request":{"raw":"OPTIONS /v1/public/client-visit HTTP/1.1\r\nHost: api.daterix.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://flirtooy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 29 Oct 2025 15:35:11 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://flirtooy.xyz\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Content-Type,Authorization,X-Forwarded-For,Origin,x-client-device\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YysT9s2KtPhgycoolSMmcxz9Dki6RAj7mmCipas%2BS3C3nMLrd2vQSvYveHArU0nT9k%2BWKvyv%2BvuzEJh39yVGOudcgBbGkgzuiDq3T2rJ\"}]}\r\ncf-ray: 9963bdcab8582efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T18:47:00.89111Z","times_seen":13342615,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":49,"dns":27,"connect":1,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-29","alert":"Sinkholed","trigger":"api.daterix.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.flirtooy.xyz/v1/user/auth","fqdn":"api.flirtooy.xyz","domain":"flirtooy.xyz","tld":"xyz"},"ip":{"addr":"104.21.24.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://flirtooy.xyz/?aff_id=8\u0026click_id=33_90311_8666_19ce28796e1a7da5204148a4d9b6c8b8\u0026p10=6eec9fa0-4964-4ae7-a6b0-8edf7a5bd0cd_c37b111b6414224ac4759d649e4cbe46\u0026source=90311\u0026aff_sub=adxet\u0026aff_sub2=member-area","date":"2025-10-29T15:35:11.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flirtooy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 13:30:34 GMT","end":"Mon, 19 Jan 2026 14:28:13 GMT"},"fingerprint":{"sha1":"E1:66:CD:07:63:04:06:22:98:75:E7:F1:55:6C:E9:0B:1C:F1:3D:41","sha256":"61:23:C4:A5:78:E0:94:F3:E4:CC:EF:1E:BC:82:AD:5D:21:D8:7C:9A:DE:49:16:70:9A:4D:A2:04:11:0C:9B:9D"}}},"request":{"raw":"OPTIONS /v1/user/auth HTTP/1.1\r\nHost: api.flirtooy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://flirtooy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 29 Oct 2025 15:35:12 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://flirtooy.xyz\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Content-Type,Authorization,X-Forwarded-For,Origin,x-client-device\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a%2BRBiebBkz%2BMFv%2FO%2BV4vtLcjAtI62TC4QcfwpVcfEwOBuxx6mmhQ4OEpAEngeDhVDIQ%2FeZvORrhSiuW%2F0isdP%2F2x2OPtjsQsIyxhjd%2BN\"}]}\r\nset-cookie: __cflb=02DiuJcQJjNeW7uBpk1WoM5iwhB6dFAj3dNfDQiWm1yVn; HttpOnly; SameSite=None; Secure; Path=/; Expires=Thu, 30 Oct 2025 14:35:12 GMT\r\ncf-ray: 9963bdcb69495689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T18:47:00.89111Z","times_seen":13342615,"resource_available":true,"data":null}},"time_used":324,"timings":{"blocked":115,"dns":88,"connect":3,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-29","alert":"Sinkholed","trigger":"api.flirtooy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://flirtooy.xyz/?aff_id=8\u0026click_id=33_90311_8666_19ce28796e1a7da5204148a4d9b6c8b8\u0026p10=6eec9fa0-4964-4ae7-a6b0-8edf7a5bd0cd_c37b111b6414224ac4759d649e4cbe46\u0026source=90311\u0026aff_sub=adxet\u0026aff_sub2=member-area","date":"2025-10-29T15:35:11.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:01 GMT","end":"Wed, 24 Dec 2025 14:34:00 GMT"},"fingerprint":{"sha1":"69:C0:F6:2B:DD:5C:EF:2D:13:DF:E4:02:A5:5A:AE:D0:E8:1D:F6:8A","sha256":"04:A4:17:F9:A5:5F:92:F9:2B:AE:63:97:B2:97:F5:38:94:37:06:AB:1B:75:6E:41:16:74:D5:07:D2:08:E3:6C"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://flirtooy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 28 Oct 2025 19:16:43 GMT\r\nexpires: Wed, 28 Oct 2026 19:16:43 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nage: 73109\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-04T18:44:00.851569Z","times_seen":715047,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":177,"dns":0,"connect":20,"send":0,"wait":22,"receive":10,"ssl":153},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.daterix.io/v1/public/client-visit","fqdn":"api.daterix.io","domain":"daterix.io","tld":"io"},"ip":{"addr":"104.21.69.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://flirtooy.xyz/?aff_id=8\u0026click_id=33_90311_8666_19ce28796e1a7da5204148a4d9b6c8b8\u0026p10=6eec9fa0-4964-4ae7-a6b0-8edf7a5bd0cd_c37b111b6414224ac4759d649e4cbe46\u0026source=90311\u0026aff_sub=adxet\u0026aff_sub2=member-area","date":"2025-10-29T15:35:11.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daterix.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 09:35:01 GMT","end":"Tue, 30 Dec 2025 10:33:47 GMT"},"fingerprint":{"sha1":"62:C9:DA:66:AE:1F:18:8A:56:F7:EB:2D:67:79:29:83:9D:91:0B:0E","sha256":"84:03:E7:A4:45:9E:5B:01:50:A3:EC:45:1C:C4:33:45:25:E0:33:71:AF:73:CF:E4:4A:17:CF:DD:C2:4A:30:4D"}}},"request":{"raw":"POST /v1/public/client-visit HTTP/1.1\r\nHost: api.daterix.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 224\r\nOrigin: https://flirtooy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 29 Oct 2025 15:35:12 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\netag: W/\"2-nOO9QiTIwXgNtWtBJezz8kv3SLc\"\r\naccess-control-allow-origin: https://flirtooy.xyz\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Content-Type,Authorization,X-Forwarded-For,Origin,x-client-device\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L5XSoaTgstbxNO0L5ELJGfblNkIDyU93c9rjrhe%2FKI5dmTg4DW9KnNXuRi574Nj5zlrv%2BGRMXo%2Fa8SDiVUKA4FDxK8PckDYTUtYbHg%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9963bdcba8f956bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-04T18:43:13.02779Z","times_seen":257377,"resource_available":true,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":28,"connect":1,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-29","alert":"Sinkholed","trigger":"api.daterix.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flirtooy.xyz/js/land-LandDirectShortTT2-vue.b2cec9c8.js","fqdn":"flirtooy.xyz","domain":"flirtooy.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://flirtooy.xyz/?aff_id=8\u0026click_id=33_90311_8666_19ce28796e1a7da5204148a4d9b6c8b8\u0026p10=6eec9fa0-4964-4ae7-a6b0-8edf7a5bd0cd_c37b111b6414224ac4759d649e4cbe46\u0026source=90311\u0026aff_sub=adxet\u0026aff_sub2=member-area","date":"2025-10-29T15:35:12.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flirtooy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 13:30:34 GMT","end":"Mon, 19 Jan 2026 14:28:13 GMT"},"fingerprint":{"sha1":"E1:66:CD:07:63:04:06:22:98:75:E7:F1:55:6C:E9:0B:1C:F1:3D:41","sha256":"61:23:C4:A5:78:E0:94:F3:E4:CC:EF:1E:BC:82:AD:5D:21:D8:7C:9A:DE:49:16:70:9A:4D:A2:04:11:0C:9B:9D"}}},"request":{"raw":"GET /js/land-LandDirectShortTT2-vue.b2cec9c8.js HTTP/1.1\r\nHost: flirtooy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 29 Oct 2025 15:35:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 22 Sep 2025 10:36:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9rQ1JeONM6lLRe1emxTbWmivqp0maNSink0DaoVmkWWS04uX5gobEpQVXs%2FHKiIWZeF1L95vaccHp%2FntkVg4vC0A%2BKvGOWM%2Bd2UvOw%3D%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"68d126ae-272a\"\r\nexpires: Fri, 28 Nov 2025 00:36:18 GMT\r\ncache-control: max-age=2592000\r\nx-frame-options: deny\r\ncontent-encoding: gzip\r\nage: 53933\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncf-ray: 9963bdd00c515ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10026,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9538), with no line terminators","md5":"6dea61782f7630469c67acb2a4558a3c","sha1":"1609a35141c6253c8d2b06ea49f8f19ee2b2349e","sha256":"d6aeb1bef0f2b5c3fc7fa1d329d1fc757c65c9d4f17da3a39719d26281a0340d","sha512":"09fc8dd18537ec0a789d3380ab3f813f26f9a740d524ac885ac08b747e85d6c56e91b3bedf524636eb68a0108900804f74e068e5d39334740462f3c9ec19ea10","ssdeep":"192:VbTOxaMQJ1TXvZZ1+Rd8Lvourh0eP0uWOaIN4eUsk4qiGBNGi+/Q6LROVY/SsoaB:Vbq4MQjTXsepQKRsY3nMjgfA9Uv12+D3","tlshash":"6722d80fc4e46c185463e22c944f1c15228aba3bad4906bdb7bede762dd4925a718bf0","first_seen":"2025-02-27T03:38:44.872347Z","last_seen":"2026-03-29T19:09:13.962994Z","times_seen":22,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-29","alert":"Sinkholed","trigger":"flirtooy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flirtooy.xyz/img/bg1.7d5a164c.jpg","fqdn":"flirtooy.xyz","domain":"flirtooy.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://flirtooy.xyz/?aff_id=8\u0026click_id=33_90311_8666_19ce28796e1a7da5204148a4d9b6c8b8\u0026p10=6eec9fa0-4964-4ae7-a6b0-8edf7a5bd0cd_c37b111b6414224ac4759d649e4cbe46\u0026source=90311\u0026aff_sub=adxet\u0026aff_sub2=member-area","date":"2025-10-29T15:35:12.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flirtooy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 13:30:34 GMT","end":"Mon, 19 Jan 2026 14:28:13 GMT"},"fingerprint":{"sha1":"E1:66:CD:07:63:04:06:22:98:75:E7:F1:55:6C:E9:0B:1C:F1:3D:41","sha256":"61:23:C4:A5:78:E0:94:F3:E4:CC:EF:1E:BC:82:AD:5D:21:D8:7C:9A:DE:49:16:70:9A:4D:A2:04:11:0C:9B:9D"}}},"request":{"raw":"GET /img/bg1.7d5a164c.jpg HTTP/1.1\r\nHost: flirtooy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://flirtooy.xyz/css/land-LandDirectShortTT2-vue.164e45cc.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 29 Oct 2025 15:35:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 64359\r\nlast-modified: Mon, 22 Sep 2025 10:35:19 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CTN4vfGFzMH3jR7n48m%2FY6XJdvqoZVN4aUjCmZp%2F%2BHlHPVuGlShTdVvCZm%2FQqfnQAiwtSOYc0JqVL5Sxim70TA4BkBOF6EBR6eaVQg%3D%3D\"}]}\r\netag: \"68d12667-fb67\"\r\nexpires: Mon, 26 Oct 2026 17:57:47 GMT\r\ncache-control: max-age=31536000\r\nx-frame-options: deny\r\naccept-ranges: bytes\r\nage: 250645\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9963bdd08c645ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64359,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1366x768, components 3","md5":"a6c153fab3849ec0e3ba73f645433aec","sha1":"f3747bf682252fef7befdf2870f19e16c6d4f77f","sha256":"33215a1515c319a23598b30fea546e10dcb8cca455b42e20d8aa5e2eebd73bde","sha512":"113859826b452fba34b4bd38c18af35c0f2482f7195ea3a17f2376369b92564a8868308558e4b4599b5c2fef2a2aab5274b366af757d9d7ad81aa5a723b8e343","ssdeep":"1536:mJVew/2C5yOVOuB5a7O1d/srotZLvSbficmlw05r/:CVYOVe7O1Kr8Z+KV3r/","tlshash":"445302a7d0cfbb99c61e007d9f4f4b3896a2ef889c85f34a7d84c2877dc4461614b459","first_seen":"2023-05-04T23:47:20Z","last_seen":"2026-03-29T19:09:13.965963Z","times_seen":259,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-29","alert":"Sinkholed","trigger":"flirtooy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go.cm-trk6.com/aff_c?offer_id=13080\u0026aff_id=90311\u0026url_id=0\u0026aff_sub5=member-area\u0026source=adxet\u0026click_id=7vE292rvxyDf8PRzuaH8z2","fqdn":"go.cm-trk6.com","domain":"cm-trk6.com","tld":"com"},"ip":{"addr":"172.67.128.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-29T15:35:10.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cm-trk6.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 20:34:34 GMT","end":"Tue, 02 Dec 2025 21:33:10 GMT"},"fingerprint":{"sha1":"E5:86:D8:8B:88:BF:C1:BF:86:4F:1A:56:AC:66:34:B1:E2:99:81:DD","sha256":"8F:7C:53:08:5A:56:AF:97:70:82:A6:9C:ED:21:13:2E:58:80:C2:C6:31:66:38:51:8B:48:4C:1A:2C:AB:36:C2"}}},"request":{"raw":"GET /aff_c?offer_id=13080\u0026aff_id=90311\u0026url_id=0\u0026aff_sub5=member-area\u0026source=adxet\u0026click_id=7vE292rvxyDf8PRzuaH8z2 HTTP/1.1\r\nHost: go.cm-trk6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 29 Oct 2025 15:35:11 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: aff_c?offer_id=8666\u0026aff_id=90311\u0026aff_sub5=member-area\u0026source=adxet\u0026click_id=7vE292rvxyDf8PRzuaH8z2\u0026last=2\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-security-policy: default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nvary: Accept\r\ncache-control: no-store, no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9UBkn7uaxpJxnkOkoaDvvCBzqPRKrrrBCgFjVzDGG1zGtB%2BVLs0ZTaiBC90zIk0gbiqmoNFnZ0xc0DDUuS%2BIMeoUdvxcyH3SaR2mr3bk\"}]}\r\nset-cookie: language=en; Path=/; Domain=go.cm-trk6.com; Expires=Fri, 28 Nov 2025 15:35:11 GMT\nlanguage=en; Path=/; Domain=go.cm-trk6.com; Expires=Fri, 28 Nov 2025 15:35:11 GMT\ntest=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT\r\ncf-ray: 9963bdc53b862678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":697,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T18:47:00.89111Z","times_seen":13342615,"resource_available":true,"data":null}},"time_used":673,"timings":{"blocked":280,"dns":8,"connect":1,"send":0,"wait":113,"receive":0,"ssl":268},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.cm-trk6.com/aff_c?offer_id=8666\u0026aff_id=90311\u0026aff_sub5=member-area\u0026source=adxet\u0026click_id=7vE292rvxyDf8PRzuaH8z2\u0026last=2","fqdn":"go.cm-trk6.com","domain":"cm-trk6.com","tld":"com"},"ip":{"addr":"172.67.128.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-29T15:35:11.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cm-trk6.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 20:34:34 GMT","end":"Tue, 02 Dec 2025 21:33:10 GMT"},"fingerprint":{"sha1":"E5:86:D8:8B:88:BF:C1:BF:86:4F:1A:56:AC:66:34:B1:E2:99:81:DD","sha256":"8F:7C:53:08:5A:56:AF:97:70:82:A6:9C:ED:21:13:2E:58:80:C2:C6:31:66:38:51:8B:48:4C:1A:2C:AB:36:C2"}}},"request":{"raw":"GET /aff_c?offer_id=8666\u0026aff_id=90311\u0026aff_sub5=member-area\u0026source=adxet\u0026click_id=7vE292rvxyDf8PRzuaH8z2\u0026last=2 HTTP/1.1\r\nHost: go.cm-trk6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: language=en\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 29 Oct 2025 15:35:11 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-security-policy: default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncache-control: no-store, no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s8leC4IgnwkBtYkZ4DpD8djALbSqo4%2Br0FOmzG%2BKZFfPStnlZfFKtTmgOZJWiXOiLcTUqzHG4XN2CaSrmhr0Rm2mnmiZseepKf6%2FtlYx\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: language=en; Path=/; Domain=go.cm-trk6.com; Expires=Fri, 28 Nov 2025 15:35:11 GMT\nlanguage=en; Path=/; Domain=go.cm-trk6.com; Expires=Fri, 28 Nov 2025 15:35:11 GMT\ntest=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT\n8666=33_90311_8666_19ce28796e1a7da5204148a4d9b6c8b8; SameSite=None; Secure; Path=/; Domain=go.cm-trk6.com; Expires=Fri, 28 Nov 2025 15:35:11 GMT\nop_8666=0; Path=/; Domain=go.cm-trk6.com; Expires=Fri, 28 Nov 2025 15:35:11 GMT\nuser_id=6eec9fa0-4964-4ae7-a6b0-8edf7a5bd0cd_c37b111b6414224ac4759d649e4cbe46; SameSite=None; Secure; Path=/; Domain=go.cm-trk6.com; Expires=Mon, 28 Oct 2030 15:35:11 GMT\r\ncf-ray: 9963bdc60c632678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":697,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"46aa83e5c7545c4f24a49e62f7a8c724","sha1":"70f161ed38f4b825f559f1dd55f6f0f0d32de65f","sha256":"59c2c86aa793dab5a7650bb86376acc07ae5e01919bf26eb51b363390f55dc9c","sha512":"99719a340616539ffbc31ac7c1188f5444c6b2347dd5528d61ff52564616d44b7d8318fac956f7701714f361a09498782107b29d41e48c9fd7d8c9fbce641857","ssdeep":"","tlshash":"23010c910cf5e08028a4533249d0f1081ada75eb280a310cf5dca6482f81f4ae4c39c4","first_seen":"2025-10-29T15:35:37.028411Z","last_seen":"2025-10-29T15:35:37.028411Z","times_seen":1,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flirtooy.xyz/?aff_id=8\u0026click_id=33_90311_8666_19ce28796e1a7da5204148a4d9b6c8b8\u0026p10=6eec9fa0-4964-4ae7-a6b0-8edf7a5bd0cd_c37b111b6414224ac4759d649e4cbe46\u0026source=90311\u0026aff_sub=adxet\u0026aff_sub2=member-area","fqdn":"flirtooy.xyz","domain":"flirtooy.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-29T15:35:11.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flirtooy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 13:30:34 GMT","end":"Mon, 19 Jan 2026 14:28:13 GMT"},"fingerprint":{"sha1":"E1:66:CD:07:63:04:06:22:98:75:E7:F1:55:6C:E9:0B:1C:F1:3D:41","sha256":"61:23:C4:A5:78:E0:94:F3:E4:CC:EF:1E:BC:82:AD:5D:21:D8:7C:9A:DE:49:16:70:9A:4D:A2:04:11:0C:9B:9D"}}},"request":{"raw":"GET /?aff_id=8\u0026click_id=33_90311_8666_19ce28796e1a7da5204148a4d9b6c8b8\u0026p10=6eec9fa0-4964-4ae7-a6b0-8edf7a5bd0cd_c37b111b6414224ac4759d649e4cbe46\u0026source=90311\u0026aff_sub=adxet\u0026aff_sub2=member-area HTTP/1.1\r\nHost: flirtooy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 29 Oct 2025 15:35:11 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 10:36:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"68d126ae-1b82\"\r\ncache-control: no-cache, no-store, must-revalidate, no-transform\r\npragma: no-cache\r\nexpires: 0\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mXb%2BNVwG80%2FYIEBYirMibOt%2BSwbLg6nwxf50FepDoeRVervdyUHipTYuLvxM7bb8rPzqqbFKT3l%2FDAfdPZLZGPPWRyOengzPkQS7NQ%3D%3D\"}]}\r\ncf-ray: 9963bdc83bd7a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7042,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (754)","md5":"8f5a399be24af455b6331541b37387e1","sha1":"97ca2a64530fd60fd1082b0dbede1832b5e0a9cd","sha256":"8217c7e3204e5ccb2da8da9727a6bf29e85d49b4ec22c40fad01090a4635b946","sha512":"4e48351fc6e2391074126c8040b2afc65f9d3d198cedd7fea0fbc8e5f41785f4f36e88e622142b82f5f6dd604e957b8eb74d8cebb3da7c96ee173c394f54c65a","ssdeep":"192:63xoqvCJe0KfQcRccR+yHKfHAs1rHABJcj:mkD97","tlshash":"bee1b4552ca3a04b132f2417eb9b6b6c61b991434849fc43bbac320c4fd9f6cd5a6388","first_seen":"2025-09-23T18:53:36.557527Z","last_seen":"2026-02-19T02:45:17.381939Z","times_seen":33,"resource_available":true,"data":null}},"time_used":318,"timings":{"blocked":113,"dns":89,"connect":1,"send":0,"wait":91,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-29","alert":"Sinkholed","trigger":"flirtooy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go.cm-trk6.com/favicon.ico","fqdn":"go.cm-trk6.com","domain":"cm-trk6.com","tld":"com"},"ip":{"addr":"172.67.128.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://go.cm-trk6.com/aff_c?offer_id=8666\u0026aff_id=90311\u0026aff_sub5=member-area\u0026source=adxet\u0026click_id=7vE292rvxyDf8PRzuaH8z2\u0026last=2","date":"2025-10-29T15:35:11.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cm-trk6.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 20:34:34 GMT","end":"Tue, 02 Dec 2025 21:33:10 GMT"},"fingerprint":{"sha1":"E5:86:D8:8B:88:BF:C1:BF:86:4F:1A:56:AC:66:34:B1:E2:99:81:DD","sha256":"8F:7C:53:08:5A:56:AF:97:70:82:A6:9C:ED:21:13:2E:58:80:C2:C6:31:66:38:51:8B:48:4C:1A:2C:AB:36:C2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: go.cm-trk6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: language=en; 8666=33_90311_8666_19ce28796e1a7da5204148a4d9b6c8b8; op_8666=0; user_id=6eec9fa0-4964-4ae7-a6b0-8edf7a5bd0cd_c37b111b6414224ac4759d649e4cbe46\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 29 Oct 2025 15:35:11 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4gdOa4yesXW3Sl7filK6ILvY%2F6aSY8fdxVD7g8k%2FY47rYHZSh%2Bt0NZGKju%2BNCNsGBgcLtMTx8TMavlViYKhxOTIom0s0y35usGlPj0tM\"}]}\r\ncontent-encoding: br\r\nage: 131\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9963bdc82f4d75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-04-04T18:45:49.002043Z","times_seen":478485,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://flirtooy.xyz/?aff_id=8\u0026click_id=33_90311_8666_19ce28796e1a7da5204148a4d9b6c8b8\u0026p10=6eec9fa0-4964-4ae7-a6b0-8edf7a5bd0cd_c37b111b6414224ac4759d649e4cbe46\u0026source=90311\u0026aff_sub=adxet\u0026aff_sub2=member-area","date":"2025-10-29T15:35:11.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:12 GMT","end":"Wed, 24 Dec 2025 14:34:11 GMT"},"fingerprint":{"sha1":"A8:1F:72:36:24:F2:F6:E0:7B:67:5F:39:3B:77:D6:8D:FC:AA:91:DF","sha256":"C0:8F:C7:95:96:3C:18:D4:60:5F:92:EC:FE:5D:AB:58:62:6D:05:D5:A1:3F:B1:EC:B0:88:5F:E3:9E:21:52:BF"}}},"request":{"raw":"GET /css2?family=Roboto:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 29 Oct 2025 15:35:11 GMT\r\ndate: Wed, 29 Oct 2025 15:35:11 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"227c49935c94e2db746d5483119e3eda","sha1":"8698bd6466a7746aefaa8a78ae05feeb2e3db075","sha256":"f30a2f101b045d24748cdbb5e2082e3216ae8ecfcc2f091af638786d3eced120","sha512":"4a7f23e91bff114b72ba6fce5028fbe508f1bc345dd766a3d248746f017c7234a4dadafa6bac9398b2a755205b7539688081b92137bc13dd9384b1049a6a8468","ssdeep":"384:8wfMw1wWw6wyhw/qY4XwNwtwiwfDwOwdwBwyaw/qY4QwGwmw4wfdwkwDw3wyQw/P:8JKBLfhQE8YtCR6UfaQ7zfTYHw+fQQVl","tlshash":"c872eca1041740009b839ce223cebf35fe5f92117141d0b9abfd9b6badcbc66526936d","first_seen":"2025-09-09T02:34:37.720999Z","last_seen":"2025-11-18T23:04:34.411089Z","times_seen":2605,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":81,"dns":0,"connect":15,"send":0,"wait":35,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}