{"report_id":"3286ff2e-e098-4e91-b529-b7144d6b901b","version":0,"status":"done","tags":[],"date":"2026-08-07T08:55:00Z","url":{"schema":"http","addr":"ladymarian.fun/","fqdn":"ladymarian.fun","domain":"ladymarian.fun","tld":"fun"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"ladymarian.fun/","fqdn":"ladymarian.fun","domain":"ladymarian.fun","tld":"fun"},"title":"$MARIAN — She Doesn't Miss","dom":{"size":34739,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (34186), with no line terminators","md5":"f386eca7ada9a5e663098f9053dbe402","sha1":"3afd471cdb8105695169e63d991a19d1a3b509fd","sha256":"8e378f69b7a78000e09e07ae68ef825c04d222e719bb0e925fecaf64f225cadf","sha512":"f1cef7ea5bce1f11d5d76a1c89ae40873f3934d4ca0c4485ec55f082ff53fd859e96cfff7afb730eab2e8bc341de8d7686a7f5869b7a30ac7e3185788d2e9346","ssdeep":"384:qXkANLuaLQp30vTVpugFfD7FCzdOq7Ie8SxiBLh3gDtvFshOKgcA:sk6iaLQcpOQqf6h3gZagtcA","tlshash":"f1f240a1e1a3153b2133c5caa1fb23a830e941b9f64b19548bbd837d23dcc55b86749e","dom_hash":"domhash868777fe2c587b634ea95e513dc8dacb","first_seen":"2026-08-07T08:45:33.055724Z","last_seen":"2026-08-07T08:55:04.146736Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ladymarian.fun/","fqdn":"ladymarian.fun","domain":"ladymarian.fun","tld":"fun"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-11T08:55:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"ladymarian.fun","ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2026-08-03","domain_rank":0,"first_seen":"2026-08-07T08:45:29.077585Z","last_seen":"2026-08-07T08:45:29.077585Z","alert_count":0,"request_count":13,"received_data":1777769,"sent_data":10198,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ladymarian.fun/~flock.js","fqdn":"ladymarian.fun","domain":"ladymarian.fun","tld":"fun"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","size":21296,"data":"","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-08-11T10:27:03.109318Z","times_seen":15297,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ladymarian.fun/assets/index--NCM7anQ.js","fqdn":"ladymarian.fun","domain":"ladymarian.fun","tld":"fun"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d9f4d9202512e2afd89f70d3e0a3d89","sha1":"4ffad23a67453bad92cde4a318308bba7521539b","sha256":"6f551c81eb2e8179af5b67914aeb9117c079e26be3eea9dd6fe2c225a0134f89","sha512":"26d32bea00f1613856a1c9a3a738ee529f8239d4815c663b84b59b55ab464b2fede9b13d5020cd5edc6529edc6b9994bd95bc5e2e64c62007a52db0d8992baa4","ssdeep":"12288:JWkfscgWgU+bdAfvMJqoEKagepr82cIKnlkAlBif52dNBqnxN5m/7AW2sqB9trsV:JW8sD/UWAfvMzQ9cIm9c2dNp1qB9e","tlshash":"12558ed8739171655b5386e4402f1006b23a2c61740cc4a4b2acd9fa7fb95cc97bbfea","size":1336160,"data":"","first_seen":"2026-08-07T08:45:33.065747Z","last_seen":"2026-08-07T08:55:04.160568Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ladymarian.fun/assets/index-Dh8QzroU.js","fqdn":"ladymarian.fun","domain":"ladymarian.fun","tld":"fun"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"51416cdfc100377f78e9abb6233bfcea","sha1":"b9723e425891dd4d168e6e731b6e3ac52501732f","sha256":"a2e4a4f56e90e9ad725b049e2a27056d860180917a9830a6d69378f10d3de932","sha512":"331b9f529251468b1947b935d47b14421547165507a12d6f4213823cbad46e18d95fdc75206852e17c9ede2fd4231c0d9d09a7574188d528aeaf2e91d6262442","ssdeep":"768:XP932LntkhLeOJmAgNU/Zk6fB4ZPVP3cprZM2D9Wbj9N7EsqlruENm6AG:l9W2Zk6fB4ZRcpy2kAsqlrurs","tlshash":"bde24000d145ebbfbc3649c5aa6fa10c701f0bb8e66e08a1857f60352678ae779177cd","size":32581,"data":"","first_seen":"2026-08-07T08:45:33.056688Z","last_seen":"2026-08-07T08:55:04.15078Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ladymarian.fun/~api/analytics","fqdn":"ladymarian.fun","domain":"ladymarian.fun","tld":"fun"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ladymarian.fun/","date":"2026-08-07T08:53:49.486Z","timestamp":1786092829486,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ladymarian.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 19:34:22 GMT","end":"Sun, 01 Nov 2026 20:34:21 GMT"},"fingerprint":{"sha1":"C4:DE:15:1E:79:8A:FF:67:F4:4D:19:A2:C3:EC:D8:5C:B9:9A:09:50","sha256":"68:E9:9F:52:82:88:67:20:20:B6:66:8E:04:29:38:8B:17:50:CC:FE:8F:F2:68:86:C8:F2:37:B9:09:E8:59:64"}}},"request":{"raw":"POST /~api/analytics HTTP/1.1\r\nHost: ladymarian.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ladymarian.fun/\r\nContent-Type: application/json\r\nContent-Length: 335\r\nOrigin: https://ladymarian.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=3f08f4423669c9491d0a9064d27c2c8703ef7242d5ae37f64ff951b3edbe90a8; __cf_bm=ia_re16z9EzR6DV6ZpmyNZZiIXSYuXlR8Rtgka37t40-1786092827.9081216-1.0.1.1-5.2fGbIhNTm1keujvKMFbhUDia79vzNHLLPn.mc5syebTQCEAGZnDkxtFLM3RuTXhW8Nqz5aVyiOYouqUZG7V3o8T9hLJd47p88iJXwoQJOay0JllEagftXEbgVHTd41; session-id=102f03f5-1abc-4a26-9ef1-c9d96c5690c4\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":335,"data":"{\"timestamp\":\"2026-08-07T08:53:49.469Z\",\"action\":\"page_hit\",\"version\":\"1\",\"session_id\":\"102f03f5-1abc-4a26-9ef1-c9d96c5690c4\",\"payload\":\"{\\\"user-agent\\\":\\\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\\\",\\\"locale\\\":\\\"en-US\\\",\\\"referrer\\\":\\\"\\\",\\\"pathname\\\":\\\"/\\\",\\\"href\\\":\\\"https://ladymarian.fun/\\\"}\"}"}},"response":{"raw":"HTTP/2 202 \r\ndate: Fri, 07 Aug 2026 08:53:49 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a2750d984d005ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8,"size_decoded":337,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"382ab522931673c11e398ead1b7b1678","sha1":"61a0572c4893ef34311320d84c82df88bea83e11","sha256":"a00fb0c50741f81bb51d35b4475a4357f8039aabd896a21036bc516839401595","sha512":"685c859b43ec0b2f873fb61ff4c48b3748ede3e31bdda719b69b528546f7a1d528216146db9626d1a411dccdd13f3fd155f3d62d3e2ec8090c71f6710ee60641","ssdeep":"","tlshash":"455000003c0000c0000000c000000000c0000000000000c0c000000000c0c000000000","first_seen":"2023-04-11T14:35:59Z","last_seen":"2026-08-11T10:27:03.100761Z","times_seen":4935,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ladymarian.fun/__l5e/assets-v1/250b2ca5-fb86-4285-bd2c-d1e770ce8a79/logo-sm.png","fqdn":"ladymarian.fun","domain":"ladymarian.fun","tld":"fun"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ladymarian.fun/","date":"2026-08-07T08:53:48.937Z","timestamp":1786092828937,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ladymarian.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 19:34:22 GMT","end":"Sun, 01 Nov 2026 20:34:21 GMT"},"fingerprint":{"sha1":"C4:DE:15:1E:79:8A:FF:67:F4:4D:19:A2:C3:EC:D8:5C:B9:9A:09:50","sha256":"68:E9:9F:52:82:88:67:20:20:B6:66:8E:04:29:38:8B:17:50:CC:FE:8F:F2:68:86:C8:F2:37:B9:09:E8:59:64"}}},"request":{"raw":"GET /__l5e/assets-v1/250b2ca5-fb86-4285-bd2c-d1e770ce8a79/logo-sm.png HTTP/1.1\r\nHost: ladymarian.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ladymarian.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=3f08f4423669c9491d0a9064d27c2c8703ef7242d5ae37f64ff951b3edbe90a8; __cf_bm=ia_re16z9EzR6DV6ZpmyNZZiIXSYuXlR8Rtgka37t40-1786092827.9081216-1.0.1.1-5.2fGbIhNTm1keujvKMFbhUDia79vzNHLLPn.mc5syebTQCEAGZnDkxtFLM3RuTXhW8Nqz5aVyiOYouqUZG7V3o8T9hLJd47p88iJXwoQJOay0JllEagftXEbgVHTd41\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 08:53:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 47177\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"975a90e686cd2b8a658edc4997ea36df\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'none'; script-src 'none'; object-src 'none'; base-uri 'none'\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a2750d94d85a5ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47177,"size_decoded":47742,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"975a90e686cd2b8a658edc4997ea36df","sha1":"4a9f055677a78bc67bcbc27c1e7526744f5b49d6","sha256":"12b476bd9cca7daa4999187e4189ace8137833115a1aa0ca5654e0d6dc0d3d2e","sha512":"957123d4d909c9de42c4483a30cbab114a359b621628f130424d9e5054098e20074777c01b7d82d361b5b65395f960906e3568c6357dc2b5390fd0e57462b694","ssdeep":"768:rbWlLpQzzBYcBMRnWYgQE7xmDQeASjrjwdETwmByooWgG:rbWlSK1nWYzKmD7bjfwdkjoWgG","tlshash":"3f2302a1e2112745f88b1f484b6c5ab77f444c19ed58772b31e2af7d2b18973c0a2ee4","first_seen":"2026-07-28T17:34:01.813572Z","last_seen":"2026-08-07T08:55:04.148477Z","times_seen":4,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ladymarian.fun/__l5e/assets-v1/f05a672e-ed3d-45bf-8bb7-fe689a8efce8/gochi-hand.woff2","fqdn":"ladymarian.fun","domain":"ladymarian.fun","tld":"fun"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ladymarian.fun/","date":"2026-08-07T08:53:49.145Z","timestamp":1786092829145,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ladymarian.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 19:34:22 GMT","end":"Sun, 01 Nov 2026 20:34:21 GMT"},"fingerprint":{"sha1":"C4:DE:15:1E:79:8A:FF:67:F4:4D:19:A2:C3:EC:D8:5C:B9:9A:09:50","sha256":"68:E9:9F:52:82:88:67:20:20:B6:66:8E:04:29:38:8B:17:50:CC:FE:8F:F2:68:86:C8:F2:37:B9:09:E8:59:64"}}},"request":{"raw":"GET /__l5e/assets-v1/f05a672e-ed3d-45bf-8bb7-fe689a8efce8/gochi-hand.woff2 HTTP/1.1\r\nHost: ladymarian.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://ladymarian.fun/assets/styles-C9YoUHTo.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=3f08f4423669c9491d0a9064d27c2c8703ef7242d5ae37f64ff951b3edbe90a8; __cf_bm=ia_re16z9EzR6DV6ZpmyNZZiIXSYuXlR8Rtgka37t40-1786092827.9081216-1.0.1.1-5.2fGbIhNTm1keujvKMFbhUDia79vzNHLLPn.mc5syebTQCEAGZnDkxtFLM3RuTXhW8Nqz5aVyiOYouqUZG7V3o8T9hLJd47p88iJXwoQJOay0JllEagftXEbgVHTd41\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 08:53:49 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19908\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"3f670404d516eeacfbb9d6b5ba64ad45\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'none'; script-src 'none'; object-src 'none'; base-uri 'none'\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a2750d962d455ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19908,"size_decoded":20474,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19908, version 1.0","md5":"3f670404d516eeacfbb9d6b5ba64ad45","sha1":"39c01c25345901a6ff70e2ad96c571609174f53e","sha256":"8851738d8167bd0384db9dee1df6e5b5e2f9221e613e3466cdea19587a81d7b6","sha512":"3bc0fa00c0eea9326149c6e4c327c9eda882c8653628d053f989d3c67f496aa65903a902ef262877529d704ef826eeaa86f462d6dae89beb1bf49ca3153d4f10","ssdeep":"384:gxSCt0O3dsOxYi7rZ/73V9c9yUwfuslPNdvbmHSWNzOFnQF8r:gxSo0O3dsuYinZj3V9c9W3VUSHdQC","tlshash":"2692e0749ce14bd2c19254acd41a8742acaaf0858d1cbf4888fd6c67673600ef52687e","first_seen":"2025-06-16T15:02:25.883669Z","last_seen":"2026-08-07T08:55:04.149339Z","times_seen":247,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ladymarian.fun/__l5e/assets-v1/250b2ca5-fb86-4285-bd2c-d1e770ce8a79/logo-sm.png","fqdn":"ladymarian.fun","domain":"ladymarian.fun","tld":"fun"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ladymarian.fun/","date":"2026-08-07T08:53:49.286Z","timestamp":1786092829286,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ladymarian.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 19:34:22 GMT","end":"Sun, 01 Nov 2026 20:34:21 GMT"},"fingerprint":{"sha1":"C4:DE:15:1E:79:8A:FF:67:F4:4D:19:A2:C3:EC:D8:5C:B9:9A:09:50","sha256":"68:E9:9F:52:82:88:67:20:20:B6:66:8E:04:29:38:8B:17:50:CC:FE:8F:F2:68:86:C8:F2:37:B9:09:E8:59:64"}}},"request":{"raw":"GET /__l5e/assets-v1/250b2ca5-fb86-4285-bd2c-d1e770ce8a79/logo-sm.png HTTP/1.1\r\nHost: ladymarian.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ladymarian.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=3f08f4423669c9491d0a9064d27c2c8703ef7242d5ae37f64ff951b3edbe90a8; __cf_bm=ia_re16z9EzR6DV6ZpmyNZZiIXSYuXlR8Rtgka37t40-1786092827.9081216-1.0.1.1-5.2fGbIhNTm1keujvKMFbhUDia79vzNHLLPn.mc5syebTQCEAGZnDkxtFLM3RuTXhW8Nqz5aVyiOYouqUZG7V3o8T9hLJd47p88iJXwoQJOay0JllEagftXEbgVHTd41\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 08:53:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 47177\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"975a90e686cd2b8a658edc4997ea36df\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'none'; script-src 'none'; object-src 'none'; base-uri 'none'\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a2750d9708975ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47177,"size_decoded":47742,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"975a90e686cd2b8a658edc4997ea36df","sha1":"4a9f055677a78bc67bcbc27c1e7526744f5b49d6","sha256":"12b476bd9cca7daa4999187e4189ace8137833115a1aa0ca5654e0d6dc0d3d2e","sha512":"957123d4d909c9de42c4483a30cbab114a359b621628f130424d9e5054098e20074777c01b7d82d361b5b65395f960906e3568c6357dc2b5390fd0e57462b694","ssdeep":"768:rbWlLpQzzBYcBMRnWYgQE7xmDQeASjrjwdETwmByooWgG:rbWlSK1nWYzKmD7bjfwdkjoWgG","tlshash":"3f2302a1e2112745f88b1f484b6c5ab77f444c19ed58772b31e2af7d2b18973c0a2ee4","first_seen":"2026-07-28T17:34:01.813572Z","last_seen":"2026-08-07T08:55:04.148477Z","times_seen":4,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ladymarian.fun/","fqdn":"ladymarian.fun","domain":"ladymarian.fun","tld":"fun"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-07T08:53:47.788Z","timestamp":1786092827788,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ladymarian.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 19:34:22 GMT","end":"Sun, 01 Nov 2026 20:34:21 GMT"},"fingerprint":{"sha1":"C4:DE:15:1E:79:8A:FF:67:F4:4D:19:A2:C3:EC:D8:5C:B9:9A:09:50","sha256":"68:E9:9F:52:82:88:67:20:20:B6:66:8E:04:29:38:8B:17:50:CC:FE:8F:F2:68:86:C8:F2:37:B9:09:E8:59:64"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ladymarian.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 08:53:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, must-revalidate, max-age=0\r\nx-deployment-id: 3f08f4423669c9491d0a9064d27c2c8703ef7242d5ae37f64ff951b3edbe90a8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __dpl=3f08f4423669c9491d0a9064d27c2c8703ef7242d5ae37f64ff951b3edbe90a8; Path=/; Max-Age=86400; SameSite=Lax; Secure\n__cf_bm=ia_re16z9EzR6DV6ZpmyNZZiIXSYuXlR8Rtgka37t40-1786092827.9081216-1.0.1.1-5.2fGbIhNTm1keujvKMFbhUDia79vzNHLLPn.mc5syebTQCEAGZnDkxtFLM3RuTXhW8Nqz5aVyiOYouqUZG7V3o8T9hLJd47p88iJXwoQJOay0JllEagftXEbgVHTd41; HttpOnly; SameSite=None; Secure; Path=/; Domain=ladymarian.fun; Expires=Fri, 07 Aug 2026 09:23:48 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2750d8e68a95ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36739,"size_decoded":10346,"mime_type":"text/html; charset=utf-8","magic":"data","md5":"3f33632f46a941e4e693eb297383d664","sha1":"f3d36ce6b3524cfc00e317adb640dbc9b6608468","sha256":"7539803b7a89d0b0ecbf90d3b18489a0c710aa727c618490da4ef5470992f798","sha512":"b9dea2f36622f58ef898bfae8336e2f8fcf304495b456c82d69679f316a277bc25a37eef403566caf8e0be37fa4235cf31fbb691a989dac75577b778c6f0ccaf","ssdeep":"384:dzkNNvuaLF/jMvTVpK7Ffv7FCzdeK7I0ESQijHhJg1tVfshOKgc6G1a4L:hkvWaLF6oqcKpFhJgrGgtcT1a4L","tlshash":"acf240a1e1a3153b2133c5caa1fb236830f941b5f68b1954cbbd837d22dcc55b86789e","first_seen":"2026-08-07T08:55:04.149925Z","last_seen":"2026-08-07T08:55:04.149925Z","times_seen":1,"resource_available":false,"data":null}},"time_used":951,"timings":{"blocked":0,"dns":107,"connect":1,"send":0,"wait":831,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ladymarian.fun/assets/index-Dh8QzroU.js","fqdn":"ladymarian.fun","domain":"ladymarian.fun","tld":"fun"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ladymarian.fun/","date":"2026-08-07T08:53:48.927Z","timestamp":1786092828927,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ladymarian.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 19:34:22 GMT","end":"Sun, 01 Nov 2026 20:34:21 GMT"},"fingerprint":{"sha1":"C4:DE:15:1E:79:8A:FF:67:F4:4D:19:A2:C3:EC:D8:5C:B9:9A:09:50","sha256":"68:E9:9F:52:82:88:67:20:20:B6:66:8E:04:29:38:8B:17:50:CC:FE:8F:F2:68:86:C8:F2:37:B9:09:E8:59:64"}}},"request":{"raw":"GET /assets/index-Dh8QzroU.js HTTP/1.1\r\nHost: ladymarian.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ladymarian.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=3f08f4423669c9491d0a9064d27c2c8703ef7242d5ae37f64ff951b3edbe90a8; __cf_bm=ia_re16z9EzR6DV6ZpmyNZZiIXSYuXlR8Rtgka37t40-1786092827.9081216-1.0.1.1-5.2fGbIhNTm1keujvKMFbhUDia79vzNHLLPn.mc5syebTQCEAGZnDkxtFLM3RuTXhW8Nqz5aVyiOYouqUZG7V3o8T9hLJd47p88iJXwoQJOay0JllEagftXEbgVHTd41\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 08:53:49 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: 3f08f4423669c9491d0a9064d27c2c8703ef7242d5ae37f64ff951b3edbe90a8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2750d94c8265ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32583,"size_decoded":10113,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (32345)","md5":"51416cdfc100377f78e9abb6233bfcea","sha1":"b9723e425891dd4d168e6e731b6e3ac52501732f","sha256":"a2e4a4f56e90e9ad725b049e2a27056d860180917a9830a6d69378f10d3de932","sha512":"331b9f529251468b1947b935d47b14421547165507a12d6f4213823cbad46e18d95fdc75206852e17c9ede2fd4231c0d9d09a7574188d528aeaf2e91d6262442","ssdeep":"768:XP932LntkhLeOJmAgNU/Zk6fB4ZPVP3cprZM2D9Wbj9N7EsqlruENm6AG:l9W2Zk6fB4ZRcpy2kAsqlrurs","tlshash":"bde24000d145ebbfbc3649c5aa6fa10c701f0bb8e66e08a1857f60352678ae779177cd","first_seen":"2026-08-07T08:45:33.056688Z","last_seen":"2026-08-07T08:55:04.15078Z","times_seen":2,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ladymarian.fun/__l5e/assets-v1/f6ca46b0-3077-4c29-96e9-3b32d3256047/patrick-hand.woff2","fqdn":"ladymarian.fun","domain":"ladymarian.fun","tld":"fun"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ladymarian.fun/","date":"2026-08-07T08:53:48.929Z","timestamp":1786092828929,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ladymarian.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 19:34:22 GMT","end":"Sun, 01 Nov 2026 20:34:21 GMT"},"fingerprint":{"sha1":"C4:DE:15:1E:79:8A:FF:67:F4:4D:19:A2:C3:EC:D8:5C:B9:9A:09:50","sha256":"68:E9:9F:52:82:88:67:20:20:B6:66:8E:04:29:38:8B:17:50:CC:FE:8F:F2:68:86:C8:F2:37:B9:09:E8:59:64"}}},"request":{"raw":"GET /__l5e/assets-v1/f6ca46b0-3077-4c29-96e9-3b32d3256047/patrick-hand.woff2 HTTP/1.1\r\nHost: ladymarian.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ladymarian.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=3f08f4423669c9491d0a9064d27c2c8703ef7242d5ae37f64ff951b3edbe90a8; __cf_bm=ia_re16z9EzR6DV6ZpmyNZZiIXSYuXlR8Rtgka37t40-1786092827.9081216-1.0.1.1-5.2fGbIhNTm1keujvKMFbhUDia79vzNHLLPn.mc5syebTQCEAGZnDkxtFLM3RuTXhW8Nqz5aVyiOYouqUZG7V3o8T9hLJd47p88iJXwoQJOay0JllEagftXEbgVHTd41\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 08:53:49 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 23944\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"56bc7c81e5dab1c0dbced2f566ea7af1\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'none'; script-src 'none'; object-src 'none'; base-uri 'none'\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a2750d94c82c5ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23944,"size_decoded":24510,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23944, version 1.0","md5":"56bc7c81e5dab1c0dbced2f566ea7af1","sha1":"2fed35146651eedadc1aeb447e86f64b5284c1fb","sha256":"ac5bc9033b2572bf84d39f7150c1634e37ed16e8dbee632d6d0bceac0bbf0199","sha512":"28a6bf4e2e0cb782eeadf87f5cffb50b5eb0a2d0338c043f2aee924c56bb808056ada12c5e84334c20af7538a563a70fe0feabf787f222bd593e9802d9632b50","ssdeep":"384:nz5jNWZ6kojXBrFH84Mvxu6mna+hPW3aW9NHEWamBau2yplayt+TT24MjYq4DR3t:nz9gZ+7sxn+iakHVaujlaytWKXG9KQXl","tlshash":"88b2d0e4a8c8b738c20d3d3ea64c1e319442266e87db2d7c8645909eded7b1e2355b4d","first_seen":"2025-06-22T05:56:30.576853Z","last_seen":"2026-08-08T11:27:49.596339Z","times_seen":292,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ladymarian.fun/~flock.js","fqdn":"ladymarian.fun","domain":"ladymarian.fun","tld":"fun"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ladymarian.fun/","date":"2026-08-07T08:53:48.933Z","timestamp":1786092828933,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ladymarian.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 19:34:22 GMT","end":"Sun, 01 Nov 2026 20:34:21 GMT"},"fingerprint":{"sha1":"C4:DE:15:1E:79:8A:FF:67:F4:4D:19:A2:C3:EC:D8:5C:B9:9A:09:50","sha256":"68:E9:9F:52:82:88:67:20:20:B6:66:8E:04:29:38:8B:17:50:CC:FE:8F:F2:68:86:C8:F2:37:B9:09:E8:59:64"}}},"request":{"raw":"GET /~flock.js HTTP/1.1\r\nHost: ladymarian.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ladymarian.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=3f08f4423669c9491d0a9064d27c2c8703ef7242d5ae37f64ff951b3edbe90a8; __cf_bm=ia_re16z9EzR6DV6ZpmyNZZiIXSYuXlR8Rtgka37t40-1786092827.9081216-1.0.1.1-5.2fGbIhNTm1keujvKMFbhUDia79vzNHLLPn.mc5syebTQCEAGZnDkxtFLM3RuTXhW8Nqz5aVyiOYouqUZG7V3o8T9hLJd47p88iJXwoQJOay0JllEagftXEbgVHTd41\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 08:53:48 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=1500\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2750d94c8435ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21296,"size_decoded":8697,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21296), with no line terminators","md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-08-11T10:27:03.109318Z","times_seen":15297,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ladymarian.fun/assets/styles-C9YoUHTo.css","fqdn":"ladymarian.fun","domain":"ladymarian.fun","tld":"fun"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ladymarian.fun/","date":"2026-08-07T08:53:48.924Z","timestamp":1786092828924,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ladymarian.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 19:34:22 GMT","end":"Sun, 01 Nov 2026 20:34:21 GMT"},"fingerprint":{"sha1":"C4:DE:15:1E:79:8A:FF:67:F4:4D:19:A2:C3:EC:D8:5C:B9:9A:09:50","sha256":"68:E9:9F:52:82:88:67:20:20:B6:66:8E:04:29:38:8B:17:50:CC:FE:8F:F2:68:86:C8:F2:37:B9:09:E8:59:64"}}},"request":{"raw":"GET /assets/styles-C9YoUHTo.css HTTP/1.1\r\nHost: ladymarian.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ladymarian.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=3f08f4423669c9491d0a9064d27c2c8703ef7242d5ae37f64ff951b3edbe90a8; __cf_bm=ia_re16z9EzR6DV6ZpmyNZZiIXSYuXlR8Rtgka37t40-1786092827.9081216-1.0.1.1-5.2fGbIhNTm1keujvKMFbhUDia79vzNHLLPn.mc5syebTQCEAGZnDkxtFLM3RuTXhW8Nqz5aVyiOYouqUZG7V3o8T9hLJd47p88iJXwoQJOay0JllEagftXEbgVHTd41\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 08:53:49 GMT\r\ncontent-type: text/css; charset=utf-8\r\nx-deployment-id: 3f08f4423669c9491d0a9064d27c2c8703ef7242d5ae37f64ff951b3edbe90a8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2750d94c8135ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88658,"size_decoded":17164,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4225aed5eba0c45a422671b96c4a44b1","sha1":"afbaf5efa9cd5845cf011923b59cb730327d9043","sha256":"6309c213186dcc048578ce255351ad294fc1c921d0eeb6ffe8892e702eb95c7c","sha512":"1a2890d015cd0fa70104bea1a8f24b37627bf9b6da8b73f6be23cc134153234e8b91cc5ed893df39f28f5d4ccb7fa1639dbf2c6ae92781242c3d23b0ccba572f","ssdeep":"1536:qC++Wh+kBwywXPv6c/Q1sa1SsMq+WDhXv7OCo4Nk1W5Cl4sl988R988q:/++Wh+Awyuv6c/+HMq+WDhfoKt/T","tlshash":"8983e8647219d03ebc7768e593ccb49c9018b0c1dd3a45edfa06a12646c7bf69ebb708","first_seen":"2026-08-07T08:45:33.063981Z","last_seen":"2026-08-07T08:55:04.158143Z","times_seen":2,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ladymarian.fun/assets/index--NCM7anQ.js","fqdn":"ladymarian.fun","domain":"ladymarian.fun","tld":"fun"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ladymarian.fun/","date":"2026-08-07T08:53:48.926Z","timestamp":1786092828926,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ladymarian.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 19:34:22 GMT","end":"Sun, 01 Nov 2026 20:34:21 GMT"},"fingerprint":{"sha1":"C4:DE:15:1E:79:8A:FF:67:F4:4D:19:A2:C3:EC:D8:5C:B9:9A:09:50","sha256":"68:E9:9F:52:82:88:67:20:20:B6:66:8E:04:29:38:8B:17:50:CC:FE:8F:F2:68:86:C8:F2:37:B9:09:E8:59:64"}}},"request":{"raw":"GET /assets/index--NCM7anQ.js HTTP/1.1\r\nHost: ladymarian.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ladymarian.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=3f08f4423669c9491d0a9064d27c2c8703ef7242d5ae37f64ff951b3edbe90a8; __cf_bm=ia_re16z9EzR6DV6ZpmyNZZiIXSYuXlR8Rtgka37t40-1786092827.9081216-1.0.1.1-5.2fGbIhNTm1keujvKMFbhUDia79vzNHLLPn.mc5syebTQCEAGZnDkxtFLM3RuTXhW8Nqz5aVyiOYouqUZG7V3o8T9hLJd47p88iJXwoQJOay0JllEagftXEbgVHTd41\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 08:53:49 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: 3f08f4423669c9491d0a9064d27c2c8703ef7242d5ae37f64ff951b3edbe90a8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2750d94c81b5ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1336160,"size_decoded":417458,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (42688)","md5":"8a4c6adecb3e53d6f8ea8a648ff6a257","sha1":"98a37e02570c70e28cc3fbf0949b7ae1cb9396a0","sha256":"b649468e82fd52ce0f4718e997ea5211799bd4b7557f3a969d04bd4871433740","sha512":"8684851fbf784a281e27b6f23b10cfd7c555fbd78aec72e5194ad842530f97e5c6691e4dc0565c3dde97db479a79c78299cc1643eadb997f171c030d454a830e","ssdeep":"12288:JWkfscgWgU+bdAfvMJqoEKagepr82cIKnlkAlBif52dNBqnxN5mh:JW8sD/UWAfvMzQ9cIm9c2dNph","tlshash":"33357ce83395b06507d346f5406f1106f2392c65740c84a4b26cd9fb7ab988897bbfbe","first_seen":"2026-08-07T08:45:33.062183Z","last_seen":"2026-08-07T08:55:04.158719Z","times_seen":2,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ladymarian.fun/__l5e/assets-v1/b5fb85b3-ada6-4563-bfa0-7b41686a286e/permanent-marker.woff2","fqdn":"ladymarian.fun","domain":"ladymarian.fun","tld":"fun"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ladymarian.fun/","date":"2026-08-07T08:53:48.928Z","timestamp":1786092828928,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ladymarian.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 19:34:22 GMT","end":"Sun, 01 Nov 2026 20:34:21 GMT"},"fingerprint":{"sha1":"C4:DE:15:1E:79:8A:FF:67:F4:4D:19:A2:C3:EC:D8:5C:B9:9A:09:50","sha256":"68:E9:9F:52:82:88:67:20:20:B6:66:8E:04:29:38:8B:17:50:CC:FE:8F:F2:68:86:C8:F2:37:B9:09:E8:59:64"}}},"request":{"raw":"GET /__l5e/assets-v1/b5fb85b3-ada6-4563-bfa0-7b41686a286e/permanent-marker.woff2 HTTP/1.1\r\nHost: ladymarian.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ladymarian.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=3f08f4423669c9491d0a9064d27c2c8703ef7242d5ae37f64ff951b3edbe90a8; __cf_bm=ia_re16z9EzR6DV6ZpmyNZZiIXSYuXlR8Rtgka37t40-1786092827.9081216-1.0.1.1-5.2fGbIhNTm1keujvKMFbhUDia79vzNHLLPn.mc5syebTQCEAGZnDkxtFLM3RuTXhW8Nqz5aVyiOYouqUZG7V3o8T9hLJd47p88iJXwoQJOay0JllEagftXEbgVHTd41\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 08:53:49 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 29564\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"1b66ccb164151a6cf698667c8b570cc6\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'none'; script-src 'none'; object-src 'none'; base-uri 'none'\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a2750d94c8295ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29564,"size_decoded":30130,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29564, version 1.0","md5":"1b66ccb164151a6cf698667c8b570cc6","sha1":"f5617a0f087645703c874453960be6382c8a7427","sha256":"4884fec2c73aa52a2461073c1b87d1ceb80f400520391b43f97ca7d3c39eeb24","sha512":"74628f9ca05f31db6d92ce52f43082952168957687dd72d36172bad207c1448080275e4f3131e22b5e50f5ebfa2ef649be89e605b13a6b7def54e161bba4e7aa","ssdeep":"768:6qij7U1+JTVAg4GQI1XP27R6kpnCIbC79Wu9m1:6qEJ/8ImRpnCIqW","tlshash":"0ad2e10af09d409bcffa897d2c44dd26e1736a3ca6b0a7f052aebc143071a6db4d4695","first_seen":"2023-04-06T07:57:08Z","last_seen":"2026-08-11T11:16:53.528664Z","times_seen":1634,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ladymarian.fun/__l5e/assets-v1/71e963a3-347b-4c5a-8ced-17335c03e08f/logo.webp","fqdn":"ladymarian.fun","domain":"ladymarian.fun","tld":"fun"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ladymarian.fun/","date":"2026-08-07T08:53:49.072Z","timestamp":1786092829072,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ladymarian.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 19:34:22 GMT","end":"Sun, 01 Nov 2026 20:34:21 GMT"},"fingerprint":{"sha1":"C4:DE:15:1E:79:8A:FF:67:F4:4D:19:A2:C3:EC:D8:5C:B9:9A:09:50","sha256":"68:E9:9F:52:82:88:67:20:20:B6:66:8E:04:29:38:8B:17:50:CC:FE:8F:F2:68:86:C8:F2:37:B9:09:E8:59:64"}}},"request":{"raw":"GET /__l5e/assets-v1/71e963a3-347b-4c5a-8ced-17335c03e08f/logo.webp HTTP/1.1\r\nHost: ladymarian.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ladymarian.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=3f08f4423669c9491d0a9064d27c2c8703ef7242d5ae37f64ff951b3edbe90a8; __cf_bm=ia_re16z9EzR6DV6ZpmyNZZiIXSYuXlR8Rtgka37t40-1786092827.9081216-1.0.1.1-5.2fGbIhNTm1keujvKMFbhUDia79vzNHLLPn.mc5syebTQCEAGZnDkxtFLM3RuTXhW8Nqz5aVyiOYouqUZG7V3o8T9hLJd47p88iJXwoQJOay0JllEagftXEbgVHTd41\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 08:53:49 GMT\r\ncontent-type: image/webp\r\ncontent-length: 40398\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"bce2f1f062d22fb2d4c4d53eb5bd1091\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'none'; script-src 'none'; object-src 'none'; base-uri 'none'\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a2750d95ab7d5ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40398,"size_decoded":40964,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x640, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bce2f1f062d22fb2d4c4d53eb5bd1091","sha1":"ac921766a8328d570f06b9647720e8fcd9293c42","sha256":"d4a5ca9bce9d39f6bb2eb6276dc9b9f9a2f0e614be56dfca2aaaf8ce5da3a089","sha512":"3579d737e35327f1867fce92f05ab04487e2e41fea40e897d72193e2aa0fe1daf42cbff3b79e195f585aba68971f55f0727896a0f47e160b476ddb98736e8cf2","ssdeep":"768:ZJP5AxzzxR5aPYNjjQa9NCeD7wceW85FBGAAAEKHcjbYJhrA:ZJhGgPNa9NCeD0g85FQRAEpjbYJh8","tlshash":"c803f19dfed7bb165285f667ac0d3081da42acde4e770e843b19cccc5e6690ba580c8d","first_seen":"2026-07-28T17:34:01.820603Z","last_seen":"2026-08-07T08:55:04.159844Z","times_seen":4,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ladymarian.fun/__l5e/assets-v1/250b2ca5-fb86-4285-bd2c-d1e770ce8a79/logo-sm.png","fqdn":"ladymarian.fun","domain":"ladymarian.fun","tld":"fun"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ladymarian.fun/","date":"2026-08-07T08:53:49.284Z","timestamp":1786092829284,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ladymarian.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 19:34:22 GMT","end":"Sun, 01 Nov 2026 20:34:21 GMT"},"fingerprint":{"sha1":"C4:DE:15:1E:79:8A:FF:67:F4:4D:19:A2:C3:EC:D8:5C:B9:9A:09:50","sha256":"68:E9:9F:52:82:88:67:20:20:B6:66:8E:04:29:38:8B:17:50:CC:FE:8F:F2:68:86:C8:F2:37:B9:09:E8:59:64"}}},"request":{"raw":"GET /__l5e/assets-v1/250b2ca5-fb86-4285-bd2c-d1e770ce8a79/logo-sm.png HTTP/1.1\r\nHost: ladymarian.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ladymarian.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=3f08f4423669c9491d0a9064d27c2c8703ef7242d5ae37f64ff951b3edbe90a8; __cf_bm=ia_re16z9EzR6DV6ZpmyNZZiIXSYuXlR8Rtgka37t40-1786092827.9081216-1.0.1.1-5.2fGbIhNTm1keujvKMFbhUDia79vzNHLLPn.mc5syebTQCEAGZnDkxtFLM3RuTXhW8Nqz5aVyiOYouqUZG7V3o8T9hLJd47p88iJXwoQJOay0JllEagftXEbgVHTd41\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 08:53:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 47177\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"975a90e686cd2b8a658edc4997ea36df\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'none'; script-src 'none'; object-src 'none'; base-uri 'none'\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a2750d97088e5ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47177,"size_decoded":47742,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"975a90e686cd2b8a658edc4997ea36df","sha1":"4a9f055677a78bc67bcbc27c1e7526744f5b49d6","sha256":"12b476bd9cca7daa4999187e4189ace8137833115a1aa0ca5654e0d6dc0d3d2e","sha512":"957123d4d909c9de42c4483a30cbab114a359b621628f130424d9e5054098e20074777c01b7d82d361b5b65395f960906e3568c6357dc2b5390fd0e57462b694","ssdeep":"768:rbWlLpQzzBYcBMRnWYgQE7xmDQeASjrjwdETwmByooWgG:rbWlSK1nWYzKmD7bjfwdkjoWgG","tlshash":"3f2302a1e2112745f88b1f484b6c5ab77f444c19ed58772b31e2af7d2b18973c0a2ee4","first_seen":"2026-07-28T17:34:01.813572Z","last_seen":"2026-08-07T08:55:04.148477Z","times_seen":4,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}