{"report_id":"3403b4b2-d1fb-4e83-a26f-bc8e46e4d9bc","version":6,"status":"done","tags":[],"date":"2026-05-02T21:27:26Z","url":{"schema":"http","addr":"www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"172.67.74.160","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"title":"Elibee Fingers Her Tight Wet Pussy Hard - Explicit Solo Masturbation Close Up Orgasm - Watch Free HD Porn","dom":{"size":222849,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (866)","md5":"1089fa184f85b7f5bcf117104c01f6d0","sha1":"ef8fd006a6aa2e069ad4ed60b48633ba6dde4da6","sha256":"37ae70771d2a3fe38347f8f2dbf83252874b0cbff466166f211710be9da6aae6","sha512":"e7d32109404c189f30be647ace82a07d963b027547368d0d8ad34c3011a56b9c7dfad9754a361b020c91e600d30200bd443a80b7cbd8b467ceb625aebf37d4e2","ssdeep":"1536:UXPNPBhdhCTIgIA7V8DQIFfKuOv01sV9E+/uRhpslU/XxNEKACLygc0ezrCDI0aR:UXFPDDCd3Eyui01HhpN/XxNtc0ezrd","tlshash":"b324e8b7ddfa116c110791d96fb663293b69d067d648cd287a8c43a8cf8bfc0c563268","dom_hash":"domhash1debd8d89117c547e12c949bbd04793d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"172.67.74.160","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-06T21:27:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-26T22:20:29.825994Z","alert_count":0,"request_count":1,"received_data":3806,"sent_data":454,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-04-26T22:44:19.904703Z","alert_count":0,"request_count":1,"received_data":31542,"sent_data":508,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.camvibe.xyz","ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-04","domain_rank":0,"first_seen":"2026-04-28T18:48:31.640591Z","last_seen":"2026-04-28T18:48:31.640591Z","alert_count":44,"request_count":44,"received_data":2348211,"sent_data":35129,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.1.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"www.extrovertedlecture.com","ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2026-04-04","domain_rank":0,"first_seen":"2026-05-01T11:00:51.124305Z","last_seen":"2026-05-01T11:00:51.124305Z","alert_count":0,"request_count":2,"received_data":208220,"sent_data":929,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.matomo.cloud","ip":{"addr":"65.9.46.62","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2017-09-08","domain_rank":124973,"first_seen":"2019-09-27T14:00:38Z","last_seen":"2026-04-30T09:09:01.759862Z","alert_count":0,"request_count":1,"received_data":140016,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-26T22:16:47.246638Z","alert_count":0,"request_count":3,"received_data":71624,"sent_data":1592,"comment":"","tags":null,"fingerprints":null},{"fqdn":"annualunion.com","ip":{"addr":"88.85.68.219","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-02-10","domain_rank":0,"first_seen":"2026-04-17T01:55:39.686273Z","last_seen":"2026-04-17T01:55:39.686273Z","alert_count":0,"request_count":4,"received_data":77730,"sent_data":2120,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"camvibexyz.matomo.cloud","ip":{"addr":"18.157.122.248","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2017-09-08","domain_rank":0,"first_seen":"2026-04-28T18:48:31.637294Z","last_seen":"2026-04-28T18:48:31.637294Z","alert_count":0,"request_count":2,"received_data":470,"sent_data":2409,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"poweredby.jads.co","ip":{"addr":"92.222.100.135","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"2012-05-17","domain_rank":172301,"first_seen":"2019-12-04T10:34:12Z","last_seen":"2026-04-30T16:44:49.79158Z","alert_count":0,"request_count":2,"received_data":8018,"sent_data":832,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.135","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c344215f7f4c4339ef3ec474fab1d5d2","sha1":"56ae62e74a9560413819f5c829a689f11e0e8d4b","sha256":"4a80819c5ee89f3ea534b99fe485991302abc498d994ba29d5c893ac5d795f79","sha512":"77cb331606c75be717c9e04c1836c9b5c0e8011639b4063784f1159972e826b75c3d46625ca2b9e931e9934fb7febce6b9820cb0ac6692b108ff35de97f5a6e6","ssdeep":"","tlshash":"d971627733557879889b966f10ef6a18317faa310f0688025b9ce864987cdcb057fd84","size":3769,"data":"","first_seen":"2025-02-19T04:42:15.317534Z","last_seen":"2026-06-26T14:40:43.599869Z","times_seen":2529,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.135","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c344215f7f4c4339ef3ec474fab1d5d2","sha1":"56ae62e74a9560413819f5c829a689f11e0e8d4b","sha256":"4a80819c5ee89f3ea534b99fe485991302abc498d994ba29d5c893ac5d795f79","sha512":"77cb331606c75be717c9e04c1836c9b5c0e8011639b4063784f1159972e826b75c3d46625ca2b9e931e9934fb7febce6b9820cb0ac6692b108ff35de97f5a6e6","ssdeep":"","tlshash":"d971627733557879889b966f10ef6a18317faa310f0688025b9ce864987cdcb057fd84","size":3769,"data":"","first_seen":"2025-02-19T04:42:15.317534Z","last_seen":"2026-06-26T14:40:43.599869Z","times_seen":2529,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f82ee2e817502bb03e2a3364b71fa3e1","sha1":"9e5e03fed1bb67bc918b187b0827df698c1c1ac3","sha256":"847242f226d981cb487025d9c97e4ec4f66d0a272480047b554c2ec4d1d9c835","sha512":"cab24a056041f3f3b5bfa4c96f942145ac657833f7d68082f589cc7b805051398b7b2d4e2a0488088759c119b40604e62c3c557fcc7dcd4cce62c2cc0a0bb987","ssdeep":"","tlshash":"7fc092edaa9e9095eb06749d2a6a69101396a09e4a08c999fb7c81900fc952401645cc","size":172,"data":"","first_seen":"2026-05-02T21:27:32.707511Z","last_seen":"2026-05-02T21:27:32.707511Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bb9ca7fceaf20269555adae022ebb100","sha1":"514d60b02f32ab871b3979f1881253229b5f1df5","sha256":"b8f46763dbefd5e22bd588fe6ad7aa5a504de98c1e83826f7748e7866feafa6a","sha512":"6edb665eabc2737aa7c82fc47c7b453bf2c4d6a73b0726fdda2da405c823aa569534c11abc8908a0148784b3516584a69a5c314d1e8c3dc9248329f1296fbb6b","ssdeep":"","tlshash":"91019e50865b18784712b517d754a76c38fa40bf254bc727381c1a1d7f93962c2751d5","size":663,"data":"","first_seen":"2026-05-02T21:27:32.708427Z","last_seen":"2026-05-02T21:27:32.708427Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"annualunion.com/c_DO9L6.b/2S5GlZStWQQw9/NmzPAGwYOwDTQV1OMUyI0-3bMtD/AD4lNpDqU/3l","fqdn":"annualunion.com","domain":"annualunion.com","tld":"com"},"ip":{"addr":"88.85.68.219","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ace81d71702832f62beb5d15f46a0c7","sha1":"f38db418fd6c081f322cf8ac22738a3edd7f643d","sha256":"466fba32f119b1f68fd3e97718d2f62052eee5516d6de1550de4259bc8afbedf","sha512":"79615bbff99e4b8cb98ebb18e1970daf41951ca4bd3a23dcf8a67c1c39c180cede9222d68931667d7d75424e171dda216edf212e96b6bf7a034ee3b1a28cacee","ssdeep":"768:ZlLiZg7J09MxiMZFvLnHvECJYgSboEBkleZ29oOcLlOWhbpp463j+OiG82IAigv5:Zleg7JpoIvECJZSboEBkleZ2ZcLlTppz","tlshash":"4ff2c6c871c3642642eb507d713b7218b23a1465642de028bc79c8e4bcb9e9f8577bbd","size":37561,"data":"","first_seen":"2026-05-02T21:27:32.617064Z","last_seen":"2026-05-02T21:27:32.617064Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.matomo.cloud/camvibexyz.matomo.cloud/matomo.js","fqdn":"cdn.matomo.cloud","domain":"matomo.cloud","tld":"cloud"},"ip":{"addr":"65.9.46.62","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf8b381329cc0aee32cb1b8b039f45a4","sha1":"4c3df5b37efad2433b0ce9797cf616b9054e73f8","sha256":"2aa5b34976102b9b3df357626c749e33cfe37a0e0031edfb40a3471c1d303a1c","sha512":"27024ab0f52f0897e4783d44c281bf863d459b91521402fff79f9e35a33de5705cb4d84e217a279cd68c1b63d472ce4ced4a9f9c70b01f5a974b99bdeca90bf0","ssdeep":"3072:AT+Z2fucXYy1PGJ9d1QkNw0CjBi4jZdV50tqv:ASUucfBGrd1HwBi4jZdV50tqv","tlshash":"e5d3088a72c2753a86db60b5543f110b733a9daa2448c0b8f625d4f63d78e0e553bf78","size":139327,"data":"","first_seen":"2026-02-05T13:16:52.117928Z","last_seen":"2026-05-18T14:30:39.242884Z","times_seen":658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"565000000c000000003c0000000c00000000cc33030000f0c0000c0c0c0000003c0000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-07-24T15:00:56.699715Z","times_seen":98956,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.extrovertedlecture.com/ecc874/532a8918a8ec.js","fqdn":"www.extrovertedlecture.com","domain":"extrovertedlecture.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f49cea205f3f84cb5fe9a94fbf63380","sha1":"80ff93b582b3e96b2c88f476f5939022c390c30e","sha256":"4f0ba2ca5a43d36202e03ae318b88ce734e8fc9576f86b3ac8b15406386898ac","sha512":"8e2c628d40b7d8b1dcbb04a64470a7c956374a8495c92027e148bf085612fea510a6aa77182e7a339b4fef495c02d4a76d7014ce5a2c986bf439a6fc10f1a63c","ssdeep":"1536:rM+iZ3YOYuyx6PUQwRxcs8P3nhkQ8vL7T7Q6eGozzwVEnHzHRbPvu:OijxEQq3P5Enne9zkWHLQ","tlshash":"47a33361350b64fd2ad0c1e7eb6b20886c295810e469cca1ecd1d7c7d6eb8e3429b5f7","size":103679,"data":"","first_seen":"2026-05-01T11:00:55.802688Z","last_seen":"2026-05-04T04:57:04.167393Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7838ce49e9492ab57ab762f16b7f7499","sha1":"4294273e7a9eb8f20ffb49bd48db01bc739cf332","sha256":"2457df63bd62929d0e788fdff9f05aea4788d6490e1cce4a5e9b3921e764eef6","sha512":"e62968af133b3fea1745b6361614eecdc3836aba4c5cd5faf9b44fc5931d941871aae09ba99c0259419073aa1351ce46e7d39d544a2beaa694d277c099dc2472","ssdeep":"","tlshash":"2d21c06ee0f111b06ce3352ea7dbaad8f46600a30409c9033d5cdd4c2f80b855431eea","size":1136,"data":"","first_seen":"2026-05-02T21:27:32.716815Z","last_seen":"2026-05-02T21:27:32.716815Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"756170bdb7ba8d9346943c85a24a5827","sha1":"8afce5d9cb35c455f86a99ea44bd7b7c7e477b58","sha256":"2e3f606566872754afe48d2e40bd3a6b4f35a3689b8a7d49218cb941c92d9702","sha512":"5547fd6e5fd397e1006e2a4bcad1913adfef46cde66562a574c05b61acd65ba8b8a902d668d0ffa66b691189420f033894a437531cfd56f03daadef0c32ad214","ssdeep":"96:71RgtNMp4Cm1CyrvIDk0Z0f0O0oBkFHxJdlJAsrcWotzz:bgU/aC6cFfxJLJg","tlshash":"049130f82f454840671b6def3e3077c9522af23cc9359a3afd19d19c2cdd19047991a6","size":4594,"data":"","first_seen":"2026-05-02T21:27:32.71774Z","last_seen":"2026-05-02T21:27:32.71774Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"17c88f0c78a9b7582678348d91f4a9ac","sha1":"472dee79f2b43206d0cac173ac3c661d050d445b","sha256":"d01d19ae90cd9ebd7e878991e778ce6e46af48a04f6fcbb6abc44bcfdc8ff3a6","sha512":"cdc5c86a1ea2bd029c966db7db38499ef45a0404986c6ce9a8a9519600b4ea8295d980840a5f3f741edbe9e9901881c781eb5f49c3f3f12c905d78ee000bcd79","ssdeep":"","tlshash":"0d115cebf36d92e3cd21521084ad5addb07c6237595408f63da280b96de5d1d3206cf0","size":1082,"data":"","first_seen":"2026-05-02T21:27:32.718776Z","last_seen":"2026-05-02T21:27:32.718776Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/player/kt_player.js?v=13.7.15","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b83d40aefb38e7fbcd00f9e3f7aba3e3","sha1":"3eb2d88f0372ef8eb20fe5ca05d392ceb239e788","sha256":"847beb9c7142dc5b606496524971585afd5af26373dc5da5af7372a3a53991fa","sha512":"ddc9c9dbdc5c3521e73e3f1be2443649a967a6431d361d76149126d58866c16906e9882fd84ac843c582456eca72d480fe8223f779b46d2a24afc855a79a61b1","ssdeep":"1536:R1hxd1GlUwI74w01zICfJ96iDHNKJ6EhaUABX99ZiNgQjkHEYYUxp6PzlMyQeZov:7hIlTR96i7wPezZ6gQjkHsUx4Pz082","tlshash":"7ff3f899b681b8b2438724f5009f1907f0779d3ae88ec990f0a6c9e87e79c5c117fe59","size":170136,"data":"","first_seen":"2025-10-26T19:53:40.34915Z","last_seen":"2026-07-21T18:31:14.784383Z","times_seen":152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","size":31169,"data":"","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-07-24T14:37:24.653408Z","times_seen":78304,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6039f25f5ed8170ad1d1185ba219e242","sha1":"3ae6ad07c3780bfb498883963006902d940020d8","sha256":"cb28ae464f9979629666218d5ffbd4a45b5af4bca2d1633f8d9e5d0dd169c497","sha512":"2ab8c685d55ec79382d3b59876822c55030dacdc275e29eb1820f83e87a14c4655012dfe6b789749a3776f9b6fb150c633964d66904ea2e02ff3df00415075d6","ssdeep":"","tlshash":"35a002f77583103d4d6375f42319754df9af0954879428545741b634b0b17e76609059","size":64,"data":"","first_seen":"2026-05-02T21:27:32.719717Z","last_seen":"2026-05-02T21:27:32.719717Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7070b64ce59f87556b4419db5f82a7ba","sha1":"cc1b46037b0fb0891349557181eecc515cc76edf","sha256":"878183a48ab36d9805e4484a99909c66e61e3653460f445f448b2cf02565d126","sha512":"7ee087eb8df430b3d7f9b87b3fcfdf7344e955a17ce67702b22bf71bc65c72cba8b8893014e1f9c203f3d1c5d633aeaa66e806a95eabe7b49094597fccd384a1","ssdeep":"","tlshash":"61a002f77593103c4c6271b82319754df9af0914879428549742ba34a0b17e76609069","size":64,"data":"","first_seen":"2026-05-02T21:27:32.720721Z","last_seen":"2026-05-02T21:27:32.720721Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a826c63b2ca70c701e4e61243c1d280a","sha1":"e31eccf5595422cb194b597e2d0262aa77bd9106","sha256":"4aa6ced254da778c7dbc4222a18334878a9a87e8647fe2685efa621ba769401d","sha512":"dde6e77b621b70c67ec93f6a444ef201d5863316fea342f89ead1fe5c956814684b8b212a39fab6641bc436cb36385f19d574ce4613ecfa28a1891ce0f1083ea","ssdeep":"","tlshash":"d2e02d8c0c08b930a3cb203bc0340b0eb02430502c32a280105ca42b3b84ffd1d69fac","size":341,"data":"","first_seen":"2026-05-02T21:27:32.721629Z","last_seen":"2026-05-02T21:27:32.721629Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a826c63b2ca70c701e4e61243c1d280a","sha1":"e31eccf5595422cb194b597e2d0262aa77bd9106","sha256":"4aa6ced254da778c7dbc4222a18334878a9a87e8647fe2685efa621ba769401d","sha512":"dde6e77b621b70c67ec93f6a444ef201d5863316fea342f89ead1fe5c956814684b8b212a39fab6641bc436cb36385f19d574ce4613ecfa28a1891ce0f1083ea","ssdeep":"","tlshash":"d2e02d8c0c08b930a3cb203bc0340b0eb02430502c32a280105ca42b3b84ffd1d69fac","size":341,"data":"","first_seen":"2026-05-02T21:27:32.721629Z","last_seen":"2026-05-02T21:27:32.721629Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/static/js/vendors.min.js?v=3.1","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddfae61c650eb994b11af692a76d1bbf","sha1":"44b62b3240787df777d9c2b253759b03ceac01a1","sha256":"acc330d1990097050e0cc321bdf2c20477909560521ad58364c37a489ac54990","sha512":"ac3a0a3ffef51313b869c114f1956324b4745882053425cdfdb3a5f16ede12f6e425923be27e4f5f80ea967ee1b67b1f7b314abac935466ab3edbc4d7ba2f6bd","ssdeep":"3072:vdkWgoBhcZRQgmW42q2DhhQDG4hF0s+F5Q5Orb+BHCBHuruUOxIt:JBKZGV/2Dhhv4bjUUuvat","tlshash":"09244bd97291707347fb326e106f410ab2335956680ec864f53cd8e82db8e896277fad","size":224732,"data":"","first_seen":"2023-03-12T17:50:47Z","last_seen":"2026-05-02T21:27:32.606303Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7944f6aeefe717067dd21c782c058ed5","sha1":"391791418dd169f2e077d329a61012c1a4c3cef7","sha256":"18bb2c6baaec442daf55f3f9088dc51eb9a9110529d38803de37fb76bf321f1d","sha512":"8d35f92bd72427b8abd8c4c7c3e79bd9950102f0cc79cdcd068c0d67927f0ef1f659b592a511346ef8b12b506724cef5675e9db37f24e0537f706163aef83f1e","ssdeep":"","tlshash":"46410ca9ffbc21b900fe6417aa9f2ecc253a10a21480cc1accb9d98945f1d261727dd5","size":2137,"data":"","first_seen":"2026-05-02T21:27:32.722715Z","last_seen":"2026-05-02T21:27:32.722715Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"annualunion.com/c_DO9L6.b/2S5GlZStWQQw9/NmzPAGwYOwDTQV1OMUyI0-3bMtD/AD4lNpDqU/3l","fqdn":"annualunion.com","domain":"annualunion.com","tld":"com"},"ip":{"addr":"88.85.68.219","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"245a2a609a9f0612a6068c338421ebd9","sha1":"aa1ae5a581827a793fc0a4ed0e55a034578ba4d8","sha256":"948007ec68d73f51929967f5deab7413e47d9685aac257618b7645cc39ede4bd","sha512":"f4bfebe76326350748dee6d0b1712cf172cbdad42019e2b7e361e4da66912de81412bc5836453854f2962c1498608831cf6c340a07e5111c590fc0efe14ae560","ssdeep":"768:ZlLiZg7J09MxiMZFvLnHvECJYgSboEBkleZ29oOcLlOWhbpp463j+OiG82IAO7jt:Zleg7JpoIvECJZSboEBkleZ2ZcLlTppG","tlshash":"2af2c6c871c3642642eb507d753b7208b2361465642df028bc79c8e4bca9e9f8577bbe","size":37561,"data":"","first_seen":"2026-05-02T21:27:32.690082Z","last_seen":"2026-05-02T21:27:32.690082Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"565000000c000000003c0000000c00000000cc33030000f0c0000c0c0c0000003c0000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-07-24T15:00:56.699715Z","times_seen":98956,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"866750f2c4872bd8b78d5e03b352fc88","sha1":"da9355d4d6bf48358c8a82fb35a50d890b23e071","sha256":"36e1a202b5e4a7132de57e8286534823c41191b5036839d58f4ae4072a43db66","sha512":"2f4a923abe6d2f00e1b6eaea9acd4919c3c6276d92a95aa390343c0cfd2a46e0136048b49ad6dbdc62f93eff20fad64dddd856907b1a6ed0a9cef31dcd1e1265","ssdeep":"","tlshash":"59f02e56595f2bfe736b707e3dbe4d19b3972c2d9850c0016e41a42c6e72dc587053c4","size":477,"data":"","first_seen":"2026-05-02T21:27:32.723727Z","last_seen":"2026-05-02T21:27:32.723727Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/static/js/theme.min.js?v=3.2","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a993ef13fe16d5b06be43df7370fd08","sha1":"2b0e79cc58692181337c32dbc905d6060582afe8","sha256":"13fd3efe418b94f8888bd095f69af0b5c1343ed7cd49480d343a6e25fde534dd","sha512":"2c88f3913f80e92a995585e1f9b3e525f137a1dc61b2c738d1c49ce5ec0b6985b168816c70c0eac0a47f68f8b4fa1f2e3f35c780ec1c0dc353c263b5db786572","ssdeep":"768:6EGpbHUrjw4i1xI4hnFxqpz7p8Vl1FHDRQ5RoQRj:7obHU/wDhnFUpz7p8VdRQ5RoQRj","tlshash":"dc136698fbac281395b331679c5f54cc623dd4739c004dbbfce6a2519ce496c232aa79","size":43440,"data":"","first_seen":"2026-05-02T21:27:32.69831Z","last_seen":"2026-05-02T21:27:32.69831Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.camvibe.xyz/contents/videos_screenshots/0/529/288x230/3.jpg","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /contents/videos_screenshots/0/529/288x230/3.jpg HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Sun, 26 Apr 2026 23:00:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69ee9919-4ed2\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WUKgOra0a%2BULbJWARw1dW8KSiPgZhklpxcFkfiyQ37qify9ouHpGaLqeWzamQ2jBHJfxjdtw9%2FhDT9o5U9bu4YMtzY1LfpP6JfU2LTvsMD9ORQyWzUB%2B%2FTgCJCiEEfGWOQ%3D%3D\"}]}\r\ncf-ray: 9f5a1b8839cb568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20178,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 288x230, components 3","md5":"c000f019cf1a08a5925f74d9cccfa883","sha1":"589cc2d0eba4bb1147a6c6bc9fe2e922fc8f9118","sha256":"98039692d2b5358ca349cc7e73ef9dd9ba0576c458848f01cff41856afa791b0","sha512":"b5a82d54124a8251491bfc5c1ae6ab65410aeae59f28e83e7dd9f80f0a67493f94a695b61358893cc8e9d6cf876947f253228131acac4bfbcfcc653f264a7192","ssdeep":"384:39nSUDwHiCrZ4V83vYbeQ833MMQmj9eJbczz18jPwf4nuPvKAWq:39nSYCrZUcvYbe53MhmheJ2R8DIWq","tlshash":"2f92e169e04bb31dcd0a6b3053a6c965b0cddb858ebd84d5269932d7f4058036b6eb0f","first_seen":"2026-05-02T21:27:32.578912Z","last_seen":"2026-05-02T21:27:32.578912Z","times_seen":1,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/player/skin/youtube.css","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /player/skin/youtube.css HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 11:44:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69d39c94-81f0\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K1WMLHYxaLhI3i96SZqG6K9BonRI4bYOFYRLyOMp2CvToFQe9nHQ64TQapZFlgBH1gFHp4yesynADg7%2Bc7BWhinxF74RkOxxU5tNuhIqZbMuf62gwbOnICGQV4kHgCxiEQ%3D%3D\"}]}\r\ncf-ray: 9f5a1b8adc58568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33264,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"979e074e99ddd33127a5dbd7c7932105","sha1":"f875ec4e33a753f085ebfe40cb41fc2374f938fd","sha256":"09844c0a465e15f5a5e1b5f188ba8018d0282a40458e3dca0a90e3c00c8fbaad","sha512":"d33b9d71dfa144217fc7e8ae83ba1a16fead9bc316310d3ce66c4d2f324990559773b5388561331837745d97bad3d2a098996e5b7b60b7f71062caf96b3a3215","ssdeep":"768:maYCcyZgOGTJHYaZ46qbPbyp0KhisMIAuisNK2sjClDSokEx6Tqk6XDqNjnJyrSm:qYaZ46qbPGisIIWNjioG","tlshash":"a6e2de18c1e7814432f955daf7f88f1e2e2c9352b91216def517793c429a2342ab36bc","first_seen":"2024-12-14T01:51:08.783321Z","last_seen":"2026-07-24T03:40:28.669631Z","times_seen":607,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.extrovertedlecture.com/ecc874/532a8918a8ec.js","fqdn":"www.extrovertedlecture.com","domain":"extrovertedlecture.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:02.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.extrovertedlecture.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:03:40 GMT","end":"Thu, 30 Jul 2026 07:03:39 GMT"},"fingerprint":{"sha1":"B4:FD:45:1D:7F:BE:06:F7:16:AA:9C:F8:E3:DC:02:00:81:D6:8E:5E","sha256":"8F:6A:BB:53:90:A3:45:64:2B:6C:E8:2C:B5:CB:95:84:DD:2E:21:D1:E1:A2:0D:24:D2:89:91:78:2E:A7:D2:8B"}}},"request":{"raw":"GET /ecc874/532a8918a8ec.js HTTP/1.1\r\nHost: www.extrovertedlecture.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: text/plain\r\nOrigin: https://www.camvibe.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Content-Type\r\ncache-control: max-age=172800\r\ncontent-encoding: gzip\r\nexpires: Mon, 04 May 2026 21:27:02 GMT\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":103679,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"0f49cea205f3f84cb5fe9a94fbf63380","sha1":"80ff93b582b3e96b2c88f476f5939022c390c30e","sha256":"4f0ba2ca5a43d36202e03ae318b88ce734e8fc9576f86b3ac8b15406386898ac","sha512":"8e2c628d40b7d8b1dcbb04a64470a7c956374a8495c92027e148bf085612fea510a6aa77182e7a339b4fef495c02d4a76d7014ce5a2c986bf439a6fc10f1a63c","ssdeep":"1536:rM+iZ3YOYuyx6PUQwRxcs8P3nhkQ8vL7T7Q6eGozzwVEnHzHRbPvu:OijxEQq3P5Enne9zkWHLQ","tlshash":"47a33361350b64fd2ad0c1e7eb6b20886c295810e469cca1ecd1d7c7d6eb8e3429b5f7","first_seen":"2026-05-01T11:00:55.802688Z","last_seen":"2026-05-04T04:57:04.167393Z","times_seen":33,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":128,"dns":53,"connect":19,"send":0,"wait":45,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"annualunion.com/YU2Vx.pWZ_WY5Z0aZbG-Fd0eYfTg9_yicjmkllk-PnTodpmqM_zsYtxuNvT-VxhyMzTAc_zCZDGEFFh-ZHmIRJhKM_TMYN5OOPD-hRmSYTTUc_zWMXzYUZx-Yb2cEdxe","fqdn":"annualunion.com","domain":"annualunion.com","tld":"com"},"ip":{"addr":"88.85.68.219","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:02.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"annualunion.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 14:08:28 GMT","end":"Sun, 28 Jun 2026 14:08:27 GMT"},"fingerprint":{"sha1":"82:F4:38:60:70:4D:58:23:BE:B6:93:7E:DD:B8:FB:67:19:DF:99:48","sha256":"BB:E5:B0:54:FC:B5:4A:35:1A:CE:65:25:32:6F:32:A3:AC:67:09:25:0D:C0:C7:9E:BC:E2:93:27:23:C7:A2:7A"}}},"request":{"raw":"POST /YU2Vx.pWZ_WY5Z0aZbG-Fd0eYfTg9_yicjmkllk-PnTodpmqM_zsYtxuNvT-VxhyMzTAc_zCZDGEFFh-ZHmIRJhKM_TMYN5OOPD-hRmSYTTUc_zWMXzYUZx-Yb2cEdxe HTTP/1.1\r\nHost: annualunion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 169\r\nOrigin: https://www.camvibe.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":169,"data":"ref=https%3A%2F%2Fwww.camvibe.xyz%2Fvideo%2F616%2Felibee-12%2F%3Fpop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D\u0026prevRef="}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 21:27:02 GMT\r\ncontent-length: 0\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64\r\nexpires: Mon, 26 Jul 2011 05:00:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/player/stats.php?embed=0\u0026video_id=616\u0026event=PlayerLoad,\u0026rnd=1777757222184","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:02.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /player/stats.php?embed=0\u0026video_id=616\u0026event=PlayerLoad,\u0026rnd=1777757222184 HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0; kt_tcookie=1; _pk_ref.1.ebd3=%5B%22881133%22%2C%22%22%2C1777757222%2C%22%22%5D; _pk_id.1.ebd3=3433e747ccb7df01.1777757222.; _pk_ses.1.ebd3=1; kt_is_visited=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:02 GMT\r\ncontent-type: image/gif\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/8.1.31\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cYFgFLHYIgZ3SwE3FZAO0xQOo%2B777UphjRpzPB5Wu%2BMUr9qg55oVk%2F6Xqs4S6jbSLz4jPvIoJ5lKJiRA7E0tnOjZCoWM%2BZFXSm4m%2Bo4069JgbauZqoxZhPKQ5U65ZNi4kg%3D%3D\"}]}\r\ncf-ray: 9f5a1b8ee99a568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.1.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":37,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 6","md5":"ccd486e3f61147d7a9aa49e89c7b63c9","sha1":"f0943c1524f14aeee2b0b235ac5a0fb8660f653e","sha256":"5af0fa521773fe87033b9869748bb3b87f9c6ae6fa49c18d335e52c4698c93e2","sha512":"9ca05f01c196f8e450925ad65d0ed004a2ebc206849df29e376c47a52717e1d4815ce469dac9e5a349a1370f7401eef85bb8916abf850c85c4624fea8953c8fe","ssdeep":"","tlshash":"b1800022cab00002e28ce03a080b23002b208220022c030e8028a0ca2cae0220c00020","first_seen":"2025-12-02T14:35:44.106642Z","last_seen":"2026-07-21T09:43:10.912217Z","times_seen":37,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/favicon.ico","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:02.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0; kt_tcookie=1; _pk_ref.1.ebd3=%5B%22881133%22%2C%22%22%2C1777757222%2C%22%22%5D; _pk_id.1.ebd3=3433e747ccb7df01.1777757222.; _pk_ses.1.ebd3=1; kt_is_visited=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:02 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Fri, 10 Apr 2026 17:52:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QEGaeFWjn4BoxS9nwjCF9aH9X7CmRCEDjRQ0s2qV1Ju5CPfMM%2BE3pm%2BWNcIbE%2F7Y8tWC9Oyik1OlrSOTTnYFCpNEneFMN2fzNgSRmlHwtaco44iOvDe52Jx2c9R%2Bo1brFA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69d938ce-9cee\"\r\ncontent-encoding: br\r\ncf-ray: 9f5a1b904b4c568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40174,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced","md5":"8a1a86694131adf423bcdaf0da75bf12","sha1":"72be81e653cb412d7e05ae3419d8ff1ecc38cf0c","sha256":"7f6996ff28ab9c02c3afd3be47822c6765feae817faad33b2b935da461d39958","sha512":"4d9e3aa3e776a3c1476da28721cb05cc4a1d11ae8991f89888d9eb4a0fa45ed5ebb776c45b101f8eb18b898d9d9b15fa2ff7076ea99349f7e9f1b67d9edf78ca","ssdeep":"768:r66q7vzIJ1DYimNH4ec8v+OVNhgMr7ubXa3EddPrum+Gh4e:r66qvD0V8v+oNhL/uG0dVr9+G2e","tlshash":"6203f20a6b69580345179b3407c70d56fba2e36538a04951becf8e36b7603c89d5cef9","first_seen":"2026-05-02T21:27:32.592737Z","last_seen":"2026-05-02T21:27:32.592737Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/contents/models/46/s1_ps47.jpg","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /contents/models/46/s1_ps47.jpg HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Sat, 25 Apr 2026 18:33:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69ed0908-2b88\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8V8QsGQjgx1ChedxPAH9tTdEf%2Bf6yJoEorqoL3t6nV2H24OokLtDMQUW%2Fv0PhhJWcZliyou2RWmk0%2FWdtiiw5kUZV4llMAOQw3dh%2BlUM0roRmd7JoxUzEsIvYXGgOnaBBA%3D%3D\"}]}\r\ncf-ray: 9f5a1b88199c568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11144,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 288x380, components 3","md5":"62135dc4730418f9ec338c87ec5f5a96","sha1":"b4c4d270e2902f1e4a4522bf8393819a93228cb6","sha256":"40caa4c2ede88a9c6bebfa179df9a29cc7355f15838bcba5b0d6c18181f1f0a0","sha512":"8cb41b4f10cb7971914943007d93b55dba4707f1afb1a4c00eb02ae64173ccf951fec394b4abcc7d9d35c4ce12dda4cfd287bcc90fb227efe1fb39e2b72a11d6","ssdeep":"192:LLhJBEfOmm14boDYyUBCfO2LpeOr3ZJ/PFjIWxd27Pv055Kik/Isgz2z81B:LLhnMO4baY9oy8n9jIW2kLq/5gSz8L","tlshash":"5932cf1b322099e2da2fddfe2566d7e23b4fa28f6a96e8dd484143fc563248b0d41044","first_seen":"2026-05-02T21:27:32.596752Z","last_seen":"2026-05-02T21:27:32.596752Z","times_seen":1,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/contents/videos_screenshots/0/310/288x230/1.jpg","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /contents/videos_screenshots/0/310/288x230/1.jpg HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Apr 2026 06:21:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69e868d3-6495\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iLFjqlGjcIE3OsssW2osoabNw4ajbRVB1qYpkB7om39hSnKpMuFmdDrKcemU38DFJekd5dcrWsnUGD8BUBeGCI%2BU1s4ASbenBmrHNMTQleESdV1D8%2FC5QgZ64ZXrat9Ypw%3D%3D\"}]}\r\ncf-ray: 9f5a1b8839c9568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25749,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 288x230, components 3","md5":"deee35a2ca79c6440bb8c75119436468","sha1":"216d83eae9971b4d28901f42438c8657b16f7fab","sha256":"a1e8851b72d92d73ab3f7166fa65a4e8c7eef6fe4be8380e15b9e13b2d79ff5b","sha512":"c0db3c06ea2d7301c1e93fde8750a56a98de554b988ff6fee8b765c26ce951826a1907087a30700a175b1b718e232afc2d057e7d0b159a3ad1e6b35910a2e9f0","ssdeep":"768:BgCVE8KurYyRBJESwe1T0h2HZt4R2+GHmYA:BgOE8AyPJ57U2HZmw+GHm9","tlshash":"e9c2f287d7fc3ed9ef10b068b29f5521e58f581cd771526b8ca0129848024efa49a8bf","first_seen":"2026-05-02T21:27:32.6015Z","last_seen":"2026-05-02T21:27:32.6015Z","times_seen":1,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/static/js/vendors.min.js?v=3.1","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /static/js/vendors.min.js?v=3.1 HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 13:31:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69d3b5b8-36ddc\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M%2BsBYnS2SmKrVIzidfqHHtBgudbgi9nijYzhkNDNrTuhzuXlsY%2Fi28880FTcMud2NSfv5fblMSwarfMnIRsQYd6c9yn83KKsrGMNSIogh0yjaV3AVnBib5OBuiYdnGSLJg%3D%3D\"}]}\r\ncf-ray: 9f5a1b8849da568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":224732,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32090)","md5":"ddfae61c650eb994b11af692a76d1bbf","sha1":"44b62b3240787df777d9c2b253759b03ceac01a1","sha256":"acc330d1990097050e0cc321bdf2c20477909560521ad58364c37a489ac54990","sha512":"ac3a0a3ffef51313b869c114f1956324b4745882053425cdfdb3a5f16ede12f6e425923be27e4f5f80ea967ee1b67b1f7b314abac935466ab3edbc4d7ba2f6bd","ssdeep":"3072:vdkWgoBhcZRQgmW42q2DhhQDG4hF0s+F5Q5Orb+BHCBHuruUOxIt:JBKZGV/2Dhhv4bjUUuvat","tlshash":"09244bd97291707347fb326e106f410ab2335956680ec864f53cd8e82db8e896277fad","first_seen":"2023-03-12T17:50:47Z","last_seen":"2026-05-02T21:27:32.606303Z","times_seen":6,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/static/fonts/dark/icomoon.ttf?y8cib1","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /static/fonts/dark/icomoon.ttf?y8cib1 HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/static/styles/all-dark.css?v=3.1\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 5812\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 13:31:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69d3b5b8-16b4\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Yl8mnVfq3WXub92bWxD2Iz62dJWEZFd82oRHhKbhKRphM26CAn1pWW3hjl5PzH8vv7563eTdIsgEPOi4lCWYapMpISkEFvGJB4jgXReUYnrXSwSp%2F0DXkofamMgw%2B7oHw%3D%3D\"}]}\r\ncf-ray: 9f5a1b8aac2f568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5812,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, icomoon    ","md5":"6f15fe5d0368aad369d03d9e50c7952a","sha1":"009037fc926d619ca51d5c3b3bded35f8ead4e18","sha256":"3f898e4697608fdaa1f756d3e4a489fc6f2833837bba138f7968587791f0e7f9","sha512":"bb531cc793a13955a37b79b2c38abfc8292ef50107e35f5eaed9a78a73aa5d14af424c671559f67ff6d7ed65cad12f84bd7276c05cbab57d4616d92c8034a2e6","ssdeep":"96:zTHJyFTBc2jQBcNnX/hgbZrJLI6ZCjYl0IzC0ufpLAbn+J6eSwaUZZt0C0mcDlP5:hyFTBc2cBcNX5itLI6w50uWb+J6Pur0N","tlshash":"01c1f811ab55c79fc83b67b54406a3008ef2f921a62bd79be2965c76880cdd80d7931f","first_seen":"2026-05-02T21:27:32.610453Z","last_seen":"2026-05-02T21:27:32.610453Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"annualunion.com/c_DO9L6.b/2S5GlZStWQQw9/NmzPAGwYOwDTQV1OMUyI0-3bMtD/AD4lNpDqU/3l","fqdn":"annualunion.com","domain":"annualunion.com","tld":"com"},"ip":{"addr":"88.85.68.219","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"annualunion.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 14:08:28 GMT","end":"Sun, 28 Jun 2026 14:08:27 GMT"},"fingerprint":{"sha1":"82:F4:38:60:70:4D:58:23:BE:B6:93:7E:DD:B8:FB:67:19:DF:99:48","sha256":"BB:E5:B0:54:FC:B5:4A:35:1A:CE:65:25:32:6F:32:A3:AC:67:09:25:0D:C0:C7:9E:BC:E2:93:27:23:C7:A2:7A"}}},"request":{"raw":"GET /c_DO9L6.b/2S5GlZStWQQw9/NmzPAGwYOwDTQV1OMUyI0-3bMtD/AD4lNpDqU/3l HTTP/1.1\r\nHost: annualunion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nexpires: Mon, 26 Jul 2011 05:00:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64\r\nlast-modified: Sat, 02 May 2026 21:27:01 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-origin: *\r\nset-cookie: uniqCookie=259c0e58b2d625c8f5d70f7c00ced12f; max-age=1780349221; path=/\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37561,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (23430)","md5":"3ace81d71702832f62beb5d15f46a0c7","sha1":"f38db418fd6c081f322cf8ac22738a3edd7f643d","sha256":"466fba32f119b1f68fd3e97718d2f62052eee5516d6de1550de4259bc8afbedf","sha512":"79615bbff99e4b8cb98ebb18e1970daf41951ca4bd3a23dcf8a67c1c39c180cede9222d68931667d7d75424e171dda216edf212e96b6bf7a034ee3b1a28cacee","ssdeep":"768:ZlLiZg7J09MxiMZFvLnHvECJYgSboEBkleZ29oOcLlOWhbpp463j+OiG82IAigv5:Zleg7JpoIvECJZSboEBkleZ2ZcLlTppz","tlshash":"4ff2c6c871c3642642eb507d713b7218b23a1465642de028bc79c8e4bcb9e9f8577bbd","first_seen":"2026-05-02T21:27:32.617064Z","last_seen":"2026-05-02T21:27:32.617064Z","times_seen":1,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":85,"dns":18,"connect":20,"send":0,"wait":66,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.matomo.cloud/camvibexyz.matomo.cloud/matomo.js","fqdn":"cdn.matomo.cloud","domain":"matomo.cloud","tld":"cloud"},"ip":{"addr":"65.9.46.62","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.matomo.cloud","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7B:9E:B2:8F:2C:21:F3:D8:CC:C3:78:9E:88:F2:FC:72:0C:FB:68:3A","sha256":"D7:E0:95:8B:B8:35:19:48:30:B8:87:D2:5F:82:0D:1D:DF:65:27:5C:9A:83:C6:2B:1B:9B:3F:9C:32:70:25:3C"}}},"request":{"raw":"GET /camvibexyz.matomo.cloud/matomo.js HTTP/1.1\r\nHost: cdn.matomo.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 02 May 2026 21:27:02 GMT\r\nlast-modified: Tue, 21 Apr 2026 07:59:25 GMT\r\ncache-control: max-age=691200\r\nx-amz-version-id: mjc1MIxvCw4IlBJzv8b_iQOe7vYaBLXb\r\ncontent-encoding: br\r\netag: W/\"cf8b381329cc0aee32cb1b8b039f45a4\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 23418ad596f80af7fb5b65f05d325b34.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: nG69L4erzq6aIhhNbOp3fJ9ZexGn8TL9nLu4Y5LkXUf_c-lU6JhgYg==\r\nstrict-transport-security: max-age=31536000\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":139327,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2923)","md5":"cf8b381329cc0aee32cb1b8b039f45a4","sha1":"4c3df5b37efad2433b0ce9797cf616b9054e73f8","sha256":"2aa5b34976102b9b3df357626c749e33cfe37a0e0031edfb40a3471c1d303a1c","sha512":"27024ab0f52f0897e4783d44c281bf863d459b91521402fff79f9e35a33de5705cb4d84e217a279cd68c1b63d472ce4ced4a9f9c70b01f5a974b99bdeca90bf0","ssdeep":"3072:AT+Z2fucXYy1PGJ9d1QkNw0CjBi4jZdV50tqv:ASUucfBGrd1HwBi4jZdV50tqv","tlshash":"e5d3088a72c2753a86db60b5543f110b733a9daa2448c0b8f625d4f63d78e0e553bf78","first_seen":"2026-02-05T13:16:52.117928Z","last_seen":"2026-05-18T14:30:39.242884Z","times_seen":658,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":49,"dns":14,"connect":12,"send":0,"wait":126,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/contents/videos_screenshots/0/123/288x230/1.jpg","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /contents/videos_screenshots/0/123/288x230/1.jpg HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Apr 2026 02:05:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69dda0d0-4e4f\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ooxCvBXpYS4Yru7WwEGafuK0VftpLGdJ9Q5ikKAvyHhNck%2FVwFc3NCNP%2B2UjyXMGJfG4rJSL8%2Bhq8f1mVubeq4gy7uecIQ1ikX11f1F30mTFDvUVBJERYuKlbvVwhWYGZw%3D%3D\"}]}\r\ncf-ray: 9f5a1b8829b6568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20047,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 288x230, components 3","md5":"f26a6a33c6c45eccd1d96072ed076d1a","sha1":"6d69b53e7400a0e71652a33c35ab226892c4da2a","sha256":"07096f4f2cd3fc8eb74e011e6ebe82cd30f75afaa44b6a8f1c1295644fd174dd","sha512":"e2dfc2f84395b8c2ce06c7d909a378ffa2a51634ebb7d15a729b436a703d3e840820ab3a82e6ebd6bc2cea6d0ae2c11f7e8485ef9c6368a3f343ec67bbee4e42","ssdeep":"384:VFoTV3blbQ9mYc02BuQG4HO0jqc5oK7jw7IXpFrgwWNx3XI//TO:VSVxqmYc02/G4HO45oK7cQroYXy","tlshash":"a392f11a2d8710a8f6ff282a77064a5ec8c90d18fc9545a2715f00cd0868fe6ffaddb4","first_seen":"2026-05-02T21:27:32.62417Z","last_seen":"2026-05-02T21:27:32.62417Z","times_seen":1,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/contents/videos_screenshots/0/603/288x230/1.jpg","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /contents/videos_screenshots/0/603/288x230/1.jpg HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Apr 2026 21:56:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69efdb7e-61c8\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xJlKwRYPYZzaYqmTZUa41U6qBvHslbtN9CvVA6q5x5IGU8kikr%2FqYlXe2DLihl5EWrTdir7f5n1kzKWYP0MOUm8UjCwkIKC%2FUtIoaGKqSUqfdlN8TA67GJsJm%2BlIXoTAGQ%3D%3D\"}]}\r\ncf-ray: 9f5a1b8839d3568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25032,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 288x230, components 3","md5":"8c16d369b8e39deac7613151f4537c2c","sha1":"7ed0b8e80b7438f051bc7d9b1d6043d2152cdb1b","sha256":"51030ae81da63e07cd0f8af25f75ff986030bb0ce8b6b5dd3696d7df941d9706","sha512":"519249b41a6a172167d00f6fb6dcb2698fdf8fa98efbfb80feb9ec7deadca6495e503cc2fc560b07f4ae6a435b5b7cc65c032af6ee1a66073d1d5e89382aeab1","ssdeep":"768:en+x+zLQzQu5VawqkmudAtCoaJ1aq1goGtMhR:en+x+zLQUurIkn6Coa+q6oMM7","tlshash":"a0b2e1955e1f1f39be790f9f0de23d9e6cbdc340b1aaa388305c48dd49905dae2b6409","first_seen":"2026-05-02T21:27:32.62949Z","last_seen":"2026-05-02T21:27:32.62949Z","times_seen":1,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/cdn-cgi/rum?","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:03.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 663\r\nOrigin: https://www.camvibe.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0; kt_tcookie=1; _pk_ref.1.ebd3=%5B%22881133%22%2C%22%22%2C1777757222%2C%22%22%5D; _pk_id.1.ebd3=3433e747ccb7df01.1777757222.; _pk_ses.1.ebd3=1; kt_is_visited=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":663,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":1189,\"startTime\":1777757220570,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2026.2.0\",\"timings\":2},\"pageloadId\":\"595aa112-f506-4797-bcb6-f4d8e480feae\",\"location\":\"https://www.camvibe.xyz/video/616/elibee-12/\",\"nt\":\"navigate\",\"timingsV2\":{\"nextHopProtocol\":\"h2\",\"domainLookupStart\":39,\"domainLookupEnd\":77,\"connectStart\":77,\"connectEnd\":95,\"requestStart\":95,\"responseStart\":340,\"responseEnd\":341,\"domInteractive\":1187,\"domComplete\":2446,\"loadEventStart\":2447,\"loadEventEnd\":2478,\"transferSize\":33580,\"decodedBodySize\":217394},\"siteToken\":\"c59f6c2d32ae43258787fedb9e2ee486\",\"st\":2}"}},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 02 May 2026 21:27:03 GMT\r\ncontent-type: text/plain\r\naccess-control-allow-origin: https://www.camvibe.xyz\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dPocH4w30QhMOS5B3cAMUD5HNhL2ZKABmdL9BoaAaiX7hZYIhLKJ%2FMbvDp4elJTZD0%2F40%2BJJyJPesmqHaf8s8OcXCdK73dd8hGDUKtFzAnlQoQ%2FzHP2%2FIwb0CUC0VBBTwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9f5a1b944fb1568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/contents/videos_screenshots/0/229/288x230/3.jpg","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /contents/videos_screenshots/0/229/288x230/3.jpg HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Sun, 19 Apr 2026 10:57:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69e4b502-33d6\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xiczBfaRQsZ3FYoBQyWhFSzVNGVpIiMaM%2FfF7EZGEkKBY10On3YfC9Fzt8UcU7RzRmNCDgrlNmhI5PuTHc%2BSUvSjkrIYkJ1ONXx%2BeNfwGFcMHsr%2B5CJPX6%2FwJjtv9BqUuw%3D%3D\"}]}\r\ncf-ray: 9f5a1b8829a2568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13270,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 288x230, components 3","md5":"2368dbb377508d335340ff35a767f82e","sha1":"5113b2b5f1ae6c0d0e26a5e63f2be741e4562ff7","sha256":"72c5ac1c1835c0cadc076de5aa67a9509a4bfa883b92ded224b420217f293f1a","sha512":"ed413edff955f02856d9ab3b206e8f881bf94761d09893fe126c3b1cf351a3a8ae559baa75645f706158437da9e10e5824155b2e1abefaad8a6777d0be43b510","ssdeep":"192:fFc9KpsQ/pibn+JEOWm47VAOotyqjFbSWpczSboUyNC2FKuQpaMcoEhfg:fFc9y/pidmWC22b3yM2guQprco2fg","tlshash":"e652afd9c6996174ffd3cd7aa7d726178b0faa0083a1bf0911ab34db94a1fceda00114","first_seen":"2026-05-02T21:27:32.636903Z","last_seen":"2026-05-02T21:27:32.636903Z","times_seen":1,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/contents/videos_screenshots/0/424/288x230/1.jpg","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /contents/videos_screenshots/0/424/288x230/1.jpg HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Fri, 24 Apr 2026 07:08:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69eb16ff-5fac\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6ajxnaax%2Bl1AhPixnn3vMpkBx8JAi9a%2F2G%2BbmbCB7kPbGPJBlcw5VUPJfN9WLWrH%2F1DBzANCnYDqJYhdTQwsjP6HgjOwKHdrQnc8MaAnp880I8%2BUqbRZz%2FV4fT7PH%2F65oA%3D%3D\"}]}\r\ncf-ray: 9f5a1b8839d5568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24492,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 288x230, components 3","md5":"d1500e5aa77a727ef10eeb8bd742ad73","sha1":"5a73ab1205b23c234f614721f77c05277352351c","sha256":"008b97f2b41a7633e0c33f51748ef629be5cfa0e2a495ef391989ce51a33d21b","sha512":"27c4f274e239a18fc42ebb1d7312a86756fa69e13ffa6655746b15c9d63159611d625acdd97ebf9f651ca8ba82fa892037af7508a87b24e5327919271ed33b6d","ssdeep":"384:thnKmz5OpMHBtBB6vZl4k1GlVV9UAbQ0VtPT29AuP7AUC5L+8JnjYy9kXe:XnFO6htBBCuAIBbQotr29rP7AJ5L+8VF","tlshash":"04b2f131101772acfe078ae70d8c1b5ddf7ab10a6f55aae603d20ce7686b7b2f520005","first_seen":"2026-05-02T21:27:32.644113Z","last_seen":"2026-05-02T21:27:32.644113Z","times_seen":1,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/player/stats.php?embed=0\u0026video_id=616\u0026event=VideoError,\u0026rnd=1777757222809","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:02.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /player/stats.php?embed=0\u0026video_id=616\u0026event=VideoError,\u0026rnd=1777757222809 HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0; kt_tcookie=1; _pk_ref.1.ebd3=%5B%22881133%22%2C%22%22%2C1777757222%2C%22%22%5D; _pk_id.1.ebd3=3433e747ccb7df01.1777757222.; _pk_ses.1.ebd3=1; kt_is_visited=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:02 GMT\r\ncontent-type: image/gif\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/8.1.31\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6AyX979ARVPAFjY1buJucOd4Mi946gRpye%2Bwp4N6h56sD5rfXo4mhgKrw%2FpixvJoU%2BTHbkcOnztoV1R1CYrjmrekoyHpbDVUmqqHpwMX1e3r2Bv6qC4q9g%2B%2Bwv4fGDt3pQ%3D%3D\"}]}\r\ncf-ray: 9f5a1b932e7e568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.1.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 6","md5":"ccd486e3f61147d7a9aa49e89c7b63c9","sha1":"f0943c1524f14aeee2b0b235ac5a0fb8660f653e","sha256":"5af0fa521773fe87033b9869748bb3b87f9c6ae6fa49c18d335e52c4698c93e2","sha512":"9ca05f01c196f8e450925ad65d0ed004a2ebc206849df29e376c47a52717e1d4815ce469dac9e5a349a1370f7401eef85bb8916abf850c85c4624fea8953c8fe","ssdeep":"","tlshash":"b1800022cab00002e28ce03a080b23002b208220022c030e8028a0ca2cae0220c00020","first_seen":"2025-12-02T14:35:44.106642Z","last_seen":"2026-07-21T09:43:10.912217Z","times_seen":37,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/static/images/camLogo.png","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /static/images/camLogo.png HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Fri, 10 Apr 2026 18:01:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69d93b14-3f750\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UE4B7xHuu4bQQHNBj0fulrVeofTBGP6HYQxnUIcVOiTTurDRJbyLfrl1VZd2OZfc2LbJ22%2FwVHoD%2F7oGAVn9ZlNebKKfsdFRDZ2JBuaf1CfuYKKneDJMo3%2F1beNj4iC6DQ%3D%3D\"}]}\r\ncf-ray: 9f5a1b881999568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":259920,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1061 x 298, 8-bit/color RGBA, non-interlaced","md5":"fa55c4dd636a58923ec915d4eb2b8e2f","sha1":"ced2e41a5011319d0223b4252c71ca6ecc0c509e","sha256":"286a8bcfa74fb5f0b06141c8a157728d53bc166f7f7bad21d01bc5a2001b50a1","sha512":"e91468b47c1e966efec078f37159e4145d48a21de633ce1992158cb5a630f19c56f6f962fd79c516d3e6586c015276ffb8531ec545c3473a4252b95bea809851","ssdeep":"6144:6Ju/Z0TeuL0stk9MAKB/ZXELC5ZsUKTFQXqB6y9BMAbToyF+oP:LzC0sCK5ZXELmsUKT2qBE6j4I","tlshash":"fb442309e5327aafe1e4f1d35610d5924f708fd4a5c2b50e256cd7c9a287ddf8ca4a40","first_seen":"2026-05-02T21:27:32.648971Z","last_seen":"2026-05-02T21:27:32.648971Z","times_seen":1,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/contents/videos_screenshots/0/488/288x230/3.jpg","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /contents/videos_screenshots/0/488/288x230/3.jpg HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Sun, 26 Apr 2026 07:00:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69edb7f3-6c92\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ImBPMarB6ToKPt1co671qW4U6a9VXS6MX3%2FQJ%2FcT7AsrC%2Fp7f03JtXj6n1SjwOD4cDhYyQ%2BhvB1X4PD65oZKShJTsm6GR%2F78VGrwEJspvHFXQkGusgVnkxZn3DZJP0Em%2Fw%3D%3D\"}]}\r\ncf-ray: 9f5a1b8829a0568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27794,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 288x230, components 3","md5":"b79aa4217e0bfb8cf81e03035c0d218f","sha1":"76604af79063059f3d9bd44014544d75b4c825a6","sha256":"db933cf46a63deeeec72cf2672db29059f87ba7cb6659e806b330bd00935f0ce","sha512":"e0e6028431efcd4e114d20966b84292142dbb3ecde72318f1096d4cbcdca8dc0ec55366c74356075f30a56e897087cff03dc32c98762ab5e7aecb17c4f0c4a34","ssdeep":"384:UJPKXHAFA0FKAMeuwj5AHGREES/ItufCWy8uiTOT6PSzS1Kv/iFoCl3fGIK5:UjO07diE1S/Nfo8usOTsKGO/ihU","tlshash":"35c2d0ae1143dc5889d5333df4f21a676737da2b7864aec806441bcecce2a22d5309d2","first_seen":"2026-05-02T21:27:32.653597Z","last_seen":"2026-05-02T21:27:32.653597Z","times_seen":1,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/contents/videos_screenshots/0/455/288x230/1.jpg","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /contents/videos_screenshots/0/455/288x230/1.jpg HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Fri, 24 Apr 2026 11:01:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69eb4d77-7037\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u9I9qpSa1RMAbVpPPckZfrk41KlafRYOk36INLUmDzHr0eCK217etVQtHXoaBeyqoAcQ9loIsQ0ZYhA%2BxGoThcvpr71%2FHYxGKck5%2FYSdslV039eKcoCGySt3VDSvX0qoPA%3D%3D\"}]}\r\ncf-ray: 9f5a1b8829b4568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28727,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 288x230, components 3","md5":"f213d6006674c9aae73e9dacf263284c","sha1":"667660a749797eec60626d28408ff77efd110f84","sha256":"53953fc2c6a4f2f74549be8abfac29013fc19a89b045025abdecdd0064da9ee6","sha512":"ad79596207c5474ca428ef362620796ca6b5f30e2cff8126d159f2111046eeb317e474a00da2846c14ecd625b47946fa05623334dcbe55c41ecda9216f732f3b","ssdeep":"768:tP8DoUD+d270pcG708UA65hQ6F724zXYnuVVpltCg:tG+o0VpMh7FHkkVntH","tlshash":"c6d2f15a5a2aef14cb64c174f049074fd8a5f2dbd587a046d8487eef006a9e4f39b322","first_seen":"2026-05-02T21:27:32.657492Z","last_seen":"2026-05-02T21:27:32.657492Z","times_seen":1,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/contents/videos_screenshots/0/435/288x230/3.jpg","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /contents/videos_screenshots/0/435/288x230/3.jpg HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Fri, 24 Apr 2026 05:49:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69eb0467-350f\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UQwH7yrey3Vv1qjl8wDg2PdCcvvu60NobjXl0yBtzpEB9%2F0m7SkOwu7YrzyZ3Q1fz0ABI%2Fs3yyRCBZNDiPlsA2gTiq3ua%2By40t7aHtw0zeFHX6Xx8pJQ3K0UXpaw%2FdNa7Q%3D%3D\"}]}\r\ncf-ray: 9f5a1b8839d1568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13583,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 0x0, segment length 16, baseline, precision 8, 288x230, components 3","md5":"327b3e2df2b5907d9cb2f47e84ae7e75","sha1":"8addd653ed7f9368ca75205ac2d8bbad85fa4249","sha256":"85edcc420b70f68b7a7d38a00bb3dcc783045ff2f0c657da6fc19cca6f630c3a","sha512":"ece4e7f583e54d66f09c6eb003926ce85e682d5afa5ed916704f63cec5c097fed892ba8f0e6e8e16fbe3ed420c43fa319d1f841aa2c062d602276f2c92232efd","ssdeep":"384:ytt/d/GJtyDhQEVhF2eBqVFVwvJ+6TbUGlHTp3US8NeHSj:yrFtfT08xTbzz2LeHe","tlshash":"6d52c0d4ae5d7435a2e6d512e14fe380ab5f3e97e831494232d974e4ca4723fab42d08","first_seen":"2026-05-02T21:27:32.660551Z","last_seen":"2026-05-02T21:27:32.660551Z","times_seen":1,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/contents/videos_screenshots/0/99/288x230/3.jpg","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /contents/videos_screenshots/0/99/288x230/3.jpg HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Apr 2026 07:41:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69dc9e3f-55d2\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d0pe0efF4zC5ghYnatWkrx6VtUHegcNjzVu7h0aJTbgUljOpQ7B780Fe7qGjoHU20Z1c2tzz2Fi5O57xzCi%2FeK8c5B01YOJnDxp8qZ8fi3pep5jVUBJyIbk2RBgLf%2FpjwA%3D%3D\"}]}\r\ncf-ray: 9f5a1b8829ba568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21970,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 288x230, components 3","md5":"21fe51070085a0c719c94e8361fc77df","sha1":"3772e37e7d0d202c7bf05d516b1d5c73a060cdfc","sha256":"b5836ac99c53f6f9cef52d2d5f83b5c9f4dd7ec9f303e7379dcb04d270693eff","sha512":"c87c25ce646db3ff6d3bcc6f3a49c183ca5114f38944565d357c717a7499745516ef5e24fff5085e122cbc146ec0d092d4ebd8eded9a230557ebc8309cc1116e","ssdeep":"384:httKRiT5r9cCGpl+8ecUYS8tS7RiC+IP73KBzam39krtFx:huEdrSpplNUlxHP761amefx","tlshash":"aba2d01346429f69ca2b8874db5757503b223c64461f2aebd400eed0fe168e279f27a8","first_seen":"2026-05-02T21:27:32.663276Z","last_seen":"2026-05-02T21:27:32.663276Z","times_seen":1,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/contents/videos_screenshots/0/198/288x230/1.jpg","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /contents/videos_screenshots/0/198/288x230/1.jpg HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Fri, 17 Apr 2026 14:51:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69e248dc-61fa\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cb%2B%2F2Pmy8yuVSChh2KsESl5ue5pYkYrpCrn2dj4QwnfMtgG6%2BmaVX9Ug%2Bij9NvOqkryGW3sZ%2BmZKbX%2FCNKqH8nwzqMqKQRKOcr98EoH8hs%2FbeYbmRAKtQnyI0Qma7%2BBOYA%3D%3D\"}]}\r\ncf-ray: 9f5a1b8839cc568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25082,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 288x230, components 3","md5":"463d6f7e6e4de2baf1534a78c69fd8d7","sha1":"24254caeb9991d66aaa0d71ea4198ff0bb723416","sha256":"7416c8c8c25e4416f183d697fe035d1c0032cf0ffa3ec9614aaeb7b1700b8aa2","sha512":"819ee4bdf550daeadb8cac5116286acee203d1d396a2f94fef8b4262431da1ae4c33bb031e5b80e36873f958891990a59caf3dd44dda09b795d2a2ea376d8ed2","ssdeep":"384:5DRP1IudnR+0a/ExmM9jBMEs6Qy7C/8XpKy4sje1E9Ci1WKNTn47Ncdb8RE:5DR1nQaU4jjs6jY8Xv+i9CMBTn+Q8K","tlshash":"c9b2e186eba170284f443632eb69935c59f56d09242e2dc0190b61dd8fa8edfb1073ee","first_seen":"2026-05-02T21:27:32.665718Z","last_seen":"2026-05-02T21:27:32.665718Z","times_seen":1,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/contents/videos_screenshots/0/587/288x230/1.jpg","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /contents/videos_screenshots/0/587/288x230/1.jpg HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Apr 2026 16:51:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69ef93fb-571f\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=silaMgKL3ndHtmj1ijdj8GWUsJ7d9g5dYsKJZd3JdZ0rfuoe%2BEG2N9ViigHPuQT3wa%2FZRNYteC97H4ZziuvaeF1Fjn3PbiHtUTCOcyoZHqkpbIDO5QLcOUFaWgXkpZkbzQ%3D%3D\"}]}\r\ncf-ray: 9f5a1b8839cf568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22303,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 288x230, components 3","md5":"68f3f584e97bff49a6f099994f05a1c9","sha1":"9d186c6d0264e02ec5deffd1b6b3086109a0d9c6","sha256":"b9031f55bcd382ad6d2bbfed8c371481b78a041a3133279c9d19afa7ee375202","sha512":"905d42b4333f35ed09180fae8fbeda9f1e84b168e9bc0c4ebe704020d6c47b807b0e45445370bc4613cb2187f2d9521943466b005796f741496906e3cae989fc","ssdeep":"384:GbFZIYsLFx3exLN9pCEef5FaZyp01b2Ru+Bdy6M1mK2P6nzz7C8W2:2YnwLNbCEeR+51b+NyZmK2P6nLL","tlshash":"82a2e17d284b1186fbd81c296cf15bff6c38d0da92691d8b0362e5ec19b4f28e2b4314","first_seen":"2026-05-02T21:27:32.678856Z","last_seen":"2026-05-02T21:27:32.678856Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"camvibexyz.matomo.cloud/matomo.php?action_name=Elibee%20Fingers%20Her%20Tight%20Wet%20Pussy%20Hard%20-%20Explicit%20Solo%20Masturbation%20Close%20Up%20Orgasm%20-%20Watch%20Free%20HD%20Porn\u0026idsite=1\u0026rec=1\u0026r=847610\u0026h=21\u0026m=27\u0026s=2\u0026url=https%3A%2F%2Fwww.camvibe.xyz%2Fvideo%2F616%2Felibee-12%2F%3Fpop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D\u0026_id=3433e747ccb7df01\u0026_idn=1\u0026send_image=0\u0026_rcn=881133\u0026_refts=1777757222\u0026pv_id=GY9V9o\u0026fa_pv=1\u0026fa_fp[0][fa_vid]=hdh0OY\u0026fa_fp[0][fa_id]=search_form\u0026fa_fp[0][fa_fv]=1\u0026pf_net=60\u0026pf_srv=245\u0026pf_tfr=1\u0026pf_dm1=732\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024","fqdn":"camvibexyz.matomo.cloud","domain":"matomo.cloud","tld":"cloud"},"ip":{"addr":"18.157.122.248","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:02.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.matomo.cloud","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 22 Mar 2026 00:00:00 GMT","end":"Mon, 05 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8B:64:A1:63:66:1D:FD:B1:E6:3E:8B:EC:86:33:74:14:B8:30:E7:01","sha256":"07:61:C1:17:4B:63:B2:8E:A4:EA:7C:77:0B:6D:1F:D9:60:74:07:25:5B:90:40:54:EE:F1:74:4C:5B:D2:50:3F"}}},"request":{"raw":"POST /matomo.php?action_name=Elibee%20Fingers%20Her%20Tight%20Wet%20Pussy%20Hard%20-%20Explicit%20Solo%20Masturbation%20Close%20Up%20Orgasm%20-%20Watch%20Free%20HD%20Porn\u0026idsite=1\u0026rec=1\u0026r=847610\u0026h=21\u0026m=27\u0026s=2\u0026url=https%3A%2F%2Fwww.camvibe.xyz%2Fvideo%2F616%2Felibee-12%2F%3Fpop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D\u0026_id=3433e747ccb7df01\u0026_idn=1\u0026send_image=0\u0026_rcn=881133\u0026_refts=1777757222\u0026pv_id=GY9V9o\u0026fa_pv=1\u0026fa_fp[0][fa_vid]=hdh0OY\u0026fa_fp[0][fa_id]=search_form\u0026fa_fp[0][fa_fv]=1\u0026pf_net=60\u0026pf_srv=245\u0026pf_tfr=1\u0026pf_dm1=732\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024 HTTP/1.1\r\nHost: camvibexyz.matomo.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 0\r\nOrigin: https://www.camvibe.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 02 May 2026 21:27:02 GMT\r\nserver: nginx\r\naccess-control-allow-origin: https://www.camvibe.xyz\r\naccess-control-allow-credentials: true\r\ncross-origin-resource-policy: cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":498,"timings":{"blocked":180,"dns":12,"connect":21,"send":0,"wait":127,"receive":0,"ssl":137},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/contents/videos_screenshots/0/87/288x230/1.jpg","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /contents/videos_screenshots/0/87/288x230/1.jpg HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Sun, 12 Apr 2026 23:56:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69dc3116-6b0d\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y4feFdLeT%2FIjws903PPsN4hRl3WrXvtPLGxzvjq1OiweJ%2FLo509nzyp2A%2BqLAfq0yGDwsyAQixk9YvETAOn2%2FhbQRcF7SOg%2BVzRG%2FhKACpY4QZse0H5DM0yjtRcWZWFeTQ%3D%3D\"}]}\r\ncf-ray: 9f5a1b8829a9568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27405,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 288x230, components 3","md5":"0fd42920cf05921eab39e24ddacbd447","sha1":"8a0b08cf378930450a8d321b42ca3cd2ad5d3a9e","sha256":"96b8aec284c856e2ced6be54d27b1701a15e66ec03485d8a6fad4af37a20f7f9","sha512":"eb1271aa4867bd7c7164cb06075d62d263b0eff00cbefff02333dd6d6fcfaf5fc3d3f01150922cc3a96984e8520e1f698e9fffe3314bd69e1132f716827387ca","ssdeep":"768:BM8BKUjRFZq0SFpVNRP1Jpa7JS9d6cWgCXWPOMh6CZ:B5jYH/VNRPpoOdBW7cxN","tlshash":"1ec2d004618641b2d71da172953761b6d93375300242a32a2aaf28c37f642bf7a5eef7","first_seen":"2026-05-02T21:27:32.680675Z","last_seen":"2026-05-02T21:27:32.680675Z","times_seen":1,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/contents/videos_screenshots/0/486/288x230/3.jpg","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /contents/videos_screenshots/0/486/288x230/3.jpg HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Sun, 26 Apr 2026 05:07:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69ed9d79-6208\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kEbirbwFlFVZ2PofYjpSkk13nOGNKBL7G3aLJ%2Bd9Pt3YFvbiUf0JjIwcfnqEUQnw1v64hm99nzDi7p%2BFF1CXwnM0yLkYLdc4St8aUNTM9geDTIYuh2EfbQ7MSOWlwcX5%2BQ%3D%3D\"}]}\r\ncf-ray: 9f5a1b8829b8568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25096,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 288x230, components 3","md5":"f9be7eb12c602e3de37486852736336c","sha1":"aff7bbef57adda33ff1da7a4c16fcadbff4718aa","sha256":"8ad0c9120399bb579788b75e2058f09a937abec2ab7ef43cac18d721c2839689","sha512":"461cbf91b0f70edd01ae6be68a396d6ab12c39ea54c5cc754a2072799d3f757e831637bbbe8ae86b0011c87a9f4cb01b19370512898ee9ff536ef5f1c80a06f7","ssdeep":"768:btEFoXYekhEA9rRy7HrpQilUAOGJ/rrcm8oHS:44wyis7HVvlUrGBkP","tlshash":"a5b2f10acbcf2c2a9d21d5f212cd86564d6c9ab1ade13043d6b692c155fcdeba4e1e00","first_seen":"2026-05-02T21:27:32.682131Z","last_seen":"2026-05-02T21:27:32.682131Z","times_seen":1,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh50XSwiPGQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"BF:D8:14:32:18:86:B9:95:54:75:8D:F9:5F:29:DE:4E:F8:F8:F7:13","sha256":"0E:FA:80:0B:F4:13:81:81:4D:CF:50:35:5A:DD:DB:FA:00:0B:34:B2:2D:5D:28:08:E4:45:1F:2C:EF:D2:21:C2"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh50XSwiPGQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.camvibe.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22504\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 02 May 2026 16:52:53 GMT\r\nexpires: Sun, 02 May 2027 16:52:53 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:09:19 GMT\r\ncontent-type: font/woff2\r\nage: 16448\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22504,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22504, version 1.0","md5":"1c6c65523675abc6fcd78e804325bd77","sha1":"898d9808304dc157f5dcb18ca169ec6e2b96b3d7","sha256":"08664859baab5ed98f0bf818ed77e38464ff1826dc6406d5ecbd651409afbd92","sha512":"1505e8496c9bee214c5f8815f8d88a31ffe2baeb6fba81a8228bd52220b9b2bb10464c1e1dba11d6881583dfa478cdfb30a79cfa6f069c362fb65443feb06918","ssdeep":"384:ZbL6k1TUlBxUp5VLlLJGv2VulERzgWuXlY9zehEsapJznPEUAAnUgf0n6iXatBbF:pLfTuYfVVJGv2VuIzgWAlYteh6nPEzAF","tlshash":"8aa2f18a13d7a414878983f12c5ed63d7fac7cc7994282d2a606bc494e3dcb6b430bc4","first_seen":"2023-04-17T13:30:58Z","last_seen":"2026-07-24T14:35:50.384855Z","times_seen":38592,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"annualunion.com/Y.2-xTpUZVWW5_0YZZGaFb0-YdTe9fygc_miljkkPlT-Qn2oZpDqQ_wsNtmuQv4-YxzylzlAY_WCQD1EYFz-YH4IOJTKc_3MNNTOQP5-NRWSMTzUZ_jWkXyYNZ2-Ub4c","fqdn":"annualunion.com","domain":"annualunion.com","tld":"com"},"ip":{"addr":"88.85.68.219","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:02.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"annualunion.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 14:08:28 GMT","end":"Sun, 28 Jun 2026 14:08:27 GMT"},"fingerprint":{"sha1":"82:F4:38:60:70:4D:58:23:BE:B6:93:7E:DD:B8:FB:67:19:DF:99:48","sha256":"BB:E5:B0:54:FC:B5:4A:35:1A:CE:65:25:32:6F:32:A3:AC:67:09:25:0D:C0:C7:9E:BC:E2:93:27:23:C7:A2:7A"}}},"request":{"raw":"POST /Y.2-xTpUZVWW5_0YZZGaFb0-YdTe9fygc_miljkkPlT-Qn2oZpDqQ_wsNtmuQv4-YxzylzlAY_WCQD1EYFz-YH4IOJTKc_3MNNTOQP5-NRWSMTzUZ_jWkXyYNZ2-Ub4c HTTP/1.1\r\nHost: annualunion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 169\r\nOrigin: https://www.camvibe.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":169,"data":"ref=https%3A%2F%2Fwww.camvibe.xyz%2Fvideo%2F616%2Felibee-12%2F%3Fpop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D\u0026prevRef="}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 21:27:02 GMT\r\ncontent-length: 0\r\nexpires: Mon, 26 Jul 2011 05:00:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/contents/videos_screenshots/0/189/288x230/3.jpg","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /contents/videos_screenshots/0/189/288x230/3.jpg HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Fri, 17 Apr 2026 05:56:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69e1cb76-4c39\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RYo57HmAPAX6FnYq7ET%2F2tbclLFFAWI9GQQvL%2FSuXMpsSPwUXbWo%2FjojJRX92gsfnr1Zt25h1acZ87Ef8S2WDJNJBbXR4v1JPKeCmbzLCmE6Uh61x0HSnkgOWRWpgZda3A%3D%3D\"}]}\r\ncf-ray: 9f5a1b8829ac568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19513,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 288x230, components 3","md5":"937cfdb06b6df65f27c38af56f9b6ce7","sha1":"38fef6ba87be1dab3e7f0681993d41e3f2e1ad9d","sha256":"bd72cc065ddba6adf4afc4baa3ed374ac80a3a6a2cc1090b7dea6dcba58c0f43","sha512":"98d24df165631533910b3d6093d5c9d415a5748d0a8b5ce4972e21fba351d0bf618c5c56c9284d82428c3d8e9d6cf828bc087ed5484c0c944f663be453b8c615","ssdeep":"384:cNoprbo+3NfaJN2YPtlFGlwgZO1oHY0sYErJ8OdTploc8VwzUEkT:c2prb93Nf+4elFGlwgCOYgEppmdWpkT","tlshash":"2d92d023501b1939c0fcbdfc5731e5df9e8c42452a20106a89b5b1ca559bbce205fbeb","first_seen":"2026-05-02T21:27:32.684701Z","last_seen":"2026-05-02T21:27:32.684701Z","times_seen":1,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.135","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 22 Nov 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:06:65:FB:84:24:4F:05:D3:7D:7F:35:46:1A:04:71:1B:BF:8E:03","sha256":"3F:3F:87:70:3F:AD:4A:F8:CA:CE:C5:05:52:04:7A:B2:78:A5:62:55:0E:27:8B:F0:57:62:4D:C2:4C:60:F7:FD"}}},"request":{"raw":"GET /js/jads.js HTTP/1.1\r\nHost: poweredby.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 02 May 2026 21:27:01 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3769\r\nLast-Modified: Wed, 22 Apr 2026 19:37:30 GMT\r\nConnection: close\r\nETag: \"69e9237a-eb9\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3769,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3769), with no line terminators","md5":"c344215f7f4c4339ef3ec474fab1d5d2","sha1":"56ae62e74a9560413819f5c829a689f11e0e8d4b","sha256":"4a80819c5ee89f3ea534b99fe485991302abc498d994ba29d5c893ac5d795f79","sha512":"77cb331606c75be717c9e04c1836c9b5c0e8011639b4063784f1159972e826b75c3d46625ca2b9e931e9934fb7febce6b9820cb0ac6692b108ff35de97f5a6e6","ssdeep":"","tlshash":"d971627733557879889b966f10ef6a18317faa310f0688025b9ce864987cdcb057fd84","first_seen":"2025-02-19T04:42:15.317534Z","last_seen":"2026-06-26T14:40:43.599869Z","times_seen":2529,"resource_available":true,"data":null}},"time_used":325,"timings":{"blocked":126,"dns":3,"connect":41,"send":0,"wait":40,"receive":0,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/contents/videos_screenshots/0/79/288x230/1.jpg","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /contents/videos_screenshots/0/79/288x230/1.jpg HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Sun, 12 Apr 2026 20:10:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69dbfc1d-81ce\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kS1V3YnZxc13I3g5CJ4Pf7l5Q7S6cPrjYhcivJTq%2BvpZNe49UWtuBSn6KpVhuPqzrSTyk4rIF0F6MJEyB26aSclhtUaJgLPapOjuUDPCRvujWoMWY0PS7mEE53BsxSGt4A%3D%3D\"}]}\r\ncf-ray: 9f5a1b88199f568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33230,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 288x230, components 3","md5":"4c6866845c963c3df3ce91a94d6fb4ad","sha1":"c28f5d49fb5f47d7e59b178971525d7d025ee2a1","sha256":"12550e3b8eee9e69d79f40ab526ee4252dd36c19c6237a4f24fd586dced54bdd","sha512":"4259e3d73f1832288d48f06fa0a2400b128d453ac7a476ebc320dbe181a4245aa6788250d2c9930e3819e9c35fe923943f80abee9c40b31a3cfd05d1afd6d905","ssdeep":"768:oGhk0PgbpEUghH+J3Pzc5J3Un+42E7TzX8TW8SGORLOOifJm:oGhl2pERhH+Jfzc5J3z42E7f9rGO19","tlshash":"cae2e1c90ed3ec228c450f5d3bad4172b61fd526fe0a36792e4eb3ea4a4426d6451e2c","first_seen":"2026-05-02T21:27:32.686775Z","last_seen":"2026-05-02T21:27:32.686775Z","times_seen":1,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.extrovertedlecture.com/ecc874/532a8918a8ec.js","fqdn":"www.extrovertedlecture.com","domain":"extrovertedlecture.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:02.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.extrovertedlecture.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:03:40 GMT","end":"Thu, 30 Jul 2026 07:03:39 GMT"},"fingerprint":{"sha1":"B4:FD:45:1D:7F:BE:06:F7:16:AA:9C:F8:E3:DC:02:00:81:D6:8E:5E","sha256":"8F:6A:BB:53:90:A3:45:64:2B:6C:E8:2C:B5:CB:95:84:DD:2E:21:D1:E1:A2:0D:24:D2:89:91:78:2E:A7:D2:8B"}}},"request":{"raw":"GET /ecc874/532a8918a8ec.js HTTP/1.1\r\nHost: www.extrovertedlecture.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Content-Type\r\ncache-control: max-age=172800\r\ncontent-encoding: gzip\r\nexpires: Mon, 04 May 2026 21:27:02 GMT\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":103679,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"0f49cea205f3f84cb5fe9a94fbf63380","sha1":"80ff93b582b3e96b2c88f476f5939022c390c30e","sha256":"4f0ba2ca5a43d36202e03ae318b88ce734e8fc9576f86b3ac8b15406386898ac","sha512":"8e2c628d40b7d8b1dcbb04a64470a7c956374a8495c92027e148bf085612fea510a6aa77182e7a339b4fef495c02d4a76d7014ce5a2c986bf439a6fc10f1a63c","ssdeep":"1536:rM+iZ3YOYuyx6PUQwRxcs8P3nhkQ8vL7T7Q6eGozzwVEnHzHRbPvu:OijxEQq3P5Enne9zkWHLQ","tlshash":"47a33361350b64fd2ad0c1e7eb6b20886c295810e469cca1ecd1d7c7d6eb8e3429b5f7","first_seen":"2026-05-01T11:00:55.802688Z","last_seen":"2026-05-04T04:57:04.167393Z","times_seen":33,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":126,"dns":52,"connect":22,"send":0,"wait":43,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato:300,400,700,900","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:34 GMT","end":"Wed, 01 Jul 2026 05:19:33 GMT"},"fingerprint":{"sha1":"21:64:07:B1:AB:C9:F8:BB:E3:DA:F8:1A:C2:71:8D:C1:5F:BB:C8:5F","sha256":"C9:6D:F4:6C:D4:D4:BA:AB:16:C1:57:05:B3:FD:F7:74:8C:83:CB:18:D2:21:81:4D:F6:97:96:5A:A4:4C:ED:44"}}},"request":{"raw":"GET /css?family=Lato:300,400,700,900 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 02 May 2026 21:27:01 GMT\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3120,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"18517f5588e7718106a9324c50e27827","sha1":"e937175b833b7dca4e6a183518bbc41a1c415c3a","sha256":"febf977cb236ff76151d402d7a830d5673bfebc8b0cb27be0a73492b0b5bebcd","sha512":"144857c19d306e8b17ca12ad41e0ff760ffd8ac5337d475754f1ce9dac14d33ab234f89212be1a20f6f5538fde6fe2316715e5bc97f9d56227391b1942af9c78","ssdeep":"","tlshash":"fa51be92096fb908db830cc212c97d32ef0f625064499935aeff14d8bca7d699372b0d","first_seen":"2025-09-17T10:10:53.658643Z","last_seen":"2026-07-24T13:09:05.42274Z","times_seen":2421,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":173,"dns":1,"connect":16,"send":0,"wait":32,"receive":0,"ssl":179},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"BF:D8:14:32:18:86:B9:95:54:75:8D:F9:5F:29:DE:4E:F8:F8:F7:13","sha256":"0E:FA:80:0B:F4:13:81:81:4D:CF:50:35:5A:DD:DB:FA:00:0B:34:B2:2D:5D:28:08:E4:45:1F:2C:EF:D2:21:C2"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.camvibe.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23040\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 02 May 2026 21:21:53 GMT\r\nexpires: Sun, 02 May 2027 21:21:53 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:11:31 GMT\r\ncontent-type: font/woff2\r\nage: 308\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23040,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23040, version 1.0","md5":"de69cf9e514df447d1b0bb16f49d2457","sha1":"2ac78601179c3a63ba3f3f3081556b12ddcaf655","sha256":"c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49","sha512":"4aebb7e54d88827d4a02808f04901c0d09b756c518202b056a6c0f664948f5585221d16967f546e064187c6545acef15d59b68d0a7a59897bd899d3e9dda37b1","ssdeep":"384:adpABC4a0HkBpR1HWtGu06B6lsoAKiwY0HcLKglV6Z+DVb35PJZDdiZeJ1vqYg:0AHa0Ezf2tZn6lsoABwTKK46ZQb3V7wD","tlshash":"fca2e1c05cc1e2d4ae02daf7fda5a4eab4e2f01123a8f65f8f114b75d505993640fe01","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-07-24T14:41:22.579183Z","times_seen":182190,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":119,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/contents/videos_screenshots/0/112/288x230/1.jpg","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /contents/videos_screenshots/0/112/288x230/1.jpg HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Apr 2026 20:40:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69dd54a4-843c\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8J1AoJ%2F4HzHdtNtJiga%2F8rrd%2B6WiUOAyo3lNqaHaKISS%2FHRXO9k7Zdkj9yGrXAi3Oniy2olGV7JllatkKGd3%2B3LIZnau%2B%2FTmGDT3nLmofASnT7j1rEX6B03HjSTGiUPm2g%3D%3D\"}]}\r\ncf-ray: 9f5a1b8839c5568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33852,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 288x230, components 3","md5":"c7a62237b6384fcf19e8adc4e28496a5","sha1":"ec7df90b425a224ce99f80bfff2583a31e182937","sha256":"70dbea530fbd18c17f949f105696e946fa55079582966230ee5780345ad9f07c","sha512":"446d6654fb4a3c7a251419e16d016bcad683c7d3e0a17e371fa92bd881e91d2d607f2f11388bce562f00ecca9da3fb22e3be07d0b781f9b8d317566a0c250447","ssdeep":"384:ppA20eJbsumL37BH7Wb0Ofxrz/AJOssQlM/KP17aA9N17rE+uCNoAs/xBb7/zHtN:7fwL37BiI2xX491D7ICNoP57LtvMDLED","tlshash":"77e2e1a65b68f5770ca80f5f89440fd77309f40868dbbdc7a42b57d862912c9d0b9ed0","first_seen":"2026-05-02T21:27:32.689009Z","last_seen":"2026-05-02T21:27:32.689009Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poweredby.jads.co/js/jads.js","fqdn":"poweredby.jads.co","domain":"jads.co","tld":"co"},"ip":{"addr":"92.222.100.135","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.jads.co","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 22 Nov 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:06:65:FB:84:24:4F:05:D3:7D:7F:35:46:1A:04:71:1B:BF:8E:03","sha256":"3F:3F:87:70:3F:AD:4A:F8:CA:CE:C5:05:52:04:7A:B2:78:A5:62:55:0E:27:8B:F0:57:62:4D:C2:4C:60:F7:FD"}}},"request":{"raw":"GET /js/jads.js HTTP/1.1\r\nHost: poweredby.jads.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 02 May 2026 21:27:01 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3769\r\nLast-Modified: Wed, 22 Apr 2026 19:37:30 GMT\r\nConnection: close\r\nETag: \"69e9237a-eb9\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3769,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3769), with no line terminators","md5":"c344215f7f4c4339ef3ec474fab1d5d2","sha1":"56ae62e74a9560413819f5c829a689f11e0e8d4b","sha256":"4a80819c5ee89f3ea534b99fe485991302abc498d994ba29d5c893ac5d795f79","sha512":"77cb331606c75be717c9e04c1836c9b5c0e8011639b4063784f1159972e826b75c3d46625ca2b9e931e9934fb7febce6b9820cb0ac6692b108ff35de97f5a6e6","ssdeep":"","tlshash":"d971627733557879889b966f10ef6a18317faa310f0688025b9ce864987cdcb057fd84","first_seen":"2025-02-19T04:42:15.317534Z","last_seen":"2026-06-26T14:40:43.599869Z","times_seen":2529,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":110,"dns":1,"connect":37,"send":0,"wait":37,"receive":1,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"annualunion.com/c_DO9L6.b/2S5GlZStWQQw9/NmzPAGwYOwDTQV1OMUyI0-3bMtD/AD4lNpDqU/3l","fqdn":"annualunion.com","domain":"annualunion.com","tld":"com"},"ip":{"addr":"88.85.68.219","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"annualunion.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 14:08:28 GMT","end":"Sun, 28 Jun 2026 14:08:27 GMT"},"fingerprint":{"sha1":"82:F4:38:60:70:4D:58:23:BE:B6:93:7E:DD:B8:FB:67:19:DF:99:48","sha256":"BB:E5:B0:54:FC:B5:4A:35:1A:CE:65:25:32:6F:32:A3:AC:67:09:25:0D:C0:C7:9E:BC:E2:93:27:23:C7:A2:7A"}}},"request":{"raw":"GET /c_DO9L6.b/2S5GlZStWQQw9/NmzPAGwYOwDTQV1OMUyI0-3bMtD/AD4lNpDqU/3l HTTP/1.1\r\nHost: annualunion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nexpires: Mon, 26 Jul 2011 05:00:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64\r\nlast-modified: Sat, 02 May 2026 21:27:01 GMT\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type\r\nset-cookie: uniqCookie=ba715501ac8cb56f1cdc426a12ae5019; max-age=1780349221; path=/\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37561,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (23430)","md5":"245a2a609a9f0612a6068c338421ebd9","sha1":"aa1ae5a581827a793fc0a4ed0e55a034578ba4d8","sha256":"948007ec68d73f51929967f5deab7413e47d9685aac257618b7645cc39ede4bd","sha512":"f4bfebe76326350748dee6d0b1712cf172cbdad42019e2b7e361e4da66912de81412bc5836453854f2962c1498608831cf6c340a07e5111c590fc0efe14ae560","ssdeep":"768:ZlLiZg7J09MxiMZFvLnHvECJYgSboEBkleZ29oOcLlOWhbpp463j+OiG82IAO7jt:Zleg7JpoIvECJZSboEBkleZ2ZcLlTppG","tlshash":"2af2c6c871c3642642eb507d753b7208b2361465642df028bc79c8e4bca9e9f8577bbe","first_seen":"2026-05-02T21:27:32.690082Z","last_seen":"2026-05-02T21:27:32.690082Z","times_seen":1,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":78,"dns":0,"connect":17,"send":0,"wait":52,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/contents/videos_screenshots/0/304/288x230/3.jpg","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /contents/videos_screenshots/0/304/288x230/3.jpg HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Apr 2026 03:51:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69e845a8-40ea\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QeBxAvproJxaqG7ztrGPzlJEjU9r%2BnrpPGkDRilFkGya7My0%2Fd74JtXQ6JVfjJ5IRDsny6ASsl70392nx3j3oW%2F3j4JxYcXxMDG1peXlxSMoR%2FQg4WhP70mvhxFau8LvZw%3D%3D\"}]}\r\ncf-ray: 9f5a1b8829af568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16618,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 288x230, components 3","md5":"7acdb60bc926efee7b9b2e497fe99582","sha1":"337485997ebe5c86f5eef92a1c4b48402094fac3","sha256":"516f8d01a192abe7f3959d5cda8545605f3a6f3ec0bdc8e4f54295dff2987c1b","sha512":"b5cb9993026dceccbe36b70d079f6ee2f3bc2ede2ff1dec4918dc58e2f487a4b946b8b6f5a865372c83fccc5b5bfea36c10bc52807853d110e11536b520d697f","ssdeep":"384:JiQ6KrjGX0gv2FUjGqtrS9pZTPZgcWLNW7RJ3EeIFK:Jn6Krjjgv2UDrS9pZOLA7r39IFK","tlshash":"e072c02254c2b28dca758871c72215179e7c36c832b56e54b13ef3f9150dfea419c7ca","first_seen":"2026-05-02T21:27:32.691066Z","last_seen":"2026-05-02T21:27:32.691066Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"BF:D8:14:32:18:86:B9:95:54:75:8D:F9:5F:29:DE:4E:F8:F8:F7:13","sha256":"0E:FA:80:0B:F4:13:81:81:4D:CF:50:35:5A:DD:DB:FA:00:0B:34:B2:2D:5D:28:08:E4:45:1F:2C:EF:D2:21:C2"}}},"request":{"raw":"GET /s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.camvibe.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23580\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 02 May 2026 15:12:13 GMT\r\nexpires: Sun, 02 May 2027 15:12:13 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:09:41 GMT\r\ncontent-type: font/woff2\r\nage: 22488\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23580,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23580, version 1.0","md5":"e1b3b5908c9cf23dfb2b9c52b9a023ab","sha1":"fcd4136085f2a03481d9958cc6793a5ed98e714c","sha256":"918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537","sha512":"b2da7ef768385707afed62ca1f178efc6aa14519762e3f270129b3afee4d3782cb991e6fa66b3b08a2f81ff7caba0b4c34c726d952198b2ac4a784b36eb2a828","ssdeep":"384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK","tlshash":"91b2e1ce5d546e3a8028213785c17b488273572e9edf42c6dd83a6263a7092cfd3d96e","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-07-24T14:45:47.147398Z","times_seen":250333,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":71,"dns":4,"connect":8,"send":0,"wait":9,"receive":9,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/get_file/0/BUNiX9paEN0A3fLIUWAn69PvbCWMUV7WdyUXxYSum1d8yNkKf18vL66gHZxmcNy6EjDyEbrFh2JPeWpdc8Ar0PP2eddkrZuWXwoAmlVETR6a96c.mp4/?v-acctoken=NjE2fDB8MHwyZGRiMGE0NGFlYTFmYTFiNjk1ZGVmYTU0NDJhMzZmMQ5b32e6524cce0498\u0026rnd=1777757221615","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /get_file/0/BUNiX9paEN0A3fLIUWAn69PvbCWMUV7WdyUXxYSum1d8yNkKf18vL66gHZxmcNy6EjDyEbrFh2JPeWpdc8Ar0PP2eddkrZuWXwoAmlVETR6a96c.mp4/?v-acctoken=NjE2fDB8MHwyZGRiMGE0NGFlYTFmYTFiNjk1ZGVmYTU0NDJhMzZmMQ5b32e6524cce0498\u0026rnd=1777757221615 HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: image/gif\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/8.1.31\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5vRCKMp9cF88%2FBSvg%2FGtwWqbrGVTbotYffi%2BN0jrzDVOErUU3rCofiqm6%2FEWC6jBzKAyLqF2GWFIfIS9515kPkFr7LB%2BHaT5PyzLlr5OPao9BvpQ9Y95%2B8xw%2BFfjN1IZJQ%3D%3D\"}]}\r\ncf-ray: 9f5a1b8b2cd9568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.1.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":37,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 6","md5":"ccd486e3f61147d7a9aa49e89c7b63c9","sha1":"f0943c1524f14aeee2b0b235ac5a0fb8660f653e","sha256":"5af0fa521773fe87033b9869748bb3b87f9c6ae6fa49c18d335e52c4698c93e2","sha512":"9ca05f01c196f8e450925ad65d0ed004a2ebc206849df29e376c47a52717e1d4815ce469dac9e5a349a1370f7401eef85bb8916abf850c85c4624fea8953c8fe","ssdeep":"","tlshash":"b1800022cab00002e28ce03a080b23002b208220022c030e8028a0ca2cae0220c00020","first_seen":"2025-12-02T14:35:44.106642Z","last_seen":"2026-07-21T09:43:10.912217Z","times_seen":37,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-02T21:27:00.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term= HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/8.1.31\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; path=/; domain=.camvibe.xyz; SameSite=Lax\nkt_referer=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.camvibe.xyz; secure; SameSite=None\nkt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; expires=Sun, 03-May-2026 21:27:00 GMT; Max-Age=86400; path=/; domain=.camvibe.xyz; secure; SameSite=None\nkt_acctoken=OTEuOTAuNDIuMTU0; expires=Sun, 03-May-2026 21:27:00 GMT; Max-Age=86400; path=/; domain=.camvibe.xyz; secure; SameSite=None\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BNxOXSpSgpu1nKEr6w0t7DNUcZQEB%2BDYeHaVz2UjCx0BIATx3hFKVfQZO7FRGtLf3WkcQCkf6NTfRizb%2BHUjpxjSS%2BmNPnQ2SPCRLC2sSNDfX8nvqHwi0HP4Xse%2FXdlSzg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=11,cfOrigin;dur=221\r\ncontent-encoding: br\r\ncf-ray: 9f5a1b852e85568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.1.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}],"data":{"size":217394,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (860)","md5":"bd0233bc66e50236b0a6044bfa213b34","sha1":"059ba8e49a5cfb571d43714cbacc9057c2d6bde3","sha256":"1533a7977f991e040d7a212683c09f370ecee56dad722517b11739ab7c2dc9a6","sha512":"27ac92a4d91eb4af031bf45808e3660ba519be868e59db92f03cd098d2f257332d649b1ee75154f45176fbedb4096a34c48a107f5a0e55ff74d15214d9054e06","ssdeep":"1536:VcYNPBhdhCTIgIA7QUMIFfKuOv01sV9E+/uRhpsljXxNH3NleY1byj3rCDI0a7F:VcKPDDCdAEyui01HhpmXxNZbyj3rl","tlshash":"bf24e9b7defa106d110391d56fb663393b6dd067d608cd387a8c53a88f8bb80d563268","first_seen":"2026-05-02T21:27:32.692877Z","last_seen":"2026-05-02T21:27:32.692877Z","times_seen":1,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":56,"dns":38,"connect":1,"send":0,"wait":245,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/static/styles/all-dark.css?v=3.1","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /static/styles/all-dark.css?v=3.1 HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 07 Apr 2026 08:04:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69d4ba8f-2d5b3\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZHbyNPzxZD9%2FMEIvjyK0NCA783%2FpFgVXhdSPPiuYrGC8A2xaI3izsEk%2BeSOOIOZ3jlMq7K7hY4lJzv3cOAE6xbvjqXo%2BxQB3SfaLQqTZHD4vEHbbUmERD6%2FRjMKFVKdJHw%3D%3D\"}]}\r\ncf-ray: 9f5a1b881997568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":185779,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (1416)","md5":"d66055c8c93ddb0dec1992fcb94f0620","sha1":"02d7faf57b6b928491a61ba5d28984d24e8efe00","sha256":"0480ee4da465df29312bfd2ed6ceee1a6a1756f1bf1a8a16021c327cc413efbc","sha512":"5f5b5c883bb72f1ddd6e39028f0db5153e2d944aaae1ceb909dcbbe1c387a35e2f9b39ea08b18ab23569d50413939380b85bebdefbb90b4c78a3932b1e978959","ssdeep":"1536:xu2z/JINHP4S4tYupVzsC1404ftstnt8wvwQpPkqIy2mxVYx84zZq4hU/2yXRD6i:xu2YwHvW7qUU/2yXRD6TKYm9kAy24IN","tlshash":"6f0486966ff129cf700fd06866969755b3bc1183510ece2cbbe1206cef887a1917ee85","first_seen":"2026-05-02T21:27:32.694002Z","last_seen":"2026-05-02T21:27:32.694002Z","times_seen":1,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/player/kt_player.js?v=13.7.15","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /player/kt_player.js?v=13.7.15 HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 11:44:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69d39c93-29898\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LC85VPjXbp9oDIHC8O5rCpUb22dpypffeGnMaQWcXILHGr29I991PQAzWu5WP9IQi29gJMld3GuFNwZgd0Ke8xufj2T2SFAH4IeXmqlsaPaW%2BNH4biCqmPS%2B9AgeS7%2FrjA%3D%3D\"}]}\r\ncf-ray: 9f5a1b88199b568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":170136,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (33677)","md5":"b83d40aefb38e7fbcd00f9e3f7aba3e3","sha1":"3eb2d88f0372ef8eb20fe5ca05d392ceb239e788","sha256":"847beb9c7142dc5b606496524971585afd5af26373dc5da5af7372a3a53991fa","sha512":"ddc9c9dbdc5c3521e73e3f1be2443649a967a6431d361d76149126d58866c16906e9882fd84ac843c582456eca72d480fe8223f779b46d2a24afc855a79a61b1","ssdeep":"1536:R1hxd1GlUwI74w01zICfJ96iDHNKJ6EhaUABX99ZiNgQjkHEYYUxp6PzlMyQeZov:7hIlTR96i7wPezZ6gQjkHsUx4Pz082","tlshash":"7ff3f899b681b8b2438724f5009f1907f0779d3ae88ec990f0a6c9e87e79c5c117fe59","first_seen":"2025-10-26T19:53:40.34915Z","last_seen":"2026-07-21T18:31:14.784383Z","times_seen":152,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/player/skin/fonts/ktplayeryt.ttf?wqseia","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:02.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /player/skin/fonts/ktplayeryt.ttf?wqseia HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/player/skin/youtube.css\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:02 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 2264\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 11:44:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69d39c94-8d8\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oJ0wo%2FmTnfoXe83WTabu9a7iLLsasl0I9PM4TduhQHqqDnOsUKqSsGXEfwS%2Ff5FGb7n6FPC76L8kykvW6ghZNkptx0%2Bzt2wD9zg0YipQTNdNUXdUXgdMBKZYxxuvIajGvA%3D%3D\"}]}\r\ncf-ray: 9f5a1b8d6ff1568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2264,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, ktplayeryt ","md5":"c89ca428be45c3c212c5658a05823a10","sha1":"74916a018bea5b27c223f164e2355ddb78422b4f","sha256":"bf86d8eb9277b69e2c6202ca711c3b19c64a2a9a8cf4ba7bc33bdecacfb8a0b2","sha512":"62e0d7ee58a9f64490dac69a5ab8abf6d9dab9ef366698a80bb7c0478f40ba32110de60ed9908cf375118d00022daf5ba3a217bdd4ed9da9609a553bcc062abe","ssdeep":"","tlshash":"d6414316b7d68d09c15207bc85f2436dabfecd79933ed347a5802646acba3d05d213b8","first_seen":"2023-04-07T05:09:52Z","last_seen":"2026-07-24T03:40:28.734736Z","times_seen":2236,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/contents/videos_screenshots/0/290/288x230/3.jpg","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /contents/videos_screenshots/0/290/288x230/3.jpg HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Tue, 21 Apr 2026 19:29:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69e7d018-35c1\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1zClsW%2BrhouM1mOuihB0CqQtBV4T0ipoA8ttrnWcajidDQwX1uQ8TnWfkmwmzJPqFEQ6o6cYkvh3mbqgcHwx7OuJgLiDuBSvCLA5kjPg6IWlM72Jqu4kiRESMBzAjbInow%3D%3D\"}]}\r\ncf-ray: 9f5a1b8829a7568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13761,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 288x230, components 3","md5":"f77768063be80ad9de0c3703e634843c","sha1":"3b8db53ef289c0dfd2f43405d4754152bfb8f2c9","sha256":"af67d9d7b8b89040a378f693d07255689a002bcca70270c2ae68e01fb8a3938b","sha512":"a27aca045cc87ca0e7249bf7088e02fc49df126820de369965ceb7e88d544e9794d561e49134e2c23c0ad8edb0ec28f3b2b2c7e2e2db08b958d5de288967e476","ssdeep":"384:+QODLDxgW8LKiiyfoG1TJ8z02kbmsts3KUyg/Q:+QkDN8WMf/J842kRs61","tlshash":"dd52cf571a4e155cd0a3c2368f905f6b7dbe88260ec02b08fe23b5e1e1d7e716e6560a","first_seen":"2026-05-02T21:27:32.696433Z","last_seen":"2026-05-02T21:27:32.696433Z","times_seen":1,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/contents/videos_screenshots/0/154/288x230/1.jpg","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /contents/videos_screenshots/0/154/288x230/1.jpg HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Thu, 16 Apr 2026 16:47:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69e11287-73a7\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wNqW6Y2d1QZLJ%2FlShiIT3bWnuVqpC4Prgajg9apHX4Ibd9%2B1ajNxrMryjnu%2FLRHNLKb02xX5zOwaxrlvCExJ09EpuKLWERQmZ%2BpSqts6VIFhulm0%2FdCUbpAI1yt59IeYZQ%3D%3D\"}]}\r\ncf-ray: 9f5a1b8839c2568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29607,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 288x230, components 3","md5":"bd2ffe647de746d97e60c4c2695afe16","sha1":"3035f7ed7e63503352f9900099b5bbbad6e90171","sha256":"0dd20cf74cbdc16bb5f00007379d4de0b9e1a14ec062090a0ad3018ec9525585","sha512":"42f8228d022044d3018b7e2350d0589f778635ee2ce648deab568673dfa3207941317bb3e06981baed04d0d568f1999c5dceb55a60b11b93219fa277b67b5f22","ssdeep":"384:pVZxzQftAEfYFrV09hA42tsTa/okY3Ko23DdFcVGX32kPM9FyKJQ7Er0dmAjENEm:pVcYFB0Y4fm/MKd3D2000KJKw0ANOV8","tlshash":"26d2e13fb29b3b9ee31c40b2292d0f99c65c03e0e9d53227081868e71353bb5516e67d","first_seen":"2026-05-02T21:27:32.697361Z","last_seen":"2026-05-02T21:27:32.697361Z","times_seen":1,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/static/js/theme.min.js?v=3.2","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /static/js/theme.min.js?v=3.2 HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Fri, 10 Apr 2026 13:16:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69d8f827-a9b0\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MH1eJKdx8B6dPvj1pFHtjWnTTZC8O9RxKbyTQBzkdUkzCXaU%2BP8I1Z9i8AVioGaygtR%2BNzj%2FMuaI6LojKIIb6Ran2hiNnBq7f2ZjVBPDRnCP1HR8EOLkZEEPYvfgOrAMxQ%3D%3D\"}]}\r\ncf-ray: 9f5a1b8849dc568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43440,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"7a993ef13fe16d5b06be43df7370fd08","sha1":"2b0e79cc58692181337c32dbc905d6060582afe8","sha256":"13fd3efe418b94f8888bd095f69af0b5c1343ed7cd49480d343a6e25fde534dd","sha512":"2c88f3913f80e92a995585e1f9b3e525f137a1dc61b2c738d1c49ce5ec0b6985b168816c70c0eac0a47f68f8b4fa1f2e3f35c780ec1c0dc353c263b5db786572","ssdeep":"768:6EGpbHUrjw4i1xI4hnFxqpz7p8Vl1FHDRQ5RoQRj:7obHU/wDhnFUpz7p8VdRQ5RoQRj","tlshash":"dc136698fbac281395b331679c5f54cc623dd4739c004dbbfce6a2519ce496c232aa79","first_seen":"2026-05-02T21:27:32.69831Z","last_seen":"2026-05-02T21:27:32.69831Z","times_seen":1,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/player/skin/img/play_white.png","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:02.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /player/skin/img/play_white.png HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/player/skin/youtube.css\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:02 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 11:44:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69d39c94-e5f\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0JTCL7UljWTpUHmJA%2FaM18rsY28XFLTfDQ7vjL0%2F7ptq70wardW3u%2FXkEDJS8smunFCzWkJ5FH1%2BthxFzO2bYTxx6YE4t4JA3kgc%2FEce50xqfNJJJeZdMyqPwruAjNqeCA%3D%3D\"}]}\r\ncf-ray: 9f5a1b8d6fec568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3679,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit gray+alpha, non-interlaced","md5":"f9a6b1c24a8858cf91b1f79ccecb8544","sha1":"e63232a567ab4c0d09dcd7c9649abbc747e6d2a2","sha256":"e13296a19c623cff752620a9f03aa2b920a13ea08a1d2292ebd423a2e0feeb2c","sha512":"52d71bccd96641b4fb6732efce15caadebedc9f2e600f2015005e0748569d1340cebefcf200b353d01401a2972621f505309333c11855c0feeaeee4ae286b9c0","ssdeep":"","tlshash":"3e715ddcb1c0109c196c7766c7512789e32ea2442cb7f44a373dc518ea7460ed0fd6d6","first_seen":"2023-04-25T17:51:54Z","last_seen":"2026-07-24T03:26:56.561893Z","times_seen":910,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/static/styles/jquery.fancybox-dark.css?v=3.1","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /static/styles/jquery.fancybox-dark.css?v=3.1 HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Apr 2026 13:31:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69d3b5b8-13c4\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GNWL4nZf1oCJfE9SU40yrT3phA%2B%2FxdS0Z8O%2BQBkfqOXfycLxOgqs%2BqRWyU7%2F2Hj3vKhNqdJmdzgFOSu8iF37Rk3ADOEQAevwSKgybrWQxpAD7nfxw%2BSWvKU1sgGYe%2BVmLA%3D%3D\"}]}\r\ncf-ray: 9f5a1b881994568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5060,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f12b755c3c7f7b0537bf06bcdb9baf75","sha1":"bd7dbc8c6770422c402683b9191faafd6d274a85","sha256":"dfed0cdbf7e1047ce3b9a6b7694c94f4bd0eb4df8610151b782cf56764259cd8","sha512":"c3987e2ce24ce29014278aada2189443fa5f55ec84562d5ab33a0d7ba3c29c2077abec6d9780613addd829dd8c6b7ff1323eb77f9bfa1238c6a088367b6fa273","ssdeep":"96:GKXaHGfTzzQFRgRdrXNBo0Oy88i4cSj2W4Zevg36O:GKCFu7rAL3ZYO","tlshash":"13a1dd6b2a503905a43ede54df2f9a45c63f2481aa0a4dfb615cf83883d97e440f39dc","first_seen":"2023-11-08T04:30:53Z","last_seen":"2026-06-28T10:57:53.262166Z","times_seen":7,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/contents/videos_screenshots/0/336/288x230/1.jpg","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /contents/videos_screenshots/0/336/288x230/1.jpg HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Apr 2026 12:16:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69e8bc06-6c9b\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hJ%2FgDpJ0A%2FRcPNKzoSs234GStvZbf5JCkwB5m%2BSpuPzmE%2BFHcy98rwW3gF6IS%2BNriPivIIqmXBTXZ6Q3TqWFYDulW%2BK8ceThFnd5FvVq4ac7GZCsGLa3dzkQrobpslh8nA%3D%3D\"}]}\r\ncf-ray: 9f5a1b8839c7568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27803,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 288x230, components 3","md5":"a4eaa66eb069fdf54d474eab5738a570","sha1":"b1a00bf63c7202f3531906111516b8bc9450adb9","sha256":"2a31ecc09829b5dcd1e7781bb949e7f8c890f02928b830bf54ae993dcdc2fbaa","sha512":"9189df96018e91e41baab828ad0de6ea71e86e88da8aa2266f9d22e9e7ba6cf58544f97d4bc08a1f8db84502f194d383448404b0673dda99e37acd56fa9d32f0","ssdeep":"384:F9GQ6GAx3gv++ry11vmgUGezD+CD8mrXsKTiv/aLL5sL+HsamxHPTVMrp/IqK7zS:zp6GS3wy1IgUzYm462Mtml+9hme","tlshash":"65c2f11904dcbb32d2a68bda93f548e551dbb435e4248cbc0b0964cfccac7643aa735a","first_seen":"2026-05-02T21:27:32.700877Z","last_seen":"2026-05-02T21:27:32.700877Z","times_seen":1,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/contents/videos_screenshots/0/503/288x230/1.jpg","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /contents/videos_screenshots/0/503/288x230/1.jpg HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Sun, 26 Apr 2026 13:42:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69ee162c-840b\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q7XL6OVTSBrf3Wc5gm7rVdFAC%2BmZZmYvuW%2BCLd6gWPUenDExiL7jg%2F%2Bwtl1rXXznbfLQCRxR1JIxtnZ6g7obHjqfY8mnpY3OeUfwt6Z3eR%2BSHN4FtHWMRJscM7qDoYac7g%3D%3D\"}]}\r\ncf-ray: 9f5a1b8839d6568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33803,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 288x230, components 3","md5":"345c81969b39a7ac702de45ba5781c6d","sha1":"dbfe58193f8cbe4abad85a787aa720e376b98349","sha256":"b2c0c1a3ee759c924351ec3f28f89afdf8ff3e4e07485e4e107f035177119c37","sha512":"cb863898e2618c2d5a2d26c406688a7abda6dcaea090e54dca8f50afcfc0458d90ba3d4b8142a97f60e2ccab1d027919c74b2b79608c8b6a82e939f12704be73","ssdeep":"384:Ocjapy0wuwv31dL0H8MFZPEImZ9ePSItqrpgnTwvekzdzSYL5FHAmfqv9zZQzLl/:OqZZFdLknrWHeNAmA9XHh49QlDJoMoM","tlshash":"c8e2f111d1b359b0de3cf0d9fa144ac2d9f8c8e4d649412baba90adc3b473c90b8263d","first_seen":"2026-05-02T21:27:32.701804Z","last_seen":"2026-05-02T21:27:32.701804Z","times_seen":1,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/static/images/footerLogo.png","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /static/images/footerLogo.png HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Apr 2026 19:29:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69e9218e-84df6\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D2QyZxrqXxbUaFZSn8IpuGisSaPpT6KJpVHaQg6NJdSPH1AZ3np9E8tH6DjrnZ%2FPwR9sEBGd%2Bw8gnCMzp%2BqDO7PG4qoQI0rtq2jBiVyT3XpWQ1DkvGA8sySS6P9RlfIRag%3D%3D\"}]}\r\ncf-ray: 9f5a1b8849d7568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":544246,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1019 x 364, 8-bit/color RGBA, non-interlaced","md5":"53fdd2011ecc58cd31e115ada45c661d","sha1":"5f0dae500cedac515cbe279bcd639fd07f0d9f60","sha256":"3dd16e4181bea104953d15f457222ba427acfb1bb24e88b81a60427ce75eddef","sha512":"0f170637d23fe96237247942f4e2b78d54f409f8bc9ff70e8d23581308c020ebc54cee9b4c16d70714db1728465e325515db623db88caa07bf159e090c5fa892","ssdeep":"12288:hkorPitK3xoxKL7P15hGlrmZa1frgAcguomtqf:0tcOxKn1kSQFrX2tqf","tlshash":"fec4233e403a50298fa77000ef554d023edbe22a0db6ca99f0fb4395f557a69dc4dea4","first_seen":"2026-05-02T21:27:32.70271Z","last_seen":"2026-05-02T21:27:32.70271Z","times_seen":1,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\u0026video_id=616\u0026mode=async\u0026action=js_stats\u0026rand=1777757221952","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:02.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\u0026video_id=616\u0026mode=async\u0026action=js_stats\u0026rand=1777757221952 HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0; kt_tcookie=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:02 GMT\r\ncontent-type: image/gif\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/8.1.31\r\nx-frame-options: SAMEORIGIN\r\nx-robots-tag: noindex, nofollow\r\nset-cookie: kt_is_visited=1; expires=Sun, 03-May-2026 21:27:02 GMT; Max-Age=86400; path=/; domain=.camvibe.xyz; SameSite=Lax\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=62nrDRnhV9PCuJORCeV3MrjbTkZjqWvujIoowrJ%2FHQBosf3BDVNrRKo9NZihcTSwedtT%2BAUB%2Feu3bOUpsvm8koUNHJg9lASTslRnRKktVOHRWzfNE02rOzv0cTdX5HOamA%3D%3D\"}]}\r\ncf-ray: 9f5a1b8da835568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.1.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 6","md5":"ccd486e3f61147d7a9aa49e89c7b63c9","sha1":"f0943c1524f14aeee2b0b235ac5a0fb8660f653e","sha256":"5af0fa521773fe87033b9869748bb3b87f9c6ae6fa49c18d335e52c4698c93e2","sha512":"9ca05f01c196f8e450925ad65d0ed004a2ebc206849df29e376c47a52717e1d4815ce469dac9e5a349a1370f7401eef85bb8916abf850c85c4624fea8953c8fe","ssdeep":"","tlshash":"b1800022cab00002e28ce03a080b23002b208220022c030e8028a0ca2cae0220c00020","first_seen":"2025-12-02T14:35:44.106642Z","last_seen":"2026-07-21T09:43:10.912217Z","times_seen":37,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/contents/videos_screenshots/0/245/288x230/3.jpg","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /contents/videos_screenshots/0/245/288x230/3.jpg HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Sun, 19 Apr 2026 17:44:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69e5147b-5575\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KEtD%2BT6iEPVO5KFiOV0oNxMYI5JaXVZVxQ%2BRCkoizZAA0cnypMugctmC%2FKEx5lmvhbW8WScn1uHJ3BpnIwlEoAnKwcoHcARlmzOgRL2IhNAr1xSI9NyXotEx7FDqB3rsRA%3D%3D\"}]}\r\ncf-ray: 9f5a1b8829b2568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21877,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 288x230, components 3","md5":"2b138aa8483544733b4a57a3f0d7f05d","sha1":"c80a460cd844950b4e4dc7fd8f2493bf7406b742","sha256":"da38141da31dcf23c17fa7aeceaf41e782595dcc2548936c8f57df19b09723db","sha512":"e6775271f468c696185f01a023b7f6b777d7312a6a0c8127f2433d29f350077846de0ea2c0a34549716a719d2891ddb4086b820e9207f24bfea30a4c906ff6d6","ssdeep":"384:Q8Xs2vuMHljbc0rAZ+rCxC6JEZ+oYpA5+VOM72RyTcUdJMpUNIhKezYnFGqil:QgvuMx/AZ4CZEZ+DaC+QUpUdIEFGqil","tlshash":"b1a2f167cfac2776d0590af9634ac54702c156b06116536c13b290ea18ee36d7e32cbe","first_seen":"2026-05-02T21:27:32.703835Z","last_seen":"2026-05-02T21:27:32.703835Z","times_seen":1,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Apr 2026 18:57:25 GMT","end":"Thu, 16 Jul 2026 19:57:22 GMT"},"fingerprint":{"sha1":"AB:25:45:8F:55:B6:2B:26:B5:B1:EF:90:E0:60:64:9C:56:47:0F:B5","sha256":"47:83:31:CC:5E:02:0E:51:A7:52:AC:83:1B:8A:A8:4C:74:11:A5:F1:61:8D:C5:6D:29:3C:9D:6A:C9:29:AF:7F"}}},"request":{"raw":"GET /beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.camvibe.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2026.2.0\"\r\nlast-modified: Thu, 19 Feb 2026 17:45:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9f5a1b886c9edfec-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31169,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (31169), with no line terminators","md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-07-24T14:37:24.653408Z","times_seen":78304,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":13,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/contents/videos_screenshots/0/616/timelines/mp4/182x100/1.jpg","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /contents/videos_screenshots/0/616/timelines/mp4/182x100/1.jpg HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Tue, 28 Apr 2026 11:50:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69f09eef-c20\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mrkdaJROzm%2F0cElX2g%2FoLJrr3I74QY63jSuGxawi0ULvcq4sjjjmnXvbikCex5QL%2BXhQlAHSvkiUaSiXL38AFDHYEh%2B9rt%2FFiH722UrMU6Ga2dO0SJhLcaHu5yvrM0X4yg%3D%3D\"}]}\r\ncf-ray: 9f5a1b8d2f8a568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3104,"size_decoded":0,"mime_type":"image/jpeg","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 178x100, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c3443e93a4e448cf95095e6378f34de1","sha1":"380e48010004a6cf2a1819466d588ca40f1a0f62","sha256":"06c6745c386db346f37e489847867dc8a6996991d0b6406087d7ac69dc482013","sha512":"1a2111ffb4ded89ad51b08b339613a5ac80fa3ff58bef4b6ea7c3655913fea8754c747d3b9b74f693c67931f878836d722559f5948ea68d2aad3a27359be2866","ssdeep":"","tlshash":"ae517ce8bba215e0bc8dba2c2d7ac0c8100f50f60140436ed1cb2513bb2a94015be3cb","first_seen":"2026-05-02T21:27:32.705518Z","last_seen":"2026-05-02T21:27:32.705518Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"camvibexyz.matomo.cloud/matomo.php?ma_id=fKXDNU\u0026ma_ti=\u0026ma_pn=html5video\u0026ma_mt=Video\u0026ma_re=https%3A%2F%2Fwww.camvibe.xyz%2Fget_file%2F0%2F_L8vpDqvkRrldOnifZBK3qdcGXpPNllIsy9GH2n0Zwju6kxm69if_-IMKE57EqlKlwvlnJLfF-W9L1-39-RNpQ9URVnl7Soz_n36JTQ-VRlF5gvPdFSChhhoeVgRuMs.mp4%2F%3Fv-acctoken%3DMTgyNHwxfDB8NDMxOTQ4ZWZhMmMwMjhlZGJlNjIyOTc0MDc0YWYyYWQaac60bf9c0d1c6c0%26rnd%3D1777757221564\u0026ma_st=0\u0026ma_ps=0\u0026ma_le=368\u0026ma_ttp=\u0026ma_w=1280\u0026ma_h=720\u0026ma_fs=0\u0026ma_se=\u0026ca=1\u0026\u0026idsite=1\u0026rec=1\u0026r=538578\u0026h=21\u0026m=27\u0026s=2\u0026url=https%3A%2F%2Fwww.camvibe.xyz%2Fvideo%2F616%2Felibee-12%2F%3Fpop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D\u0026_id=3433e747ccb7df01\u0026_idn=0\u0026send_image=0\u0026_rcn=881133\u0026_refts=1777757222\u0026pv_id=GY9V9o\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024","fqdn":"camvibexyz.matomo.cloud","domain":"matomo.cloud","tld":"cloud"},"ip":{"addr":"18.157.122.248","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:05.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.matomo.cloud","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 22 Mar 2026 00:00:00 GMT","end":"Mon, 05 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8B:64:A1:63:66:1D:FD:B1:E6:3E:8B:EC:86:33:74:14:B8:30:E7:01","sha256":"07:61:C1:17:4B:63:B2:8E:A4:EA:7C:77:0B:6D:1F:D9:60:74:07:25:5B:90:40:54:EE:F1:74:4C:5B:D2:50:3F"}}},"request":{"raw":"POST /matomo.php?ma_id=fKXDNU\u0026ma_ti=\u0026ma_pn=html5video\u0026ma_mt=Video\u0026ma_re=https%3A%2F%2Fwww.camvibe.xyz%2Fget_file%2F0%2F_L8vpDqvkRrldOnifZBK3qdcGXpPNllIsy9GH2n0Zwju6kxm69if_-IMKE57EqlKlwvlnJLfF-W9L1-39-RNpQ9URVnl7Soz_n36JTQ-VRlF5gvPdFSChhhoeVgRuMs.mp4%2F%3Fv-acctoken%3DMTgyNHwxfDB8NDMxOTQ4ZWZhMmMwMjhlZGJlNjIyOTc0MDc0YWYyYWQaac60bf9c0d1c6c0%26rnd%3D1777757221564\u0026ma_st=0\u0026ma_ps=0\u0026ma_le=368\u0026ma_ttp=\u0026ma_w=1280\u0026ma_h=720\u0026ma_fs=0\u0026ma_se=\u0026ca=1\u0026\u0026idsite=1\u0026rec=1\u0026r=538578\u0026h=21\u0026m=27\u0026s=2\u0026url=https%3A%2F%2Fwww.camvibe.xyz%2Fvideo%2F616%2Felibee-12%2F%3Fpop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D\u0026_id=3433e747ccb7df01\u0026_idn=0\u0026send_image=0\u0026_rcn=881133\u0026_refts=1777757222\u0026pv_id=GY9V9o\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024 HTTP/1.1\r\nHost: camvibexyz.matomo.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 0\r\nOrigin: https://www.camvibe.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 02 May 2026 21:27:05 GMT\r\nserver: nginx\r\naccess-control-allow-origin: https://www.camvibe.xyz\r\naccess-control-allow-credentials: true\r\ncross-origin-resource-policy: cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.camvibe.xyz/contents/videos_screenshots/0/94/288x230/3.jpg","fqdn":"www.camvibe.xyz","domain":"camvibe.xyz","tld":"xyz"},"ip":{"addr":"104.26.0.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=","date":"2026-05-02T21:27:01.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"camvibe.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 11:43:00 GMT","end":"Sat, 25 Jul 2026 11:42:59 GMT"},"fingerprint":{"sha1":"67:76:A3:B1:3F:84:6D:10:0C:2D:7B:71:F6:50:E4:33:FD:11:AF:51","sha256":"86:D6:71:D3:04:19:06:95:3C:E1:BE:6B:91:D8:77:A1:3A:ED:35:96:82:CF:53:72:02:31:E6:07:15:46:BE:3B"}}},"request":{"raw":"GET /contents/videos_screenshots/0/94/288x230/3.jpg HTTP/1.1\r\nHost: www.camvibe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.camvibe.xyz/video/616/elibee-12/?pop=1\u0026utm_source=hilltopads\u0026utm_medium=popunder\u0026utm_campaign=881133\u0026utm_term=\r\nCookie: PHPSESSID=be3f00aea92b294fd3f4a9084176bcbe; kt_qparams=id%3D616%26dir%3Delibee-12%26pop%3D1%26utm_source%3Dhilltopads%26utm_medium%3Dpopunder%26utm_campaign%3D881133%26utm_term%3D; kt_acctoken=OTEuOTAuNDIuMTU0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 02 May 2026 21:27:01 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Apr 2026 02:01:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69dc4e93-4504\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sKS9xHfZzUacMPoLP1ZhgYDmX6UZGD7B2BYzJ26XlXVTD0LUxk1WhOT6Kzellzgl6WjsmMGOF%2BY0GVPyq2mpWm%2FAxxsAyvZYKTPTs7oCblRok2JMymsSiH1syRbAq38pqg%3D%3D\"}]}\r\ncf-ray: 9f5a1b8829a5568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17668,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 288x230, components 3","md5":"59eef63b2f5d547d44aec039933926b8","sha1":"5b5cfea9f1c12521ac773142620ff2fead07999c","sha256":"a16dbb6596e0d2ba0a5fa4eb044b2fcd60401c1841263e4f0e11575592990dc5","sha512":"ac8084daa8ee37f26324877e92e289f8822a5ba456bc16cb7ff788a8fafad69ba6cc5bb25fa2df647fd96476fbc0bb13402e4bd35be445a4f43f9ea600615f73","ssdeep":"192:ORzfI4fT4xQo0v8/pgRS/ge5blIJekw4mk3aBbUBmzK6L9xFh9OqQUNG0zaWGVLd:ORzA4kxQr+doJenkobUuXPFh9OZ0mVB","tlshash":"5382c0745b052386ef9a022d1741d019195b1b7c775fa82905ae97df7afc35e2302d0f","first_seen":"2026-05-02T21:27:32.706468Z","last_seen":"2026-05-02T21:27:32.706468Z","times_seen":1,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-02","alert":"Sinkholed","trigger":"www.camvibe.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}