{"report_id":"34493932-79c8-4a58-9740-ca4890b83324","version":6,"status":"done","tags":[],"date":"2025-11-11T09:21:40Z","url":{"schema":"http","addr":"shaahd4u.net/","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"title":"شاهد فور يو - Shahid4u | مشاهدة افلام و مسلسلات اون لاين 2025","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"shaahd4u.net/","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-16T09:21:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":7,"urlquery":0,"analyzer":5}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-11T09:21:20Z","timestamp":1762852880,"ip_dst":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.8","port":37130,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-11-11T09:21:20.227746+0000\",\"flow_id\":185119533981173,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.8\",\"src_port\":37130,\"dest_ip\":\"104.26.13.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3513,\"start\":\"2025-11-11T09:21:20.220661+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-11T09:21:22Z","timestamp":1762852882,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.8","port":52130,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-11T09:21:22.372887+0000\",\"flow_id\":755164773527703,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.8\",\"src_port\":52130,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-11T09:21:22.372887+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-11T09:21:22Z","timestamp":1762852882,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.8","port":52130,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-11T09:21:22.392967+0000\",\"flow_id\":1351901087203079,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.8\",\"src_port\":52130,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-11T09:21:22.392967+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-11T09:21:22Z","timestamp":1762852882,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.8","port":52130,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-11T09:21:22.412947+0000\",\"flow_id\":2051080960757011,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.8\",\"src_port\":52130,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-11T09:21:22.412947+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-11T09:21:22Z","timestamp":1762852882,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.8","port":52130,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-11T09:21:22.473102+0000\",\"flow_id\":755164773527703,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.8\",\"src_port\":52130,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-11-11T09:21:22.372887+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-11T09:21:22Z","timestamp":1762852882,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.8","port":52130,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-11T09:21:22.493218+0000\",\"flow_id\":1351901087203079,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.8\",\"src_port\":52130,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-11-11T09:21:22.392967+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-11T09:21:22Z","timestamp":1762852882,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.8","port":52130,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-11T09:21:22.513161+0000\",\"flow_id\":2051080960757011,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.8\",\"src_port\":52130,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-11-11T09:21:22.412947+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"www.intelligenceadx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"intelligenceadx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shaahid4u.day","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"iai8ckkrdlrb.l4.adsco.re","ip":{"addr":"185.200.118.62","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2025-11-11T09:21:43.953864Z","last_seen":"2025-11-11T09:21:43.953864Z","alert_count":0,"request_count":1,"received_data":463,"sent_data":434,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-11-09T22:13:15.523411Z","alert_count":0,"request_count":1,"received_data":9638,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"shaahid4u.day","ip":{"addr":"104.21.95.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-11-10T03:49:39.855469Z","last_seen":"2025-11-10T03:49:39.855469Z","alert_count":1,"request_count":1,"received_data":573,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"6.adsco.re","ip":{"addr":"104.16.42.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":91627,"first_seen":"2018-01-15T04:15:29Z","last_seen":"2025-11-07T01:19:59.965772Z","alert_count":0,"request_count":2,"received_data":991,"sent_data":845,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"iai8ckkrdlrb.n4.adsco.re","ip":{"addr":"38.132.109.126","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2025-11-11T09:21:43.952489Z","last_seen":"2025-11-11T09:21:43.952489Z","alert_count":0,"request_count":1,"received_data":463,"sent_data":434,"comment":"","tags":null,"fingerprints":null},{"fqdn":"c.adsco.re","ip":{"addr":"104.16.43.28","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":100769,"first_seen":"2017-11-29T18:42:15Z","last_seen":"2025-11-10T10:42:07.658842Z","alert_count":0,"request_count":1,"received_data":63075,"sent_data":426,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"shahed4u.you","ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-11-10T23:53:52.726124Z","last_seen":"2025-11-10T23:53:52.726124Z","alert_count":85,"request_count":87,"received_data":12827779,"sent_data":97719,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-11-09T22:15:57.703898Z","alert_count":0,"request_count":4,"received_data":389199,"sent_data":2110,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"iai8ckkrdlrb.s4.adsco.re","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2025-11-11T09:21:43.958283Z","last_seen":"2025-11-11T09:21:43.958283Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":434,"comment":"","tags":null,"fingerprints":null},{"fqdn":"adsco.re","ip":{"addr":"162.252.214.5","port":80,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":3069,"first_seen":"2017-04-03T03:11:30Z","last_seen":"2025-11-04T15:46:31.839365Z","alert_count":0,"request_count":1,"received_data":1787,"sent_data":405,"comment":"","tags":null,"fingerprints":null},{"fqdn":"4.adsco.re","ip":{"addr":"162.252.214.5","port":2087,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":95532,"first_seen":"2021-01-04T16:47:52Z","last_seen":"2025-11-07T07:25:07.891766Z","alert_count":0,"request_count":2,"received_data":858,"sent_data":845,"comment":"","tags":null,"fingerprints":null},{"fqdn":"shahid4u.ws","ip":{"addr":"104.21.28.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-10","domain_rank":0,"first_seen":"2025-11-10T23:53:56.972249Z","last_seen":"2025-11-10T23:53:56.972249Z","alert_count":0,"request_count":1,"received_data":535,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"shaahd4u.net","ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-05","domain_rank":0,"first_seen":"2025-11-08T14:31:26.49033Z","last_seen":"2025-11-08T14:31:26.49033Z","alert_count":1,"request_count":1,"received_data":577,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-11-09T22:13:41.73664Z","alert_count":0,"request_count":1,"received_data":433013,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.intelligenceadx.com","ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2020-04-18","domain_rank":673791,"first_seen":"2020-04-29T02:39:45Z","last_seen":"2025-11-06T10:54:18.530715Z","alert_count":1,"request_count":1,"received_data":42498,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-11-09T22:13:15.598397Z","alert_count":0,"request_count":6,"received_data":62053,"sent_data":3208,"comment":"","tags":null,"fingerprints":null},{"fqdn":"intelligenceadx.com","ip":{"addr":"208.95.114.100","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2020-04-18","domain_rank":61654,"first_seen":"2020-04-19T20:09:16Z","last_seen":"2025-11-06T10:54:17.769459Z","alert_count":1,"request_count":1,"received_data":257,"sent_data":1746,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.ipify.org","ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2025-11-10T00:32:20.959797Z","alert_count":0,"request_count":1,"received_data":271,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-11T09:21:20Z","timestamp":1762852880,"ip_dst":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.8","port":37130,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-11-11T09:21:20.227746+0000\",\"flow_id\":185119533981173,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.8\",\"src_port\":37130,\"dest_ip\":\"104.26.13.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3513,\"start\":\"2025-11-11T09:21:20.220661+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-11T09:21:22Z","timestamp":1762852882,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.8","port":52130,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-11T09:21:22.372887+0000\",\"flow_id\":755164773527703,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.8\",\"src_port\":52130,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-11T09:21:22.372887+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-11T09:21:22Z","timestamp":1762852882,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.8","port":52130,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-11T09:21:22.392967+0000\",\"flow_id\":1351901087203079,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.8\",\"src_port\":52130,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-11T09:21:22.392967+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-11T09:21:22Z","timestamp":1762852882,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.8","port":52130,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-11T09:21:22.412947+0000\",\"flow_id\":2051080960757011,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.8\",\"src_port\":52130,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-11-11T09:21:22.412947+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-11T09:21:22Z","timestamp":1762852882,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.8","port":52130,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-11T09:21:22.473102+0000\",\"flow_id\":755164773527703,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.8\",\"src_port\":52130,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-11-11T09:21:22.372887+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-11T09:21:22Z","timestamp":1762852882,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.8","port":52130,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-11T09:21:22.493218+0000\",\"flow_id\":1351901087203079,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.8\",\"src_port\":52130,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-11-11T09:21:22.392967+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-11T09:21:22Z","timestamp":1762852882,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.8","port":52130,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-11-11T09:21:22.513161+0000\",\"flow_id\":2051080960757011,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.8\",\"src_port\":52130,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-11-11T09:21:22.412947+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-BM642X4VSX","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ab88fd51c596aa425562aebd3f055e9","sha1":"f3de1b5a562cd666a07bb0873b3ca5e9de044573","sha256":"b78932bc83706ad120d1b55f207f515886d344fed8c76f47afd1f765e5f70cb2","sha512":"3c5046ee5b7405eb4258ba764d80cac6278cbd39225476087c86462bf35c9a6f64ca94a2385ab5ef68677977bb2eb27a93e178e7647594c2da84b6f10ca4b456","ssdeep":"6144:rJBSz5v5rPQ5s9KP4GFdmJnxeSEUrm3IcRXtUyhjMvU:N0zh5rY5vP4GXmZm3Iwf","tlshash":"809418ce73d674265396f478502f018ba57b28a2b44cc896f1c9cde02e74a9a4277f7c","size":432409,"data":"","first_seen":"2025-11-11T09:22:09.217616Z","last_seen":"2025-11-11T09:22:09.217616Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"79e362235e366729632e60d6d35f8904","sha1":"69df1a1691b05442e11e2bc5825fc6297b977a92","sha256":"da82a56eb8524f5d12a2afcf2c5d0cb6184f26995167212a0ccb3bc2ba0def36","sha512":"94ca14ccb12238f547249a07134689257dd97639be34d7f466f52741df7176be982d88c5d294dd42a534a32d908533b5eaae33a13cb47ce0cf065d3098d9383d","ssdeep":"","tlshash":"fe60000000000c30000303000c30c3cc3c3f000030033030030c00000c00c003300c00","size":15,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-01T14:36:47.45823Z","times_seen":23587,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6043a0b1ebb36c505a9191b20e11815f","sha1":"6f9cda2539774241dca5f5df2e40b2e83139768e","sha256":"354d474759535f5f0bb63dc6c5ea17455fb3d281aeb3cd6d44c2f3f594c5dec3","sha512":"5a55931f152716ef8803227e0518befc7ec9fdbc66f16aab57824511c7f3a94bfd9b93b4417d6f759d04c517f3d242eec582b49a8d92be6079b88e10a27fb9bb","ssdeep":"","tlshash":"517000a20c0ba0020c228b02838222002020028a288830c220a088203222e0b3028080","size":24,"data":"","first_seen":"2024-05-15T22:21:35Z","last_seen":"2026-03-06T11:55:01.515568Z","times_seen":14363,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ef4f15c86cb43f0ef0e241b70fdd792","sha1":"4971749861cba038c2cd1dce3c68c28aed4676fd","sha256":"5c240a0fcfa70d0e87f614c22547e240fc1a17214a232b6d4272e4a4cd42d905","sha512":"97857fceb635a585da1def0b639726d2414b8ba2b62015deadabc2ad3e01be420adcc1bf9bc1508aed8fb0ac45036922aff198abde2a291ffc30a6269c2812e1","ssdeep":"1536:P/EE3nA5ePdB1tz9NSU3myQjyiw1snWlwj:3TnAQp7S4QHnWSj","tlshash":"bf533b797561203a82b228fe167f532170ba56906d46d0d2d3bdc9503c38e9b933bf9e","size":61289,"data":"","first_seen":"2025-11-08T22:28:35.654808Z","last_seen":"2025-11-11T20:29:54.277417Z","times_seen":150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8ca7c30de8572b4e63d6da4cca90e422","sha1":"d5e8947c5e730f04ebc2df078b8cf17597e0e114","sha256":"b0ea1d7ab181cc0e6e97771b5bfbb8bf8e30f4191b625e7fdb04bec217f155f3","sha512":"aa6b0c16098892ea6ada3611f8557bcdbce06a3e06e9b8d1e2ab307d5677b60200c39b0bdefbe94363d8f120e2489e51fe4a3c9dc81e4ddc071a1b57b8cee061","ssdeep":"","tlshash":"161154187424680a12f624f8817afe15b16a83c5964438f578fef29566354862953b5c","size":975,"data":"","first_seen":"2025-11-10T23:54:02.579076Z","last_seen":"2025-11-11T21:02:16.909801Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ef9e29d830b47e493c51972bb3af3ef6","sha1":"95d6255c5e100dce97da5619be073c8dbf4f00c0","sha256":"fc5a1ffc9513896711ec2c788490995715c8d32ccda8c4e2c68a9bd8cb214e77","sha512":"af408037587ea95e4db5c0412d582ea898d2fb5084e5917048698bc482dd7c3e8854d87fcf3adf508fd8cceef746eab017029aba07aa934184675a6e6c88f0b9","ssdeep":"","tlshash":"a270000000002830080208002020ca8e2a22208022033a00800a000000208802088b0a","size":19,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.482014Z","times_seen":19081,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"df0f0e3e7f31f2501d7e19833ccb4ddc","sha1":"e551bfcbdd3a7c41875f1a974ad1914604b5969f","sha256":"511e9d231c9360fcb7670f7cbaffb35bf8180f124fc080ebbfa5962d4c8bb089","sha512":"57497c56a50a2a0ed0cd9862fdaf381fbf969bd3048dff24dee46f2dc10139cccfcc4b275d7d74cd3d8f036ada1eabe54d05c4773e80ba797748aeff6c855898","ssdeep":"","tlshash":"b98000f8002300c302300f032b0b3302b033000c3accb0ebba3080303802303f8020c0","size":33,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.513113Z","times_seen":18131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"476b43130f4da0758e51a26ea93e733d","sha1":"5eac9c53e9cc1410e58f6f0bdc85528acab30736","sha256":"b19d05a8d492320ab4db4d74ea0e9e90374bed47a18e805f8018ebb00af0c23c","sha512":"d7b6af5bbc8185dfa58fccd8be30e14c79aed4aba53d8824cc066465690837c5f2d173bc3bb78eda33f9ae91ac0434fbb63d4d4c906e1874cc614ecf72ac4291","ssdeep":"","tlshash":"547000088202202a003828028282a220223ca82080028020000a020228002032ba08c8","size":22,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.506782Z","times_seen":22784,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c24107ca675c86ce400f00f60737bf91","sha1":"915db7d3426c409da4f1c6d58c38d9dfd6ad39be","sha256":"3688d7e88d248ea850c456f0233738d10695a410a3dec97785ca7422c3f562c1","sha512":"0b10c8522a9d3b4cd1b5d63918ca7888bf837bd48c2c456c38e20e215a0c5e1cc38e5248658c54021b1d2337a68dc1f61b17adfbda678078d0d4a8cb4fc56e40","ssdeep":"","tlshash":"2870002002002830880200022020cb8c2a200280280230008208000800208002808a0a","size":20,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.491972Z","times_seen":18883,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c510d5a3d97cb2f599576a56b2703434","sha1":"9bc8f27eddd88f1e3f879b2dceb86f92486dc1e3","sha256":"b4a3a83fe09d48db0c0b4416fefb19af5f9e069c12d2af8793a18f159574bb79","sha512":"7adf4f6f79a04ef4aa41503ef199d996dfe027863d5493881f4689e595cc9ce27a4451f1be2617108f3716d2c26bea30fe4ef4c7c4922d4896cf3f7f94e50467","ssdeep":"","tlshash":"7d60002002002820002002000a02a20a2002020c82020200000a8000220208300802c0","size":17,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-03-14T05:03:29.639095Z","times_seen":18159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e969e6981adb7ab1cb174994a5c8c627","sha1":"5f534a259a6f3754d1d392028fd4cbb344fb6563","sha256":"5cb18f9c0eebf644c0bc27e5224177984121b4c4a3f8189861a6d797a15a2e7a","sha512":"10bbe815bb6e4ade10d00a42a82dd10b668e95e275161cb0a637b2ea95785f8f7fc72b31bb48ac9c1dfad03d811912c0683941a3c09357525f164915d5b033cf","ssdeep":"","tlshash":"a380000a88a8a0222a30a0228c020200202e822080ee208083f2032020c283c022b802","size":30,"data":"","first_seen":"2024-02-12T20:00:22Z","last_seen":"2026-03-06T11:55:01.514986Z","times_seen":20053,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"dca14c896efeb4b80c68c457aea67f39","sha1":"2488a552655a41fbd3f3165ea5b1999f46f25738","sha256":"998158f6df4183edd82539e6dc971d32f50bc7ee075f64d4abc46d3011a9da27","sha512":"56d0ea635f1a8dd9f7bfed6a8e087ec4d8e38bf65eaee1e1262740fc7ce80cf1b45ea861f0d5949b69ecc650427ccc8879f1b7c9af78933ba26d0aa9f704033b","ssdeep":"","tlshash":"ac8000b02a02b830888c220eb030c3c83c30000030033800a22c00cc08b0ec02208e8a","size":37,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-06T11:55:01.497655Z","times_seen":18393,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"879c12264b74d969b0314e9a9cd1f17d","sha1":"714a5d759f4d1b7d41f8c5526451aef114b33d41","sha256":"28be88d787b6e773eaf5d0818a6c62446ce628dd8ec0659c6f78410588838337","sha512":"3547b27de7764e655bc8749fd5c1166599da57d2a76057e66923476fda692917a9e537a934374c77f361359b9fe94d739bc037044bbcf2648feb43f7ff9f1c7f","ssdeep":"","tlshash":"f7700008e0a03032203a020a228222202a0c2020800000a0080a328028882832380880","size":22,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-06T11:55:01.507418Z","times_seen":21973,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4cf954c76f588e097ad9ff70e90a86f2","sha1":"6c3f32fc10b2d98ee69d845eaf5e2d99841bd264","sha256":"0098b3fb5f82abbebff8c293e42863b93e210b01f0032c4147fe1457f5b48a93","sha512":"73b77b211094a65a16e25ad1c26e4001993d80adf820126ccc940a407894eb4462a7d5ea953ece44e33bf77139d896fd6e90029dc66cd15a4be654589c844cb4","ssdeep":"","tlshash":"847000a00e0a888000a0a8ca0a832bae32a2000a8220aa02a8ca002228282e30280080","size":25,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-06T11:55:01.491435Z","times_seen":16302,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d5757abfc2dfe2efd4bb1409941cf087","sha1":"a3eb249ef753951d22faa61f87302479aff27023","sha256":"bc9c06f981e7daa0478c449324d4010cdbc3c83c9a95879b99a0b531f5cabb87","sha512":"a21d0aae842d3e854147d43d706f8a72afeb8a045e8c020c6a3f0e61a0c91066b86163539ba9a2827f0a61d53b120a90b5c1ba65875e334a87ceca32b06c0117","ssdeep":"","tlshash":"188000ae80a800202230282a020222a02203e002c882008000ab0300208002b0280c80","size":27,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-14T08:01:01.793934Z","times_seen":19591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5eb9472f3c3e0e79bbc65d78a60bc3d4","sha1":"1a93f96290f63802dfde06c9707f42c9545f6695","sha256":"e0bc19473df9795cd42be5da545b5a6828d31527b4ffa3769564f735abec0deb","sha512":"a52b08082e87bc47f5e0ea69097ec0ae039648315c10f12de50872e59108363bcdbf06596df0d31df3b03e71077c01f681f5328ca942ddba9f1f625e2c7fa206","ssdeep":"","tlshash":"eb60000c000000330cc0c00330f0c3c0fc30c030300f3030000c03003000c0000ccc00","size":17,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.483951Z","times_seen":16683,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"61d9031f2b0da3ac81b6732b6d1ecf83","sha1":"515d4db3d1120a7160d1bc7d93d57f7fbdea1fc4","sha256":"436179ef4964c80a03e62015696ba10c5ae70602c6538d07f50b75f35bd72a27","sha512":"3b6ddafdb73b34756f57d92b3db048d03ac38dd2f96be7d4ba695835470b8ce460e2d6059a84e64f3bc2d5237b6151aad2a649f76ab43a81447182684b5741de","ssdeep":"","tlshash":"b58000b02020a830088e020cb030c3cc3e32000230033000a00c028c0830ec00228f88","size":36,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-03-06T11:55:01.504781Z","times_seen":18663,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"c.adsco.re/#0.7827745314588597","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.43.28","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"77c8287be10ff4b66a8490ca4d999917","sha1":"7fccb364c5e22958503bcd8b92cdb648d5c4c96e","sha256":"c2d43195d015b5856873b3b0c6e717ee21599ca3f03f820b7c325f27b9b6a31d","sha512":"2007ec2f0297a0479f4507af110911f7022310f757533ba1bbd40228d9b26908758bc09afa59f09471cdc254e49b84baa61f80514a010195d288f8049dface07","ssdeep":"","tlshash":"e3f050ddb475e1e955d22580bd2fbf407876526e240361e0d20cbcc1041868e871dbca","size":486,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-01-09T03:52:32.475699Z","times_seen":6630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e018c77e67a96b7f5440da3c7397e35a","sha1":"a090b0a7035556c7f71070fe10c2e37fa15584c5","sha256":"5c5bb18e544cb67f765d8a6d2c774838d3ae95df9b62f25660c64554a7302d8e","sha512":"cfaad7c410b0f14c2c849855f859a973177c6bdeb27ce9e3dfbbb38169a4abd0f66252213aa1885751c54d1ae761fd68af739081e9b7d6875f084c2240874062","ssdeep":"","tlshash":"0a6000c000030030000300303030c3cc3c30003030333000000c3c3f0000f00c003f0c","size":17,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-04-03T22:14:46.558139Z","times_seen":21324,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd4820b250c493253358471e0614f67e","sha1":"6675f4006750dd490a573c0ebb7e7aecffaf9b5f","sha256":"01167d2f7fdaed7bff31a7f84233228c2648761bcab5308bf65945c17ac1e6b6","sha512":"4f2d6ae07080f847d02bbcf399cb20a243678e7e0bac460260a56da467b10e14f12ff1b708933e7c1d3ec5c09d337ff9404bfe206a32f91952c1500661649f48","ssdeep":"","tlshash":"0dc02b8c230a0c7091fb37008b7ff600f002322c94d56931490d33446d30e07e744814","size":153,"data":"","first_seen":"2025-10-05T15:42:05.811855Z","last_seen":"2026-01-11T22:52:14.379292Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"97027e2582ced35b186bf66d3601cfd2","sha1":"4133fa316e585c4426c58951884d2db2d0e21548","sha256":"b18f7c2e4dbfe2926b0413634f7cd6781be55e27b4b885dc68a8f740a80d72e1","sha512":"6ce568f004c961c5a0e2e884ed98e6bdc8ecbba0dcbadf7d88cff201ff8b40a55d01a18cc7a247832c93f0129a2f7e68217dffa94071a50337ef0e17366448a0","ssdeep":"","tlshash":"9f60000000002830002e28002202a20a2002200002020a00800a00002220283208838a","size":17,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-01T14:36:47.448902Z","times_seen":17976,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"10e160f0bb19305f081118188d4002fc","sha1":"a2b0810be6d009dba0d7d2da90fcb26252aa0264","sha256":"9452b1ea7d87cec67e027a7a04773cf4297e4d9f9b52b73f0e93adeaefcf8e3a","sha512":"bc05746592da1dbf1a2f0ff22accb7bb0378d99ded5177bd80656a596bbc430958cf715ff5976f2815b8622b2d9c60e301c0a034e61d7fd168ba4690e0ed39bb","ssdeep":"","tlshash":"13f0891846728d3500f725f753d797d53660488bf58596af327ceb991f008e1a7604df","size":646,"data":"","first_seen":"2023-09-30T16:39:31Z","last_seen":"2026-03-17T16:33:01.987866Z","times_seen":179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9aa3dc35f8ba994aa0f04a42c4da5062","sha1":"a65df79b7b70e8b8d22a2db929f6598428a827e0","sha256":"89e4c05e12e12f5bdf85a4fb89bad572dd85256091add09fdb9c6e42e703e2bb","sha512":"72ec1d5aaa34463f798b2d2c5976a6221f70e51ea2afff582319f4c8b7e31f4a67ef2a2d39427b4d1cc89ca66c4d4374db662c1137380ce0aad2acfcdbed4d6c","ssdeep":"","tlshash":"ec7000080000a0308808a002882ca3803c20a820b022a008080823080000a020008e0e","size":24,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.493594Z","times_seen":23251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8b5e8699c1b76c14c38283a27772a3e0","sha1":"8e39b41dbcb6877e9b189351a2c90908abdc7754","sha256":"cfab5312f1cfff1e8162225ab27453306ff627f512bcf18225c0a305ca093e1c","sha512":"66ffa0031cc22b4eec8867f36dcf3d887b021a11ea74f51c2a2eff1ec4cf9eeb44c4e1d5a6c197f29d66546c5f42ef283c54261f6157687237e4dabe1715523d","ssdeep":"","tlshash":"cb700000000228a200fe230e8e82230822282223a28820c820220a2820003232380880","size":25,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-06T11:55:01.508546Z","times_seen":22393,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fb440b8133f21c3e5d3e39624e7bda94","sha1":"1b46d8568f9bd8a2be944d6a61924a21ec0b6e4f","sha256":"a5e2bc908c3bd3196d273564d073484f9905d13817490eca5aa249e701139cdc","sha512":"f874692932aab2be754d763a3998c5cd3c654a5bcd78c5d839fe0ba506f9a9e563d3cecba0ca71a6b0db35ff94943f6fa8bb0292f10c1aeb7df2704ea6d85fbf","ssdeep":"","tlshash":"047000000000000820200802220322083822223002cc0002220a083022ea00b80282a0","size":20,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-01T14:36:47.456368Z","times_seen":24287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7a837a4ba8ea13b8193945adf0261e19","sha1":"61428cd720ebc0f01c4c017204c313193c22c101","sha256":"28d9693460ce57dd4e01742e50a1baa10cbed3fa6c20c2a69f02424f80fb9a2e","sha512":"abe0e46d98027527a7d2567c4feaece7ad3c1ec94eed8fea59b9eec596cdd4fa39e7776e9dbc4dd6fe777d9b09300d45ba2a49fc9479e0acbdea92ebf5ef940f","ssdeep":"","tlshash":"516000000003c03300300300030f33000030003000030000000c00303003c03c0030c3","size":14,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-01T14:36:47.441265Z","times_seen":23236,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"326f7a0ffd2d70c3b3ff8021b6da90b9","sha1":"f142855fc5adf0dc25c46e200422c21ba1ee2cf7","sha256":"b15b90381c1b338ebd9a266280c573b5c1d8547f7ae243de3fbaa5af67c9d819","sha512":"97fc71036b4f1c51e812504cf1110eba1c4d52f8f083a9cb0a5791738e292c06e3bf230f738b5d144343d15c5180ff4b6119465dd5fce9eee35fc9741d88ec64","ssdeep":"","tlshash":"6a01f48b1c7291a259bba22d2a6b3320b5759107e8b57cb4785e81004f6dd4e86feac4","size":826,"data":"","first_seen":"2023-11-08T03:36:57Z","last_seen":"2026-03-12T22:52:33.642286Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6a88d4bd5bd93656328a2f38b4378d0b","sha1":"d2afdc9b1693f0cf62ab6e88bbcf4e20fb62844e","sha256":"3b1758c84d9df642c22e7c547795bd40ff0a9610795e44c90109fa7f9b8016ab","sha512":"c64eb8517871a1b996d76fd0d9982a9726515a003cebbbdf1639067607e2f7697c97f79fc176802c7e560f325e3f39f40c9edecb49e7c1626b95ca0cb8349424","ssdeep":"","tlshash":"687000380a2000000230202200020002008282a0c0a2a8c0222a820002020200282002","size":21,"data":"","first_seen":"2023-03-07T12:58:03Z","last_seen":"2026-03-06T11:55:01.48721Z","times_seen":8444,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d9f9b0f82813d813afe0d450e9fab4d6","sha1":"cb6ce93dd97adc3649f697ff49681f5aaf8b1671","sha256":"d204422e9d49293ab422bfabae9607635876cb30f77215f133603bac691f6f4b","sha512":"849997b396eb218b8bbc788eeb34ec3eb9ab4c809a07ac707a57a5e13baabb69d2c52795403d032f007276109c7f4476daa8255550fa236873e1eb9ba6dba3ba","ssdeep":"","tlshash":"706000c20008802002c200028820a2802832008a20022000c00800000000a0c0222808","size":17,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-12T13:30:56.245454Z","times_seen":23634,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"41310478a380eaf7e07dbad9b4f81a97","sha1":"1714b6ef86e90b5b23e2aaa1e7728ed9c59f4d34","sha256":"848e5342d9196c0f64861ab926a3c5aecce9294750febbd22e5d8df859bdb144","sha512":"7b93f330547524ce01b8f888a8d56c19cd4432fbee43db16aab33fc1aecd77243762c5e7dd5ce767e38c0fdf9d58bc629caf106d77689c1ef90ebeb09406580e","ssdeep":"","tlshash":"d37000000000000b203c00020a023a003003003000880800820808302ae800b802c0a0","size":23,"data":"","first_seen":"2024-02-12T20:00:21Z","last_seen":"2026-03-06T11:55:01.500018Z","times_seen":19951,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7145e6d4dd187b573a13f0240103f6f0","sha1":"f8e7ff7fd488f675f418011ef8ecca4a822933b5","sha256":"02665a4c106fc96e71ef5a17511cf353ec3f5cccb82ec9fce719b23967728897","sha512":"8fb980002683780ece97cb8cc6679fb9c8c97f543b927fe1efbf4073887176b68be02fd0ffbbc4bec0ebce401d04132fe4d1ab1edab9d006be9493f77bcfc736","ssdeep":"","tlshash":"0d700020000082000b2000032f83b280300a033000c8000002028f32a8e802fc020080","size":25,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.482966Z","times_seen":21540,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6b102c6276b7427fbd9d840a55b1f810","sha1":"c14fc4188ad50b146212b5c3efd5556c39c0c3bc","sha256":"af18ee7d06fe2ee2da28af260ea0c78923664ecbc220f3ce395c50b1822dab7a","sha512":"1ac3bd21fa66c0d0ae098bdf685df1141991add11f94d75273b228120c70c667870c15274e7070d6133c88833ca8cda86b11d90048982707bde8fd5c22ceca39","ssdeep":"","tlshash":"78900405c335474d1574010477555d031400130440154d15301c101135454c3004175f","size":41,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.492497Z","times_seen":16623,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"bdc6234a33432c503640ad2f62105dbf","sha1":"2e733c2d4f1953a7ca2231208e8e31edc399ab19","sha256":"61e43d202b6cd0ebf29ac8014115fcb890eb5593c4160b9ae285206ca911bce6","sha512":"ff6da6a9cfa04e9c0e4c8c038b70ff6461de31cf3020ffa062fb50d6507ffb72d431652f7a8eaf7fab316b387a16a0ba5923cb568450f6e5a3eb7c232a3793b6","ssdeep":"","tlshash":"bd70008e020000a0cab220a80a022300b0202c0008022200a0a00008202ee038288080","size":21,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-04-01T14:36:47.455314Z","times_seen":20563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c8d967999607cd820c3a947a98d52f84","sha1":"d37bfdce82851b85dab7aa69b037d2ca140e2ddf","sha256":"0e27576eb1e9c067b58d47b8749be97d9e94c1e3d67cdf541784148cd80a04b1","sha512":"299e3512dea806608762fd9bf97a96fe6d0d36391bce60eae9cc1449deea726b09b71d6d4e73b5544736849cb70a935e1d853a7a064286a48b9f2dfff0761599","ssdeep":"","tlshash":"f680044d17f00d4d457c0d4c7344114470d4f44f10101c445014171570750315005043","size":37,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.496646Z","times_seen":16060,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fe99bbf2987d52a27e4d042d61264b5f","sha1":"96bb68de49d3a4146142cce3f02de1ccbf8d0bf6","sha256":"cfe90e4da6c1841088b25b3582dc78b887f3239cdfde633ff426703c6ed538f5","sha512":"9dd74689d8b3460b4da7557d2797047f31cfa1b8522959d152c08f1f48989897e15f026d9b254a7ef61b99b9b18fc002054f29a12a2e30554a68d7815c53f3dd","ssdeep":"","tlshash":"d570000a20a02022082a000082022200288c0082a80800380a008b003c008032222382","size":22,"data":"","first_seen":"2025-03-02T21:04:17.177505Z","last_seen":"2026-03-06T11:55:01.511158Z","times_seen":8483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c809887dc51fb5a7e73a3a98c3dd661c","sha1":"7d7574d4dcf1e06e2230379897c5df681ba603de","sha256":"1138f8c1bb11f4a5f7d8354b8c8a642ef94c9c741d76a7f476bac6473b7de085","sha512":"3a5e6abed1f1fa40c5d7d13b98d4e90d180f5913a673f10db23f40b1fe68a70de8e780c2633bb6f37745ce4aaf81707844817fa84baaa2b764a322831c298e7a","ssdeep":"","tlshash":"9b8000f00283008b08308f03230b3300b030200c30c032cf3038003c3002383bc030c0","size":32,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-06T11:55:01.494055Z","times_seen":17899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"67b2371a222c2dc94f01b8579fff4f4d","sha1":"0b0a5e2d11790de282055efe8b8cfd6f4378bbfd","sha256":"dfafe4f2e08c006ec277e8042267c6237512a1a93bfcf57657420d4becc0a97b","sha512":"06a32863a820cca2b2f4460c10c4dc3583687648c909c5f67c746e727ecd4ea6301db1273b40dacdaf397a585ff257eb8c3e226fc023e95d3bda257e02505dfb","ssdeep":"","tlshash":"d4700002880200a8302bc808a3022300200080802882000008888002b0000230808088","size":20,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-06T11:55:01.495091Z","times_seen":20840,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3a0f702609d286bfdeafb0268d485f01","sha1":"f8412fc045d2f2fd2811d0a513c9f7105c881e67","sha256":"63fd63a33ca43f07ce872672d604657ec0fbfbe24bec43f4b322c0f7a1c2ce25","sha512":"fba3109cd858ca1ea95dcf694aecc590a62e2493cc8de313ed06ec5ccd90305b11c9de99d6cc39d8ce21d8e9003dc1e7097de405c115025ea709e3e5f7696904","ssdeep":"","tlshash":"2b7000080002002208c0800220b08280ac208822300a2022000c02002000c220088800","size":19,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-03-06T11:55:01.494584Z","times_seen":16733,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/assets/glide/glide.min.js","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"19a4946fcb0f2108686817ab5f4ddf6d","sha1":"a179d8d5f25d7b91e8a119ed8b2485fd17c07db6","sha256":"cfb50ed09592e4537a669b8e808ebe9fa885972309c574c648a11e1c5cce88a1","sha512":"f9208199dd8771b19c01aeced664b12c442924c9ad78e7c1f03d2e117b13f8ebee72327a6c82cdb631871c49c1dac7972142c1a558a7ca17d0861746ac68e93c","ssdeep":"384:LNfiIuGWeDiEZGfMka2EFXevKCwxKFp0neN/tH9o3B0+pAc62K+imVBHq8:J9t2Dicbypvu+imVRq8","tlshash":"5fc2734cf2c5b0691b836078547f160ef2733e54688a8158f4b5e8d5acbca9d2127fbd","size":27566,"data":"","first_seen":"2023-04-10T16:13:20Z","last_seen":"2026-04-03T15:43:38.016272Z","times_seen":737,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b7d8a1a33a77fcd0328d3c709c5a9eb3","sha1":"e8ea90d66488aae87f231079141b02b04cc26f05","sha256":"3f06772f212125287a824492bf133d5fc6ef851b8478c081406f650716869cde","sha512":"b92d0879e95318270c892770db71380d6f66efbeb8e4c9a8155e82b09e66a0a90844a4d0e38ede9b6bd536d8926ab4359e3bcc5266594f04136fa66295bbc9c1","ssdeep":"","tlshash":"f37000082080000200200002020222003202203080c82002a2000a3020ea08b8020080","size":20,"data":"","first_seen":"2023-03-07T16:36:56Z","last_seen":"2026-03-06T11:55:01.489296Z","times_seen":4296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a97ae6bd4dc972c26de801f868a79d5c","sha1":"cf1a46aa575a9718f8d4154813a7892317e7f8bf","sha256":"51c1083130407a8772738aa2380eb5a583240a47d98f2204b124c06fd11aabd5","sha512":"f16b7e511db0f35f83e9380c46a6173de1ca6aebbcf4aec1be6efd8d0cb669fc9a07c4e7702149f0421425109c35a9cd041347677ccaed445c978296502e78a8","ssdeep":"","tlshash":"51600003030c0000c00000030c003000fc333c0c3c0c30000c0030000000f033cccf3c","size":17,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-01T14:36:47.464445Z","times_seen":20795,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4260c01394765a497287987f27d6823a","sha1":"7162f84a1608c790ba9e01abfa0e0ddd067feb97","sha256":"0200f755a2c13b9335fe39b3a88f696c334e518e8407780c4731d8e6be966c4e","sha512":"acb1477b99c1be7773301f0a9ac146c60b4e5961824b2d27f4ab27d2f879ac4985a4df0dae6ce4cb2c0b3f9c93d5731320df8a49ddddc0cb9b4c8d2e328afeb6","ssdeep":"","tlshash":"7270003003003c00c03003030f03f3003000030cc000000003ccc00c330300330000c0","size":18,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-14T05:03:29.646147Z","times_seen":17921,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"902c460afdd3e381e561395b818a5dbf","sha1":"91008cfe46804ec773a2e4f72302086a0a41366b","sha256":"64e360e85164e7675724c7fe1ed681b25a138c51d437bac5ff97e8910ccf2aa7","sha512":"f1cdaa252c9faeb7cafc830b5d755b186e10d090b7b2482e66ff0cba147c8ba570a1751dec8f3cbc4a59e654025753813aa3910f3c0c9ea2a673bec65e485416","ssdeep":"","tlshash":"5670002002002820802e20022202a3002000020008000000820800082220203280828a","size":18,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-01T14:36:47.457597Z","times_seen":17688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.intelligenceadx.com/pimgcache.min.css","fqdn":"www.intelligenceadx.com","domain":"intelligenceadx.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"158f176bc9a5ea23ed9392bc0774255b","sha1":"4ef00170f0024d923cf2a6958a4b0fed12c51b2f","sha256":"89754abea54b84160111298c902443f0a70ee0f2750f51c4b072e95af0d61119","sha512":"30c08a46ecaa4e74cabfc83ea6b561243781307b4ba837e3960449ed6138d93a1b6e48f774fc19649dcd1e95e67afd550d5ad7661eb9e747820daafe20a77fb7","ssdeep":"768:bt9rqAYKKGZzFQ9JsQU+YDngZGihfzmMzhYrTsAysncCWcf5k5sigCklCntlqoDX:bbdZzFQ9JsTgZvfzmMzhYrTscpAZZ","tlshash":"831329aab286282601e741ba503eb316b233051679129458fcb9cdf96f3ddc6117b7fc","size":41946,"data":"","first_seen":"2025-11-10T23:54:02.555933Z","last_seen":"2025-11-11T21:02:16.900792Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d720eef71edef78b948a643d5712ec07","sha1":"ea5eb334bd6ddb0f04abafb700dc2ecb30070c76","sha256":"2daa1a91b2430e9867296c9cb26d1483785954a9bdd66f79b2c754bab7092cae","sha512":"63368ff1fef849df7f849af23bc2f24698893bd3d58300282427a76665b2d5c94f097d409f93173ad9c36944b4fffc2e37fa03a91f81e4e04f3737f9b73d2d6f","ssdeep":"","tlshash":"5f6000c00000c00c0000ccc3c00300c030000030c0cc3c0003003c3300cf00ccc00033","size":15,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-06T11:55:01.51255Z","times_seen":24260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"16c7d365400f1536df4f8f10af7dc849","sha1":"f9fad5c9b0804458066798d5c07abe6bb3d7f9db","sha256":"25e6d90bd924bac9cd9660e9b73f63f3eac77eefd135e809d828777d97419a8a","sha512":"9154d3801ba34ad0cb066ef47a27e84683e41ffe64e852a419754c71786ba1cbcdbff4abdff72c0d065075bf1eaea5aa3a30c9f0e57f59f36b37b9baf48a89dd","ssdeep":"96:uCla4YUEokWKspEbcQ999+up2XaPLZML4cmqSzer:uCla4YxhWKYAbb90ajiSKr","tlshash":"729144f9a9fb6171514373a85bbf8145b23b402b6607c881b5acd3507f85cb0ca929fa","size":4247,"data":"","first_seen":"2025-11-08T14:31:37.326141Z","last_seen":"2025-11-11T21:02:16.917772Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"11cc3621e45b2f0b945ccf3c32be2d99","sha1":"65369460879076ce3d2ca049392097e9c15b8149","sha256":"8eab171b0d256cf386d222b71fbf5380f2051b67452dbd83f41401a6216a789c","sha512":"e8af12a7397f87b88e2b71577fbb9be3be97b309345786db07de0c882ef2203a6d2b98a7f74c4f5b065e3d67cdb2c54f23ff7694c9ccc83e22ee93e950e60715","ssdeep":"","tlshash":"8bb009b69262c0b9c4469c9eb13ad6e7397a12143813b327901d49205522e5e2b008a0","size":108,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.509046Z","times_seen":20073,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"be6b25353280fac3960e70c9dcb6804f","sha1":"46c69609a3bb697e60644b18dc85d780c44804ea","sha256":"38be2b1c1c886666cd4ac85d71bb8b65e51d95c7c5f40b0c575f7d196a0442cd","sha512":"cfb553df29882616e097d28e643208df6aae0e005e63b7e7d9310a731135e9e33407ec268f12699208db7dd4fe2e8ba8a49de900e8b0a1a4bd83bd522f2ee953","ssdeep":"","tlshash":"10700008e08020a308380002028223222a0c282080822020002b0280288228baa88a80","size":24,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.486771Z","times_seen":22174,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intelligenceadx.com/ptmpttdhzpwryvuc?jCmPBJrs=BQOCAAAAAAAACZUAAk59-gJteLbf2_1UMpZVcv2ARfRA-OtwbNb1Mf7OpMzndRV68rIhDUdTguyRW8UxKA2rwY94-FAnFrNfwVRtkVPWxa1A9QsyCrYJogLGGfRpkuxyJzddJ70FuLWuu7d5nLs_UvU_ni7FbjYE55xICHRl3r9GVRtZsRmPBKUTrWF_1dP4978SVB3ced3lNnk1E31QjKNxzAl6LA3-LU2bgDnUTQ6bBaPpGL4HoyQweMe45mIkcv4F1lLnmxcniKL1y7kEvQirQ5wosfxomaJe5ZT_tbodPNkk_Cm2wiWfgw1MXTMISdYSxH4jQn6wgSFviO72dnYkBcYtUNL9koFXgSzRKQ95kzEhI7Qlvr8Th-34ADznbGqfGR3YW6OQ7vhxYfKJkYvYk-XXV73sNweX9qJ7icD8F8cY8jYPnOTofKAmS2lOsKILW6CeBmWFK4zaluH1-nzE5YeID6oaYD-_hLshlvEYMi70sKcLCcUgGPG6eVVwp84WlxPWpOoOxqY2DM_lE-WyUIm_-QkskNP1S2epA3b4gqNdJz_Ds-G3jOw01xfhSlBXhBLQ3QhxHWe7YLW6V8ks6v-sBqBt1WQbqkW4DIrUPixiqXMyh8Rxe-N7Wni2JjkDQ_jhvYdtnxFhTAj0mQGg40JCzM7Az1erTST9dDVaolXpPv6EXpv_bvHN3XmrWOsAWULxSv6muFY1wWuBpEFVMN5oKRJWNHL13czvgSTY-AN0-Zhg3aL03_EWxWgkRajE9SSG943DHPu5-Iy6K67SQ1JAOYAqH-OB1uqRhMjrnsV6dFkpp1lu8v-7g9ZMuZwqNiCRXcqLkT87v37fQSnn9--SuBORTvUz1dym9QbkMvy6yco-9nGzZEoiK0abub4ooEHIzRuGqG09sHTDda6xhzcJI7lcKpxd5B_3LeSLCgkYYIIJm5bpxg_CnzkoAvOkxaayk5kYqHcp92NpHTEJA26ZD2kdmkWs2PPNtaTZjW_iWzweKy7gGmaShoHfMGbz5A6MOC46O6XS7y-h9zPVyADV4Il7fXtle7aRC5SpSnclHqqeUyDJUrGmILm1PrLl2znowu_AeqvqGJZQ3L4h-JlApSKviRKHydnb1GWjnDTERsBMlPEndRFJGBQd_oM8NbYht6UKQOt3di-mtG8_mjPMVRMgR53iHb0-ArR-H1Q9HUqWg2_LwNuL\u0026dZjETvIw=4\u0026CfTutjzy=5253255\u0026RIjOUesK=\u0026uihSvzok=0,0\u0026bWrGexft=\u0026zbNOlhoE=\u0026DNKZlWIB=1280,1024,1,1280,1024,0","fqdn":"intelligenceadx.com","domain":"intelligenceadx.com","tld":"com"},"ip":{"addr":"208.95.114.100","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5f0a25e4d3522d56d48ce7bc3e518fb","sha1":"86794caff58f7fee6e684c2ba7195f970a8d6f4c","sha256":"9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5","sha512":"a3a81801f516a4eb11f00d6f56dab0ed4b8a79219e6b4f5436993479f09dae08f14cffbab3327ff66fb39201d8eba1153ae7114f7705a01cc6f0edf840ef1616","ssdeep":"","tlshash":"789002801814116115d1500b8d5159d01259b1a4540801324446ca502dc7883a415774","size":44,"data":"","first_seen":"2023-03-07T01:17:45Z","last_seen":"2026-04-04T04:57:32.928345Z","times_seen":22745,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0f4b802b51c4558d3f050b42c3292dbe","sha1":"a99984bbf5e882cd778e5c1d782efd8a5da81857","sha256":"4e26213b997dea9f8c66863fffa3863c9ba4553ad22f02630e66280a508cd477","sha512":"77777c6ed13875ff182abf07621a92beb298e13e4482546156a1c3ee3e7d5f32247cc6b8f52e2bd3695e37c1f0ebc6d52ca7b06fce760c22b92a8bc3a2898120","ssdeep":"","tlshash":"41e02b1890a343bc6713245572d7b394b8a2110b265481527bbf4a7e5f22eda904b98c","size":298,"data":"","first_seen":"2023-09-30T16:39:31Z","last_seen":"2026-03-17T16:33:02.076882Z","times_seen":195,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"javascriptURL","is_inline":false,"md5":"68934a3e9455fa72420237eb05902327","sha1":"7cb6efb98ba5972a9b5090dc2e517fe14d12cb04","sha256":"fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa","sha512":"719fa67eef49c4b2a2b83f0c62bddd88c106aaadb7e21ae057c8802b700e36f81fe3f144812d8b05d66dc663d908b25645e153262cf6d457aa34e684af9e328d","ssdeep":"","tlshash":"aa3000000000000c000000000000000000000000000000000000000030000000000000","size":5,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-04T05:39:50.912094Z","times_seen":66114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"aaf72876f0d5e8a677a383fd45bf938b","sha1":"d8b2ca3c238c933223f4a6313c5c0561f99e0c1c","sha256":"15eb7e222abfc64660d0f94c04053839498df20ea9ac9a13a201701a56ce3bf6","sha512":"c6bec20224539a5319a753a794c7521e7063e76b3d41bac8d7f0159880eaf3ed07c3fc1b0eb4ec285f1970f270f4b0ab68890d5a0ed01e3b1542102ad707f6d7","ssdeep":"","tlshash":"207000080820000820200802220322283822323022cc0002220a083022ea00b80282e2","size":24,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-03-06T11:55:01.498128Z","times_seen":23956,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7545d1da7159ca66338b4c84b69f8ae4","sha1":"0858800340ee5b8c413a1aabc50fb28d0bdf89db","sha256":"7510742fba4d25113b6124987e97cba40776bc5030a6a3678974dc8ba075bf81","sha512":"dbd944acd2868ed6eb1de313c0efe7590f715129f7ca5a9ae5a3dfb9de0035612a248441d9e6c4c1812d8ec4b3de7cd2a5973c4c71887361a2276de1d73fab94","ssdeep":"","tlshash":"af8000088820202a20be0a0e02a3e232220e3022a0020220000f0280380020bb302880","size":26,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.488245Z","times_seen":22614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ab3b4884408bb0261d6b56a7d288fe80","sha1":"b0f370141ada9b591302b575434c255db51ae151","sha256":"e5a13721b456c9e090f80944728fc91767f5ae01b01f59160e73ff2c7cacc587","sha512":"e57cb5cdac6519a8a24e85d5d91f2c6492e282308a94d369619e9455cef8f22a2a6abd62023647fbfa0228b6d3e12da22c280d691cd351608aada9c284ca3a66","ssdeep":"","tlshash":"6c80008ea0803232a2fa02038a822200a2af38ea88008820000a0200288030f232ac8a","size":26,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.519336Z","times_seen":23027,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cb12e2bae39e65c9d2941532f47d984c","sha1":"c7d0055b2b2eb35e946b09ba87011065b445b1ba","sha256":"2ef7ca07ed70c4ffbc59b1d3fa8df8cd2be1bfc66d1604246926066c9f44fd0c","sha512":"e0589a937d93701a4d41f6b507fe7843ef72145a3a0ed697796e62edcfaf49cebb4f3e74f04b9664b3f49f7722f1326e26aa1075831f3b5a70ddd14328f423e5","ssdeep":"","tlshash":"457000b08c0200000c030e02e2200020a03220802b003c03a28080388028e20320e200","size":23,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.516701Z","times_seen":15696,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.intelligenceadx.com/pimgcache.min.css","fqdn":"www.intelligenceadx.com","domain":"intelligenceadx.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:19.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1868349309.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Sep 2025 12:34:52 GMT","end":"Tue, 02 Dec 2025 12:34:51 GMT"},"fingerprint":{"sha1":"B8:E1:0E:75:91:D4:84:92:61:5D:99:08:1C:A5:DD:16:40:46:38:1A","sha256":"D3:DE:33:1A:48:7D:BF:5B:57:03:D4:CA:64:55:89:B3:0F:DD:AD:FD:3C:02:6D:91:61:DE:41:2C:6B:56:E6:18"}}},"request":{"raw":"GET /pimgcache.min.css HTTP/1.1\r\nHost: www.intelligenceadx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://shahed4u.you\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 09:21:20 GMT\r\ncontent-type: application/x-javascript\r\npopads-node: wb9\r\nexpires: Mon, 17 Nov 2025 22:31:55 GMT\r\naccess-control-allow-origin: http://shahed4u.you\r\nlink: \u003chttps://intelligenceadx.com/\u003e;rel=preconnect\r\ncache-control: public, max-age=604800\r\nx-77-nzt: EwwBX63NDQH3UooAAAwBuUwKAQH33w0AAAwBWd59LgG3BAAAAA\r\nx-77-nzt-ray: 2a494a153cfa95b335001369eb79e300\r\nx-77-cache: HIT\r\nx-77-age: 35410\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":41946,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1568)","md5":"158f176bc9a5ea23ed9392bc0774255b","sha1":"4ef00170f0024d923cf2a6958a4b0fed12c51b2f","sha256":"89754abea54b84160111298c902443f0a70ee0f2750f51c4b072e95af0d61119","sha512":"30c08a46ecaa4e74cabfc83ea6b561243781307b4ba837e3960449ed6138d93a1b6e48f774fc19649dcd1e95e67afd550d5ad7661eb9e747820daafe20a77fb7","ssdeep":"768:bt9rqAYKKGZzFQ9JsQU+YDngZGihfzmMzhYrTsAysncCWcf5k5sigCklCntlqoDX:bbdZzFQ9JsTgZvfzmMzhYrTscpAZZ","tlshash":"831329aab286282601e741ba503eb316b233051679129458fcb9cdf96f3ddc6117b7fc","first_seen":"2025-11-10T23:54:02.555933Z","last_seen":"2025-11-11T21:02:16.900792Z","times_seen":4,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":59,"dns":35,"connect":5,"send":0,"wait":8,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"www.intelligenceadx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1760333321_MV5BYzhkZTI0MzctYzZkYS00YzU5LTlhZTEtOWE1NmIyZTAwZGU5XkEyXkFqcGc@.jpg_V1_SX700-459x650.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.148Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1760333321_MV5BYzhkZTI0MzctYzZkYS00YzU5LTlhZTEtOWE1NmIyZTAwZGU5XkEyXkFqcGc@.jpg_V1_SX700-459x650.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 70059\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Mon, 13 Oct 2025 05:28:41 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lBy3n1Ahi7LhswxRnT9OT9N%2Fc42FFDEfNq33E%2FrZvJNgnW0MiAOMd5k5fwrdR%2B5G319S6qST5vOmQjBbUR0euYpnpWNU6H%2BKndc%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb8066b7b5689-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70059,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 459x650, components 3","md5":"22f773fa1ac15a6ea983c335ff23803e","sha1":"50ec5d8a99afecce79478562c0809543e694e92d","sha256":"b1e385de916558eb14caf5088bbdcf0df99702a2b69cdc0c452f6bab8b360c32","sha512":"1d66dc8ef21f9f89f749d525678a3dabf744b21f42b4e373074c4f34d95344dcc790a01e8e106d53b7830e805258b77dffb9ee4925ae3975e7c34aa9795e8b19","ssdeep":"1536:3k7PwRHfiK523TDiCjyVMhy4mZykkOLV4Th7b1rhiITxaQCpZFjQ96:0rwRHfifjDiCjyMyzDkO6TVHb1bQFjQ4","tlshash":"2063016854726c32e8b68c7c691cc724b2fe82675728c1bb1db07f1185bb6c5606cf87","first_seen":"2025-11-11T09:22:09.127829Z","last_seen":"2025-11-11T21:02:16.880826Z","times_seen":2,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":242,"dns":0,"connect":0,"send":0,"wait":123,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1759184486_MV5BMmYyOWE3YWQtYWE1NS00ZDE5LTg3MzQtOGRjNzFhODdiZjkyXkEyXkFqcGc@.jpg_V1_SX700.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.156Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1759184486_MV5BMmYyOWE3YWQtYWE1NS00ZDE5LTg3MzQtOGRjNzFhODdiZjkyXkEyXkFqcGc@.jpg_V1_SX700.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 131780\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Mon, 29 Sep 2025 22:21:26 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QBSDo4OJrg%2BTtUeI1I%2FUGJVdG8ANe4fsTnKAq7crEMnH6I2C8yxm9RnI2Lrud6hpEi%2Bp2BXQAiTYC1vowW6fFEghWP7Sz%2BoMbGs%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb8073d60b505-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":131780,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 700x982, components 3","md5":"5a7fc0008c4de71f20459dd5dd263dba","sha1":"73eb9d15b6a370f6919c92048533c1a72728f44b","sha256":"a2950f3e1b90581ce68d8e640ed5aacfc0a30d5b69ccb6cffbc9bb43fe798037","sha512":"6e0e6b3d7dabb46fdbba4d49cc3396ac6794f06d4ae97e070300078c236eb5211b04c6af4ffe43f0b2401dd2c910cc0fe24dac3b1c1e3f7a4d14f3f31676a47d","ssdeep":"3072:mACgOod75IODcBBsg5rDo4sTkr8Bqd0aQbvK:mdgOoN5IODo5XGoGaIvK","tlshash":"4fd3125fe348face7cbc041289d50b6a2668391fb017bec93af51c5cd96b90ad906c14","first_seen":"2025-11-11T09:22:09.129401Z","last_seen":"2025-12-16T17:46:38.241854Z","times_seen":3,"resource_available":false,"data":null}},"time_used":607,"timings":{"blocked":362,"dns":0,"connect":0,"send":0,"wait":136,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1762185556_MV5BNzNiMWZhYTAtODMzYS00YTg2LTk3ZWQtYzcwZmRmMDYzMjg4XkEyXkFqcGc@._V1_FMjpg_UX1000_.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.174Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1762185556_MV5BNzNiMWZhYTAtODMzYS00YTg2LTk3ZWQtYzcwZmRmMDYzMjg4XkEyXkFqcGc@._V1_FMjpg_UX1000_.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 213374\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Mon, 03 Nov 2025 15:59:16 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q1LDChTKUPhFgnbSWUH9HNVJN9MVLYx0C5UsP%2FfQ32A9Ul5gTHGHfyiqECu2LjJHiuki5E1MGbQUGsRKX0aQ32qkikeJ5YKrnLdudQ%3D%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb80abe6835a6-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":213374,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x1481, components 3","md5":"23b00b2357f1df6041788549b126bfd4","sha1":"aba4a78b01d0c7e0e72323152c4169cc3c6b2408","sha256":"2a3b19fc458cc784aca416601316d40eae20fbf8df18a81cde1c1a462ad00e48","sha512":"07c76b650d1a1169e1bb72b729b1219a6547e1c8458d7a8714b25b7917922a142476b86e54293cbcb421557d93902e8131688c5d90d061326f01a2e81f348d91","ssdeep":"6144:QkOmKg3KFmfN86iYdKqzIx+DN8Uqx0BaLgSYugMmiG:A7xFGy6inlaCUk0BaNYuxmB","tlshash":"9d24131dbcb55d10282db271e59b3140af3460ae3d3db39a94670927121dbd5b82ecfb","first_seen":"2025-11-11T09:22:09.130988Z","last_seen":"2025-11-11T09:22:09.130988Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1581,"timings":{"blocked":905,"dns":0,"connect":0,"send":0,"wait":525,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1762643633_a_100695502_m_601_en_m1_1000_1400-464x650.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.184Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1762643633_a_100695502_m_601_en_m1_1000_1400-464x650.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 44966\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Sat, 08 Nov 2025 23:13:53 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YByBgwzGHaTYLgHA5OO1IbXM26GiMXXjTKgeSqDyFK29pbbGjhBq91KTpxD%2Fjn1fdH%2FyWwCnMNYl2ND3vBQsG8WT29g5AlVgJDA%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb8185fffb505-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44966,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 464x650, components 3","md5":"1301636ded1958d8574f218a82f380c3","sha1":"c7a00b5eb31188d3f846977606543f3ca3625dd3","sha256":"f39ca32b3e7261ec929011c2ba1b171ea3ad42ab3168d43449fa87cc0f3e2869","sha512":"f66307f474af232342f5f2400d7117525464e282ada69938aeb4e6fc38b66a4e934ffb9abfbbd117ec84ab1508b5527da151e6e3ef8a67bd417d7f774cc00b64","ssdeep":"768:AZt3iYyrzgvfUpgrbKneSo8fF1/2cAD0SdR+P6v9d90EmTHu7xsu1Gz5PGOFUbfm:AZtBi83UenAe2vpAYuR+yv9dmEKu7x7c","tlshash":"db13f15a87608429df07dd72fbf93d64910aca30f422a39496f4e39693bf1c29357d11","first_seen":"2025-11-11T09:22:09.132496Z","last_seen":"2025-11-11T09:22:09.132496Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3187,"timings":{"blocked":3073,"dns":0,"connect":0,"send":0,"wait":47,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/imgs/bg.png","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:19.965Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/imgs/bg.png HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/assets/main_style.css?v=6\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:20 GMT\r\nContent-Type: image/png\r\nContent-Length: 627300\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Mon, 10 Jul 2023 17:02:52 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rs%2BP2YEBOAC%2Bb4d22I1DM%2FakPQi8f3hrS8KfTI6557o0pFgmR%2BIIv4QQ4VZCFMAn7ROxQ88UkVvVkAktQcMMMKN%2F8QblOcn3LUDP6A%3D%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb8043e0e35a6-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":627300,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1598 x 2272, 8-bit colormap, non-interlaced","md5":"fdc1ba13fee12e75a2a63d7b95542a50","sha1":"7b25a7cc73387bc1695f5e80998e3421608ae6eb","sha256":"2dffbf0d03a8f8dec2cf49aa46db2644261e9a0c74b68e6528be7c23a8a5d043","sha512":"873d5b5ea6cf3701ba24a9659de164fe67c04c28079d7069708686bf26b9ca2bf1eedf2a72c06358a807d4dcdd42f14f061af4b2b74ff8aef23a9189a88aedd2","ssdeep":"12288:40AMmR8MOYZkY4wRlFIMjuG1NWWJrZR16EWcUvWCKXvBwVPN6Y6e8OzWGnG4YW:45eMduY4YLoWhZD62lvB8N6Y6ejzWGGW","tlshash":"4dd423e48a11db36f66fe00968d9ae9f3778f1d4894c6c10264f450c58edf0b72ae278","first_seen":"2023-05-22T01:59:42Z","last_seen":"2026-03-17T16:33:01.949096Z","times_seen":180,"resource_available":false,"data":null}},"time_used":509,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":236,"receive":199,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1757211898_tt22898462.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.074Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1757211898_tt22898462.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:22 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 19550\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Sun, 07 Sep 2025 02:24:58 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XA9DKwoL%2BiOZ7h5%2B1BTqTgei5DvUeZVyATppA9ZIAiaGL1lngY8MClyt54Brcujar9haEf7EdD4OFAphs6INFfl8L5k8TF%2BbETI%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb8102c005689-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19550,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x445, components 3","md5":"a4a41a70aa2ef378b86f641a53ee8ee1","sha1":"dda4cc183db77522ceecf09fc71616462a4208c9","sha256":"04238894f2677981ce27a9af4401f68530e5decbb0a7b34ae75abdf8877763e7","sha512":"9703de29d2d43dd9235904e0210aa09146b7c33558653428a652e7aeda04e1ba898a217b9aa301342f4dca1fd6e8cdb994187c935770bb8210d179e00133b3eb","ssdeep":"384:cT+EatC2/1XO5MMPbSoPeCtwCRh/HIacixUjuwlxe34XlC3KHPKWb:cT+Eap+meSoPevCz/IaBxUju/+nrb","tlshash":"9092d172b3f0ba53db71acbe542188915184fec165dc0d22fe17de55e4d328199b3682","first_seen":"2025-09-07T17:30:19.150303Z","last_seen":"2026-03-12T22:52:33.381184Z","times_seen":13,"resource_available":false,"data":null}},"time_used":2242,"timings":{"blocked":1878,"dns":0,"connect":0,"send":0,"wait":330,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1760377727_%D9%85%D8%B3%D9%84%D8%B3%D9%84-The-Chair-Company-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%A7%D9%88%D9%84-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-%D9%83%D8%A7%D9%85%D9%84.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.173Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1760377727_%D9%85%D8%B3%D9%84%D8%B3%D9%84-The-Chair-Company-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%A7%D9%88%D9%84-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-%D9%83%D8%A7%D9%85%D9%84.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 76660\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Mon, 13 Oct 2025 17:48:47 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9oZF4nheZsssA1WuHRAWkx0%2Fw2FA1rjefP1irdcV4vwOZdOZLvGZYpiOnHzIzPJxlNM9DCwr3J7Qn2Zf8s6l09%2B6BEs5HDWxkMo%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb80a88915688-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76660,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 450x560, components 3","md5":"f0897de8ac8fe5316bbc9b78381b3f42","sha1":"758957b76c93d5b2136b1f33433e59beda3e5903","sha256":"1509649dd362317334378f02cf9ee81e6e11ecf9a3558bb3bc3f71de510cd7d9","sha512":"3881c5c476255305cba92ac1fdb614af0e67568f1fc1283f9fa23afe6b4a422d8acbd8d35c80276b4fd1c2f6e3aa7d304282cfaff42c0fc9a757d28cdf825a2e","ssdeep":"1536:oPLfskYTMlSSoGp4pM/yCsfIFxguquEuPWeofvDl51p/UE:uLfUFS7pMM/nsgFxgWEuPofvDleE","tlshash":"1973020c70fddd6cdbcf1260e187cdeda10ef9946bbd692360e23fd9ba49252a844059","first_seen":"2025-11-11T09:22:09.136609Z","last_seen":"2025-11-11T21:02:16.869654Z","times_seen":2,"resource_available":false,"data":null}},"time_used":921,"timings":{"blocked":876,"dns":0,"connect":0,"send":0,"wait":43,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1757291538_tt37793706.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.185Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1757291538_tt37793706.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 28236\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Mon, 08 Sep 2025 00:32:18 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IYzPM%2BwL66IcRoYLVmAllweUH4zhwf6OS9pzMWa7PfmUfy0tycq4Fioy2JJrAvtLcgesnblXNXnaoYhnYkorYbs%2FLjRQ8S4k%2Fxc%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb818cbab5689-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28236,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x375, components 3","md5":"b353ee0169e6971e62df30bfd0759570","sha1":"9be3aac809a39929610395db8f8705d1b7037636","sha256":"4817910a045e959170824c289cb8c4f431e140893447a630933d18b05b725bfb","sha512":"5d2d25c86c3543f0f1c6cad349beeb44b1f45691ec1397a5a27513631c9c64fba7eacf292c9414f3d8da7ae15a27a0ce845a8092e176cd9f64586d2811a53034","ssdeep":"768:nz7aA+FuG7bM6JIYNxHMKtYOVtcyIFCAJFthLi4p:6QG7bXJx2mYOVt9IRZgE","tlshash":"a9c2f1f97661ae0ee3d2093441ff4d06339ca5531b4eba7af35984c0520f4ba9da7872","first_seen":"2025-11-11T09:22:09.138018Z","last_seen":"2025-11-11T09:22:09.138018Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3218,"timings":{"blocked":3140,"dns":0,"connect":0,"send":0,"wait":43,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/shares/imdb/tt38353703.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"172.67.216.170","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.194Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/shares/imdb/tt38353703.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 206812\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Mon, 29 Sep 2025 16:36:31 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xZQ8KhmMm1S8qlCdkF8UbRiDWHM2Cf9nnJCws9%2BG3wNuDagjse2iF64yu8KfS9KiLHn9zSF8gWj2zJdQWTYiOtGNGWqL19Dd9uc%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb81b3edf569c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":206812,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 842x1191, components 3","md5":"5e683d6a23de823689338419f818da99","sha1":"6b2834550df9921d6979801ddc2b52e348783606","sha256":"5dd046e4f06048bd0f9e037a2b20a807ef85831c3645981fdb721f7d11f9f895","sha512":"6898e0fd4c2903551d98632cb63b8c2da8fe4c913ea9f9ada265a131c47945f41cec3755d10c258a3d05688a8977a3de8f27fc55b463520a001d6db21b51859f","ssdeep":"3072:SdcLJ8XCpZ9GAFdIcjREssuWE5OHmTQXbnlYMoGZkyMyOs3AIl+nrr2NnXmoso+I:U2yXiqc9EaZOsXMoG6e3f2VOiZQ","tlshash":"d814236fb75bc7802bedd60f7aa35f98329374fee6c969113480dda1187abe001116e4","first_seen":"2025-11-11T09:22:09.139174Z","last_seen":"2025-12-16T17:46:38.184113Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3719,"timings":{"blocked":3527,"dns":0,"connect":0,"send":0,"wait":84,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/tajawal/v12/Iurf6YBj_oCad4k1l8KiHrRpiYlJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/tajawal/v12/Iurf6YBj_oCad4k1l8KiHrRpiYlJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://shahed4u.you\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8940\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Nov 2025 11:55:32 GMT\r\nexpires: Fri, 06 Nov 2026 11:55:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 422748\r\nlast-modified: Mon, 08 Sep 2025 17:58:00 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8940,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8940, version 1.0","md5":"899cfbe65444a0ff90b804c565720260","sha1":"bd45ba01bae3c1d1f4f4d7816efd25bfbd279519","sha256":"4255019c1cd986f7cda7869df69baf72730d61304ae14baba4acfeb13085da54","sha512":"a619787519e98ad44bd392e29bd2ba4fa9e2e8e789b8ee6d9d622ba90a67313784cb39294c8fa97667903e1d4655e8e7f1930b7761d3343677f1cb36e4ee5e2c","ssdeep":"192:iP7W7+Tsl5ABfjDyyLDUnXkiCCH0RuXei0hOWRbmmccytICN8Vzw:iP7c+TOaFiyLYXk3g0gt0hO8mKytB8u","tlshash":"3202beb82817184ee83db8b52f64cab999941e918d836772c4b1b5162bed0d889e3706","first_seen":"2025-09-15T03:42:31.776868Z","last_seen":"2026-04-04T04:10:24.08461Z","times_seen":387,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":110,"dns":0,"connect":0,"send":0,"wait":43,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.42.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:21.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://shahed4u.you\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 09:21:21 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 45\r\ncf-ray: 99ccb8105e8a56ab-OSL\r\naccess-control-allow-origin: http://shahed4u.you\r\ncache-control: private, max-age=10\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-max-age: 2592000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":27,"dns":11,"connect":1,"send":0,"wait":14,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intelligenceadx.com/ptmpttdhzpwryvuc?jCmPBJrs=BQOCAAAAAAAACZUAAk59-gJteLbf2_1UMpZVcv2ARfRA-OtwbNb1Mf7OpMzndRV68rIhDUdTguyRW8UxKA2rwY94-FAnFrNfwVRtkVPWxa1A9QsyCrYJogLGGfRpkuxyJzddJ70FuLWuu7d5nLs_UvU_ni7FbjYE55xICHRl3r9GVRtZsRmPBKUTrWF_1dP4978SVB3ced3lNnk1E31QjKNxzAl6LA3-LU2bgDnUTQ6bBaPpGL4HoyQweMe45mIkcv4F1lLnmxcniKL1y7kEvQirQ5wosfxomaJe5ZT_tbodPNkk_Cm2wiWfgw1MXTMISdYSxH4jQn6wgSFviO72dnYkBcYtUNL9koFXgSzRKQ95kzEhI7Qlvr8Th-34ADznbGqfGR3YW6OQ7vhxYfKJkYvYk-XXV73sNweX9qJ7icD8F8cY8jYPnOTofKAmS2lOsKILW6CeBmWFK4zaluH1-nzE5YeID6oaYD-_hLshlvEYMi70sKcLCcUgGPG6eVVwp84WlxPWpOoOxqY2DM_lE-WyUIm_-QkskNP1S2epA3b4gqNdJz_Ds-G3jOw01xfhSlBXhBLQ3QhxHWe7YLW6V8ks6v-sBqBt1WQbqkW4DIrUPixiqXMyh8Rxe-N7Wni2JjkDQ_jhvYdtnxFhTAj0mQGg40JCzM7Az1erTST9dDVaolXpPv6EXpv_bvHN3XmrWOsAWULxSv6muFY1wWuBpEFVMN5oKRJWNHL13czvgSTY-AN0-Zhg3aL03_EWxWgkRajE9SSG943DHPu5-Iy6K67SQ1JAOYAqH-OB1uqRhMjrnsV6dFkpp1lu8v-7g9ZMuZwqNiCRXcqLkT87v37fQSnn9--SuBORTvUz1dym9QbkMvy6yco-9nGzZEoiK0abub4ooEHIzRuGqG09sHTDda6xhzcJI7lcKpxd5B_3LeSLCgkYYIIJm5bpxg_CnzkoAvOkxaayk5kYqHcp92NpHTEJA26ZD2kdmkWs2PPNtaTZjW_iWzweKy7gGmaShoHfMGbz5A6MOC46O6XS7y-h9zPVyADV4Il7fXtle7aRC5SpSnclHqqeUyDJUrGmILm1PrLl2znowu_AeqvqGJZQ3L4h-JlApSKviRKHydnb1GWjnDTERsBMlPEndRFJGBQd_oM8NbYht6UKQOt3di-mtG8_mjPMVRMgR53iHb0-ArR-H1Q9HUqWg2_LwNuL\u0026dZjETvIw=4\u0026CfTutjzy=5253255\u0026RIjOUesK=\u0026uihSvzok=0,0\u0026bWrGexft=\u0026zbNOlhoE=\u0026DNKZlWIB=1280,1024,1,1280,1024,0","fqdn":"intelligenceadx.com","domain":"intelligenceadx.com","tld":"com"},"ip":{"addr":"208.95.114.100","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:22.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"intelligenceadx.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 04 Apr 2025 00:00:00 GMT","end":"Tue, 05 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BB:72:94:6A:70:D1:57:77:77:94:C0:B2:5D:D9:4B:21:50:01:A9:EA","sha256":"D2:95:A2:80:F9:9D:D0:6A:F9:69:A4:1F:1D:36:37:CF:38:B4:C0:2B:39:B3:6F:8D:3A:38:6E:26:C1:01:2E:F8"}}},"request":{"raw":"GET /ptmpttdhzpwryvuc?jCmPBJrs=BQOCAAAAAAAACZUAAk59-gJteLbf2_1UMpZVcv2ARfRA-OtwbNb1Mf7OpMzndRV68rIhDUdTguyRW8UxKA2rwY94-FAnFrNfwVRtkVPWxa1A9QsyCrYJogLGGfRpkuxyJzddJ70FuLWuu7d5nLs_UvU_ni7FbjYE55xICHRl3r9GVRtZsRmPBKUTrWF_1dP4978SVB3ced3lNnk1E31QjKNxzAl6LA3-LU2bgDnUTQ6bBaPpGL4HoyQweMe45mIkcv4F1lLnmxcniKL1y7kEvQirQ5wosfxomaJe5ZT_tbodPNkk_Cm2wiWfgw1MXTMISdYSxH4jQn6wgSFviO72dnYkBcYtUNL9koFXgSzRKQ95kzEhI7Qlvr8Th-34ADznbGqfGR3YW6OQ7vhxYfKJkYvYk-XXV73sNweX9qJ7icD8F8cY8jYPnOTofKAmS2lOsKILW6CeBmWFK4zaluH1-nzE5YeID6oaYD-_hLshlvEYMi70sKcLCcUgGPG6eVVwp84WlxPWpOoOxqY2DM_lE-WyUIm_-QkskNP1S2epA3b4gqNdJz_Ds-G3jOw01xfhSlBXhBLQ3QhxHWe7YLW6V8ks6v-sBqBt1WQbqkW4DIrUPixiqXMyh8Rxe-N7Wni2JjkDQ_jhvYdtnxFhTAj0mQGg40JCzM7Az1erTST9dDVaolXpPv6EXpv_bvHN3XmrWOsAWULxSv6muFY1wWuBpEFVMN5oKRJWNHL13czvgSTY-AN0-Zhg3aL03_EWxWgkRajE9SSG943DHPu5-Iy6K67SQ1JAOYAqH-OB1uqRhMjrnsV6dFkpp1lu8v-7g9ZMuZwqNiCRXcqLkT87v37fQSnn9--SuBORTvUz1dym9QbkMvy6yco-9nGzZEoiK0abub4ooEHIzRuGqG09sHTDda6xhzcJI7lcKpxd5B_3LeSLCgkYYIIJm5bpxg_CnzkoAvOkxaayk5kYqHcp92NpHTEJA26ZD2kdmkWs2PPNtaTZjW_iWzweKy7gGmaShoHfMGbz5A6MOC46O6XS7y-h9zPVyADV4Il7fXtle7aRC5SpSnclHqqeUyDJUrGmILm1PrLl2znowu_AeqvqGJZQ3L4h-JlApSKviRKHydnb1GWjnDTERsBMlPEndRFJGBQd_oM8NbYht6UKQOt3di-mtG8_mjPMVRMgR53iHb0-ArR-H1Q9HUqWg2_LwNuL\u0026dZjETvIw=4\u0026CfTutjzy=5253255\u0026RIjOUesK=\u0026uihSvzok=0,0\u0026bWrGexft=\u0026zbNOlhoE=\u0026DNKZlWIB=1280,1024,1,1280,1024,0 HTTP/1.1\r\nHost: intelligenceadx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\npopads-node: wb9\r\naccess-control-allow-origin: *\r\nasf: 9\r\npopads-ec: ASB\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 44\r\ndate: Tue, 11 Nov 2025 09:21:23 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"d5f0a25e4d3522d56d48ce7bc3e518fb","sha1":"86794caff58f7fee6e684c2ba7195f970a8d6f4c","sha256":"9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5","sha512":"a3a81801f516a4eb11f00d6f56dab0ed4b8a79219e6b4f5436993479f09dae08f14cffbab3327ff66fb39201d8eba1153ae7114f7705a01cc6f0edf840ef1616","ssdeep":"","tlshash":"789002801814116115d1500b8d5159d01259b1a4540801324446ca502dc7883a415774","first_seen":"2023-03-07T01:17:45Z","last_seen":"2026-04-04T04:57:32.928345Z","times_seen":22745,"resource_available":true,"data":null}},"time_used":739,"timings":{"blocked":314,"dns":11,"connect":94,"send":0,"wait":111,"receive":0,"ssl":206},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"intelligenceadx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/shares/imdb/tt27424511.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"172.67.216.170","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.092Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/shares/imdb/tt27424511.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:22 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 41429\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Sat, 28 Jun 2025 02:07:12 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y%2Fw9W8X74VYi4tszSP3fSem9GKrt%2FzzNT2XAfsKD%2BvEz4I15h0UzUr6vKG3Z3JVcLluep1g1SLZLxcgXmQHl0uT7p6groZoNuWM%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb810ad5d569c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41429,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x449, components 3","md5":"ea0d7b4f955604c0ecc476bb607c0c6b","sha1":"e9f36c4383d57cd8774d4d00c65dce846e0e0d5c","sha256":"b483a34917efcca2689504f207f8d731be661c5acac83162ba185a689d9845b5","sha512":"54131cc7d7d027e3943fef2912039df9ab6b12136b86d57bc368faf901a5ff5180188d8804bd3455f9b053ad773d790061931100e13fb10e580f069befa99298","ssdeep":"768:8PVkubWw5av1d/bAxGb2d9XrzaKydKSs6NzpSgOt8ZdkgAyMCgfvXyl5fxr:63bWIazb2dZrmK25V+g84Ayhzl5t","tlshash":"4513f2213644d0b7df9d25f74ea92202f610c90da71cc0f6fb683b1d1d4eadab59d414","first_seen":"2025-07-12T13:45:02.1513Z","last_seen":"2026-03-12T22:52:33.418131Z","times_seen":16,"resource_available":false,"data":null}},"time_used":2377,"timings":{"blocked":1942,"dns":0,"connect":0,"send":0,"wait":400,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/tajawal/v12/Iura6YBj_oCad4k1nzSBC45I.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/tajawal/v12/Iura6YBj_oCad4k1nzSBC45I.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://shahed4u.you\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Nov 2025 09:56:53 GMT\r\nexpires: Fri, 06 Nov 2026 09:56:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 429867\r\nlast-modified: Mon, 08 Sep 2025 17:57:54 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8932,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8932, version 1.0","md5":"d595af28c13f0b004eb0a9694d397e61","sha1":"86dcc0150b2d71bb8c17ec11682cd0babe8256be","sha256":"6c9081fd00db08800850fa7d214593aa94992be5159e97557aa60197252cb95a","sha512":"5d0bafd869e5f466fef09a129e16487dd4d9a9c21d467b68593c3c11ede20d2a0d5162e475a7bbbe28b02aace228afd421fcf58823244ce9edc2a1f967462bea","ssdeep":"192:9Ty/JTr6kaUufAoHUywnSBHrO5msif/nOAQthEck:Q/5ONHl/rt/N","tlshash":"da02bfd97089ea14d057603e1014c1d6db1ea4bd1cae4c8f280bd7ad3eede13be24524","first_seen":"2025-09-09T12:45:33.076239Z","last_seen":"2026-04-04T04:10:24.035133Z","times_seen":823,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":110,"dns":0,"connect":0,"send":0,"wait":48,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re:2087/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":2087,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:21.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://shahed4u.you\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:22 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type\r\nAccess-Control-Allow-Origin: http://shahed4u.you\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: private, max-age=5\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":91,"dns":1,"connect":30,"send":0,"wait":34,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1762642606_VXYzAz_4f-366x650.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.152Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1762642606_VXYzAz_4f-366x650.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 53667\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Sat, 08 Nov 2025 22:56:46 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GOx9Xy4y0TU1yCeRbeu7sUYIiYYNNGtVuMnzyR21WMypgpXz71jA1ux%2FjWF1Skq2NygQW713SA25soYBHjW6AW449SF7sA4kcUw%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb8067bb67131-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53667,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 366x650, components 3","md5":"cfff32e25bcbff0d8010b48b64fd0e62","sha1":"8f0aa0bc3658fe9e65849bac87870061792f35bb","sha256":"50cc9138e2565e6c139ae33be6a9c361542b7f646182f1a2db0cb7914b07ff28","sha512":"b057bf366a74f400481d6d088762badab47c9c10132994205a9f4d2b1cb5f2fc1eb8e4457ac92ce7b6bc2e0564d7d9c3a9e179be2a2b388684d6065729bbb9c5","ssdeep":"1536:mdNaAzH3MnivLEBxcmx6LSwYSC3VB+wzR2mSChrv:nAdvLEAmx6LSwYS4VEw8gv","tlshash":"e033f290f4c856626eebeefe6cc9e4930542a41074d83ad167218e3de5fb261ed070dd","first_seen":"2025-11-11T09:22:09.143583Z","last_seen":"2025-11-21T12:48:08.030397Z","times_seen":3,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":245,"dns":0,"connect":0,"send":0,"wait":189,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1761971496_%D9%85%D8%B3%D9%84%D8%B3%D9%84-Rhythm-Flow-France-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%B1%D8%A7%D8%A8%D8%B9-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-%D9%83%D8%A7%D9%85%D9%84.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"172.67.216.170","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.161Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1761971496_%D9%85%D8%B3%D9%84%D8%B3%D9%84-Rhythm-Flow-France-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%B1%D8%A7%D8%A8%D8%B9-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-%D9%83%D8%A7%D9%85%D9%84.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 69924\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Sat, 01 Nov 2025 04:31:36 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hcr3E21bnSoxFwuBOkzlKgMkikLd78I1I9RfJGM1cJL%2BJx0pYCLysb9dikVb3p96i%2BqL32Eq%2FSlifCHie%2B7QHYXTUnkcx6%2BMOSQ%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb8085e21569c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69924,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 450x560, components 3","md5":"8b41796188ad8deea203f662b7b980e2","sha1":"1c6592b2d83f614ada81a3621dd90c0089e128f2","sha256":"10f3751a618df9be3ee55e81b4b48668c109936118c23a48793a8c08f2398f63","sha512":"6aed721a8cb9388cb34839b6d697843bf06cde7f8d51c21a62cd7035f969288282b656701c30acced99b388899e52ffa6e0e0698e0f87813d3b966fa7c73cc48","ssdeep":"1536:e+K26FsHolMnYjI/RQmfvDuMNBHoTBzBopN9Y:e+K26Fgo+kI/RvyU+T8vi","tlshash":"ac630204ee4f63f5f5d83af29bcc45c8a9582f552cbad0a3bc9441664ade0d20f190ac","first_seen":"2025-11-11T09:22:09.144441Z","last_seen":"2025-11-11T21:02:16.886768Z","times_seen":2,"resource_available":false,"data":null}},"time_used":822,"timings":{"blocked":536,"dns":0,"connect":0,"send":0,"wait":213,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/shares/imdb/tt38805757.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"172.67.216.170","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.191Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/shares/imdb/tt38805757.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 805269\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Mon, 03 Nov 2025 00:28:40 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jyf59zV0GXJ5QPgGkCKvV%2B03xuh1JuzPrutT5bifCqqSVIVg2l8gJICTBFJzl6dRgsHRwTDiHjL8kPM3PJHtj%2BPE10sy1ONExCM%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb819bd1c569c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":805269,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x2000, components 3","md5":"a0eaa1625ab1499b6baa00942d782fb8","sha1":"d0f56e377eb64a194eea0a2b1410b6348e50447e","sha256":"2f83490d23bcd8376ca2ab9e7b069c8c43801ba10dbefffcd41ed326080fc2dd","sha512":"6389f970be4d3ad74b0791141446e6d64a519d6aef6777ecb5797c9072f7283ce92f120de6367cb11fa08083667673c1e8c7d5ab825feb2a9d1760194c29edca","ssdeep":"24576:7vWM2c0Jl2Dmr3hxoovJQVukC/0E4vI4f:7vWDh+Ebo8JQVY0EmI4","tlshash":"5105234a73c3d8e5641e43dd6b6656c8d4d33360a77ae0a9ab473e93f05a82d63cc212","first_seen":"2025-11-11T09:22:09.145616Z","last_seen":"2025-11-11T09:22:09.145616Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3531,"timings":{"blocked":3290,"dns":0,"connect":0,"send":0,"wait":43,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-11T09:21:16.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shahed4u.you","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 21:17:38 GMT","end":"Sun, 08 Feb 2026 22:16:14 GMT"},"fingerprint":{"sha1":"DB:D4:5E:95:C2:36:7B:C0:0C:0F:B9:1C:56:86:5B:03:4A:B3:96:21","sha256":"79:EE:98:59:A1:54:F5:65:58:D8:5B:67:C0:D1:E1:DE:76:38:AB:00:68:28:1D:1E:7E:50:D7:BA:D1:12:7D:B7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":51,"dns":31,"connect":1,"send":0,"wait":0,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1760461006_4cYaKUPsaB9CZcHIhVcuquIHYhX-scaled.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.157Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1760461006_4cYaKUPsaB9CZcHIhVcuquIHYhX-scaled.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 663412\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Tue, 14 Oct 2025 16:56:46 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FEt9u5jQQZJabNDgeButP5PclMYNjf%2B7urkjbRqB8MFYgMSd%2BstRaom3MDBDOvgOwhVTns6cewiC4fuKwbTI2l33bJWppqHqm%2Fs%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb8075de25688-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":663412,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1707x2560, components 3","md5":"69c1aa1c3055055da66f8b6613400fca","sha1":"a043eae2ab944747d086c5acb546bff03dba824d","sha256":"98e8464e0652a8692d37b2620a889fcea053216929e8446a24db2e70962506ee","sha512":"4c94febeb0c3bd41cace59523c35276b4c45a18462b87ed59e8d337199e8f195622f389b11da80aca5d7864b5c35b53677072be68b5cadf0b5d75ecebfb6978b","ssdeep":"12288:eCJlt2j52ixlVsOXCflW77/ikUEUFprCQn+HDP4OLV8knal/dLWTHXFo7+MG/ILZ:hL2MixlFCflWfvBgpr0PLV8Sal/dLg14","tlshash":"2ee4232568b4403a551eef52aa03b28d541b53b01c8eff1027da8fa0be56ddb9b0dfc5","first_seen":"2025-11-11T09:22:09.147601Z","last_seen":"2025-12-16T17:46:38.220084Z","times_seen":3,"resource_available":false,"data":null}},"time_used":740,"timings":{"blocked":388,"dns":0,"connect":0,"send":0,"wait":161,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1760031125_S02.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.175Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1760031125_S02.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 343345\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Thu, 09 Oct 2025 17:32:05 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6%2FnrXXHoZxKCiLuR3RCOfCCv0QKYUOqc3YSXlIdxUON0v4O4iuXW%2Ba56rlDcMzTrp%2F9k%2FcNlr21VayXnk%2FsE%2B%2B%2B%2BGUw3oIp203c%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb80ac8d25688-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":343345,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1200x1600, components 3","md5":"e6249eae5608284571c4fddc4509ef0e","sha1":"d78ace6af3adfe813f4ea3d735202e033979e2cb","sha256":"b5fda87c4c688a0dca8a05f64176f0bea991a545ad20e4a1904a4617293b7708","sha512":"bc572140cf347ecc3ef553e8dd9db8db7fe782ca09d687415d59b7e3c8b4692acb30eb54240821accbc703b2c6617c8dbb1d92268a4e6103a64ac14d116faa8d","ssdeep":"6144:BtNpkLLUFhh1uuM447RR4TF8JDJbiryVJEXb7XTE37rKcat4zsfiJ8aHoXszKE:BRk3U7HfM37/4TFofEXbE3/KcSfiaa5/","tlshash":"6974014ac8245be2af4d2bb5fd410c4c2758bb3857c86fa551533f1ffbe6a414e29228","first_seen":"2025-11-11T09:22:09.148958Z","last_seen":"2025-11-11T09:22:09.148958Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1620,"timings":{"blocked":918,"dns":0,"connect":0,"send":0,"wait":545,"receive":157,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1761427430_MV5BNGQ4YWQ1NjktNzg2ZC00MWVlLWI0N2UtMjU4MmQzYzE1NGM0XkEyXkFqcGc@._V1_.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.190Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1761427430_MV5BNGQ4YWQ1NjktNzg2ZC00MWVlLWI0N2UtMjU4MmQzYzE1NGM0XkEyXkFqcGc@._V1_.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 981163\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Sat, 25 Oct 2025 21:23:50 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KSPMEd6idQWy2kbwdUUyc4HKzjHnf4hr1Lb3F9fI4HC6JP7WLIvcINntiWINUym4H0l8IuOFEUM4LcZV1hJjI%2FENPiTwtumLYmc%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb8194b217131-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":981163,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x2560, components 3","md5":"964d3f13dd41f51efda45ea8884aeb7a","sha1":"bac0425f3199e5b4c7ac36209e5b7a426aadf47e","sha256":"db0b92365669f81562642c641dc919c264428ce06705ee48ef44df1e3946c9f4","sha512":"875b3eb5310d16b380a0b25133138c83ebdf930707c25cd0097731022c00d9bd82738e199981da1843dddb3e9266333eae6b8479b6241e3c0b87ae889ac86655","ssdeep":"24576:sk8Uah9U0ph6THnM7U10PjAb7PkfCEGu/:STxAnMAqjJhGI","tlshash":"4225334efe213aaec402587297195f76ad2b35196ff1c09bf108e43cc91bb90495fab1","first_seen":"2025-11-02T13:52:04.868483Z","last_seen":"2025-11-11T09:22:09.150444Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3659,"timings":{"blocked":3224,"dns":0,"connect":0,"send":0,"wait":195,"receive":240,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/imgs/mostviews.png","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"172.67.216.170","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:19.670Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/imgs/mostviews.png HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:20 GMT\r\nContent-Type: image/png\r\nContent-Length: 2016\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Mon, 10 Jul 2023 17:15:28 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Mz7pHfzQFZ3K%2BFqPZwX2isL8HJatxqK1cau5maizIJWuEE7msaUk79Rbr5YsRUQIVfTsnfyLEaUmu8tTjcuXt6i9Vy8yNZLVvg%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb803791a569c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2016,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"bbd9e6271fa737b168fc0134c734d5e1","sha1":"93d38406aa80e114e45272bcbb67ec682bde14e5","sha256":"968a5a9a14f7e4c20bcedd4197e6638abb300773dbd380dd00b8ad2b28f4cbbe","sha512":"edcfd5bf5af34bdfe57fc7587aa2519f4b69b7fde537fe10fa83fa2fc64e2cff24ee1aaec57b5cd4e669249bb44d8f494883a47b5d500a3dfd987cb4befbc956","ssdeep":"","tlshash":"75410c67be129c402a1e45ad8322195086f4755758a3ecd1ce8d2cfeebb70198f682dd","first_seen":"2023-05-27T11:54:25Z","last_seen":"2026-03-12T22:52:33.492999Z","times_seen":23,"resource_available":false,"data":null}},"time_used":544,"timings":{"blocked":254,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1757350605_1757266066_1756784623_1754954524_mOYNB1_4f-455x650.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.186Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1757350605_1757266066_1756784623_1754954524_mOYNB1_4f-455x650.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 59949\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Mon, 08 Sep 2025 16:56:45 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TXXkNWugFQWvvDX6vJ%2B1fYIlQ7klZ%2FzRspUEpHGrqFfI6zcz5sPZdpxZ6zXq6L9ja7k7ELfsh8XUij1NryRIHKTTWbgpgCVs498%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb818daca7131-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59949,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 455x650, components 3","md5":"775f8757ed82eec1d4839876f46016fd","sha1":"5e256ebe818e44dea9d7b7f906a389ce08c2f447","sha256":"d4d815e15ebb8df5816f3b9801267bb31cc1a5ca566005ef63497e0d7fe8434d","sha512":"c7bbfe8d1a9cd5e400b17d9890f620be59d49133571079279a9ef5bb768fea0e822a888d00b4d5ba5d446ac47796c72d2ae6be5f2d5da5acf0577e0962d00605","ssdeep":"1536:jKkxENB5/t4cDjAYFs+CRvdVddiu8EPlmL5AZD:HGNBxt4mjAYFs+UFLdiuGyD","tlshash":"6143017cbd6077dc40891cd7ed0b8cd7bfa952269363729c0ac52702e2589f4229cc15","first_seen":"2025-09-03T02:57:18.187313Z","last_seen":"2025-11-11T21:02:16.869086Z","times_seen":3,"resource_available":false,"data":null}},"time_used":3228,"timings":{"blocked":3149,"dns":0,"connect":0,"send":0,"wait":44,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re:2087/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.42.28","port":2087,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:21.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://shahed4u.you\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 09:21:21 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 45\r\ncf-ray: 99ccb8105ab80b4d-OSL\r\naccess-control-allow-origin: http://shahed4u.you\r\ncache-control: private, max-age=10\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-max-age: 2592000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":2087\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":25,"dns":8,"connect":4,"send":0,"wait":24,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1747678175_pbfDJJYlMz6GDy0wEP1JmWxIBRK-scaled-367x550.webp","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.095Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1747678175_pbfDJJYlMz6GDy0wEP1JmWxIBRK-scaled-367x550.webp HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:22 GMT\r\nContent-Type: image/webp\r\nContent-Length: 40006\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Mon, 19 May 2025 18:09:35 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iO2xxbKJ%2F0Lv8sjIN%2BAeAx4ye3Utn4H6Ehh8EGaIH%2F03P%2F500X7BcFNoFQ4s5d6lPVEF53gdyo4Lz4pMOSUUawxgEkiX4tKLoDo%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb810eeff5688-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40006,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 367x550, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c27d198bb2f303246021af82027d2aab","sha1":"8f72e681fef3238ad830afcf832f6d4335a96062","sha256":"a070611afdff5fea277c85f280d488c2febd1a9b916100d14d02f0bbabc9bfd1","sha512":"fe5761fc34c7bc2d2174b629bdc193f75ea0f8142f75f7d65d872effdd60e119c8c2792d97f6ea5c1cc7958af857aab3ffbaae16df523c59e80f728d0176904f","ssdeep":"768:tyuj1w4nbm8wEvaUGd6sBI06C/4+0zhnVEndL5Px+lpwd4UbI:tyurwh/F0zhCjPAvwF0","tlshash":"ff03f1161d6b3a5a0b7a9f2aa30cc07d0c639df60d3bd856ee9d941a47047873c1f721","first_seen":"2025-07-12T13:45:02.098543Z","last_seen":"2026-03-12T22:52:33.365817Z","times_seen":18,"resource_available":false,"data":null}},"time_used":2599,"timings":{"blocked":1974,"dns":0,"connect":0,"send":0,"wait":590,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1744600844_lbHSHrgBPl0gQAcS0lHIcyp1CnZ-scaled-367x550.webp","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.121Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1744600844_lbHSHrgBPl0gQAcS0lHIcyp1CnZ-scaled-367x550.webp HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:22 GMT\r\nContent-Type: image/webp\r\nContent-Length: 35302\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Sun, 13 Apr 2025 18:20:44 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pq3Oa8VvHGouoLg78cNV4rFcAx8rgwXrnPBEQ%2F5nAcsw1IOAm3buDutj%2FwzEOHAmEFS9mE0GZaXapCl3c1pYVEbaIMSK5uiirPo%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb813af115689-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35302,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 367x550, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"39b757011f7c217425db0bd5b6902ff2","sha1":"67cb42807a333a65d42ced6bf7df33f718f04c36","sha256":"af61b60b071453c73b2bdd18df9225315b56a213f63bcd04c3dd4f90c4f90765","sha512":"879ccbc698b72335d5f2f52b9be7e2ec110d3d8fb6211e6ac6469ca69a0c5fa995e0b3e79a655b9caba242f5176d87272b40d5065febd71c0f08d40b19b7ad06","ssdeep":"768:/9PVfkr3deS0u4P39oPwTI59+/mfTTQdiCJcYRp0kzBGAxZl/lAG:d4teS01P39TTI/UmPGJv0kbZl/j","tlshash":"e3f2f199e0f08185f7ba9cd7b85e1063607e29f72674eb94062f4211cfe34325b2c967","first_seen":"2025-04-27T23:56:53.902727Z","last_seen":"2026-03-12T22:52:33.423016Z","times_seen":19,"resource_available":false,"data":null}},"time_used":2888,"timings":{"blocked":2392,"dns":0,"connect":0,"send":0,"wait":461,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1759805348_MV5BYWMyZTY0YmUtOGEzZi00ZWNhLWEyOTctYTNlNWRkZWI3YTM3XkEyXkFqcGc@.jpg_V1_SX700.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"172.67.216.170","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.158Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1759805348_MV5BYWMyZTY0YmUtOGEzZi00ZWNhLWEyOTctYTNlNWRkZWI3YTM3XkEyXkFqcGc@.jpg_V1_SX700.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 137988\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Tue, 07 Oct 2025 02:49:08 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jcMLtnO6amPfrGnVyAU4dxEC6YMcNzvkVyO9UiJXjmfo%2F6X%2FltqXUb%2B0HApFqNBjANTyKrgvLRI%2B5t787WffjAKn99LQ8jzAn44%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb8076d0d569c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":137988,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 700x990, components 3","md5":"6ad4a41a4ea13c31280f061ef29e4151","sha1":"67bdb32ca1a187eabed559ef508e98c413460f2e","sha256":"31c35660d9bced0f459f494c4f749a1277411973ff9c3adfc24e8b2484a0cc29","sha512":"f4f08fc539cfdde8dba607ffb2c616122d90ab7873e14eb5413064f62c26e384b607a6da75d3575b7a32c4a43af7aa4eeb9a4965dba96327d889255936f31725","ssdeep":"3072:aMrFCA9jVguvVE1tGj/1BtGzLVmTcIh6B7A4dIu/x7yV4mvDx1ZbrEBE:aMdVuuvVEA1TMK8B7tdDKhk+","tlshash":"6ad313a879f49763ec00bff38f7e772b4a53a52b38a45695803c0639dd65485ef011ca","first_seen":"2025-11-11T09:22:09.155979Z","last_seen":"2025-12-16T17:46:38.187091Z","times_seen":3,"resource_available":false,"data":null}},"time_used":538,"timings":{"blocked":390,"dns":0,"connect":0,"send":0,"wait":42,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1761861399_MV5BYWYxMzc4MWItMmYwOS00MWZmLTljYWEtZTU4YjZhM2Y1ZjRlXkEyXkFqcGc@.jpg_V1_SX700.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.188Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1761861399_MV5BYWYxMzc4MWItMmYwOS00MWZmLTljYWEtZTU4YjZhM2Y1ZjRlXkEyXkFqcGc@.jpg_V1_SX700.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 101684\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Thu, 30 Oct 2025 21:56:39 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g9lO2790jIB1VUFlCYuzs6bHgzxRXB5NX1Im1hvE6ocfu5ZA4C3CFtxYpW31zGSjihNPenfUMis5CubN4n2vyRjwg67cTs6hvlI%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb81908a0b505-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101684,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 700x982, components 3","md5":"00f8ff1c474f9a74fafe3e8b302662e3","sha1":"c39eb0180a62ed2462b64ca42218564a4738dafa","sha256":"157cd8c2757d5486c2f0a9c3e89a4fbfcea05d4705f6bd4aabdcdd9816a1e2cc","sha512":"d48168963f92ce54f6a44fab4011c4d94d5261984c72e2eb2835d511986fce4179865a9489053ae9bfadaf4555329a9c80c890378eb9afc854a0d486dcd8dbdb","ssdeep":"1536:dWlFO7p6HDvP1GZVtc4OlOjaPSSvW9GV9mG/GYAXcHY5XHkOkqK0CSsKWIa1Y1AD:dgO7EHzopkl6aaSvFN/G3cHY5MOW3Y1e","tlshash":"89a3126c5c99f8783f121672a59712ec36bc3c48ebee76c610c35c8de87458c94966b3","first_seen":"2025-11-02T13:52:04.898464Z","last_seen":"2025-11-11T21:02:16.901951Z","times_seen":3,"resource_available":false,"data":null}},"time_used":3405,"timings":{"blocked":3182,"dns":0,"connect":0,"send":0,"wait":112,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/imgs/lasteps.png","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:19.673Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/imgs/lasteps.png HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:20 GMT\r\nContent-Type: image/png\r\nContent-Length: 6008\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Mon, 10 Jul 2023 17:16:24 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=39y2n1U9Mr6rwDlW5rs4OIupR2tJ%2FQUUCuBnkwJAvosS4tWghrFSBGvUR0UAobaVPNE6%2BWvLqIWESvYXBh3TVRf2RqrCcwNwb10%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb80378d75689-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6008,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 170 x 170, 8-bit colormap, non-interlaced","md5":"ffe036ab4e3ce7a45f27c3741f12b003","sha1":"da80d786a29ade579741421882ea446841ee2bf2","sha256":"5d316b48da04fa6dc823252dfa330e67008e304d7c82d2722721a10986d4bfda","sha512":"196c63a736bec0d9579c9c852b8c63ddc7ea6c176234ebabf7444a1dadbd954b745498b9a11c041728f7b27406920c4a7f6e93556c51783bebc99993bab3e568","ssdeep":"96:6P3+qUY17nQ0Ygx7z+Fgxg7sXVabBu5ekq9KDPPXRHZxUEFoHUa0ITkXIauv:mVNVQzgNz+nbs0kq9KDPPXRHZxUWoHzb","tlshash":"85c17e6c6616b711973788e0913cda6d235daf798cc36dc30f8274b9e4786e69270c93","first_seen":"2023-05-27T11:54:25Z","last_seen":"2026-03-12T22:52:33.407272Z","times_seen":23,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":251,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1762809879_ec50f943-f008-45d3-94c4-f7a0e33b1b21.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.163Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1762809879_ec50f943-f008-45d3-94c4-f7a0e33b1b21.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 60387\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Mon, 10 Nov 2025 21:24:39 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EbFrslZA%2BJhVFoYzyKZZ%2F1Y4ftYslEPX7UYX0Cbh2%2B%2Ff%2FlWWLKgrA5vU6hNghdZfdrtnfjcuLow4qHrGxbBChMwBXFTeeHZRLMg%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb808bf07b505-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60387,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 729x1080, components 3","md5":"b3ae00227f2664d01643fd8c09203502","sha1":"94f1a08bf1918f22ab03084e1cc836bb7149c21c","sha256":"86414b689802cfa4ec4fdfc05562b3251ff75c7071ea957cf050f16647468261","sha512":"05283d4b5b7a42f5b8185da8f600b0888853e391c532512f114772e8b0e7d2e2e5f5d4a8384c5dce3b0f1f7e53625780a88ff80622543c83119852bb586316df","ssdeep":"1536:K9/8kPpdPezpjML91X+J9oCNbdbf4F4Jfz1MwopY43yXRs:KKWWzZML9JyDLbgF4IZ3is","tlshash":"d243f2aa92104d809b5ab79b7ca6131b0dd5e7a0078deec76f2b7fe0b36714c70480d5","first_seen":"2025-11-11T09:22:09.158423Z","last_seen":"2025-12-03T07:11:30.463837Z","times_seen":4,"resource_available":false,"data":null}},"time_used":891,"timings":{"blocked":600,"dns":0,"connect":0,"send":0,"wait":217,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/?format=json","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 07:43:05 GMT","end":"Sun, 01 Feb 2026 08:42:55 GMT"},"fingerprint":{"sha1":"BE:9D:76:9E:9E:2C:F2:8E:38:C4:E9:42:11:6A:45:24:E9:59:0A:5F","sha256":"D1:C5:0F:C4:11:DF:FE:54:9C:EF:8C:40:56:6C:79:4E:F3:E6:0B:24:15:B8:E1:60:2B:49:C2:41:96:C9:79:83"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://shahed4u.you/\r\nOrigin: http://shahed4u.you\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 09:21:20 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 99ccb8058fa8b4f4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T06:03:35.448887Z","times_seen":82995,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":37,"dns":3,"connect":2,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1762798552_MV5BMGExNGNhNjQtYzRjMi00MGI3LThlNTgtYzA3OWNkZDU5MmEzXkEyXkFqcGc@._V1_FMjpg_UX1000_.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.177Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1762798552_MV5BMGExNGNhNjQtYzRjMi00MGI3LThlNTgtYzA3OWNkZDU5MmEzXkEyXkFqcGc@._V1_FMjpg_UX1000_.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 123277\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Mon, 10 Nov 2025 18:15:52 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hyKnaj%2B1B2pw5hhZso8Y17NI7UjvBzm0tnupYemNriJfsCFv7B%2F0nZUsarhEzgEYvfKoO73cEOBFnUnab1E6DhJx3tEPYV0xGB0%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb80ca8c47131-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123277,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x1446, components 3","md5":"5ab0c68fc920548ed8c7a41a4727a04c","sha1":"0a90c91371efe4a8a7c39b644e4a5e7bd6c3b7ac","sha256":"dbeca7ba02a9638de0aafcd8d8de07008daf3f98ec75b08235a89da79409b1d5","sha512":"ec857f5cfc2689f4551143ddcc3ca35782e00aec33aa920158c46bd4fa99d9b19a5acc37a52db041b3253efff125266b2e30577ebbfd79e77ac4defa2eb183b2","ssdeep":"3072:zpPkuHraY86k64oXQ1uH7LOzJAjtvlLcRsCE3ZcOmvbXQocqXDNPPLPc:zpdkydfGaphcTkbmvscXRzPc","tlshash":"f1c3128226612a2a7577c8ac3671b97cff508857d94954abb60e7c25cc430d06ef4af3","first_seen":"2025-11-11T09:22:09.159956Z","last_seen":"2025-12-19T23:42:46.546078Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1776,"timings":{"blocked":1212,"dns":0,"connect":0,"send":0,"wait":449,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shahid4u.ws/","fqdn":"shahid4u.ws","domain":"shahid4u.ws","tld":"ws"},"ip":{"addr":"104.21.28.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-11T09:21:16.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shahid4u.ws","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 17:51:00 GMT","end":"Sun, 08 Feb 2026 18:48:15 GMT"},"fingerprint":{"sha1":"B2:47:A5:FD:C7:0F:37:9D:4B:EF:1E:82:14:66:CB:FD:F5:5B:11:AB","sha256":"7E:A6:A5:99:BE:F0:5B:13:17:4F:BC:D8:92:02:7D:C1:E9:06:37:9F:0B:87:01:DA:36:69:09:51:0B:64:91:D3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: shahid4u.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Tue, 11 Nov 2025 09:21:16 GMT\r\ncontent-length: 0\r\nlocation: https://shahed4u.you/\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6T3rFuUNmxjiw9d1HtWqQuhdp4nyj1L7Q%2B7YkITvgdK6twpBnTrKS8R0zQcb8%2BpOoYgtzHyIKPiyjuAw4fYhMWGYKh8bNURcgg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 99ccb7eb79305685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":31,"dns":5,"connect":1,"send":0,"wait":6,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/assets/glide/glide.min.js","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:19.649Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/glide/glide.min.js HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:19 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Wed, 12 Jul 2023 17:49:00 GMT\r\nVary: accept-encoding\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SAmakSvKYpAudY6fGxJDvedOd5FNz718aka2FddsQ%2FfRs%2BppS%2Feeej6fwR1ZK0NHZCx3pzA8U8%2FbMhVde3evn1HbJO%2B6byL4K6U%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nContent-Encoding: gzip\r\nCF-RAY: 99ccb801bea8b505-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27568,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27429)","md5":"19a4946fcb0f2108686817ab5f4ddf6d","sha1":"a179d8d5f25d7b91e8a119ed8b2485fd17c07db6","sha256":"cfb50ed09592e4537a669b8e808ebe9fa885972309c574c648a11e1c5cce88a1","sha512":"f9208199dd8771b19c01aeced664b12c442924c9ad78e7c1f03d2e117b13f8ebee72327a6c82cdb631871c49c1dac7972142c1a558a7ca17d0861746ac68e93c","ssdeep":"384:LNfiIuGWeDiEZGfMka2EFXevKCwxKFp0neN/tH9o3B0+pAc62K+imVBHq8:J9t2Dicbypvu+imVRq8","tlshash":"5fc2734cf2c5b0691b836078547f160ef2733e54688a8158f4b5e8d5acbca9d2127fbd","first_seen":"2023-04-10T16:13:20Z","last_seen":"2026-04-03T15:43:38.016272Z","times_seen":737,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":171,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1756673127_6162d789aeeb8.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.020Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1756673127_6162d789aeeb8.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 88854\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Sun, 31 Aug 2025 20:45:27 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T%2BxNhMrg7tfqJWPFNEddsC89Dy%2FJfVboaFM6TlgES01dTHYn117LQFxZ%2BZMmOq6ql6AuFQbnvyNnbgEgCjhWxoWR%2BE39PXesjoo%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb8062c08b505-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88854,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", progressive, precision 8, 700x1050, components 3","md5":"8da2003164e83bd024b234e6585de1eb","sha1":"74152956f8d9096e0d383b725753e1b12aba3901","sha256":"c5d878ffdc4d2fada6da250c3a1c943d55e6c661b95a6b8f0da301632882d548","sha512":"d2fb342f74d56f70d72f5e84e20e22c3f59bcb59fb745546cdbe669b1125c06bee08a23b25df0165920a2f79cc6d0ab0f50a449302987ae126365a92c511031a","ssdeep":"1536:rskEDXu18tvr1h0WeJvWMYhSeSL0Fniix+qdIfSlPnW:rskiXu2tBXeJchaQFnDMjmPW","tlshash":"8193122414380aae03a656d2fdeca709ae41e76684b14e04f5edf5d6ca6c933ec78162","first_seen":"2023-06-19T22:26:12Z","last_seen":"2026-03-12T22:52:33.424896Z","times_seen":24,"resource_available":false,"data":null}},"time_used":497,"timings":{"blocked":329,"dns":0,"connect":0,"send":0,"wait":97,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1759678396_%D8%A7%D9%86%D9%85%D9%8A-Kingdom-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%B3%D8%A7%D8%AF%D8%B3.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.034Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1759678396_%D8%A7%D9%86%D9%85%D9%8A-Kingdom-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%B3%D8%A7%D8%AF%D8%B3.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 127382\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Sun, 05 Oct 2025 15:33:16 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UckNWaxXBVPpGW%2FOBenwQAJiA0ZMJUQvYdyACgUTM28No3FNSpz1FqMDHUKEBsHB6jQWcIKxTJtAEBJPF6Sgq8i6wufg3oXbYPD6Nw%3D%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb80ef86035a6-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":127382,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 450x560, components 3","md5":"fdcf43c350279136235d1daac2bc547a","sha1":"519d86f278ff2e96833129f4532b49822bd82d19","sha256":"15065ee7e092219a1e792115d3e98a06d5195f002b7006af09c5216e9f323b62","sha512":"d05da48c4d81901251c0ed5af181bd6b870e750bf54a91adbac3686d48a489a49bbcbbe1e41df23a084eeee425c4722a56bbba294ec2ac19ae6eb8a3e37e916e","ssdeep":"3072:QMVOrb4xM3j+qFLfIC0BWKoyr+HOeI4E1UzBC16MYuAI:eYxvTjoIBx4EGzA4MYu5","tlshash":"57c312a0de39bd5ea95d3c196192c5fe3a49bcb0371f4080aeb92f587508492af703f5","first_seen":"2025-11-02T13:52:04.864079Z","last_seen":"2026-03-12T22:52:33.42659Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1960,"timings":{"blocked":1721,"dns":0,"connect":0,"send":0,"wait":132,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1757694824_1757049429_1754052505_MV5BYTIzYTRiOTItZDI4Mi00MWE3LWI1NmMtN2Y2NmU3YTcxZjg3XkEyXkFqcGc@.jpg_V1_SX700-367x550.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.047Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1757694824_1757049429_1754052505_MV5BYTIzYTRiOTItZDI4Mi00MWE3LWI1NmMtN2Y2NmU3YTcxZjg3XkEyXkFqcGc@.jpg_V1_SX700-367x550.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:22 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 45563\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Fri, 12 Sep 2025 16:33:44 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EbSvLhbfXqIk6oJoKtnZLsYRmQzIWIOUSYeDVc5AqYc3o0UzZ3w3FdPMAjXVB%2BH%2FiUf5kzn4ReArm7IKNJ8WdbiilMoB3NooK9M%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb80fde14b505-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45563,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 367x550, components 3","md5":"a89dd9a1bb364cb4f51cdb75b0e56147","sha1":"534eaea2f439526047177b926a46cb5e59cbfcac","sha256":"6253432b66c97e2fc7311b86e6d527dbb8922f9c134207cb1558b4be96309052","sha512":"f25134e357a4d7f28d242ffd081f0370d19bf4f1158fe431ad99f073721038446a21bfa00d8c46f1e668f0391a6442ae9a8adf4e9a8646ae077d70efcc8071c1","ssdeep":"768:X6ULSPNcmo1gwF9hZrX2744hLzl82s0IqceLg+1VzHpeFnnG5yBFPtL4bKnlJZqM:X62S1lABfhZrGR5hJcKgGeFnG01nJoGH","tlshash":"3c1302268cf20e9b74dacc8a6a310f04f3d1250a78af5b5ad731e4e746456eebc585cc","first_seen":"2025-08-01T22:16:06.591572Z","last_seen":"2026-03-12T22:52:33.404599Z","times_seen":13,"resource_available":false,"data":null}},"time_used":2222,"timings":{"blocked":1853,"dns":0,"connect":0,"send":0,"wait":298,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1757626845_1757626845_MV5BZWIyNTIzNmYtOGIwOS00MzMyLTliMTAtZDZhMDE4Y2U3M2QzXkEyXkFqcGc@._V1_-416x520.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"172.67.216.170","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.049Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1757626845_1757626845_MV5BZWIyNTIzNmYtOGIwOS00MzMyLTliMTAtZDZhMDE4Y2U3M2QzXkEyXkFqcGc@._V1_-416x520.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 61616\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Thu, 11 Sep 2025 21:40:45 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yDUn03qx8nO1zWylSLtofy5PlxY%2B%2FGOj9%2Flxz4IZ2tfPGG%2B2x2AYEpeF%2FXYJaHgemmdphdEoCY9FNOWN9yLAqlGrDEIGjYdvH3M%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb80ffc9d569c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61616,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 416x520, components 3","md5":"e7b519c348a87862f69a56de03803b33","sha1":"0a4e09e2ffe757a1eac366365b81e1578722070a","sha256":"9d9d983cfe9dd25e42ad50562a9e9d3504b19e2b1fae521089173b56c3af28bc","sha512":"5b630c0203ff30de7073433e2a305a78dd8fdd3969aa297f84b3afd9ba90a58e42e457b799b66d9a388710c634c044035d314044b13bb0a284e96e7357bedf46","ssdeep":"1536:WJ4/OQyfr2ylnpaUgjo8bUN+JKHzWCVNqMDhYTd:3/OQyDT9paUgE8bUN+JKdVNqVx","tlshash":"0f53f1d2b4421e59500e9aeacf39e154d36bc435a53e030984f6d8dae7036f54c8bfea","first_seen":"2025-09-21T07:27:38.345325Z","last_seen":"2026-03-12T22:52:33.536706Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1985,"timings":{"blocked":1874,"dns":0,"connect":0,"send":0,"wait":42,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/tajawal/v12/Iura6YBj_oCad4k1nzGBCw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/tajawal/v12/Iura6YBj_oCad4k1nzGBCw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://shahed4u.you\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 10256\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Nov 2025 12:44:28 GMT\r\nexpires: Fri, 06 Nov 2026 12:44:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 419812\r\nlast-modified: Mon, 08 Sep 2025 17:57:54 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10256, version 1.0","md5":"f18eb7346bae415c6367ed0907125227","sha1":"a9e8e937c5afc2f9feb46bfcb8fa854728a494a8","sha256":"b081f7bf790678b56a2c0502651d6873cbabc09e78fe40655df15f918b1e369b","sha512":"87f620cfdfd5c1abddde9d19346cc0ab34fecfa359933fd31517ffd4bc6faad040c033bd89ace9d5ba00b7a51aaac2df73417d99e3535ba970c744312e415e7f","ssdeep":"192:f1Hlb/UvbtLTSjJACmwJCyE5+oa77IdgOpb9d8mKWyu1rPj13BFnFTlqy7:fLKLOnma1WXaypRjVXFJqG","tlshash":"dc22b012a0e8988cde26a1be4eec55ddc12b1f0ff1a70f518c7de58bce51722a05e4a1","first_seen":"2023-04-05T08:50:32Z","last_seen":"2026-04-04T04:10:24.06935Z","times_seen":3122,"resource_available":false,"data":null}},"time_used":1418,"timings":{"blocked":678,"dns":0,"connect":7,"send":0,"wait":26,"receive":1,"ssl":700},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/assets/glide/css/glide.core.min.css","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:19.644Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/glide/css/glide.core.min.css HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:19 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Wed, 12 Jul 2023 17:49:00 GMT\r\nVary: accept-encoding\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hwCPUI9ymXsOlRWH5pEmWErMwk4bFtUNaiTSyF0wx5lLP81MwhSfd9xei7jRYrJjnfn7pCNS0ithAlC80gcLOmpTZBm5B120I3o%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nContent-Encoding: gzip\r\nCF-RAY: 99ccb801aefe5689-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":843,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (842)","md5":"42a8a9ffb55a7eba68c6b97c027b6453","sha1":"e6e9a9765865ff93386efc309df56b5eaac8e103","sha256":"6e6765981015a3543a5d5d9c1e2c9a06e05f7bd2a0610842adf426a11abcf928","sha512":"b582aa3bbf07de64510876bbe5f9acd6006f1a500dcf42718cde9f56b301bd62febce3b2db4d27a7027af4e065f5712c4eedf2554bd936b75614822b21ff052e","ssdeep":"","tlshash":"a001af36455622248526fa3319a1f1cc6596f2538e3387cabbf9d120864bd5d0a239ee","first_seen":"2023-05-02T09:55:32Z","last_seen":"2026-04-04T06:07:51.202451Z","times_seen":1027,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/imgs/topratting.png","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:19.669Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/imgs/topratting.png HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:20 GMT\r\nContent-Type: image/png\r\nContent-Length: 5121\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Mon, 10 Jul 2023 17:15:16 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aPEsr0WVG%2FfglYA7dX5hgk5aNPOCTwm5ymmlfCLPB1y5QMb%2FfUMpQ2b2ugl4bCNaoEer0nMMg8LtoVPrEKquZpkixpBkstO%2F0is%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb803790bb505-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5121,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"d1b960eaba3d0e0cacf1e5c913a9395a","sha1":"6e0573be467d13db1eb580e5fc650ad31d9aa403","sha256":"07c8f2e8879503fd9b58220149d33ab861843d6f18baee50e5499f4455bc0cb0","sha512":"070ca022ad8379f005133b482eff07877c419bb444c032b1f5960bd79183cf2b20ccd2249f6ce41e164308f5c093bd4f55b643c0203475d0fa7fabb18c34e7fa","ssdeep":"96:n2I+9f5XxP/WthWjvw4C0T5VwZQw+NK3s/q8tgbuF9UF9:n2ZnXMcjvjC0de0NWd7","tlshash":"00b18d964ae2975da18405f582977000fc697c8f07f08839ac4ba7b68fa46c1872ff5d","first_seen":"2023-05-27T11:54:25Z","last_seen":"2026-03-12T22:52:33.350852Z","times_seen":23,"resource_available":false,"data":null}},"time_used":598,"timings":{"blocked":255,"dns":0,"connect":0,"send":0,"wait":342,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1760332564_%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D8%A7%D9%84%D9%85%D8%AD%D8%AA%D8%A7%D9%84%D9%88%D9%86-2025-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-%D9%83%D8%A7%D9%85%D9%84.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"172.67.216.170","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.187Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1760332564_%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D8%A7%D9%84%D9%85%D8%AD%D8%AA%D8%A7%D9%84%D9%88%D9%86-2025-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-%D9%83%D8%A7%D9%85%D9%84.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 56057\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Mon, 13 Oct 2025 05:16:04 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y6aZylwDJ%2BnuVlhpeeaK6ue9E8%2FIA25y%2Fsv%2B6nodP1hJdad6uvljNRPCGftNEKAbi8xRiYWaOxb6x%2B5TcH6OqMWiqDsNE1KeHVI%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb8190c7c569c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56057,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 450x560, components 3","md5":"eee240bb52b67482a50e53777868a2e8","sha1":"61c2db213c52ee0f9c983393e9f5877f9bc65a49","sha256":"42c13065d18933fc7f8f5de7434782ffc54ea981bef97c2be9827a90fdebc92f","sha512":"7454e22a8cb1668024cc5de9f6cfda445e7643462acdd9197a2ca82ef770d4826213473527fede3df23fc62dda87d2c0e642535a66b77b15615664005a51dcca","ssdeep":"1536:oTE5/PM1d96gwDKPIHuf6RHrw4ixKD6YyOv2I:UE5/PMyD8R2rw4gKDR4I","tlshash":"c343f1b3dc0a3bc14a6c97b33c12cd3cb7815a19e95b6ed39a616e123e5c8014d2e65d","first_seen":"2025-11-11T09:22:09.167468Z","last_seen":"2025-11-11T09:22:09.167468Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3294,"timings":{"blocked":3182,"dns":0,"connect":0,"send":0,"wait":41,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1761069676_KpVAVn_4f.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.190Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1761069676_KpVAVn_4f.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 237345\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Tue, 21 Oct 2025 18:01:16 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E1UEyUnUuKJfd3BmSaRudwa3zzdURnY%2FFb8T%2Bstj6OQGHVljScy15RUkcKNE6VqJZ1J%2BOQ3K00uJCv%2BOfENWv8WMivV09dq19qY%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb8199f9b5688-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":237345,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 900x1273, components 3","md5":"6436a32962c71a4be5dc5b44be9e72ec","sha1":"79a379a169600af445007a6a3d6f2ee32ce7154f","sha256":"a5f83a0b7df68fb1542d166dc5533a4bf2d94ab77451ea9aa07dd008642a76fb","sha512":"d0e2c7ad16096b6191d19b3628d7efbcf2ab5c5ad4d5755fa8e7f338412e2b977d528545114d08df55d53093b340ea328903064357852dfedf42a1aac2d57e47","ssdeep":"6144:1D7odXvk9yjfMnCWpn/wUM0DRRhHRoUfNZ/S73Ii2Fu8:10Xvk9yjfDWdwUM0djHRoEZ65u","tlshash":"fa342372f81da495ef6cc423721837cfee6c84c41e249a926f50c6db7a3914638592fd","first_seen":"2025-11-11T09:22:09.168423Z","last_seen":"2025-11-11T09:22:09.168423Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3602,"timings":{"blocked":3271,"dns":0,"connect":0,"send":0,"wait":184,"receive":147,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1746395374_Thunderbolts-367x550.webp","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.124Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1746395374_Thunderbolts-367x550.webp HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:23 GMT\r\nContent-Type: image/webp\r\nContent-Length: 60614\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Sun, 04 May 2025 11:49:34 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1pYOiPXSuj1KPc0tGOeYkpMuZTQ%2Fiy7RdARAk%2FEUX5XweGnPuTarrT8YyKjwZPCmbpeB%2BBhU3%2BJTkQCeo4k5HFEMNMQfO6IBaC8%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb8164e14b505-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60614,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 367x550, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c0177828dff6e9b51b7337a898514586","sha1":"d3e3d6e957a962dee105119c9bc981839afd822b","sha256":"d8b487b30582dd0b881451e931a1ed6c1d6bdf4a8d5fcedf5e6ce504ebe9edd1","sha512":"dad8a8ef76adc3e035750e8ca82761c7f0246f13b79db005aaab4ddf6681792979e55019f974b08a92ded15be18e75295f7481196584fdd4396bf2c0c0e84eec","ssdeep":"1536:k9wEP2pHC/Da4Omv3L+fx8mkTFahEmC0g0ooPhiRo:ewEP2k/D5Omvb+p8mOFaymCXuPhi+","tlshash":"3243f1cb502a5635248786ff8dc892dfe7fa58388b8256251dfcd3c16a888c671b317d","first_seen":"2025-07-12T13:45:02.181818Z","last_seen":"2026-03-12T22:52:33.413617Z","times_seen":18,"resource_available":false,"data":null}},"time_used":3131,"timings":{"blocked":2806,"dns":0,"connect":0,"send":0,"wait":252,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/shares/imdb/tt9737326.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"172.67.216.170","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.149Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/shares/imdb/tt9737326.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 34656\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Sat, 03 Jun 2023 20:53:08 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U1FDfAq48saumyy2RBZXlWT2QnaLmheCMCtY4G3xo0KP5mWU5owaJ1QEui2jKoScHqwarw7vT%2Fb4vX5yHgOO3tSe8nKSJAqCk1c%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb8066c2b569c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34656,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", progressive, precision 8, 675x1000, components 3","md5":"dfd983733f64ffcd32e1a4fc347b075c","sha1":"7aaed6032f7e69dcb44492602e2e24d64222ae09","sha256":"ccab487a69c264e0df95ec579818d7941059ca7244119cfcf9af2dbc1a7aaf74","sha512":"f5cb0f933e6e9dd5cca1532f79c319e1815d7c2933f239fab9c8f0e4fe366819e60597a283fde01caf08d5d1aa4bb13fefba7b9d46b566994f4a9cbe354345e7","ssdeep":"768:8Dy/tBt/qwdeYDOMBu3acEoGHOe4x/0Gl1Vcp15+cLVGOi9:8D0hdeYDO1a3o7//0Gl16LVPM","tlshash":"1df2e12b6899cfdbb54d75fa204ecbe8750e6b0171ad5a7310981cb8cd7078e8d4e368","first_seen":"2025-11-11T09:22:09.169894Z","last_seen":"2025-11-11T21:02:16.848237Z","times_seen":2,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":243,"dns":0,"connect":0,"send":0,"wait":121,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1762809542_Sesame_Street_TV_Series-622990146-large.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.164Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1762809542_Sesame_Street_TV_Series-622990146-large.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 166610\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Mon, 10 Nov 2025 21:19:02 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=55s67UiIwQyviX7Hj5Y4OP%2B6Z%2Bo7zVQOf5uX9fITnlyeS8vg2g8Hk7YKoD68mBUWPLX3jm9P8kPfjgQ3CP%2FDtZK%2BK7xGk81%2FuBM%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb8099fb95688-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":166610,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75\", baseline, precision 8, 900x1200, components 3","md5":"73cde708210b6fce071f65f6f3c057c3","sha1":"cabf6c2456589189ac4634f1fdbffe4c3456272a","sha256":"81bffce0b203290b0fc0b701840439b9a6267469302511a5e778c1ba91766d5c","sha512":"94d4d2f54b5e48c45faabaa7fc84e08245b219c8a302f8d28021da670e04a710f70c0efdd2d8497a560ec8f1bb87ab73d8b0bb93cae1d2290bcc926546f58d25","ssdeep":"3072:uO7dJ7ff2222222222EqfCyV1HJ/ghT7VHxJlNgoAiNCkxpmAKC4Ac:77zEqfCWXST7VHxJXgoJbUHCU","tlshash":"5df3e11744488f5ae09d8398bf531eaa5702271feca139fe440b4ecb7f522a10dd929f","first_seen":"2025-11-11T09:22:09.170894Z","last_seen":"2025-11-11T21:02:16.897598Z","times_seen":2,"resource_available":false,"data":null}},"time_used":884,"timings":{"blocked":734,"dns":0,"connect":0,"send":0,"wait":44,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iai8ckkrdlrb.n4.adsco.re/","fqdn":"iai8ckkrdlrb.n4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"38.132.109.126","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:21.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.n4.adsco.re","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:14:20 GMT","end":"Sun, 14 Dec 2025 09:14:19 GMT"},"fingerprint":{"sha1":"E1:1C:75:CB:71:36:CE:62:CC:D3:97:20:A3:3E:A2:FA:DB:E6:BA:53","sha256":"71:DD:71:4E:B6:1B:9E:7A:90:D9:9D:D2:2D:76:D2:D4:30:96:42:27:B9:D5:71:B1:13:B4:4E:91:D6:27:1A:8F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: iai8ckkrdlrb.n4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://shahed4u.you\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 09:21:22 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Fri, 16 Jun 2023 08:37:42 GMT\r\netag: \"648c1f56-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":857,"timings":{"blocked":385,"dns":114,"connect":88,"send":0,"wait":88,"receive":0,"ssl":180},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/assets/glide/css/glide.theme.min.css","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:19.647Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/glide/css/glide.theme.min.css HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:19 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Wed, 12 Jul 2023 17:49:00 GMT\r\nVary: accept-encoding\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dDz6onMNtF26LN3ScrYdvbNg%2FWEKwbKXE3upQe5Eh3kcvPmISADC7nQa7f9LPyuvqAseBPWtmU7rGXvEZc0AKoUzcDHIVWX%2BpvY%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nContent-Encoding: gzip\r\nCF-RAY: 99ccb801b81c5688-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1321,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1320)","md5":"72269be697aa9e859d03e29cb696787a","sha1":"eb1c8d6ae2e51276dc8c7d2018aef42a01502d0c","sha256":"1a04c7d342fe039e4b9a1a3764ca7bc6119fe94624bfc23ff302f284b2c35e3a","sha512":"f2f0cea1217b919518927ec1890ba54424efa51a1e9e58e59100d984cebe22a0c98b98c70c7f501181fd35f30107c2e5aa261ceced7b606c5b1b1edd3b12aba7","ssdeep":"","tlshash":"4121e1369b42010ee013f60769c1c6cda0a5d1329622c5adfffb2064ce421feae391c6","first_seen":"2023-07-22T02:08:10Z","last_seen":"2026-04-03T03:42:19.476528Z","times_seen":705,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":169,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1759805206_MV5BNWJiZjM4YTktYjg4OC00OGU3LTkxMTYtMzNmODFmYzYwODI3XkEyXkFqcGc@.jpg_V1_SX700.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.159Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1759805206_MV5BNWJiZjM4YTktYjg4OC00OGU3LTkxMTYtMzNmODFmYzYwODI3XkEyXkFqcGc@.jpg_V1_SX700.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 115459\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Tue, 07 Oct 2025 02:46:46 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HW%2FCKGl90vWnKXHXVyLt674OtzCSGhosep5Vjm9XbY%2BMk%2F7SgPK4degkWbBTgZT0yUz3zTJY5R6eq0aUoEFQUZ6rSFeXSmvKZdo%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb807ac845689-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":115459,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 700x992, components 3","md5":"3743ce16ea8f9097e53a585aafddce56","sha1":"bdb5ba02834447da42a163fec0009fa63d7d6daf","sha256":"74198dd05d55be72518c79008e653501247c225aea9c113bd3a5504ac531edc2","sha512":"d30d182c1f18b9ad214d0a754f6e476070e520d8cc55407f5a60563bc65178626e6d34e11105025290167ba39a822b1ba9794751d705202fc43eab8ff20df95d","ssdeep":"3072:FMXESD/ktJAghIplmzk1qLzh4GmQIRPksF9UPbPlHDNCn:SdT81qpkkUOGmxxkNPbPNDE","tlshash":"a1b302667f8990e4e6da0cb376c668065f5510be80fed7cfc48b04486c5fa2f42ad90e","first_seen":"2025-11-11T09:22:09.1725Z","last_seen":"2025-12-16T17:46:38.201592Z","times_seen":3,"resource_available":false,"data":null}},"time_used":782,"timings":{"blocked":427,"dns":0,"connect":0,"send":0,"wait":246,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1759805812_MV5BODJiOTc3NWEtYmJlNC00N2M5LWJmMzEtZTlmMTEwNmJjZDRlXkEyXkFqcGc@.jpg_V1_SX700.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.193Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1759805812_MV5BODJiOTc3NWEtYmJlNC00N2M5LWJmMzEtZTlmMTEwNmJjZDRlXkEyXkFqcGc@.jpg_V1_SX700.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 121605\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Tue, 07 Oct 2025 02:56:52 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mwxdnxEvYbEPH3K%2BQCCQ2hv6ppG9THu4%2FSUUdWNHjZ3wmzgmzOz9piY%2Fbb47dJtvXTADLQQ35C2UQ7fziYS4z6iW4tPJfnv%2BUZU%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb81a7a28b505-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121605,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 700x991, components 3","md5":"e4aa0b837e87c006df28abba6cc1b48c","sha1":"c3c15aa77c01a8f01010a0fe2c72d478380a5751","sha256":"a70b425156c7f435599bd738b19d526f2d8b1fa3382eefb4d730caba325a1168","sha512":"574ec595bebe91522b52cb7d2a0b11cbc07e9232384774fc57c702dd17486e9eb3f821007fd72edcf00425d2d19df71b41313ffa131585b2d47e551e508dffdb","ssdeep":"1536:H1qHnP0dwjFJe1tCam05V1hUDDOIoWE7mof9dpuHgdr0Ac0nVMar2Tf/P0DGmw3:H1qv0ua1tCQVbUPf4moVXr0A7D2kDk","tlshash":"12c3124e61c58046ae1774723d652eff79e47d22979401eec30f08ecd48a6a61cabdbc","first_seen":"2025-11-11T09:22:09.173413Z","last_seen":"2025-11-11T09:22:09.173413Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3557,"timings":{"blocked":3401,"dns":0,"connect":0,"send":0,"wait":46,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/tajawal/v12/Iurf6YBj_oCad4k1l4qkHrFpiQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/tajawal/v12/Iurf6YBj_oCad4k1l4qkHrFpiQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://shahed4u.you\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 9996\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Nov 2025 09:58:22 GMT\r\nexpires: Fri, 06 Nov 2026 09:58:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 429778\r\nlast-modified: Mon, 08 Sep 2025 17:58:02 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9996,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9996, version 1.0","md5":"e9c38c1110be8eac901fbe1fa4dff374","sha1":"aba40d14b54e93d55124da50975b075c28969a41","sha256":"de8f431c146ab1feb612cb7ced0842ae5c4e2f12067d13db0badeca73977200b","sha512":"63d09f9af1dc5527a7a83742816db935c4f9a68dd6e0aa0cb8123c9800445cf98d9ccb4540ac72f22169acbb4fdf74d4efe294594c7fee86f340bf4e5314b493","ssdeep":"192:RroSo3j4T8CjdN21Sqp4LRD0BR3UeVyEwisPtNLMlhjP9hMyCoI7:Rrhoz4bBqqlDy5UTdisPPMrjPDCL7","tlshash":"6922cfe37d2c35a4c36f0a39c9c00f3e85d41e826ea4375aae744f35e4917a7a64163b","first_seen":"2023-04-05T13:22:44Z","last_seen":"2026-04-04T04:10:24.038298Z","times_seen":2778,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":111,"dns":1,"connect":20,"send":0,"wait":24,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/tajawal/v12/Iurf6YBj_oCad4k1l8KiHrFpiQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/tajawal/v12/Iurf6YBj_oCad4k1l8KiHrFpiQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://shahed4u.you\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 9900\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Nov 2025 09:55:18 GMT\r\nexpires: Fri, 06 Nov 2026 09:55:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 429962\r\nlast-modified: Mon, 08 Sep 2025 17:57:59 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9900,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9900, version 1.0","md5":"7256be46335261573e1ab1dc7f6539f0","sha1":"abeac1b7890a903ac951c522bc9b3039ec6fa1f8","sha256":"9986de5db80ec050300f1cea25d651a5779ae62b91a39b5667ac23d0c7668cbb","sha512":"16a93177eb4340d61c62e2d9605c8249b0558aa42d6490210e94939fb155379f0694c72225b55e471979134cc111104867676cebc5901af21aa4818821e3591b","ssdeep":"192:QC2S9zsmVUjqM+Xtixu2qtVhsLlYcPOYnOpTg++DaN8K0EUiBbxm4:RVXXtrRhsLp2yug+hCqBbp","tlshash":"ef12b01858048c6ef2f29c522a4d2ab2c403a27fd9d3e6a65f452221df816be717dc0e","first_seen":"2023-04-30T20:16:01Z","last_seen":"2026-04-04T04:10:24.10501Z","times_seen":1144,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":110,"dns":0,"connect":0,"send":0,"wait":30,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-regular-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://shahed4u.you\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 11 Nov 2025 09:21:20 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 24948\r\ncf-ray: 99ccb80998fb56b4-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"6421d693-6174\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1488790\r\nexpires: Sun, 01 Nov 2026 09:21:20 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=mS%2FRNKC5NcGsOMh9po6dJj9c6jbtpWEDtXv9pxUD6lx%2F2gGvEpALhff%2BJ%2F59NUZ0IaFV4B8CjfXA6vYrIsHc%2FtCru2JMCYC3s%2B32WAhkND0%2BMe39XKeLbUj9ymbezzuz%2FCoyaPNB\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24948,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 24948, version 772.256","md5":"61f30b79daf5b31f0d254a31fba66158","sha1":"fb363d27cfdfe71a243fa2ac3dab2815232b9b7e","sha256":"8e7e5ea1b15f62ab14dbd41768e8fbcd21cc859a4ea5da812457ee714299fb35","sha512":"db6f82dbbfd0c77d1b34074ed2eeaa8659924ab1a4320fdeee93eec36ab98516fd92836765ced03f0acb70d153ac14c4b50b7dfcc8f105a995fc4e65bffbdcd1","ssdeep":"768:E5ZyQM6ylMx2k3xyF7RwyXb3QoqKGENDWteN:E5ZtSMx2VhR/bACGEv","tlshash":"6fb2f12c52f0ffb7d4c74a2ad8b84f2218e2b030e5f19111b44ce8b5da4bac8945a327","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-04-04T03:29:36.861492Z","times_seen":7466,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":312,"dns":0,"connect":0,"send":0,"wait":16,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"c.adsco.re/#0.7827745314588597","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.43.28","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:22.217Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: c.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:22 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCF-RAY: 99ccb811db414c11-OSL\r\nCache-Control: public, max-age=2678400\r\nAccept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR\r\nCritical-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR\r\nPermissions-Policy: ch-ua=(self \"https://adsco.re\"),ch-ua-mobile=(self \"https://adsco.re\"),ch-ua-full-version=(self \"https://adsco.re\"),ch-ua-platform=(self \"https://adsco.re\"),ch-ua-platform-version=(self \"https://adsco.re\"),ch-ua-arch=(self \"https://adsco.re\"),ch-ua-model=(self \"https://adsco.re\"),ch-device-memory=(self \"https://adsco.re\"),ch-downlink=(self \"https://adsco.re\"),ch-ect=(self \"https://adsco.re\"),ch-rtt=(self \"https://adsco.re\"),ch-width=(self \"https://adsco.re\"),ch-viewport-width=(self \"https://adsco.re\"),ch-dpr=(self \"https://adsco.re\")\r\nLink: \u003c//adsco.re/\u003e;crossorigin;rel=preconnect,\u003chttps://6.adsco.re/\u003e;rel=prefetch;crossorigin;as=fetch,\u003chttps://4.adsco.re/\u003e;rel=prefetch;crossorigin;as=fetch,\u003chttps://6.adsco.re:2087/\u003e;rel=prefetch;crossorigin;as=fetch,\u003chttps://4.adsco.re:2087/\u003e;rel=prefetch;crossorigin;as=fetch,\u003chttps://0.l.adsco.re/\u003e;rel=preconnect,\u003chttps://0.s.adsco.re/\u003e;rel=preconnect,\u003chttps://0.n.adsco.re/\u003e;rel=preconnect\r\nexpires: Fri, 12 Dec 2025 09:21:22 GMT\r\nETag: W/\"LvTxXIbLQ/DvDiQbcP3Xkg==\"\r\nContent-Encoding: gzip\r\nvary: accept-encoding\r\nAge: 133213\r\ncf-cache-status: HIT\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61289,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (2374)","md5":"2ef4f15c86cb43f0ef0e241b70fdd792","sha1":"4971749861cba038c2cd1dce3c68c28aed4676fd","sha256":"5c240a0fcfa70d0e87f614c22547e240fc1a17214a232b6d4272e4a4cd42d905","sha512":"97857fceb635a585da1def0b639726d2414b8ba2b62015deadabc2ad3e01be420adcc1bf9bc1508aed8fb0ac45036922aff198abde2a291ffc30a6269c2812e1","ssdeep":"1536:P/EE3nA5ePdB1tz9NSU3myQjyiw1snWlwj:3TnAQp7S4QHnWSj","tlshash":"bf533b797561203a82b228fe167f532170ba56906d46d0d2d3bdc9503c38e9b933bf9e","first_seen":"2025-11-08T22:28:35.654808Z","last_seen":"2025-11-11T20:29:54.277417Z","times_seen":150,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":1,"dns":0,"connect":1,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1727451314_9dNWZPjFWdKo5Avr5JEEzLShLMZ-scaled-433x650.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.122Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1727451314_9dNWZPjFWdKo5Avr5JEEzLShLMZ-scaled-433x650.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:22 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 41161\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Fri, 27 Sep 2024 05:35:14 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=87w2EBikjtEL9rVf2gmYNdL52jxnXEwZvHcwx8CmHeNcPIsT5%2FK9eq4LLETuWVxjD8FES3EDQZM6%2BRdd2A%2BhEPvZ0oeVJbgKOBo%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb814cadc5688-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41161,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 433x650, components 3","md5":"3f1737c0d0b4d6a8b47d994f71fd09a9","sha1":"6c0c98b3bee8b0693bdbd13c329eb9c8d2155c1c","sha256":"6de70cf8c948e8b465f0ce28fe903a7814586d801b177d1c182bd8a5dbc721c9","sha512":"94bb1b29b558e56e5ddbf67d29b5f26c50eee4ef9e10df58fffbcdaf062bf0f205b531b442d30a3eebd56b40d7775f3f3b3cc7eb1d46644bd66e6e491fc23021","ssdeep":"768:1dJjGC9x2zJ85lQ6l3Vdrw0rXVlBB9uWj/THbpuwYiAb:1uC9QzJ85lQOrXHBBJjL7p/vAb","tlshash":"9703f12399302585ab6d87bede4f5eb51ade0b5cc406a9cd1076cefbe3011c2f84e645","first_seen":"2024-12-23T10:36:35.059844Z","last_seen":"2026-03-12T22:52:33.58711Z","times_seen":17,"resource_available":false,"data":null}},"time_used":2653,"timings":{"blocked":2573,"dns":0,"connect":0,"send":0,"wait":44,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://shahed4u.you\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 11 Nov 2025 09:21:20 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 150124\r\ncf-ray: 99ccb80998fd56b4-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"6421d693-24a6c\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 341143\r\nexpires: Sun, 01 Nov 2026 09:21:20 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=0Uw2gct4fL0bhrNkJaPzdUG1Y6wrd7I6rGiuvGJwcCw8MCU%2B7Q731XzPNMp9XwaqKAWBY%2FR0s58XjywrwpIU8VchwRtG79nN2jBJWeB4LZSosjecGGWCGiiqZAiJALDz0mJBx04N\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150124,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 150124, version 772.256","md5":"c64278386c2bbb5e293e11b94ca2f6d1","sha1":"6b99aa650bd12a36caa14e0127435d8f4cd3ba73","sha256":"7152a6933ee3d690ec2af3d09da9d701723d16aa3410a6d80f28ff8866f3b880","sha512":"0ccdc1515510d902c0b4a48b863c48bad86e1f766b1f9c890a64e28d91ee7c6d488241c531fc094d15b29c211da71e092587a987e24ee8e67ef8ea99c284e821","ssdeep":"3072:7sCbk7w0ZXdkN6iMjif3Lr7x7wAtf+D7gDk1feXDLnurWHqrNIuv5n0:7sCbkFZXdC7MaLr9w2mIY1feXXurWyNW","tlshash":"28e3123cf2c6d486735f5aeadb79636894fd0a2e74ecc67d26b982112048f828174d1d","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-04-04T05:37:48.634745Z","times_seen":30336,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":315,"dns":0,"connect":0,"send":0,"wait":27,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/faveicon.ico?v=32","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:23.925Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /faveicon.ico?v=32 HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D; _ga_BM642X4VSX=GS2.1.s1762852881$o1$g0$t1762852881$j60$l0$h0; _ga=GA1.1.243872804.1762852882; _popprepop=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:23 GMT\r\nContent-Type: image/x-icon\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Wed, 01 Oct 2025 21:30:11 GMT\r\nVary: accept-encoding\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KvRyO88IzdbkBjYAj35j7fnayPZQcjIxmLuNDaFtUgyPER67L0eYKlCrQ6NLjTUph25vftc1%2BuY4OiGxzC2xFOQgXtVganU0eIQ%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nContent-Encoding: gzip\r\nCF-RAY: 99ccb81c7a505688-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12155,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 170 x 170, 8-bit colormap, non-interlaced","md5":"bb2e0fcbf11ab7c40e3ab4dfdc22ee14","sha1":"9bdfcd206e08ba565bf72a6de45bbb6aaf24239a","sha256":"315e30bd5f83c761ab888e9590e62d0f4652e87628e8abc11e841ce0e558fb87","sha512":"6d53a1897f930206e6847ccf5d72fff98062041b2307fa40de61e73f51543494f9632c6567ece9688ee6f0757af9db60e129a124e4709fed81b176fe21199137","ssdeep":"192:oorSyV+eGAOJ8xSsHSeEyWS5EsfLdtoFzEJPrmLddJn9ioWe2eVuENouPyggWD:HFGNGxfsdEZrSzio5VuENogj","tlshash":"9842bf09cb97a3459e3028d5e0f39fd89f8ca9fe93566c1184725ba1858cf34d11b9bc","first_seen":"2023-09-30T16:39:32Z","last_seen":"2026-03-17T16:33:01.916652Z","times_seen":208,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1758165568_%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D8%AD%D9%84%D9%85-%D8%A7%D8%B4%D8%B1%D9%81-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D9%85%D8%AA%D8%B1%D8%AC%D9%85.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.002Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1758165568_%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D8%AD%D9%84%D9%85-%D8%A7%D8%B4%D8%B1%D9%81-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%86%D9%8A-%D9%85%D8%AA%D8%B1%D8%AC%D9%85.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 132886\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Thu, 18 Sep 2025 03:19:28 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=48wL4RkBbdD2ikr0piNrGzynUhI6s3LUEXGu7UmlCahq4KbK7kKWqXxOVbWoN7MgKgCxuI7O36RCQCJnmkpbIEWG%2FFDOSVZNXQQ%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb80479fd7131-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":132886,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x1000, components 3","md5":"ee33948170c317bcebf51922219ed48c","sha1":"7e427817a5cfe5b832d1b3fec6cc8ebe59a063c0","sha256":"d3e2b1f4c20db97073a4ddbd7a23be7fa12e1ce520f549814fca89a6ff9fb594","sha512":"8f354e14d6bcbd11768c04fc516c04e04c48798b87e1a94eea963c079e3e110aefc5ccd7699b55654a1eae36dfc9bdbfe32cf744f4d09f482eaec94da0a9d4b5","ssdeep":"3072:Wisg7dSwE1DZqLPfJkH/6xcoThoFRSeF3p9ogderDnA0:Wisg7deDZfSPTGLxJphdin5","tlshash":"c2d3121b3584748cb478d27aeba73f5d831595c1f64931bd232b0cadd6b31220a7f266","first_seen":"2025-11-02T13:52:04.892562Z","last_seen":"2026-03-12T22:52:33.531463Z","times_seen":11,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":202,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1759679278_lqfhoDnCD4s10rVbKNTThd7CBnI-scaled-433x650.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"172.67.216.170","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.024Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1759679278_lqfhoDnCD4s10rVbKNTThd7CBnI-scaled-433x650.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 69891\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Sun, 05 Oct 2025 15:47:58 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ANu81Kwf0a2ffVUPqw%2BPWtcwZVr2qewil4ni0MW9rkFLc92OHjidYny%2BNNi5Sjdv5dpweMt6NsFCmz3awdikP%2FWqMr8%2F06A5TG8%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb80dfb10569c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69891,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 433x650, components 3","md5":"2a5c38a41394dd09e2c7b33df3c87ae6","sha1":"5a889e5fdea35371202724463171be52ce62971f","sha256":"8893d90edd9132a507c00767bfca61e027d4fa6f88e2c861553d674305695415","sha512":"299cc6c2d23bae2293c1e4a80d39510407675ffc5d84df93d3cb60e185ee6648228e812515ae4278c65a5ded5ffe9d53860cedbd5dfd53664862656d70c6e9e4","ssdeep":"1536:1qgndryuNdm4k1Lv1ykKccvwMlUenY5ZaHWlxd7Yy5y:UmkuNU461rZcvw2UenSaHWjd7Ymy","tlshash":"38630275e383b3a393129a909005448f4bae73b73e65451bb93026c7aa0834b81d97f7","first_seen":"2025-11-02T13:52:04.870714Z","last_seen":"2026-03-12T22:52:33.56185Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1899,"timings":{"blocked":1576,"dns":0,"connect":0,"send":0,"wait":254,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/shares/imdb/tt27757546.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.097Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/shares/imdb/tt27757546.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:22 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 35860\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Fri, 13 Jun 2025 20:13:57 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FHFojp2d283Vgo97Ny1nmv8Fzo%2BRJflVQhPX7DwLDWC%2BkDH1wMhlZYjWvyhw4GwlG%2FyX13ZzZPY19lqaZGctZcymCnciVnxarQ8%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb812294cb505-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35860,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x450, components 3","md5":"53f8d2a086daec67ec72e4565739313f","sha1":"6a2c982f8c65f6e3612043aab0d5c59780995912","sha256":"337b344ed63b6c0a68b239c625fa336aa44b3c70efc32437282b5e30a242ccd5","sha512":"e6e7d92e1014eb9718e22d0915bd2c3810e01b84d005ae0f511dc592aa653f09dd3d6b8ea95523119692c6534f00e918e5e31fb6db2b5011923ada19168ec655","ssdeep":"768:qUzGKEH2nPQojUS4TAQxMPqHFXS1uWqFC1ssMCjJWbBAV7HyEhgw:qUztnPZjU5AQCSc1uq12eV7H3hgw","tlshash":"90f2f18a8df4a1d1f5e1a0310eee92d0abd9c66036933f34b3539672c163a65ddcdc09","first_seen":"2025-07-12T13:45:02.162257Z","last_seen":"2026-03-12T22:52:33.570233Z","times_seen":18,"resource_available":false,"data":null}},"time_used":2834,"timings":{"blocked":2173,"dns":0,"connect":0,"send":0,"wait":623,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/shares/elcinema/2091459.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.106Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/shares/elcinema/2091459.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:22 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 195022\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Thu, 03 Apr 2025 17:46:04 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i4Uh8e2W1nx0EWZ2Z9SnFms6x4mTMZDqfjG05Ry%2BUZGv%2BsUjb20kDkC%2FZb%2BXIWRxkMNf94Zusmu%2BGXkBFedm37w8Q9cQ6Jk4qGc%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb812fe7c5689-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":195022,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1349x1685, components 3","md5":"4729aff67b88ee0c565440725fa0a962","sha1":"3aae95eca4eb7577a39b8e8bef4055ac2897e668","sha256":"947f1bb0e961b9954e85bcaedc904a19019e15553544136d698e506e3ddecab3","sha512":"8c83f9c7fd3aed2408747af1a824f7b01fdc09c8e2e8410fd0d68247f7362e4fdc0cafeee3abb06432949f3639e330159b2d4f17989a48a928cb3db7bb8efe97","ssdeep":"3072:bscyHC6UA+4j15OwCvDBY3+TmC+wh+PvtIdESwSCygt4MrfTJf5fqcFHX7oGMGNk:4HOY+wCLqOTefPLSDyt4Mf4JGxNvn8AQ","tlshash":"5614123dfd505f04d614683b3762274361b725e975e28796ceb5383027708e4eca3baa","first_seen":"2025-07-12T13:45:02.099453Z","last_seen":"2026-03-12T22:52:33.499252Z","times_seen":16,"resource_available":false,"data":null}},"time_used":2407,"timings":{"blocked":2289,"dns":0,"connect":0,"send":0,"wait":43,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/shares/imdb/tt14123284.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.127Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/shares/imdb/tt14123284.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 28398\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Fri, 25 Apr 2025 01:24:28 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PKGr4h3%2BNV%2Fc%2B%2F9juQD4ZtFhaBlP0%2FPM8TCsUPTiRuF%2FAEhvo1Ro8VcBs9AqLHfKb%2BjI4TtAkJeRm%2FvkZJxVjb5dH3uKUKO5L%2FKe6w%3D%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb816ccfc35a6-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28398,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x375, components 3","md5":"e5c7de8233d58e565d6ca2ab02ce54d4","sha1":"66d396eb73b41efabbe1520fc4bba9e40985c552","sha256":"dc296dd9403662d624d3da29f1812f2f8a968b53e4ff4be2407f7149dd83ac75","sha512":"bb57dfdb9f1ca429bce26592262d9ff91c7c24dc3abb8a3a16ba9cf7bf4fc3f03c80ea7a91c11274c4cb0267c1a2bfe977551e1f4e7f695985e52edc5b1d4cb8","ssdeep":"768:jVfqGWZvh5I95PjhFU4+5bV8x9t3W0d8yZ44AVULG9:p7g5CPoZ5qx9tPq402G9","tlshash":"99d2f119e108621dce72bfa6c063f1836938a60cab0d070277e647e54ac7156e2dbf97","first_seen":"2025-04-27T23:56:53.942928Z","last_seen":"2026-03-12T22:52:33.388103Z","times_seen":17,"resource_available":false,"data":null}},"time_used":2923,"timings":{"blocked":2879,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1740691617_3edgGAzjzaZwMcvEiTFElIztmF2-367x550.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"172.67.216.170","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.139Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1740691617_3edgGAzjzaZwMcvEiTFElIztmF2-367x550.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 45807\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Thu, 27 Feb 2025 11:26:56 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NTCRz8811aS9mqgU6SjSTPqOFKt1XpppDWEtdKvejC30YQIj16aQ8dCbX3%2BYaXqWzrdea1kSibSEJcrhp0b%2FUm0JsJkZHy3bjkY%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb8174aeb569c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45807,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 367x550, components 3","md5":"9fe24692295a926b35e838833dd519bc","sha1":"8ebb4fd71e14942aebb0e6292abda02378f27de5","sha256":"e6d8d978f382c4f48118a92d8362fd9356f1da88c39d1b55a56ae684e45e3c3e","sha512":"4b65f177fa5162431e3e6125cfb07e4eb2da2f30ec116f43b44a215c4febfdf7bef1ccb5c89231393d5fa895d1b7cd1f10378c197048884779940d0717d79d7d","ssdeep":"768:X7+k4FdZYYcV+bkB2PfezKsV60Re8fZPyvRrhjawY/nhdIkV7kpLHoom5:XCkeHGV602ns64e8xiInIkVOko0","tlshash":"7d2301cece92365558afcd2a15e59322f82b07d678b378d0d0ab9619fb11fe424bc4d0","first_seen":"2025-04-27T23:56:53.924795Z","last_seen":"2026-03-12T22:52:33.368608Z","times_seen":17,"resource_available":false,"data":null}},"time_used":3228,"timings":{"blocked":2949,"dns":0,"connect":0,"send":0,"wait":209,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/imgs/pinned.png","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:19.671Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/imgs/pinned.png HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:20 GMT\r\nContent-Type: image/png\r\nContent-Length: 2410\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Mon, 10 Jul 2023 17:16:02 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SYUjkz6qUZqnNoRgYeUTkexVH8S5giAhD8k40a0q367mM2RGOl8tBUegCxpjcc1S2XDLjzNFAHqzSq1qtQCTQ2JaLcrOP6%2F4%2BGU%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb8037a0d5688-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2410,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 191 x 191, 8-bit colormap, non-interlaced","md5":"be1fd63de7e9b97542b21e800afdbe65","sha1":"4aac7f0a61f66bf00dcd8a40263f13831bc09b6d","sha256":"c7a8d7ca5213d680515f9484493ad0bcf3b89116f118f7c4172bf4ad3911c1a9","sha512":"5472ec10ed61168000b71a8f59857b883cb115423e02cbac7cd538f0defea4b693d38d5bde4a2f4ab3998122e41d612e3b1babb6b173c62589e3ecad21ddf518","ssdeep":"","tlshash":"43415df3432f3e3edd4448ead264cfc7aa46d1a9145809dbc04a1ea3427933649365d6","first_seen":"2023-05-27T11:54:25Z","last_seen":"2026-03-12T22:52:33.496518Z","times_seen":25,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":253,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1759081055_MV5BNWYwZGFlOTEtMTI1MC00OWQ0LThiZmQtMTNkOWJlZjMyNzNmXkEyXkFqcGc@._V1_.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.180Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1759081055_MV5BNWYwZGFlOTEtMTI1MC00OWQ0LThiZmQtMTNkOWJlZjMyNzNmXkEyXkFqcGc@._V1_.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 460690\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Sun, 28 Sep 2025 17:37:35 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uEEnV5akCFqCjtYhkmbKs2hUTD7%2BLOixNJL9n6C9vciMht6A9cgVClCCuUm4e%2FYfa5H0o%2BhTtRBEckjS0T5qOUSuj48Q%2B%2BihRXlt6w%3D%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb8178f3235a6-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":460690,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 690x1303, components 3","md5":"32d6d59c2ec427aef51137a95af9ea97","sha1":"34b4c932112b6b19246d3ccdd68707e1bd67e4c6","sha256":"01278b8e93739ad3183ad376241cf783e739da01ccaa3144b1d4055a4ec9764d","sha512":"bc1d759c394d78f43fca79931e694b555a432f907598b02a9b83663b8e377513c9b89a81cf623e07090104c0de438645a024d79abdd31346b708afb16be90d42","ssdeep":"12288:sls4/rrzpVK6Kg6K7GP8B/KTHVB9QxHC6pp7FwKXZ:sls+3XKXbU2ByiWpGKXZ","tlshash":"a1a423b5821a8a9642bc15720cef65457fc9febdac46cf8cc1b777264cb2d4e405c221","first_seen":"2025-11-11T09:22:09.182938Z","last_seen":"2025-11-11T09:22:09.182938Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3368,"timings":{"blocked":2949,"dns":0,"connect":0,"send":0,"wait":233,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/tajawal/v12/Iurf6YBj_oCad4k1l4qkHrRpiYlJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/tajawal/v12/Iurf6YBj_oCad4k1l4qkHrRpiYlJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://shahed4u.you\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 9024\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Nov 2025 10:02:04 GMT\r\nexpires: Fri, 06 Nov 2026 10:02:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 429556\r\nlast-modified: Mon, 08 Sep 2025 17:58:08 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9024,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9024, version 1.0","md5":"10367de774c951da6562045f10109cb5","sha1":"18fca0c18f6e08f89b4f05cfc086382deece9d88","sha256":"fa5e72326681abee3a4952be582e1c2c2abb27932ef262610c078ce89541f919","sha512":"ea32eaf0b69c085dbdbe38d99153c6a7e4bce339391a7640db6ee415532387fdd168b4aae21a91cc8a2826d964f1b26ce5bdad42c85747808689f7ba9d0e2165","ssdeep":"192:zRHNs0HoBStpjkOacpBtQd7D7RW2qbd/45yWIs:lt3HuwpjkWRI37RWhlwqs","tlshash":"6b12bfe26e7e490ac4ffc2710ad8a0167af14ee8d6ba34f9d04612d5926f7dc0e48d4d","first_seen":"2025-09-09T12:45:33.159376Z","last_seen":"2026-04-04T04:10:24.025292Z","times_seen":649,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":110,"dns":0,"connect":0,"send":0,"wait":27,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:21.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://shahed4u.you\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:22 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type\r\nAccess-Control-Allow-Origin: http://shahed4u.you\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: private, max-age=5\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":90,"dns":1,"connect":29,"send":0,"wait":36,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iai8ckkrdlrb.l4.adsco.re/","fqdn":"iai8ckkrdlrb.l4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"185.200.118.62","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:21.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.l4.adsco.re","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 09:14:30 GMT","end":"Sun, 14 Dec 2025 09:14:29 GMT"},"fingerprint":{"sha1":"AA:48:1D:E2:C4:73:88:D6:A0:D5:36:32:2B:EE:2F:67:01:C4:3D:23","sha256":"FC:04:34:8C:BD:15:93:CB:47:29:34:FA:05:BA:8C:F8:AE:96:33:7F:42:F2:72:62:C9:07:CC:D2:57:B3:1D:27"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: iai8ckkrdlrb.l4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://shahed4u.you\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 09:21:22 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Fri, 02 Jun 2023 14:03:32 GMT\r\netag: \"6479f6b4-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":136,"dns":59,"connect":25,"send":0,"wait":26,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iai8ckkrdlrb.s4.adsco.re/","fqdn":"iai8ckkrdlrb.s4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:21.957Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: iai8ckkrdlrb.s4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://shahed4u.you\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":232,"connect":182,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1744489154_bbc-doctor_who_s2_teaser_social_4x5social-4_5-doctor-wh_523c8513.jpeg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"172.67.216.170","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.113Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1744489154_bbc-doctor_who_s2_teaser_social_4x5social-4_5-doctor-wh_523c8513.jpeg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:22 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 349102\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Sat, 12 Apr 2025 11:19:14 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q6SrroLpuOEH%2F647%2BCUcCBUe1NvRiHKvzJKIHNrTpzZqgx3zvVT7fCM97HQEjFdEvpS1gj8SWi0uQbVrAy1QOuKoidvezRMxzjU%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb8136f5b569c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":349102,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x1350, components 3","md5":"72b1458fd763c28d75a77f3f7c2d7cf9","sha1":"248509cc6f59ab20d10d349792ab900da145a357","sha256":"08fb4078555793db12329507689658a8af476baf680afeda98da98c867f00f70","sha512":"f4a7a75c8f6f3f50e6030bb924bb75cd4033d930007fb32bc26b01f985ffac3efb40f317fbc9f905886be73469557894a7fdaa25151f75ee72ba591fa3fed75f","ssdeep":"6144:w+b3iQJVYaKqtaBea2/q3JzfIV4PGGoKw9tl0yoXF44WHj423VFoiJPk7zWqxog/:w+bRJVXKqe4q35qMm9f0y824WHj48FFm","tlshash":"e674238d2f8630c4e4da72b280f1298ab91706902477755b9daf6efce7a398137447f4","first_seen":"2025-04-27T23:56:54.030629Z","last_seen":"2026-03-12T22:52:33.48181Z","times_seen":17,"resource_available":false,"data":null}},"time_used":2975,"timings":{"blocked":2357,"dns":0,"connect":0,"send":0,"wait":461,"receive":157,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1762829217_2092068.entity.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.160Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1762829217_2092068.entity.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 72862\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Tue, 11 Nov 2025 02:46:57 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EB%2BeewbiDjfbFoXydRfL4xkPWmz4%2FpLdpZtuPjMwidmnrqgmG%2Bi%2BJGphnnZpbkskoAPSdBk8j0N%2FRQR5euULOYnXu2vxKoG8xLU%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb8081cf77131-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72862,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 453x640, components 3","md5":"c93f6ba4cc31f4f48340d576078e2e05","sha1":"ff6273e13d818987a66cbccf78bf9cc5d8fd1a12","sha256":"8479189ec355d1bead68c419c9961988401660e3446cec379fca940f7a11a31d","sha512":"20e4b71a84336d43ac1896bb7d0e1101f619e74490feb1febbfe0281854119885fdc70754e5e1234f6f794599b00df278ea478a292d3ab2b73478df7b602282f","ssdeep":"1536:+HStcD9sI+FpDQAHtH9DR+QhBWCW4d2pE32DK/QQc89UbxMXzU:YtD9sfjQEZ9jhwCJ2tK/QQNUbx+U","tlshash":"066302e7ad4e60e1e66ec3b1b168270e0b27d85cb547296d9740d23e204e253a1f5d3f","first_seen":"2025-11-11T09:22:09.18574Z","last_seen":"2025-11-11T21:02:16.838374Z","times_seen":2,"resource_available":false,"data":null}},"time_used":813,"timings":{"blocked":496,"dns":0,"connect":0,"send":0,"wait":249,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1760958968_%D9%85%D8%B3%D9%84%D8%B3%D9%84-Tracker-2024-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%84%D8%AB-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-%D9%83%D8%A7%D9%85%D9%84.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.172Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1760958968_%D9%85%D8%B3%D9%84%D8%B3%D9%84-Tracker-2024-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%84%D8%AB-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-%D9%83%D8%A7%D9%85%D9%84.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 95480\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Mon, 20 Oct 2025 11:16:08 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vIo5LcKtlCdkdx5dkI22%2BXGhmJU9mDp2YjLjv8XhZsCiUS7GCzuPxqJ%2B50Ql%2FuXv3HDS35cNRRxDfmg%2BKPHyn20A1jS7jRbegFHUqA%3D%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb80a7dc135a6-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95480,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 450x565, components 3","md5":"291615d2bd66eaa3b19bbae7e249d091","sha1":"1dcd7dbde8fc2836b87912e408f3dc153d20eae8","sha256":"9f15c841ecc90a9e8cde8ed9d5b7a3b52de1638ca50bfd4d90aa3973a19f8b7e","sha512":"5d670a0e5087dfc24f4e57fc7a21e4e74552e048a04877f641bd0a8926bc3aa4a654e9689eb571d809ec953cfb7afadee1e78947cb3cd738dc07f628d8812236","ssdeep":"1536:l6/bHlMvqJg/ATvdBt6+XbZC0t+CpeRBRdLU0xfb9HiOZAkffYLIsaSVrnUrQdSp:iKyZrdBtF9C0kCwRZj5rZAjLXrViQ1tK","tlshash":"0293129cc858353fc2c9420ac475e80bd7b4e7c05a4b675d48ca008b73dd8eb5b9b66e","first_seen":"2025-11-11T09:22:09.186711Z","last_seen":"2025-12-16T17:46:38.213138Z","times_seen":3,"resource_available":false,"data":null}},"time_used":907,"timings":{"blocked":864,"dns":0,"connect":0,"send":0,"wait":41,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shaahd4u.net/","fqdn":"shaahd4u.net","domain":"shaahd4u.net","tld":"net"},"ip":{"addr":"172.67.185.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-11T09:21:15.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahd4u.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 18:49:31 GMT","end":"Tue, 03 Feb 2026 19:48:17 GMT"},"fingerprint":{"sha1":"52:8B:08:F3:F9:91:E0:F4:CB:A5:25:F8:AA:79:B7:AF:27:85:E2:20","sha256":"35:CA:2E:D0:49:26:CA:81:72:1E:A9:24:CD:01:4A:E7:EA:4C:96:37:1D:3E:7D:9B:E5:9A:EB:86:64:35:C2:B0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: shaahd4u.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Tue, 11 Nov 2025 09:21:15 GMT\r\ncontent-length: 0\r\nlocation: https://shaahid4u.day/\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NjJBj0XVK5lOmObssXYjQduAti%2FsuvShVflAj7jSEtMpDkqkgFQZ5gHrWo%2FJ4xMFCyXq1PY4SSruJ2pLDyBY4LgXTHtW2DUSULI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 99ccb7eabe8bb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":36,"dns":11,"connect":1,"send":0,"wait":7,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shaahd4u.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/bootstrap/css/bootstrap.min.css","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:19.640Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /bootstrap/css/bootstrap.min.css HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:19 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Tue, 30 May 2023 09:02:52 GMT\r\nVary: accept-encoding\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SZl1pJ2Z5Q5xlc%2FxdfLn1nWF%2BFoKic%2BP9Oe4vfcujYEET50lJRCnJsKbeTflN41b33JZwo2LAWAExDiVTSRZb6stOLM7m5uyHsk%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nContent-Encoding: gzip\r\nCF-RAY: 99ccb801af477131-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232914,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"fe7fdfec700d100dc745dc64d3600cb2","sha1":"b231651e0fd68bbd8758189fbd3642c462d34fa6","sha256":"7f1d37f0d90b6385354c2ac10e2bb91563c46bd7a266ed351222ebcac8496c2a","sha512":"b7819649564ed5e0bc04cdf7f5777b529870e6cd7b6bcead219223f2a4718672ae6fa5a8ca19ebc5e08831e02a04f81d646942706d8fad98cc73e5abefcfb95e","ssdeep":"1536:VYutjsbf98fOdBfvO5wlP7Qy9A374298wsY/ElV6V6pz600I41r:ntj898fo298uI6V6pz600I41r","tlshash":"383481d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2023-06-08T14:47:00Z","last_seen":"2026-04-04T04:35:18.381491Z","times_seen":19710,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":147,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/shares/imdb/tt9150192.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.136Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/shares/imdb/tt9150192.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 40039\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Tue, 01 Apr 2025 09:27:18 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TddckZvZwN36gwVtxTsQaqiG9L8st7%2BLWuCd5oIYBTxlZqrLB11bUDAycxhuruEoemdi4Hj2x7Z%2FuMXe%2B9XIDTtvWL9IKRSF2SA%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb81719527131-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40039,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x445, components 3","md5":"1f8953808d4dab581d73e09c7cbf6ccd","sha1":"d5df3d98006d66e64158ee82ef30e3dead422efa","sha256":"f9b88a25fe2146aee11e26bc079783824f6c6730039610f9429bb2081d042a25","sha512":"59e183bc0147a21caeb5da772b7ed3157970992043b240905aa5ed680398028278bbf4b3acf410df7c5e05724af0dc5d053c6184d1327176146ff735f2e0765b","ssdeep":"768:AP0yrgjMLnTYo0nva9ahSaidITKQTRsK0giLuqLDRdNTq9F6N6pYWZ:AP0XMLnThAZhjid/CRJW6qLDJm6N6pYa","tlshash":"8603f1cfa67a18b2fed1633a0b5495c1ff119659b2bca38630648e304d4afab641f054","first_seen":"2025-04-27T23:56:53.944017Z","last_seen":"2026-03-12T22:52:33.346445Z","times_seen":19,"resource_available":false,"data":null}},"time_used":3199,"timings":{"blocked":2928,"dns":0,"connect":0,"send":0,"wait":233,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1762098452_MV5BZjRjMjkzMWYtYTlmYy00NjljLWIyNzYtZDA5MjA1MzJhZDk5XkEyXkFqcGc@.jpg_V1_SX700.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.189Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1762098452_MV5BZjRjMjkzMWYtYTlmYy00NjljLWIyNzYtZDA5MjA1MzJhZDk5XkEyXkFqcGc@.jpg_V1_SX700.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 123407\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Sun, 02 Nov 2025 15:47:32 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qUsbmEzYas0bzAHTRT2T2oREZTSSzr2KUMBcPQto70GwCfAZfR8Y%2FwzDDjq3tLbZyJ191R2tdUjVcvj7e8TfiOEbSBRalWONh9A%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb8193c1c5689-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123407,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 700x998, components 3","md5":"239a47b79d08d8fedd7deabb447b1ba6","sha1":"924f98f964cc5f088c3bff1961a2ed519788dd03","sha256":"8a484cdf8aeedc11c734c95feddf044f352faed06c9826c0927c6efdbaf84d71","sha512":"dbc18f437257b289de9af88acebf34e1dac1c5230e2aac81fe5eb534fc0731edd74ff97e78aec8edb935eb5467c59a6de9b58a8f4c0922668ed987b9fb70fcaa","ssdeep":"3072:KtKOSyh8fy4Gkge23hyvDpy6zrgSt8LO7t5q+Pxfe:KtK/yh8KdadvDNzrgSgAxfe","tlshash":"90c312deaba12037cb35532c4774b220abdc5c1fdc9191bcf8b966315de960b8f22492","first_seen":"2025-11-11T09:22:09.188965Z","last_seen":"2025-11-11T09:22:09.188965Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3493,"timings":{"blocked":3215,"dns":0,"connect":0,"send":0,"wait":167,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1759871466_127108l.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.193Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1759871466_127108l.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 114638\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Tue, 07 Oct 2025 21:11:06 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4WH%2BGxkQYAbyDuBsoOEg1OktXdZFAAIFPg9izQXvDUmu%2BuhCiKxTnd6CncAfqZBEbQgDVur1ebFKFibC7DvcCmShzWTaiVSFDG0%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb81afdba5689-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114638,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 94\", baseline, precision 8, 424x600, components 3","md5":"bbc1733a31ab54ab64f6543004c2fc46","sha1":"d084bf2acf8b65546af8bae806de02a6c20a90d7","sha256":"8893638601fe00198b6b4ab9cbff3e4ed240137e7ddb5204f9ae249687694a6f","sha512":"b2c7f3007d6ea32692a3d6e9ab289df0c35d4386f811bddaf23a9aa749b8c1d2f0b59f8cfeb367e16de4586866384ac17692601aa5b01aa1c9bb5b2835273d96","ssdeep":"3072:zLfwN5pleTouD8Li3ASiAwyD5xuj9YvADHQy:oJle8Klri+5caADwy","tlshash":"4cb31284470e3c4cd1d18e78a4ecd83bca06ea5134dd3e4de939e8145aa47abb7b053e","first_seen":"2025-11-11T09:22:09.189769Z","last_seen":"2025-11-11T09:22:09.189769Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3658,"timings":{"blocked":3489,"dns":0,"connect":0,"send":0,"wait":43,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"172.67.216.170","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-11T09:21:19.369Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:19 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nCache-Control: no-cache, private\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nu19vAgXyvvPWGr8WlWdGLYE3s2QYHQ1HG5Iz%2FQdfu%2FpanguJGvlg1lBD7tlI7otb4c3IZjI8GL3TVzalMOwA6Tc4pcHz1GbcS8%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nContent-Encoding: gzip\r\nSet-Cookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; SameSite=Lax; Path=/; Max-Age=7200; Expires=Tue, 11 Nov 2025 11:21:19 GMT\nlaravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D; HttpOnly; SameSite=Lax; Path=/; Max-Age=7200; Expires=Tue, 11 Nov 2025 11:21:19 GMT\r\nCF-RAY: 99ccb8000d9f569c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":220078,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (945), with CRLF, LF line terminators","md5":"e9512cf782c5a5f7d2e7c0680717232d","sha1":"313addd11d3c4680b1adfc299110f308c6fdb426","sha256":"bd95ee40798834d8cf69bdf4305207048b63cc9a6eebacb64601dc7364155614","sha512":"030fe9fff54c7003ac0a62416f8918402d24de58ba36aa0fbc748344f9f123f469317c4aa919c40f11ac992038afed99275d702e3b5c0843b9ef13d10a4cbee0","ssdeep":"1536:H93FPD430VlKIHwEFGUiKOm7rAfov7fzVoPg3AMh0E8h0Xx:Hf4kVlKIHJFGUiK57rNvfSPCHb8OXx","tlshash":"1624fca114b144770497c9cae1b16b1adeb0ee03ca4bed5136ee0fa15fe7c82c95b478","first_seen":"2025-11-11T09:22:09.191039Z","last_seen":"2025-11-11T09:22:09.191039Z","times_seen":1,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":157,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/imgs/lastmovies.png","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:19.672Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/imgs/lastmovies.png HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:20 GMT\r\nContent-Type: image/png\r\nContent-Length: 7131\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Mon, 10 Jul 2023 17:16:14 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NEUxtCDRF5PUZ%2BEpXrEEiHumxXdqUrB6DeY602x4jpoJ0DwexFqd1nPj2KlgD29yPulGGBdmZGQ7CB6n%2FK1GOPIrE%2FMZHJP%2FNAhnEw%3D%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb8037c8435a6-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7131,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"969f958768d34b8b3fc5937ce5def498","sha1":"be8a55e3912dc7115c04139b95de8a6462afc3c1","sha256":"1e0651c3108050fb682a6ec63814e2a6dac5dca54bd70e2018a1f171a2a842a8","sha512":"824ce5d93b1f14d8f8ef15c6ac3fb2c5209ac914b1cd2a6bcd14822be1c6a31618d13dd274a9679cd021cc7fbab47fb9465a0f3c42554305028db369764203d4","ssdeep":"192:XvRyrwkXA3vmVXTtZlPSPS0HGczwxMQeMurw+j4WB:XZyU8vXTtXPcS0Hpw6Miw+j4WB","tlshash":"e0e1bfc64b2cde7d25d761fa76fa027271f7d4a6c0614cb3d88251e1e8b88506b83413","first_seen":"2023-05-27T11:54:25Z","last_seen":"2026-03-12T22:52:33.396559Z","times_seen":23,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":252,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"adsco.re/p","fqdn":"adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":80,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:22.552Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /p HTTP/1.1\r\nHost: adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 4003\r\nOrigin: http://shahed4u.you\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:22 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAS-P-1: OK lon123\r\nAS-P-2: OK\r\nAS-P-3: OK\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: no-transform\r\nAccept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR\r\nAccess-Control-Allow-Origin: http://shahed4u.you\r\nAccess-Control-Allow-Credentials: true\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1212,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (1212), with no line terminators","md5":"279024dd0146b5c8820187486d1baf60","sha1":"f8ce1a9eaf5a5c2ed89d2ad12c184a1607bcfaf2","sha256":"28cee55ca3ae3a18adfdf5d19ae27357c0a78f6322194713d1dc67fb254153a3","sha512":"d3da1b8770e985fd2ccce12eb5f33390aec027284e027770d4279a88780dc3ab9278bc37902bc41f2521b042a939c7b26044ad1266bf39e3ddabe8ce0f21b59e","ssdeep":"","tlshash":"bc21d731636b6285d08606f30033b9970f24c9f742b68fe54db7790978fa17e8195bb9","first_seen":"2025-11-11T09:22:09.192828Z","last_seen":"2025-11-11T09:22:09.192828Z","times_seen":1,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":29,"dns":1,"connect":28,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1751075518__640x_8b2c7640010bb58abf1759c1299ca9b3888a67695fa5f3d67369bbf3dc4e1cf4.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.088Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1751075518__640x_8b2c7640010bb58abf1759c1299ca9b3888a67695fa5f3d67369bbf3dc4e1cf4.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:22 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 95294\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Sat, 28 Jun 2025 01:51:58 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1WTPdiRnXQlKGOEIXMp1ypjOeLmFC0EJQVnBypTiGtIw7Xxk8CwXkij3kwu7nsnZAwRzJ3k609Oj1NWoiP4D0iWd7JMY2nc%2BkCVo2Q%3D%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb8106c2235a6-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95294,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 640x800, components 3","md5":"e695db9a956f39f00be4d7c938abbb29","sha1":"827a82fc567000401a58c4eaaf8dd9f609feeb59","sha256":"c4f6602f90b517de25d0a56e91636fea1fe6133d5f132e356082c25b1926b9ea","sha512":"90ab6de8c909c8fd9a4c41f9d6fa8d2cae804c239bcf3c90da91589555f417e1427e184256de6bfbfbbb711ef324fce939cd113e757a4352e1978d6124dd3ba9","ssdeep":"1536:FlhG5lJGSxei6zKvYa6lyCHEWDy6r+H+NGZPOx56wNEyALh8lbLkkYrl:Flc5lJGKeitvYJztNRs4568E1gFYx","tlshash":"92931297ff345744d64f5da6238ac306c9c1ee9232a1bb6f369901ed678c1f21f10a1a","first_seen":"2025-07-12T13:45:02.062455Z","last_seen":"2026-03-12T22:52:33.46685Z","times_seen":16,"resource_available":false,"data":null}},"time_used":2402,"timings":{"blocked":1906,"dns":0,"connect":0,"send":0,"wait":423,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1751375064_pxfpU6dJaRb66z5sxyiinMeDAGd-1-scaled-367x550.webp","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.099Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1751375064_pxfpU6dJaRb66z5sxyiinMeDAGd-1-scaled-367x550.webp HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:22 GMT\r\nContent-Type: image/webp\r\nContent-Length: 40098\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Tue, 01 Jul 2025 13:04:24 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZZzHjG8iAcqR7BvJt0smg0e%2F2XqD3Q%2FxvQW%2BJEVGEqgDN3gznnbImFsbFxOLrFW2y4CIbaFtDo4rnIhV5fHNTy%2FBwJr8Fr5mYHk%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb8127e035689-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40098,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 367x550, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a924897c32bd67f549c8c4da36f17ff7","sha1":"2ed6cebbbf654090a7526b631fa841dd32580894","sha256":"862bdb9f62791554527f18c1878f5a7c9e6f3d24a3366064c8c7b15f39a3d573","sha512":"be70fecf489c78dbcbd7dbca14c77a8c2177962fae05851c963f52cd9c2c29db032f05e75fd08bd4ed5c9368e40c8d19b926a7e5e7c7a7783b7c5c50be0b8ec4","ssdeep":"768:0BfsKZCTWozWHH1S66DFUL0F5NdbKZ7qvNmxkSCrgEK/1qnGis:0CKQ8HV/6/o7qvM+lrm1mjs","tlshash":"5d03f1efa350b3973abccc54bd53a4cf44518aba64c23152ad463e815d1c2655b20eaf","first_seen":"2025-07-12T13:45:02.175226Z","last_seen":"2026-03-12T22:52:33.476612Z","times_seen":18,"resource_available":false,"data":null}},"time_used":2296,"timings":{"blocked":2217,"dns":0,"connect":0,"send":0,"wait":45,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1694819804_6504e2e9619f4.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.129Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1694819804_6504e2e9619f4.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 80847\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Fri, 15 Sep 2023 13:16:44 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cF6B9m9RqyW24G5m6aQhATZv64YKH4CHds2n5bnL4P7HtyfbX7EYze7a3Qx4D7Ch6n3G8MXqx4WP4uEOo8NlDM8vxeCh52%2F7Mz8%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb816c99a5689-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80847,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 500x750, components 3","md5":"a4758f05e774b53411acab60926c27d2","sha1":"3d6d5fe433931b364a5cd2e58ed547bbff790049","sha256":"3e6172d2aad4de7d444d76927e170e7e191e58ece21642e49e34e0a20685996b","sha512":"1cf1fe632c5f6a5066a074d6eb2a105a0293c6bf1e9e30247788ea62ebec3ae3d39508932cf78df9a3f7d3c58279262b85e04ab3b1515603037dce2a0b576e0d","ssdeep":"1536:UV+1igeeLf7rLmbv7aPLsyKS+SfMT93BRhN8EL426lB17T5SlU8kqQJow0j:EeLTubOPrKS+fT9QEL4tj7K33Jj","tlshash":"878302d94c6692bc4f0e431c53ed1e08a4435524b9ce8e1893e82c6d7b88eaf0d8fd36","first_seen":"2023-11-08T03:36:58Z","last_seen":"2026-03-12T22:52:33.509157Z","times_seen":23,"resource_available":false,"data":null}},"time_used":2995,"timings":{"blocked":2879,"dns":0,"connect":0,"send":0,"wait":44,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1757612634_1757441285_1757015502_2088009.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"172.67.216.170","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.171Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1757612634_1757441285_1757015502_2088009.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 714856\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Thu, 11 Sep 2025 17:43:54 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N%2FjtRW0jRgkZIDiaQ1Wkqq7B8qUttJdBbqhAYsNWVE7n5h4eXQ2b16QJ%2BCk%2FvgUUU4ZK7gPOySE5LB3hdZeJxAUS5IRTo8KG4IQ%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb80a1f97569c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":714856,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2025:08:02 20:12:31], baseline, precision 8, 1080x1350, components 3","md5":"4091d04e6e67bd3ae2bcdc34284e32f4","sha1":"1aed154dcc1934ca559952fad5a0aa8d1e073284","sha256":"64eb448b7aa3645db51fb2366578b2ae07c8a314da32cd0bee9b627ff022b29d","sha512":"9be68a1f9429a1ae0bcce0131b4a88b808dd8d5c29220010bdaec5833529f04b6a578b4e78d0c985a8edfbdba15a73a43eb3f81b70d530b108aac6d16154189f","ssdeep":"12288:JupdGePs1I4Bm42yGe2OJCuCJFA/p+21UpzapIYq7ew30fKk5c/L5VP17:Jur7U1Ioce2zJsp+hdYq7jmc/LvN","tlshash":"dce412e872b86403de8015bbf451c8b642a3b553a81998d3f24e5a74af31edd39c51f3","first_seen":"2025-08-22T22:36:26.087317Z","last_seen":"2025-12-03T07:11:30.415277Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1428,"timings":{"blocked":813,"dns":0,"connect":0,"send":0,"wait":424,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1761532034_%D9%85%D8%B3%D9%84%D8%B3%D9%84-It-Welcome-to-Derry-2025-%D9%85%D8%AA%D8%B1%D8%AC%D9%85.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.174Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1761532034_%D9%85%D8%B3%D9%84%D8%B3%D9%84-It-Welcome-to-Derry-2025-%D9%85%D8%AA%D8%B1%D8%AC%D9%85.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 98542\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Mon, 27 Oct 2025 02:27:14 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cneVJeLpi7kp4pDasNen%2BviY9kAWB8aBnpKFjTyjK5bBO5%2F8%2BAGs2EuQSiOZuB1o4QFRuQclhWhHjkI3I%2FT7zExrwYqFroyREPM%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb80a88d5b505-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98542,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 450x560, components 3","md5":"ca8343342be0479a4030d22da50836dc","sha1":"66f8e48b1798eee0c9dbfebecdaf88001081f966","sha256":"166ffda9228e2af09238c247cc546374c90b1b37117f9752fb11c8ae1457ade3","sha512":"d885a97deeaf720b58152d56def8d923b89af847b1c08653f13ae87deff7334bac7677f8f73089f399de0bd6991becffc89cc5993965e43c32baddbb15cba439","ssdeep":"3072:OAMSJrzvcLBE9AdPX9IyLvbztOUx+IseO:OAMSBcLpJX9IKZOUQIG","tlshash":"b7a30245b8442db5ae544e7f798842c7faa2e0317343b1b474d13e37fa48a45c1abbe2","first_seen":"2025-11-11T09:22:09.196878Z","last_seen":"2025-12-16T17:46:38.239639Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1457,"timings":{"blocked":880,"dns":0,"connect":0,"send":0,"wait":503,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 09:21:20 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18752\r\ncf-ray: 99ccb8059cc30daa-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"6421d693-4940\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 354345\r\nexpires: Sun, 01 Nov 2026 09:21:20 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DS%2Be5c8Na8PV8AZwZzM6Faab4Hf4HZhlhVjbBnAMqvTdNpfNIfqR4kq0%2BLTLkKrxEDEGrioUo3VL8y1ASCkAKhyMUj2JnvNh6hix94MXyR2qPFjVrPqGzX0vVGn3DB%2BCLi1F1fSr\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102025,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"ded1c367363e8b20bdc6a19b8350a737","sha1":"8c06d82739d14b094ff6d9036021a252bd1d985d","sha256":"1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf","sha512":"89e71d2e66ac925ec2564aa45cd43f647fd72e5bd664e2728fb632eed71e9e6a43d72a404a8ce9993fc4d223ed985201e3a66676d01cf5e341bc7d07fd9a6207","ssdeep":"1536:OwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuZprfZCl:S709gMGFiyPGuZpfZCl","tlshash":"2ea3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-06T15:05:25Z","last_seen":"2026-04-04T05:37:03.972319Z","times_seen":41789,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":45,"dns":4,"connect":3,"send":0,"wait":11,"receive":1,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/assets/main_style.css?v=6","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:19.642Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/main_style.css?v=6 HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:19 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Fri, 19 Sep 2025 12:34:47 GMT\r\nVary: accept-encoding\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iiC%2BUgyO02MNwpl2wHtNOR9%2Bo9ab4PaH8qEsRNgp4G0YuVVoPjle7fpXGs5Sb8mBP7VM%2BigqtSbVNUucdC8qht2vPtTp4Z9eDX7xXw%3D%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nContent-Encoding: gzip\r\nCF-RAY: 99ccb801a88c35a6-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15659,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (15659), with no line terminators","md5":"482aede86a5ab16c9da3b0ab83af1e06","sha1":"3f249839fa8a897b5ba71c7432ee0b2aa48515e6","sha256":"734886a7d78c3abfff5b851b6cbceb593d8c0f67288c513e5555be1d58473e0b","sha512":"3c24f3b208c77f3f890124b9abda9a701e1fa5274afa3a7af4cbc662020a830b2191bba173424d5ccd4b92b699275d128c5aa1339cd4ab9f168151d25b76a244","ssdeep":"192:HmD9RT2kJDyQc4brKOU7mTpUThSkRlDtwGZSG9gvl2UhWSGs4XnxV0rz3:H6RT2mDy1lhA2UhyXxcz","tlshash":"39625160f5d5203db46bd17976d0afad1138c582ea224bbdf65a713887c62d722b3b0c","first_seen":"2025-09-20T14:49:01.451555Z","last_seen":"2026-03-17T16:33:01.899175Z","times_seen":96,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":128,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/imgs/new.png","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:19.667Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/imgs/new.png HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:20 GMT\r\nContent-Type: image/png\r\nContent-Length: 1510\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Mon, 10 Jul 2023 17:14:56 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xuPinKrndB7HVL9MPkViBzgpz0Pb6Xmumv%2BS5qTOGdjBn3NO1EYRJlF7Ag98WLBfmt5xGKdZcZWVfg5sKH8bganNZcOychJaBFA%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb80379157131-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1510,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"d42e6c038ee13be8b5042899007b566a","sha1":"82634560e777d75661e1a09d76c20e7199248b53","sha256":"ccd98c7c91948888def3353f9f3b2d9e1a901c3c38b2e66453f0db2b48ed0d29","sha512":"1ba4559d1b5145922ef056bb9e0c9792e7a7eb299cd96004d62f561685e81d9a8464620771ee59e5e8c91b6eb9534756881a67c09152fb9d3a176f7787c4e5b4","ssdeep":"","tlshash":"6f31b7e7fb2e2c68fc544b518edbb011f8a1522c4fe69709050bb47c6ac5674c318506","first_seen":"2023-05-27T11:54:25Z","last_seen":"2026-03-12T22:52:33.380482Z","times_seen":23,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":257,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1727306764_lCiVWEXvhjLklWsa88yYjsjyF1u-366x550.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.011Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1727306764_lCiVWEXvhjLklWsa88yYjsjyF1u-366x550.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 46720\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Wed, 25 Sep 2024 13:26:04 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9EeGQaBP1km0m%2FZYmFQJ66Bscp7aVkMqBbyfL8q7cBHY7oOttwHJ7gaU%2FMPT%2BhaQzNcYl6j2r20FpoGGGzLSByIeEdVJZPj3UV8%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb804c9ec5689-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46720,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 366x550, components 3","md5":"83d012644126905b8a252504b92b963e","sha1":"45184b0ba6900ef2b27bcd72fe88fa353dc20ca9","sha256":"cd6068ccec3f950cc035e646a4b800f2b83744552f91375c08dc79132e69ab72","sha512":"8e7511ad8d68a03b729ea38d82e505aa9b6ffe9cbd2c66ea4053cf1f8c05d199552a58e2513e7e9ab0d9dcbade7e4c4d4beaacb93a7aeb0fadae7060acf9786e","ssdeep":"768:Ss4xf00/edJX1IYhDbkO/JLYKXrtE7rjLOd31kSKM+7Dvf24OFrDbNeHiw8wvGY7:SJ80/er1BhvLYaULQ31Tz+aXNeFpOYPj","tlshash":"e323027e75d206925a328e6c3166dac0157a01d25462392410b2eff2c9f4dee8dacff6","first_seen":"2024-12-23T10:36:35.028163Z","last_seen":"2025-12-16T17:46:38.2214Z","times_seen":17,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":115,"dns":0,"connect":0,"send":0,"wait":189,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/shares/elcinema/2085997.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.168Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/shares/elcinema/2085997.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 198139\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Wed, 27 Nov 2024 07:51:04 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PfTnVPXxex%2FqhHBry1F6eq4TGQqxXW2SiK0DMp4SJEuwzPsGkbJbZKEbNj58Kv1OXdoa8rUYxpyMteddUfvEmg7Sq%2BJgj3qTuxg%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb809de7f5689-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":198139,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1170x1756, components 3","md5":"4f282e2cfeb76ef49c5913cf5307780b","sha1":"dedd70e1d80ebb4bf96d239411458b85f7c9d8ac","sha256":"b68cdc502a2061080c2d9bdc5f6efb38f18d2d1c425e5e74a9245d30c689a5f7","sha512":"670d76ec80b1206b257a3da4fbd4154ffe12385e92a9247f1366e0f6f950106baa57aa7b739aeac22fa644d097bc7d99f522673ba40ba9040d63806720dfe18c","ssdeep":"6144:zMHpMH4gpbwLfE771i9FHGshVkiJuMnuFlDid2F:zaOYgp8fK47HGshV0FlfF","tlshash":"6614125f2df446a1c6a6c0fec9a4e2983c2668fd4425503260d4faff198a99fc5e4f43","first_seen":"2024-12-23T10:36:35.161917Z","last_seen":"2025-11-27T22:18:18.337622Z","times_seen":6,"resource_available":false,"data":null}},"time_used":981,"timings":{"blocked":774,"dns":0,"connect":0,"send":0,"wait":96,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/shares/imdb/tt38607251.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.004Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/shares/imdb/tt38607251.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1195441\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Wed, 29 Oct 2025 22:40:03 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FEh%2FAEyi8k1ISvnttGhvRomfSdVo%2BiMAgITTYQUykedg2W011UDehuDjWjz6avijfwjfOlTGxnKRTI4iC4g%2BUnTUwRSNvYiugKM%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb804cb055688-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1195441,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x1350, components 3","md5":"be3120a79cff9b80cbee245ce17cc1ec","sha1":"ac8ae9c3007977d83bf41b6278269bd6edcb8293","sha256":"03bd40caddf8c46c890a8138e6a34b0a4a5e5f41e30ef762b562098968598e12","sha512":"658b40c3dff9e2d2fc3bdba24cf053fc99814366d792e10d7874d3d751568bd5169a870b08b0c8448220028daeb3cb5b8e800015ad3db8194522dab918d53df4","ssdeep":"24576:LZebahqyE1KYh0lG1HVTCgfK7opeCKm+KlceM6gn:LYaEyEd0oHVyop5ceMfn","tlshash":"c725331808d3b88d635f93da8bb24ad83a6d10730f254694fa49cd35b28d9d57be4c8f","first_seen":"2025-11-02T13:52:04.886101Z","last_seen":"2026-03-12T22:52:33.527101Z","times_seen":8,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":122,"dns":0,"connect":0,"send":0,"wait":175,"receive":243,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1758500832_%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D8%A7%D9%84%D9%85%D9%86%D8%B8%D9%85%D8%A9-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%B3%D8%A7%D8%AF%D8%B3-%D9%85%D8%AA%D8%B1%D8%AC%D9%85.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"172.67.216.170","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.017Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1758500832_%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D8%A7%D9%84%D9%85%D9%86%D8%B8%D9%85%D8%A9-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%B3%D8%A7%D8%AF%D8%B3-%D9%85%D8%AA%D8%B1%D8%AC%D9%85.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 48611\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Mon, 22 Sep 2025 00:27:12 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s1BNw42PJn56VK3Y3hS7dI3%2Fk1%2FNICxnipMJ6GrNolYvYjayy0RQTLLIPkezmxnAU9aagPFJo8KO8gkM9Gkz93SYU8A0YEFRt9U%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb8055b4f569c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48611,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 450x560, components 3","md5":"a21bbd1e197e648b5d3982f064e70042","sha1":"8f45941e5dafbb860478a1fef68258c0fe85008a","sha256":"c7c3e15ad0807626b4881b8b3073e2ccd518e9c63a0d564278ff5ae1dd26d67d","sha512":"ce3b2730e80f7421c3194e664f6313368981b9be67253a5fc1521713033aabe487c9b85cf2e179be0e67519984aa7c92bd7967320a622252b444fa59e7d6fb3a","ssdeep":"768:oAfB3go/ZGS5WuJC2GXMijFwW1xinqSC6huF5ecpuAAL/i9q6M9N9:oIBQoxvWuJ0VpwW1gnqSfhuXegBADiqx","tlshash":"5d23f16a835c1a7318cfdbab1a5d1b3e6f4f04780db2aebbc129dc067da5ad04c6411d","first_seen":"2025-09-28T02:51:29.494032Z","last_seen":"2026-03-15T18:21:15.882334Z","times_seen":13,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":202,"dns":0,"connect":0,"send":0,"wait":102,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1727916052_GY4T10IXgAAS2_2-367x550.png","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.109Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1727916052_GY4T10IXgAAS2_2-367x550.png HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:22 GMT\r\nContent-Type: image/png\r\nContent-Length: 74448\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Wed, 27 Nov 2024 08:15:58 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1cUtjCnaytv%2F9pKyGgz2QiwglpU2Tw0SGlRo6zTzGEEbnCevqAWlwAcl3on0y9G%2FFKXTjDHgWcI1R674SuCIlLisNHRYvNNPd28%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb8132d9a7131-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74448,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 367 x 550, 8-bit colormap, non-interlaced","md5":"0236ef0c858d9e4a297904c134388a61","sha1":"7ce8c5c211a34f3ffe740026ee95270024bb70ad","sha256":"7f687b14f4bb20530a587ee0c47355b3f8600c60560a8219f8e4b27cdc813cfd","sha512":"e75641b60acff866c39d067bf52f3070162514dba77b4d28f9f88f869b492573b711b6ca1c7ca3edda6f790d663a4802b8a6b21277bd39731088a0163cd55e70","ssdeep":"1536:bcLXc/KRtqEHlIDS5OjsfL5cwnpUgrM3CjLh2yGC3WXr0Oo8hC6iNn:sc/KRtrlIDd4zOwnpU93CjL+gEOM8","tlshash":"a67302e2ae5f393353605148ccc0a1afd09eea10e57aaf760b14fc87a5d9144468fd9b","first_seen":"2024-12-23T10:36:35.019603Z","last_seen":"2026-03-12T22:52:33.424209Z","times_seen":18,"resource_available":false,"data":null}},"time_used":2877,"timings":{"blocked":2323,"dns":0,"connect":0,"send":0,"wait":483,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1743554145_MV5BZjBmYzEyNDMtNzUzNC00ZTI0LTgyZmEtMjIyZjIwNjM0ODU5XkEyXkFqcGc@-1.jpg_V1_SX700-1-389x550.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.131Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1743554145_MV5BZjBmYzEyNDMtNzUzNC00ZTI0LTgyZmEtMjIyZjIwNjM0ODU5XkEyXkFqcGc@-1.jpg_V1_SX700-1-389x550.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 45023\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Tue, 01 Apr 2025 15:35:44 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dq31YlMZ7075cjYSwTgA3nuGwayTRtb6zlE2mnnzj7EMez2nPykTkM79GUmRY6poWAfDoREbcm%2Babmlmm24l6CwbOPq6JcNby110KQ%3D%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb8170d8935a6-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45023,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 389x550, components 3","md5":"4893fe5a861a0b415e9c3327dc7ed603","sha1":"b016182519b1a14669598b53a37caccd76e531ff","sha256":"878e11af8cd9bfb0a988f97ecd9b8255abc872c7d05e9c59d118a9edefa08089","sha512":"86509f9b4a7b393b2854d8596c1876c644d0214665582ce93fdd22d8fa1350526103947bdef95ebf54778c2780be89d7088c5bc6535cadd9c24dec5ceb1e1daf","ssdeep":"768:lYA7kuyy4xMU3samBwJGLyHiD/DrMUASe62oDvc5x4cnac9g0KvP2Kyg2PTcgQ+f:ltx34ycsatAOHiD/DYD74voVac9MvP2Z","tlshash":"f413f1fbc354c140abbd8be8a1952414aa153b1cfa9d1c971e32ce7cbd52ed702e9384","first_seen":"2025-04-27T23:56:53.967181Z","last_seen":"2026-03-12T22:52:33.522567Z","times_seen":18,"resource_available":false,"data":null}},"time_used":2998,"timings":{"blocked":2919,"dns":0,"connect":0,"send":0,"wait":41,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/shares/elcinema/2096640.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.170Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/shares/elcinema/2096640.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 164889\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Sun, 12 Oct 2025 00:10:31 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m4TUQXF%2FbB9rgwPj1C3EkYDzQ7JpEPI3sbnsgFBcdXkbIALKp3NyOVchsuGDj4z3IMb6GmdLwYJLpsTe5Cb%2Bn4tKD9FrO9mcHKQ%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb80a0e5d7131-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":164889,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1080x1350, components 3","md5":"56dc8501565f8bd3743e4cdb7f056111","sha1":"4d4e2cb7a2c6ccfeca910f278fa9b085055fefc1","sha256":"46f6d8c02a3daead0fe87d1e07f17ebf895a243db19295eae7d4bb3f2e950540","sha512":"5d56a93717e5a2d51f54b1288c10f0f2285d2db8d25f71778779350b05e73156841e0bc63c9c32060b51eb16e33ad2af802d57b0ebdd3605981f7380a38da948","ssdeep":"3072:3jY/LA76OhbcrA9S+7BnONrJBXJimgCj6s618xvdflI:ze4QqRWrJbUkH6adfi","tlshash":"bcf323e06628f9fe283dcf8fb2eb426676c11433ca9150bdcc1cd8a67557dd205d2a16","first_seen":"2025-11-11T09:22:09.205748Z","last_seen":"2025-11-21T12:48:08.037465Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1219,"timings":{"blocked":803,"dns":0,"connect":0,"send":0,"wait":302,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1762798199_MV5BZDgwNzM5ZTMtZDUwYS00NDY2LTgxYzUtZGE0NzM5YjBhZDZlXkEyXkFqcGc@._V1_.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.178Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1762798199_MV5BZDgwNzM5ZTMtZDUwYS00NDY2LTgxYzUtZGE0NzM5YjBhZDZlXkEyXkFqcGc@._V1_.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 254214\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Mon, 10 Nov 2025 18:09:59 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A7QKtgDCAYavrCx3DQCi0rvMBbEtcpXT1c1lg6zz0%2FkI%2BVUcz0yB%2BHsKSXg%2BQOeH%2BrC0IKTiqnFXmR9kuEEr550kgtGev2kdVjM%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb8177a6d5689-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":254214,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1016x1500, components 3","md5":"a2169395c10f794e5bfc196c8b0b4043","sha1":"954593dad1f9eba4c93187d1f54d19dc7b48dc8d","sha256":"a3ba29ed0e1aa77256444a2cc599bde8118e31baef18362edaef46ed309d274e","sha512":"5f6f6baf187626b98eae39ce649518fb20f62f22c8dfa42c82e2e238d31d3596905c8b484ef1259080c799ad2463757d5c3fd6eb08b128d3f53c7a683a296e0b","ssdeep":"6144:LQI5IYDauUkeELvTHw4+6kdqSoMAEmZvpY8DUofKNHfvnR:7pDTUk/LvTi6kd/oMcpX5fWR","tlshash":"074423643c7994edbef970b3b78e289f024cbc1b86d5819d3adc621a1c83854c5d9e4b","first_seen":"2025-11-11T09:22:09.206637Z","last_seen":"2025-11-11T20:25:35.033118Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3146,"timings":{"blocked":2946,"dns":0,"connect":0,"send":0,"wait":45,"receive":155,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1760958836_%D9%85%D8%B3%D9%84%D8%B3%D9%84-Talamasca-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%A7%D9%88%D9%84.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.192Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1760958836_%D9%85%D8%B3%D9%84%D8%B3%D9%84-Talamasca-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%A7%D9%88%D9%84.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 77286\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Mon, 20 Oct 2025 11:13:56 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R47R3n%2FQaOUsSSfvh642Isms273NEvVKRU2KVH4nwcHKi%2FqcwZ%2BAhNji7k1v%2F6YZuORw7ui42NRQ8WtfbKdnx%2B8wGjGgdu%2FoniFjzg%3D%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb81a2dd235a6-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77286,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 450x600, components 3","md5":"2a172a2d16d601adfd48ddb879f08b56","sha1":"75d03e68dc710c9f3fcd0de07098423569b61617","sha256":"c5a9e896b1cabc03128ed10d634874bbfa9eadef12acf8ce8eff244d2f6e9290","sha512":"4f4b053d2eba43947020779e96c249087a716a65ab9f26b4caab5f3e387f31dbc947bdf65868b65d31eb7cbd0b9cabc46bf997ea0aaf2fac39a9dfdd71d154c1","ssdeep":"1536:QZvvjykyHOzO+ifqL4M8yqdWuAGZW9vMBRo/Sk0z38JtHCSGL:avkOi+MqeyqAucMRo6d8XiSGL","tlshash":"5973f14bf5428f5a442096e47a07cee916063fa41d3b25d722262ccfaded9f7990f428","first_seen":"2025-11-11T09:22:09.207733Z","last_seen":"2025-11-11T09:22:09.207733Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3565,"timings":{"blocked":3356,"dns":0,"connect":0,"send":0,"wait":140,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-brands-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://shahed4u.you\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 11 Nov 2025 09:21:20 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 108020\r\ncf-ray: 99ccb80998fe56b4-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"6421d693-1a5f4\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 337945\r\nexpires: Sun, 01 Nov 2026 09:21:20 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7%2Fe5ghSEUZQaSl2g5PtPbi%2FIwi2gV2NVlywik4xTBY0o1J8mpHrcotuVgS2RQMR7vcV%2BcKO8yAp9PAw3tDGDsMvIM1mcGBPpulFb9HWoWQllQNqRul4J0qkeco6akovJxpSQVBiM\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":108020,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 108020, version 772.256","md5":"8b0ddedbb27cbc9971c8667caa8a0cc1","sha1":"4350f9ba93384634faf35f41c503c99c767f1069","sha256":"748332090c4b8e20f95d0ff59f0be20fa9c889359d3b36d4b886d73376054207","sha512":"d3b4791b988fcfd9911a2158163d0c44d6797650890b5d4ac769417e09d8fc2c67edc595be8e7927de0519a85eeb3577d0c7e385bdc99d762c7a6cfbad021b39","ssdeep":"3072:MUdDCdwgz0kLytDzAUhcJz8zfleLXsg4OEpUtbeONfQfG:1d+dNBBh8zflIWGP9Qe","tlshash":"8db312128031ef76fd4aa621de6b1807b03da30b67f249a9ded46a37c050997b471b4f","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-04-04T05:32:40.894642Z","times_seen":15577,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":318,"dns":0,"connect":0,"send":0,"wait":17,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Tajawal:wght@200;300;400;500;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:19.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"1D:8E:3A:85:91:AC:63:71:94:8B:0E:61:45:34:D9:86:AB:A6:E2:CE","sha256":"E6:93:4E:53:89:15:41:28:27:59:AA:84:50:96:96:1E:2A:98:7E:08:60:AE:68:62:AE:DD:86:AB:DB:0F:FE:2B"}}},"request":{"raw":"GET /css2?family=Tajawal:wght@200;300;400;500;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 11 Nov 2025 09:21:19 GMT\r\ndate: Tue, 11 Nov 2025 09:21:19 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8952,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"a71338b7baa4a1dfbd8d8f9d87c0bf2d","sha1":"6b4c3988dcfcdabe0783d64225dd9c7e2abc3981","sha256":"9c439d61dd3f66e7b6a5c1536f8021a024783ad9c8e772f102c189b179bc5cad","sha512":"afda614b67b22dd5c3cc2c49a6ecb2df18983bd1f1b98bf556582e8bf17058566df81da74c3ea70924e15e24e299207cb3d705f5e0dd28788c2382988100541f","ssdeep":"192:2mClAqYCln97ClOqwClNc0dClrdsClCuLClxD:ylNl0lXl4lHlYl9","tlshash":"09029ee4881e02c5bb471d81638d6a27dd4ee1a920c4886cdafd578b9c9bd25766078c","first_seen":"2025-09-09T12:45:33.136646Z","last_seen":"2026-04-03T05:24:11.667454Z","times_seen":287,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":98,"dns":1,"connect":7,"send":0,"wait":19,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1727401015_Bila-Hudud-S02-Long-369x550.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.123Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1727401015_Bila-Hudud-S02-Long-369x550.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 47837\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Thu, 26 Sep 2024 15:36:54 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5VbJTcF0u7tXdPLw0bDhepbd1q8zvBjLoHZIAu6BXD68euQsOAVXg%2FCilt47JjIazgrmfuZxvRynf7Lrhs8yU5mrqsQN3RaaH7A%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb8155b6e5688-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47837,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 369x550, components 3","md5":"c69f128f00c0f7e50c79e5a207826f6b","sha1":"4d3dcd60826ba2ab360d2a81b731d1ed04ff38f4","sha256":"fee83f37bbb45c16634b02ffcc01e912e965083e8d54deccaa3a3629aaa31747","sha512":"7100e5831011aa75adc8c0fd8b2cf957839d5613eb496b662a9c9ee3ea937447573b7496570259f1b0e008f3b19157a440e92133d79ec53e0ad8f1eb85008c1c","ssdeep":"768:pDaJhJEqS4gr/pq9Pke0q34dv2w70DkmTjiNwKnZl1rhiA5tg4ldB/xLf31gU:poEqSXrhqlkeedv2rD36XZl19jbNb9Rj","tlshash":"3223f13a86864a4f8013ecbf224e2265511b0f70fc5d8a1abc59a3d54f04fd755ee93d","first_seen":"2024-12-23T10:36:35.243674Z","last_seen":"2026-03-12T22:52:33.50338Z","times_seen":18,"resource_available":false,"data":null}},"time_used":3099,"timings":{"blocked":2652,"dns":0,"connect":0,"send":0,"wait":376,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1757291681_1757291633_rGcd2trN0QjYkxLvVF1xGUdvf1K-scaled-433x650.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.028Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1757291681_1757291633_rGcd2trN0QjYkxLvVF1xGUdvf1K-scaled-433x650.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 71072\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Mon, 08 Sep 2025 00:34:41 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UYNqtnia7ZdsVSn0q3cVu4TDIiY6focGkoeFA3XSV%2F5uXkQUuAg8ltdX5%2BqZ8sPFOiJ11eJ4gYmiwez9q6r1eWcdReFckvv%2FSCs%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb80e2c78b505-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71072,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 433x650, components 3","md5":"cedf34b4ef62c071005a8ea6a115e33b","sha1":"74bb682f840e26a15fd5875652e19b752e14bcf8","sha256":"7a4f901bbc2d081dfdcff66d37e890a04e2f38f5744380ace4c36c682111fd5e","sha512":"9cd97eb6bcf93284db115ba3d2906fd8eb32f773fad2afc62cceef5e601ea4d4955b655b72c87711686cc7a05f06f9af69fa1eded2dfd7aabf0c9634bc626f11","ssdeep":"1536:1Eoh72l/liuNx78MStDNCMmzU9p3w53GY6oPKQHjkX9zlSpETZDMMA+LsY:L2y6p2NG0u3GAiQDellTbH","tlshash":"246302cbaa291e3c514e8d80caab5f64663707d38d8c074ee9329f93706d8cdb716d45","first_seen":"2025-09-24T04:07:45.269568Z","last_seen":"2026-03-12T22:52:33.37565Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1718,"timings":{"blocked":1603,"dns":0,"connect":0,"send":0,"wait":43,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1760117569_9-1-1_S9_Poster.webp","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.031Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1760117569_9-1-1_S9_Poster.webp HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:21 GMT\r\nContent-Type: image/webp\r\nContent-Length: 155584\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Fri, 10 Oct 2025 17:32:49 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YeabuKICfBtGlJQWjucmr350UNdIn0v8I6Gu7zuHLs31zAeC9CDPt9bgfstoHYTEWnapkbfTe4ywOw7GjXiV8nxsEHkcGM8ENLk%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb80eed34b505-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":155584,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1080x1350, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"74a9011844aa82a76a73912757ff8720","sha1":"981291cc9c1630cb9ef9cfbe78a93e8d5a68724a","sha256":"8476a3d8918908d7d9139d7b6a020370208d79b3722d284e6f6731e7631d6931","sha512":"eb65d61c8b1cfb393f494b3554da1deecaeb47cc1b160f13fa12640abb4b499c754ca6215fda0b38fd2ee93978d18df5ae049dd32ec80d71eb239ffd0ca73e25","ssdeep":"3072:eTMcdZJkvZVuB3W9+iKcOKyDAhk1mOzc3PpEZ/kLuah5BdzZZuLeM3P9:eZZSZVc8KcvyHIOzc3x0GrrJZZE93P9","tlshash":"8ee3123505007f51c8dfa5fb7eb1b9f1ac292af198dee039f0d2546e264e34142089eb","first_seen":"2025-10-19T01:02:00.696765Z","last_seen":"2026-03-12T22:52:33.398331Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1868,"timings":{"blocked":1715,"dns":0,"connect":0,"send":0,"wait":50,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1752282433_MV5BZjFhZmU5NzUtZTg4Zi00ZjRjLWI0YmQtODk2MzI4YjNhYTdkXkEyXkFqcGc@.jpg_V1_SX700-439x650.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.082Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1752282433_MV5BZjFhZmU5NzUtZTg4Zi00ZjRjLWI0YmQtODk2MzI4YjNhYTdkXkEyXkFqcGc@.jpg_V1_SX700-439x650.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:22 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 29010\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Sat, 12 Jul 2025 01:07:13 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RNsobMVHmz4hnA%2BmhpWzZPsNHPQ78tMLjLHFCL5fcf%2Bc8NRIOEP2cnRDLYhZ6CYNvRVdl8SDr5vA60FmZxf4A9qysnUE2aYsgXU%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb8102b687131-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29010,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 439x650, components 3","md5":"9d6c0fbea920e5a3b7385f4f057090ee","sha1":"f01695d628f0e986fbaeb94bf7d19549550c5d87","sha256":"beff1195add780460719a5c7dbdf02bcb8220e075609668c1256fac8c165c0ab","sha512":"5f210b636baa3d8c60a5aef0bb23d829505940c5dd3047e0cac221493880f8a8d0b15725481cc3f364652685712542b04bd7a5af04babdae210bfdcfa014023e","ssdeep":"768:zlv6+AWWVqAFepjog1XnrZOLoFWECWYG330bO/J:zly++cAsMgXlO3GH0q/J","tlshash":"9dd2d023fb490d4bd02947b1aa123f7a662ffd65a65053d57d30a9f14f103c38c5a868","first_seen":"2025-07-12T13:45:02.174287Z","last_seen":"2026-03-12T22:52:33.362697Z","times_seen":18,"resource_available":false,"data":null}},"time_used":2350,"timings":{"blocked":1872,"dns":0,"connect":0,"send":0,"wait":443,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/shares/imdb/tt19079130.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.126Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/shares/imdb/tt19079130.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 24421\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Fri, 18 Apr 2025 15:42:18 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mNBGFRnaKHddqe9vEp%2BSI4RGT11cuTJWVUE6r%2FI5XxmN0bCE61bW%2BgpiyxVSq7dp7IsVpuh3QB8jU5h2biQaFEwUsG5oZuDk4hQ%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb816a8cd7131-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24421,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x398, components 3","md5":"b03c5ce2a83b36d2dd088676f8d408f3","sha1":"1fe49890556155f75a7b02a3fbb66bc85a12a856","sha256":"688591eddc573b59f428b193bf49dc628fde51a0e3cfbee07ad7db5bd6d8b32e","sha512":"41d51f5156fa88567ffcbb32c6b33507e365c7f19163ea35dc0aab33aeed7718d9b323a60a0a9af4054c553262aaa32a24f467bca93d9e9d1c3775446d7e863c","ssdeep":"384:zOFqLUH77tPii4Rj65avJtDLR4C3bx936Yeoq18yXAumSWNPzV3bv23P66naIS7O:zOFD77tKi4RWgBxVrT3c188mSsbv23S4","tlshash":"08b2e196f1933414cf352efec69c26901b91934b6b8a8563dbbf659d4a2c7c324a3023","first_seen":"2025-04-27T23:56:53.94987Z","last_seen":"2026-03-12T22:52:33.578571Z","times_seen":17,"resource_available":false,"data":null}},"time_used":2938,"timings":{"blocked":2861,"dns":0,"connect":0,"send":0,"wait":42,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1759872296_152280l.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.155Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1759872296_152280l.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 141664\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Tue, 07 Oct 2025 21:24:56 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ROlhAr7IcOWMIu1lS%2FfHsxrPgCnr4%2FsBibuj5KAjTVmFHKzcToAyJO8hk1LZvW1ozODlmMT7YckXV10aj27Ln7lByjba4pa7qbXgGw%3D%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb806ecd635a6-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141664,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 94\", baseline, precision 8, 424x600, components 3","md5":"63bb847a417e9d48290aed0501b43aa8","sha1":"f25ecd8fe81bf8bfae2dc575d1c3bbfae0496979","sha256":"729394fa94404d62c0c90480bbb6d93a54b81206bcfd571fef4d0790c23c98fd","sha512":"b06700d565377e5565b0905c9441763b94a622c9c93cf02b80cf3a6524810c4734d5a0fa7a00fc637f98236c232b6b9266061eb3b2dbb6c64e599927d0363c6a","ssdeep":"3072:oJdsXjF36cQpb5uU6ck/K3VsJLBFotW+4uonul4Vay1a2VQVKM:wc5KNpb5uKsTJLBW7BIvXu1","tlshash":"63d3121d5ef09cd05b2d06539741cf3c29b67b7c8bc38222d2a2694e7b6d97e109687c","first_seen":"2025-11-11T09:22:09.215152Z","last_seen":"2025-12-16T17:46:38.192279Z","times_seen":3,"resource_available":false,"data":null}},"time_used":579,"timings":{"blocked":319,"dns":0,"connect":0,"send":0,"wait":146,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1759783415_MV5BZDgyMWY1MGUtNTI4ZC00ZWFlLWI2N2QtYzFlNDI0MmY2N2RhXkEyXkFqcGc@.jpg_V1_SX700.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.162Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1759783415_MV5BZDgyMWY1MGUtNTI4ZC00ZWFlLWI2N2QtYzFlNDI0MmY2N2RhXkEyXkFqcGc@.jpg_V1_SX700.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:20 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 155049\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Mon, 06 Oct 2025 20:43:35 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FNIKY9%2BUpjzCU3ICR2HTE1sacl7ob%2B103XzwUSVn7g5THwy9Dc6iEgaO6Ka1Ab7TGcxJbKP2NI3ThSF3mg96kGgyu3l4%2BqrlAkyY7Q%3D%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb808995b35a6-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":155049,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 700x933, components 3","md5":"2ed7447837445a6fee4b9ff42d23a96d","sha1":"9441a0be2c0b2821807c59c79a59518e31e4e1fd","sha256":"d8e3babe940116cb987ee805f8b4926eb3b45213962398ae21ff367fb0598b3d","sha512":"fea72306e1bb89499511d975d09d7822a7d296cd9f1f5b5840f0b59ab11c6640504fddcfdf7603f44dec8b197a6eddc53198ab2c3ae35cd7de6f1e97675d7c4c","ssdeep":"3072:Lo/lRfSz4XK6POSvDOrYImGCmf3w4Rh5g62wAZNqQoJz994Alig8OgY:LySzELXvjImEA4onrN+Jz97liPC","tlshash":"fbe312f3de50d2ca75509c333a7ae11bed1e6c06daede8c094f622c9e600316fb60599","first_seen":"2025-11-11T09:22:09.215902Z","last_seen":"2025-12-16T17:46:38.198251Z","times_seen":3,"resource_available":false,"data":null}},"time_used":874,"timings":{"blocked":573,"dns":0,"connect":0,"send":0,"wait":188,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1762799020_MV5BZDNiYjVkZGUtNmRlYi00NTM5LThiMjYtZWRmMDYxMzIwMGUxXkEyXkFqcGc@._V1_.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.176Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1762799020_MV5BZDNiYjVkZGUtNmRlYi00NTM5LThiMjYtZWRmMDYxMzIwMGUxXkEyXkFqcGc@._V1_.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 400459\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Mon, 10 Nov 2025 18:23:40 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qwp%2Ffjqpbzs1lhgGZtIu9J3bhaPReXdXhWtNWod%2FyMq6%2BTTPN5AoUQ9KDJzNbZZwypuA5cvPPzLiksx%2FfKrOhrR2F%2Bk8HgiDwqg%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb80b2fb15689-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":400459,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 1080x1350, components 3","md5":"f8f05607947a6bd4ad78fc95eeb060db","sha1":"4ebc461a4d512630736a01dd8689a70e788124e8","sha256":"a4c9388f95e70806a6f87f10ca20c0ca48c4f2e00824d3e73c535c07e0505c8b","sha512":"4355b7dd5e693019e9accb54fe22b10126b6fd8befc228ff25a41f40f74043c51a9c572411700e3d4a467a8fa3d84f84d66b92a9065fc51a4c4f406ce95d7593","ssdeep":"6144:+eRSrsOPrGrkYCvbnNok6T7+kMhZifPb45AzpcQLBh0PUrehdK/8Yeu84eSZXwv2:+tr39MekUMPcqzd9W3d/Yeh4eMwv8+A","tlshash":"e384231114fcec256a4de8aa2a832d405b446563c9ff88f94b552dd9f4332324f2ea3b","first_seen":"2025-11-11T09:22:09.21677Z","last_seen":"2025-11-11T09:22:09.21677Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1774,"timings":{"blocked":974,"dns":0,"connect":0,"send":0,"wait":652,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shaahid4u.day/","fqdn":"shaahid4u.day","domain":"shaahid4u.day","tld":"day"},"ip":{"addr":"104.21.95.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-11T09:21:15.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shaahid4u.day","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 20:30:35 GMT","end":"Sat, 07 Feb 2026 21:29:18 GMT"},"fingerprint":{"sha1":"C0:D5:C6:42:E5:00:4A:03:20:6F:D3:39:F9:2D:E7:65:FC:50:21:25","sha256":"DE:19:20:39:22:57:87:C7:30:AA:10:F5:26:B1:A2:5C:6E:49:82:68:B8:08:3F:4C:84:3A:93:CA:87:5F:F7:18"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: shaahid4u.day\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Tue, 11 Nov 2025 09:21:16 GMT\r\ncontent-length: 0\r\nlocation: https://shahid4u.ws/\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aF%2B9tEno1KMpKnheReOW4PlfEKgOEKdP0Vg9iji1iGxqDV6Kc5KDLYns4zhQ1FvosKmCRUcsQLI7d9pBWLAHzczH2RITFJ%2ByVXYm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 99ccb7eb382a0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":64,"dns":39,"connect":1,"send":0,"wait":6,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shaahid4u.day","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-BM642X4VSX","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:19.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:37:33 GMT","end":"Mon, 05 Jan 2026 08:37:32 GMT"},"fingerprint":{"sha1":"6D:B1:20:6C:4E:45:23:88:91:95:5C:C3:FE:0D:A8:1B:29:43:20:6A","sha256":"15:E2:87:29:F5:07:FE:12:A2:58:8F:EE:D0:AD:2A:AC:63:5D:69:08:82:23:F9:BD:90:70:9F:09:AA:7B:57:8B"}}},"request":{"raw":"GET /gtag/js?id=G-BM642X4VSX HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 11 Nov 2025 09:21:19 GMT\r\nexpires: Tue, 11 Nov 2025 09:21:19 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143382\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":432409,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"0ab88fd51c596aa425562aebd3f055e9","sha1":"f3de1b5a562cd666a07bb0873b3ca5e9de044573","sha256":"b78932bc83706ad120d1b55f207f515886d344fed8c76f47afd1f765e5f70cb2","sha512":"3c5046ee5b7405eb4258ba764d80cac6278cbd39225476087c86462bf35c9a6f64ca94a2385ab5ef68677977bb2eb27a93e178e7647594c2da84b6f10ca4b456","ssdeep":"6144:rJBSz5v5rPQ5s9KP4GFdmJnxeSEUrm3IcRXtUyhjMvU:N0zh5rY5vP4GXmZm3Iwf","tlshash":"809418ce73d674265396f478502f018ba57b28a2b44cc896f1c9cde02e74a9a4277f7c","first_seen":"2025-11-11T09:22:09.217616Z","last_seen":"2025-11-11T09:22:09.217616Z","times_seen":1,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":81,"dns":1,"connect":7,"send":0,"wait":32,"receive":26,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1758472423_%D9%85%D8%B3%D9%84%D8%B3%D9%84-Tulsa-King-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%84%D8%AB-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-%D9%83%D8%A7%D9%85%D9%84.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.042Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1758472423_%D9%85%D8%B3%D9%84%D8%B3%D9%84-Tulsa-King-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AB%D8%A7%D9%84%D8%AB-%D9%85%D8%AA%D8%B1%D8%AC%D9%85-%D9%83%D8%A7%D9%85%D9%84.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:21 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 121195\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Sun, 21 Sep 2025 16:33:43 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=blDhfs6RZ0%2F5GkVf8tYI9wDxQxLNnyW6%2Fpot%2FOVf5%2FeZJ9MjCd7WIIMHox6ecTvftEkSK%2BFHxb6YSZLpIusXEo1Izh5Ku6AWXgc%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb80f3d985688-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121195,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 450x560, components 3","md5":"0511ce2a8174fb76a6642c1158960bad","sha1":"5b95a779acf6d56d20af86af57e52149834ccb45","sha256":"9b60c8dfc485b14ab03537df797ea370331494fd72f6dbf8aa03f9e2a306c981","sha512":"18c467a497aa49ab429b3372e4c007a99cee76c0252e226c45fc5c172d8dab85fd5d3e6eac226c5c0bb2d33786edf675cdeab314bfe77fe1c7a0d6b8bd290a2a","ssdeep":"1536:ofCjUWRIRfA0zQozz+KqZmxm4k6ou1atVftlNdjzH6fxMvqFXOMDqesy+MFwRR09:yxAsQIzFzx1afz7HkLJDqex+DRNaajo","tlshash":"e1c312ed85e85d2ec8cd7ece46b0dfee334bcb75384b217a6a6aa457640af65c0005c4","first_seen":"2025-09-28T02:51:29.404728Z","last_seen":"2026-03-12T22:52:33.343293Z","times_seen":10,"resource_available":false,"data":null}},"time_used":2027,"timings":{"blocked":1754,"dns":0,"connect":0,"send":0,"wait":166,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1748261851_1729602751_%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D8%B5%D9%84%D8%A7%D8%AD-%D8%A7%D9%84%D8%AF%D9%8A%D9%86-%D8%A7%D9%84%D8%A7%D9%8A%D9%88%D8%A8%D9%8A-1216787.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.119Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1748261851_1729602751_%D9%85%D8%B3%D9%84%D8%B3%D9%84-%D8%B5%D9%84%D8%A7%D8%AD-%D8%A7%D9%84%D8%AF%D9%8A%D9%86-%D8%A7%D9%84%D8%A7%D9%8A%D9%88%D8%A8%D9%8A-1216787.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:22 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 43611\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Mon, 26 May 2025 12:17:31 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D6I1Og5osiEpYe0D%2BO2wBgfb1RU34G7dPeI9HQ9%2B1Dh7nzJKp3dUaIy2LfpLRn4FFPtghLZPonUWrT5plwurZDnevIm92QgwfZzUTA%3D%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb8138c9635a6-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43611,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 450x600, components 3","md5":"a44abbbbbeb9313f4c93171166f74571","sha1":"2d46b3ce61460f0205f67b2c3e3d44a6127e14c8","sha256":"9bd923e06f89a4c02405c57310d95a83f455425c0658d853a2312391c4f6f188","sha512":"a2d7a43166b5037b3d7944fba68e771f4942c7c6c4d209b1661b363e849922d341781aba55e2f1a39a1f8775d5059f34dcf4bcca5f78b93844db082d5363e2ce","ssdeep":"768:+ejlwB/WmdACgKi8eBRU/UotyRdUbDec/zk1dKOduvOmYds:+ejlwomfBc3eOzKOd+h","tlshash":"be13f1697ee66d0d4b400af7308282938245a96bf2bc5c5dcd071e502cbd2e72afdf15","first_seen":"2024-10-27T23:30:11.367053Z","last_seen":"2026-03-12T22:52:33.420051Z","times_seen":17,"resource_available":false,"data":null}},"time_used":2886,"timings":{"blocked":2371,"dns":0,"connect":0,"send":0,"wait":445,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"shahed4u.you/photos/uploads/1760334320_MV5BY2IyZDM5NmEtZDE2ZS00NTQzLWFkNjQtNDU0ODU2NzNmZDUyXkEyXkFqcGc@.jpg_V1_SX700.jpg","fqdn":"shahed4u.you","domain":"shahed4u.you","tld":"you"},"ip":{"addr":"104.21.43.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://shahed4u.you/","date":"2025-11-11T09:21:20.182Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /photos/uploads/1760334320_MV5BY2IyZDM5NmEtZDE2ZS00NTQzLWFkNjQtNDU0ODU2NzNmZDUyXkEyXkFqcGc@.jpg_V1_SX700.jpg HTTP/1.1\r\nHost: shahed4u.you\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://shahed4u.you/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik4yRjhVSWFPU1FPMkNlQTVQcVFrT3c9PSIsInZhbHVlIjoicXZBaUxYUHBJMmlSdEF1SDJPUkJNYlBxbUUzeGRuS1d5WkRhTTFhL0V4L01QMkRyOXl1dHJFcXZpU1ZZdk0rbnYyNUpBNWx6ZzZEZHhDQVVWQTZjT2xoemNDenNsK1I4b2Vlam0vWFFBckhVUCtiNkVtUldEb01RS0MrVWJhNG0iLCJtYWMiOiIwYzcwMjY0NTMxMTE5NjE5ZTU0ZDlmMzMxN2U1NDhjYjk0ODBkNWRiNDhjZjZjMWJhMzI3ZmNiY2U4NTc2MTg5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFyQVV6YzhnSXRFWGw0OHloTytyMnc9PSIsInZhbHVlIjoiT2ZGZDErWnB6d3hUSFdZc3NvSnhhUXIzWlB1ZHNvUS9nQXZlWFhLMmx3QWRXT1FvUWZMSjk5eVZZSmZDNUpUcWV1aGdzc0l5SXFLMy90SDhHc2wydFYwcUhJeGdnQkRPbmNCbVBmRE81LytscTF3b2tBSGp3V01MWFhsdFQ0TzEiLCJtYWMiOiI5ODM2Y2JlYWU1YTkyNGUzMDAxNTBkMjkzOGM5NGFkM2FlMDMwZmEzODkwYmJlNzgzNjlhMDBiZTQ2YTk0MGYzIiwidGFnIjoiIn0%3D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 11 Nov 2025 09:21:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 56081\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Mon, 13 Oct 2025 05:45:20 GMT\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a9KBS36Eq%2FlYx7BCX2J76ALjuQBj%2BomaKs1HQrFDTp%2FD49smHjR2C4Qvh7SJGL%2FE4B2C6zacBP1OTVZD2bqTpQ7%2FeGQLLnu7LmI%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nCF-RAY: 99ccb8181e485688-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56081,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 700x989, components 3","md5":"a2a6b7bf311b6069308982a81148f2c7","sha1":"2dca78f2ea0284462c270777e56117f6608094e4","sha256":"7261fb5f5549343ab1a6063f5e7297f464ba4aeb27e0b740ff9cd54821a84f3e","sha512":"f15b586b4a4a70fb983b8c6be4babc769b3af20f71dc5d7f9f666a8fc49485eda8f74407675cce9b4c1cc79789cf183173f7df1dfb2dc6014cd3e5749f7211de","ssdeep":"1536:HVGt39KdsHB5cgE7IrhRNHxeCtfLNUVRP8MajHQo9TQ:QKyh5pEwRTtjuVuMako98","tlshash":"a9430166193f7b335a8b0cf515dc837a88d11c6781c86d6b6892eb575b493e4c2b83c4","first_seen":"2025-11-11T09:22:09.220676Z","last_seen":"2025-11-11T09:22:09.220676Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3278,"timings":{"blocked":3040,"dns":0,"connect":0,"send":0,"wait":164,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"shahed4u.you","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}