{"report_id":"3537b1b3-a1d1-43d1-a3c6-f7c9ad3a7f1c","version":6,"status":"done","tags":[],"date":"2025-12-02T00:20:29Z","url":{"schema":"http","addr":"hclips-porn.cfd/hd/fleshiness","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"172.67.158.108","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"hclips-porn.cfd/","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"title":"HCLIPS-PORN : HD XXX CLIPS VIDEO TUBE!","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"hclips-porn.cfd/hd/fleshiness","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"172.67.158.108","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-06T00:20:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":17}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"fh-wgt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"fh-wgt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"js.wpushsdk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"js.wpadmngr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"f93c382250.1f0355218f.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"72c5f4f03e.482e528949.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"js.capndr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"cdn-fc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"na.nawpush.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ads-us.mymetricpath.xyz","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-04-28","domain_rank":0,"first_seen":"2025-09-27T22:57:56.789994Z","last_seen":"2025-10-19T15:45:37.784887Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":495,"comment":"","tags":null,"fingerprints":null},{"fqdn":"hclips-porn.cfd","ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-05","domain_rank":0,"first_seen":"2025-09-03T08:37:36.556453Z","last_seen":"2025-11-29T11:26:13.610918Z","alert_count":0,"request_count":129,"received_data":3501078,"sent_data":85102,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"TrafficStars","description":"TrafficStars is a self-served ad network and ad exchange that operates mainly in adult-related verticals.","website":"https://trafficstars.com","common_platform_enumeration":"","icon":"TrafficStars.png","categories":["Advertising"]}]},{"fqdn":"cdn.tsyndicate.com","ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2017-03-08","domain_rank":40822,"first_seen":"2017-07-04T06:00:09Z","last_seen":"2025-11-24T14:54:24.179986Z","alert_count":0,"request_count":13,"received_data":224098,"sent_data":6733,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"72c5f4f03e.482e528949.com","ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2025-11-02","domain_rank":0,"first_seen":"2025-12-02T00:00:51.97819Z","last_seen":"2025-12-02T00:00:51.97819Z","alert_count":2,"request_count":2,"received_data":690,"sent_data":1682,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"tsyndicate.com","ip":{"addr":"78.46.88.185","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2017-03-08","domain_rank":1289,"first_seen":"2017-03-16T09:04:54Z","last_seen":"2025-12-01T21:04:43.95245Z","alert_count":0,"request_count":4,"received_data":42274,"sent_data":2403,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"TrafficStars","description":"TrafficStars is a self-served ad network and ad exchange that operates mainly in adult-related verticals.","website":"https://trafficstars.com","common_platform_enumeration":"","icon":"TrafficStars.png","categories":["Advertising"]}]},{"fqdn":"s3t3d2y1.afcdn.net","ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2022-06-27","domain_rank":0,"first_seen":"2025-11-21T12:51:16.33547Z","last_seen":"2025-11-28T12:51:37.799595Z","alert_count":9,"request_count":9,"received_data":643353,"sent_data":4567,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"ic-nss.flixcdn.com","ip":{"addr":"185.76.9.4","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2017-05-17","domain_rank":60032,"first_seen":"2024-04-26T14:40:12Z","last_seen":"2025-11-25T22:28:24.224701Z","alert_count":0,"request_count":12,"received_data":506276,"sent_data":6403,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"f93c382250.1f0355218f.com","ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2025-11-02","domain_rank":0,"first_seen":"2025-12-02T00:20:32.837708Z","last_seen":"2025-12-02T00:20:32.837708Z","alert_count":4,"request_count":4,"received_data":66313,"sent_data":10641,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"a.adspector.io","ip":{"addr":"104.21.15.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-06-02","domain_rank":213577,"first_seen":"2024-06-28T02:35:48Z","last_seen":"2025-11-25T05:34:34.128074Z","alert_count":0,"request_count":1,"received_data":711,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-11-30T22:14:19.793229Z","alert_count":0,"request_count":1,"received_data":3188,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"track-us.mymetricpath.xyz","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-04-28","domain_rank":0,"first_seen":"2025-08-21T13:28:11.77564Z","last_seen":"2025-12-01T15:29:33.715727Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":1730,"comment":"","tags":null,"fingerprints":null},{"fqdn":"na.nawpush.com","ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2020-12-21","domain_rank":175362,"first_seen":"2020-12-23T08:18:12Z","last_seen":"2025-11-25T03:17:21.327624Z","alert_count":2,"request_count":2,"received_data":4269,"sent_data":962,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.60ah.com","ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2023-01-18","domain_rank":285202,"first_seen":"2023-05-16T11:47:54Z","last_seen":"2025-11-26T18:23:11.397572Z","alert_count":0,"request_count":1,"received_data":2126,"sent_data":427,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"js.wpadmngr.com","ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2021-06-02","domain_rank":77954,"first_seen":"2021-06-02T14:43:46Z","last_seen":"2025-11-25T03:17:21.110122Z","alert_count":2,"request_count":2,"received_data":295162,"sent_data":846,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"flepquix.com","ip":{"addr":"159.69.163.100","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2025-03-10","domain_rank":17067,"first_seen":"2025-03-24T12:50:40.052973Z","last_seen":"2025-11-26T02:25:59.689827Z","alert_count":0,"request_count":1,"received_data":322,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"nereserv.com","ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2020-12-21","domain_rank":17097,"first_seen":"2020-12-21T11:07:56Z","last_seen":"2025-12-01T21:20:35.139659Z","alert_count":2,"request_count":1,"received_data":322,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s.optvz.com","ip":{"addr":"95.211.229.245","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2020-03-25","domain_rank":98517,"first_seen":"2024-10-14T14:12:37Z","last_seen":"2025-11-25T02:42:31.628563Z","alert_count":0,"request_count":1,"received_data":23045,"sent_data":1347,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s.magsrv.com","ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-08-01","domain_rank":47665,"first_seen":"2023-08-04T12:48:00Z","last_seen":"2025-12-01T07:32:10.961535Z","alert_count":5,"request_count":5,"received_data":9097,"sent_data":4220,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"js.wpushsdk.com","ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2021-05-07","domain_rank":210235,"first_seen":"2021-05-07T12:03:12Z","last_seen":"2025-11-28T04:24:37.905053Z","alert_count":2,"request_count":2,"received_data":855809,"sent_data":846,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"a.magsrv.com","ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2023-08-01","domain_rank":51490,"first_seen":"2023-08-04T16:18:00Z","last_seen":"2025-12-01T12:55:50.988552Z","alert_count":12,"request_count":4,"received_data":744484,"sent_data":1660,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"go.hpyjmp.com","ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-01-23","domain_rank":461961,"first_seen":"2020-08-14T05:58:20Z","last_seen":"2025-11-30T22:27:40.97405Z","alert_count":0,"request_count":2,"received_data":3255,"sent_data":1140,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"preroll.hostave3.net","ip":{"addr":"172.67.145.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-09-05","domain_rank":304993,"first_seen":"2018-02-22T21:32:02Z","last_seen":"2025-11-26T06:10:36.548172Z","alert_count":0,"request_count":3,"received_data":2411,"sent_data":1362,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"pointcontinentrtb.com","ip":{"addr":"148.251.39.247","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2024-10-14","domain_rank":16265,"first_seen":"2025-04-20T21:33:16.477453Z","last_seen":"2025-11-25T14:04:49.944466Z","alert_count":0,"request_count":1,"received_data":16026,"sent_data":1631,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-11-30T22:13:37.547558Z","alert_count":0,"request_count":2,"received_data":58158,"sent_data":1078,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pxl-eu.tsyndicate.com","ip":{"addr":"94.130.167.182","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2017-03-08","domain_rank":61788,"first_seen":"2025-07-17T15:56:50.105461Z","last_seen":"2025-12-01T19:37:28.989396Z","alert_count":0,"request_count":3,"received_data":591,"sent_data":5787,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ntvpforever.com","ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-11-18","domain_rank":18811,"first_seen":"2021-11-19T01:49:18Z","last_seen":"2025-12-01T21:20:34.842243Z","alert_count":0,"request_count":4,"received_data":1386,"sent_data":2072,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fp.metricswpsh.com","ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-10-29","domain_rank":154722,"first_seen":"2022-04-22T11:20:32Z","last_seen":"2025-12-01T09:54:18.134236Z","alert_count":4,"request_count":4,"received_data":1644,"sent_data":2120,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"img.doppiocdn.com","ip":{"addr":"104.17.223.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-02-16","domain_rank":38793,"first_seen":"2025-02-10T15:14:32Z","last_seen":"2025-12-01T06:35:58.809454Z","alert_count":0,"request_count":2,"received_data":25521,"sent_data":917,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn-fc.com","ip":{"addr":"104.21.88.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-02-07","domain_rank":18430,"first_seen":"2023-03-03T11:19:00Z","last_seen":"2025-11-25T22:28:24.447269Z","alert_count":6,"request_count":6,"received_data":43378,"sent_data":4319,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pxl.tsyndicate.com","ip":{"addr":"78.46.88.185","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2017-03-08","domain_rank":83690,"first_seen":"2017-07-05T13:51:06Z","last_seen":"2025-11-27T08:30:12.818053Z","alert_count":0,"request_count":1,"received_data":210,"sent_data":622,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fh-wgt.com","ip":{"addr":"104.21.63.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-10-24","domain_rank":18569,"first_seen":"2025-03-17T09:59:57.505629Z","last_seen":"2025-11-25T22:28:24.367825Z","alert_count":6,"request_count":3,"received_data":14973,"sent_data":1752,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"js.cabnnr.com","ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2021-08-30","domain_rank":185771,"first_seen":"2021-08-30T12:50:21Z","last_seen":"2025-11-26T06:13:13.922605Z","alert_count":0,"request_count":2,"received_data":87170,"sent_data":862,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s.uuidksinc.net","ip":{"addr":"31.220.27.134","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2015-05-05","domain_rank":47808,"first_seen":"2015-07-20T12:00:35Z","last_seen":"2025-11-24T21:40:34.442381Z","alert_count":0,"request_count":1,"received_data":563,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"static.bookmsg.com","ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2020-09-15","domain_rank":169473,"first_seen":"2020-11-24T14:56:32Z","last_seen":"2025-11-25T06:27:50.902466Z","alert_count":0,"request_count":2,"received_data":2251,"sent_data":983,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"rtbrenab.net","ip":{"addr":"116.202.60.226","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2024-09-23","domain_rank":17910,"first_seen":"2024-10-01T12:19:47Z","last_seen":"2025-11-29T11:26:13.556595Z","alert_count":0,"request_count":3,"received_data":27701,"sent_data":11078,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"assets.ahmybid.net","ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-12-26","domain_rank":171628,"first_seen":"2024-12-28T14:10:32Z","last_seen":"2025-11-25T21:38:03.761562Z","alert_count":0,"request_count":1,"received_data":16128,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"accounts.google.com","ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":103,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2025-11-30T22:41:58.479713Z","alert_count":0,"request_count":3,"received_data":6911,"sent_data":1784,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]},{"fqdn":"js.capndr.com","ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2021-08-30","domain_rank":156902,"first_seen":"2021-08-30T12:51:01Z","last_seen":"2025-11-25T05:53:36.876964Z","alert_count":2,"request_count":2,"received_data":798,"sent_data":832,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"jcdn.tsyndicate.com","ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2017-03-08","domain_rank":65259,"first_seen":"2024-09-05T14:47:10Z","last_seen":"2025-11-24T22:16:00.023686Z","alert_count":0,"request_count":1,"received_data":366,"sent_data":443,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d92a5f5aaa5cb972e18a3886a9838952","sha1":"88a90b4969cdb377be11e515f53ed8af720ba149","sha256":"563ff9e65da46f4d8fdb1517f3c1dce9e63f9f16391d1b2f0bf7c15c33e6df68","sha512":"9e24fdc7c05d6f7cb273cc31dbf326186134c4ad5950a55ff09354c0fe7ad6e41e8b1183eb483f9f0de6e7d5ff2aa73cf82d3c3fbc572317dd70005f1c5917d9","ssdeep":"3072:5B3fUg+28VOk2DG2gjKzElwnRlqI1fsBHisGEolY4o/CXMXpo:D7+28VOk2621ElwnRjfs4s7hpo","tlshash":"00045c993792307441d3a11da9ff53093371506ab80f4884bb4dd8a427adeea51a3ffd","size":185607,"data":"","first_seen":"2025-11-25T14:43:10.663757Z","last_seen":"2025-12-02T09:18:34.719134Z","times_seen":264,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/b.b.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4972df0025f3a0b931a347672899c2b0","sha1":"0911b190d07a9fc3c2926c0f42965f980ee07be1","sha256":"88247a2b2d54b0f29f1a565cfa62990adcf8ea7f3b309893b10d0775cd231974","sha512":"4aa3086ca9db61c2ec96f9d7c8da3f83c576bb849d57591b2fd7fe2fe1c97780c23535e91db8a96e16f0d9357362a83773fa3d465c8146e9871bcdc36f09ee03","ssdeep":"192:paqucGdppOIWtlomlihFk76i69GDgJCS4qN9:paquXdONHSsgz9","tlshash":"8d02d86eb64e703591d910a7027f530d73f61252aa068890f1aadc52387cfdde513ece","size":8857,"data":"","first_seen":"2025-12-01T12:56:10.876324Z","last_seen":"2025-12-19T05:56:33.799189Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/scripts/asf.js","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0191ea32bd357f18cdcdd82c739d754","sha1":"e9158d2a0035c4477cfc8ad1e462f6a1e3c7650e","sha256":"9a5d48b1ed565a6c36e5cbaa144ead8a89300a2cfb3c9777bab6fedae4425943","sha512":"75a7fe267bde393709fc822fdd5454f952d580ee8993c33bfb03ddb732b72b1217159d7c1337fcd9a195e794e051dc269e773a85bb0d4f1458f0269cde8440ce","ssdeep":"","tlshash":"7f517741f6ae7aa050bb212d8bf741443fad185f71099954fcec0cd91f213aea89270f","size":2706,"data":"","first_seen":"2023-10-16T17:48:40Z","last_seen":"2026-03-27T19:42:57.137381Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f53567558bdea644af1ba8782f7bef6f","sha1":"427ef1766f7e2c19847cbde1e10cabd6c73db7b4","sha256":"ce967986ad0d59087854c3e9cfc27814a9b7eca95aee2ce82d9fe9e0929a0ca6","sha512":"3558bc6b343a3bc9de9e552b36619aa00167fbf5f11d25f2b23accdef7e1898e66416edf7f0c478d73abab83dbe03de19e4f0457d26abb5aefe1431f670cff1f","ssdeep":"1536:OpOPpA6P9rHRFts5dWmj6zzKEpKf7JbcacZwJ8jBl8Q8MdnCW9212FoXV0jtQyET:U6FDTts5dWmOzGoKFoaswoRebX","tlshash":"37e33adcb2d2b07407e75099d43f1206b73a1a16b80c9058f6a6e9c17878ddb5237f7a","size":147193,"data":"","first_seen":"2025-11-27T13:47:15.836385Z","last_seen":"2025-12-02T14:58:27.680717Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/backup.v2.js?spot=bd16f693d3144ae0b0b2ce10c53c7d0a\u0026xu=94551fa65a169fd1\u0026count=5\u0026w=1280\u0026h=1024\u0026keywords=%7B%20hardcore%20%7D%2CHCLIPS-PORN%20%3A%20HD%20XXX%20CLIPS%20VIDEO%20TUBE!\u0026adtype=image\u0026tz=0\u0026callback=callback_t1goQ","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"52ea21ca0d1938b4412569d35b0866aa","sha1":"8d92a0ec410058b8bbf59030fa4a57947c7d871c","sha256":"de3c9bf2d039601a9ab7aea962640dbbfd1a8a2e4e58cfea6c94c4387e1b653f","sha512":"f0e93cce4b079bcbcc8cc0935c343dc5114bbd0a33adfa786c77c4e98ef11af2140c83a11fef8f38bbef8401a3cf5c9b5f5e104eb8baa6892e48af1154d9ba28","ssdeep":"192:pJJ7MVejbROjQ8enkecherKeHZ8eHjeA5euoljnanE/tnhVyc2sRDHPa:pnMVejbROjJenkecherKeH+eHjeA5euh","tlshash":"4012a483c26f201bbc1935846b8b3a45a59011633cb5ccb6c2e3597bd9b0f974673a63","size":9618,"data":"","first_seen":"2025-11-27T08:30:31.640472Z","last_seen":"2025-12-02T02:34:07.027976Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#243","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b8dc8a07d4a13bb81ec7494b6ed7881","sha1":"b0ae1d75d8fcb2f62c66a69a83635fe21419f38a","sha256":"8ba2ba1809fe630faa2c4576a50156f6bd548b824d08cda8fc9ad1d40d168018","sha512":"133eb5e06a67822a361de874218da80d458f2b75a8d7b03f6b15219cae9a0c913c63219cb6f858849561596a5af6229039f16c9f92fd02d69e27823eb5086d49","ssdeep":"","tlshash":"84511d83181468572f0c981ce6800701ab48cafc5c5bd12dd774295beb0656ceb9fb6d","size":2918,"data":"","first_seen":"2025-12-02T00:20:49.497765Z","last_seen":"2025-12-02T00:20:49.497765Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.cabnnr.com/banner-admanager/iframe-scripts.js","fqdn":"js.cabnnr.com","domain":"cabnnr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"89433f6864b61ee5dc3398a327f35069","sha1":"14d840847e8154f6ec2931a9d90126ed5c91fdb9","sha256":"587fc8a495b9e66cfaa0092ac5c3ebe3aeff08fee83fab4be94dc4ae09c982cb","sha512":"96863711edb791ffefa6188b2077dc1db9e270a7e27874140740a0820481ade585e20765f42f6df33afb77e5b1d20db281bfa9541f2be87cf97481de257cbc6a","ssdeep":"","tlshash":"dfe0682821a067bc006f266ef29a5aacf93801a6704a040884b1488d7c3ed76a6f4f24","size":376,"data":"","first_seen":"2025-07-25T01:42:49.250588Z","last_seen":"2026-04-03T17:32:49.403307Z","times_seen":1505,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pxl-eu.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XMoHFDzA0ZZca08EgjRguONnC0wEEGhowWM2CUtFEjhs2WY0Q8DFMnpw4RZsKwhJFjzI0WNmQQPVmGzIyVN6K2gEGmRo0xMGqQiVHGDA6dEMnYoThjxg2XD-HUEUMxBgyzO-HAWUgjR4wbD-fAmahD6Q2rMxyKGNNmLkOZgXPA2EnGDMWHYty4WVgDR44cMnDQeNjGDUaGM2QoTdv5810ZNR_WiZERDR06cOboePFiDBk3LcyMcTHmTZvacgrSSWOnzJwXddwQRzgnDJsXbsIML_7ix5w0esr0iAkDD2oYXOrAcGmjDp02X8aEKRwmzRk3Pdq7aIMnS_jxMsqfT__GDZ0y_vUwRx1nnGHcf2R8cUcaZBhIx33krVFGHne8IQcZc_SAxBBMJAHFFC1A8YQUTqxQwgxBrIAEEStg4eIKHHo4xQpWJEFEEU-sQEUVQhRRggwxQJgfHMHZkUYZd3zRxhsH9YDGG8XJIaQNc8TQAxNUaKGEFkncgUccddyRxRRNDIHHlmUgocQdUyxBRRtZKFFGTEQkIYcbasgRRG8txHAHFGHEcAYbZlghQxhxyBGHDVSEIQQTN-zlhBNu0NDEG2p8sYQWWhyRBRFvYAHqG2K0MWoUdVAxRhpSvOEEFEIYkUYRTsyBxBFDwKpEHk_Q8MUZVdgoRRVpgEWGb62NwUYasbUAh4Vu8GYGGWCpx9cWM8TQBWSO6QCDC-MJJocdhsWkWh3F_hTGRjfgYEYNZbRQwwzvymuGWS1cRoMZK4lxUA5hdBRGSjOAxWxGdrmgmAs0yOBCQzSAJccXB_-U8MINP1xDxKqFkdGleqTBBhthvFADuCCgcEUabhx7xxwgOEEFCG6BuwMIK7thAw0347HzzeOCRgO4KYBwREhrvPGCUm7B4FYMIMganBlv4PFCDBuBW61PIjjxBFgWpse112CxwTWtxpZhxxfBsUFRDVHhMENK4z0kx3sLoYYDXiIctLYYciyEAw4P-a0kk3njYENFfcvxxkIzPPSGQjpsJgKRVedBmd1fYI6H5joIZjgdemQEg8RdtfZabLO9gIayzM7hLLTSkvECWHdk5JYMHA-ke2an5zVuRo7TIZ2FLSSXBh3yzuACGWPEIAPYcwzPkFVOy23DDZH3zfVBX0AvPVjnUXTDzjZshEPdIpw3PUPn05A-Des7PS9jbBsHxxfSmY---uxTG__YgBA6UA5bFdnItiAiBr70rSs8YcNE0mK2hSxmMJ-54BjQsJAtiAAsIHxICD8owhKS8IQjBGEX-qCAgAA%3D\u0026s=fa7c2690a46f1be5df60a3372a79bdf3a021708bfa7c8d004899ddccac20ba2f1764634800\u0026w=t\u0026r=1\u0026d=1106\u0026priv=true","fqdn":"pxl-eu.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"94.130.167.182","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0959ba36d476b6dc1994ba3c678b07c4","sha1":"d30b94da72daa02766965206a85b7e0356375f5e","sha256":"897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a","sha512":"843f2144ba55d59ba3e62053dc018f4f6d51ae482c741cb4dc85f7af3375b77c75f66e2e73ff55ff7fe3b79314e7ba28a92fddec1ba17839ba33b34792bfce22","ssdeep":"","tlshash":"ea70008030b22e88e022000802a08000000288220a8032b0020800a80002202ca3c30a","size":24,"data":"","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-04-03T18:21:27.290641Z","times_seen":6722,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/scripts/ars.min.js","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ce0fa9ff43f3e0ef0f94a4c850d18a5","sha1":"b057ebbbe39dfbb1cf8faab58c2f51759267167d","sha256":"bb91fb256ba4a5bdf280ef71861cadbf247c777f24ba75a4d3880f1f50916942","sha512":"aa6db0adcdcf9c0e293755e4016c33859e0ddc04870123fe7b89aaf0981b0cb1a11d05eb6b4a7b10d4dd997a14ed74725b01ee96920ff37aaa30c8d5fc173f48","ssdeep":"3072:/JBpGHlkl2DgRca+pDU9v8cnWM50Vz9+TG46VbzRht08LfD:/JBpwlkl2DgRca+pA9v8cnWM2Vz9+TG5","tlshash":"01d3d79c7320b1a556e72287d2a9c651e3b51840b809d4e471b90cab2c7dd8c13eeffe","size":139895,"data":"","first_seen":"2023-10-16T17:48:40Z","last_seen":"2026-03-27T19:42:57.117046Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jcdn.tsyndicate.com/bd16f693d3144ae0b0b2ce10c53c7d0a.js","fqdn":"jcdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-03T19:31:06.190051Z","times_seen":552080,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dc0fbd899f600b0cb6687880d3036037","sha1":"a9bf6de8622f90e73708ce814b64f9cfc6990bdf","sha256":"4a260f030d57218a4dd17c53290ea9c5fade005852c53e16a5feb12289197de8","sha512":"428ac57be2098801ffe24ea9fff43d57a0a8b7a6f1623ef2a587f3eacfd1fd9938cd0df78a7e5055761dfaa36c8303acdedeabd04743760a68ed48240b9e0eac","ssdeep":"","tlshash":"e20170ae10d21c788e6371b90fff62385135218754875b02b95d5d825fb470dc589c8c","size":742,"data":"","first_seen":"2025-10-05T06:06:00.188752Z","last_seen":"2026-03-27T19:42:57.187733Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"82d0458a2d54e0cfef6df99db4c62c1f","sha1":"9c8e3ba37e9d96c5b3cbc43385c55647031d59d4","sha256":"c0e6fd79877b8856de456aa4f1dfc35b59b3b3ee8aa70c04cfb54be6d38a082c","sha512":"06a41a104ea9b841176332425cf5cd745b8fb2db0148a0fef6b57a801f9715777789bd4eb31ca15b9c638fcceebd734508fe82fb73d2474e9b51906613efdcf8","ssdeep":"","tlshash":"a5e02b4d000445228802f12d50e7194316188d07af86bca937dc5b605f1e01f42f7eae","size":312,"data":"","first_seen":"2025-10-13T00:01:01.260852Z","last_seen":"2026-03-27T19:42:57.1894Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f53567558bdea644af1ba8782f7bef6f","sha1":"427ef1766f7e2c19847cbde1e10cabd6c73db7b4","sha256":"ce967986ad0d59087854c3e9cfc27814a9b7eca95aee2ce82d9fe9e0929a0ca6","sha512":"3558bc6b343a3bc9de9e552b36619aa00167fbf5f11d25f2b23accdef7e1898e66416edf7f0c478d73abab83dbe03de19e4f0457d26abb5aefe1431f670cff1f","ssdeep":"1536:OpOPpA6P9rHRFts5dWmj6zzKEpKf7JbcacZwJ8jBl8Q8MdnCW9212FoXV0jtQyET:U6FDTts5dWmOzGoKFoaswoRebX","tlshash":"37e33adcb2d2b07407e75099d43f1206b73a1a16b80c9058f6a6e9c17878ddb5237f7a","size":147193,"data":"","first_seen":"2025-11-27T13:47:15.836385Z","last_seen":"2025-12-02T14:58:27.680717Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#229","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"25c37d43745e1bb0c4983c87ac8f428a","sha1":"e0a6ddfc2dfc7c77b3d27921b344e1c1950715e1","sha256":"53c07a142d50ac35477f49df69ce186ef2d8568782aa6316f7c3ca5aec7a29ec","sha512":"b85e41419db7578eb5e29a95df9a1d2ae43a0da2b954902c531a4d584cd5cdd1a7f87ad8ddcf8d95b3a9f088b0216f8f0d45b229939c9598f3383cf646d7dea9","ssdeep":"","tlshash":"1331567837865c7346c9f159fb1e9715b9f949772149e0124408dcdc3ca4e164747af4","size":1574,"data":"","first_seen":"2025-07-28T21:31:50.383085Z","last_seen":"2026-04-03T18:21:27.316788Z","times_seen":953,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/b.b.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4972df0025f3a0b931a347672899c2b0","sha1":"0911b190d07a9fc3c2926c0f42965f980ee07be1","sha256":"88247a2b2d54b0f29f1a565cfa62990adcf8ea7f3b309893b10d0775cd231974","sha512":"4aa3086ca9db61c2ec96f9d7c8da3f83c576bb849d57591b2fd7fe2fe1c97780c23535e91db8a96e16f0d9357362a83773fa3d465c8146e9871bcdc36f09ee03","ssdeep":"192:paqucGdppOIWtlomlihFk76i69GDgJCS4qN9:paquXdONHSsgz9","tlshash":"8d02d86eb64e703591d910a7027f530d73f61252aa068890f1aadc52387cfdde513ece","size":8857,"data":"","first_seen":"2025-12-01T12:56:10.876324Z","last_seen":"2025-12-19T05:56:33.799189Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/b.b.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4972df0025f3a0b931a347672899c2b0","sha1":"0911b190d07a9fc3c2926c0f42965f980ee07be1","sha256":"88247a2b2d54b0f29f1a565cfa62990adcf8ea7f3b309893b10d0775cd231974","sha512":"4aa3086ca9db61c2ec96f9d7c8da3f83c576bb849d57591b2fd7fe2fe1c97780c23535e91db8a96e16f0d9357362a83773fa3d465c8146e9871bcdc36f09ee03","ssdeep":"192:paqucGdppOIWtlomlihFk76i69GDgJCS4qN9:paquXdONHSsgz9","tlshash":"8d02d86eb64e703591d910a7027f530d73f61252aa068890f1aadc52387cfdde513ece","size":8857,"data":"","first_seen":"2025-12-01T12:56:10.876324Z","last_seen":"2025-12-19T05:56:33.799189Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"de7507ad26c6c904109c87dd5dfac288","sha1":"952cae1ce6ce1e74b010b31b4357424c12a5960c","sha256":"09f81a5c463b570b389ce0b118a29bf489353d0ae7d47eefee9b9e7b703e0e02","sha512":"bf1e05b722c1990f20aba1abe8aa7bedeb660957e0adc012e757cfa9cd9b4d13b39d5f7d0688bc341f7d630b28c160b3e22dacc0ac0f9f37ed22230e6ffe68b1","ssdeep":"","tlshash":"fba002353403501e20265c517d266a0cf84e9475e198345707070470d0e3c4b5d004c7","size":59,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-03T19:37:19.147375Z","times_seen":11342,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#245","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"61f66f26e7d0b318e0ebaeacd2ee1205","sha1":"d6671de227db7f05046db64a7235df91c96fe841","sha256":"b101af1f48b421490e4066e501310777d0b05bd082179ddff546e23533fd3d6e","sha512":"4043a3f3f532b3a2b212e9a24679db130d4caad15102bed494bcd957bba4813d92b40cddda331062036fa965f6208b9f1431d5b4d5e74d3829e9de5912f578c5","ssdeep":"","tlshash":"e041d69639872c3c30ff1c67a4e7c3d875006c750941600a46a2f917e22aef5f677ac2","size":2313,"data":"","first_seen":"2025-12-02T00:20:49.501019Z","last_seen":"2025-12-02T00:20:49.501019Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=OontXWdG7kOZcKr9WU8KIhiLdZ9DrUwEBPwyYIFNal_NhEt-mDttlRQnwqDBmGvsQJYLHGZqJm0nEw921KfpD47qgwYlm6Xh4z-1wSyu3B0B1s8_gUIDRUi","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"104.21.88.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e463281b87bb81fa612d5819e954ead6","sha1":"0984be8e454e92200de246f08bed9090295952d7","sha256":"d61365ec55fd702a8733ec8efb3c1132084128f0c9e8063d15bcd039221c9bae","sha512":"c77c107331e1da003344c08331eba57b06d2471dc99686267aa0f7291faefbf159aceaf7c56df2e62dd94230a4f523306a132a4fc8f87a8dcf56926bd55a5476","ssdeep":"192:9quVZ0OLaEwL5U+F8QOQhkmLYIzRGEC+icNc6:9b/0OLa9866mLYApq6","tlshash":"eff150b4d2b71472519360d9af8b6264727c9107ba12da84bfae82c40fdad05c1f3bcd","size":8169,"data":"","first_seen":"2025-11-18T15:37:38.906756Z","last_seen":"2025-12-03T23:52:44.19896Z","times_seen":131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/native/native.min.js?v=5.1","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"104.21.88.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4048141d0220abc8d43480485d4a8c5e","sha1":"2a5f76d2300a5cbfcb7fb2614ddba567bd7737c3","sha256":"4fecaffe6ddd437921ad07fcf094aac397088ab64c85869fbec5f769583b7a06","sha512":"7e2709bc48d27c61cee1a6de75bbc4ddb35198598bb6e7a49aa1194fa4bb9020d5d25c4884769298fb0bdc16e01010716a5860a77771fdae261cad1ea97ad9cb","ssdeep":"","tlshash":"0361f9c4d2c8d923073532cf4953a675f67c8e06fdba4c50a60b4f8a8e15e469b17fa4","size":3262,"data":"","first_seen":"2025-11-07T11:37:41.733538Z","last_seen":"2025-12-18T00:26:58.218815Z","times_seen":314,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"26ac4cae61c355dc34ddaf4eead8043b","sha1":"070f1b1f55b9d897b219d5a209d0025fb46ea207","sha256":"e719c2546f1badeb45aab12f5f1fdcae349bd8896adf824138787a248946396d","sha512":"4eb13fe26367786170e27552215aad13d7aa65a9ea45d2eb3652a039db55a9e2639502162f977d367b3d719e7712f194c873afe1f47bfe590603533fe81935c0","ssdeep":"","tlshash":"c260000c003cf00c00c0000300000c30fc00c000000030003000000030303f00c00f00","size":12,"data":"","first_seen":"2025-12-02T00:20:49.50251Z","last_seen":"2025-12-02T00:20:49.50251Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pxl-eu.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0WUyRGRhpmNLcyEESOmBQ0xNXC0wGHGTI4WMRrCGFPDDAwxMmTEEPEwTJ0xGc3EwEGDhs4bLWDMYGmyzIwxLcTcyBFjpU6qN8R8NEPDBk-IZOxQnDHjBgwZD-HUEUMxhtIbPeHAWUgD68M5cCbqkAHjRo0aMxyKGNNmLkMYNALngNGTjBmKD8W4cbOwRo4ZOW3geNjGDUaGmPmm7fw5xg0ZNSqKqLNTx0A6dODM0fHixRgybkKOcTHmTRvbcgrSSWOnzJwXddwQRzgnDJsXbsIML_7ix5w0esr0mAEDBh7UMLjU6S7DRh06bb6MCVM4TJozbnq4d9EGTxbx5M2jV__GDZ0y_vUwRx1nnGHcf2R8cUcaZBhIB35n2QBHcHakUcYdX7TxxkE9oPFGcXJAWN4cMfTwRH90YHEFGUfcsMYTWoyxhBw5XFEFDkskgUYaTJChRQ5EyFHFHUUIAcUdeWSRhBFOOPeFE2gUQUcLbRABGxtSROHGHXEQIUQbR9gxRxRKZMEEEkdoEYcSbcDgRhF35KDTEmbAQQQNN8Rxxh1ZsNGGDVigQYMeMN0xRR51zCAEDELEMAcOX5xRRRJESFFFGl-R4VtGaIzBRhqytQDHG3K4wZsZZHy1nl5bzBBDF5E9pgMMLnQnmBx2GMbdQ3XUgalrYcyAJ0s1lNECYGbUcKwZZbWQQw4erSTGQRxlFYZmM3wFakZUubCYC0a50BANX8nxxbaudfttuON-VUcYGTXxhh5psMFGGC_UUCsIKFyRhhua3jEHCE5QAYJbte4Agr9u2ECDwng4rDCuoNFQawogHFHGGGu88QJfbsHgVgwgGJFGcGa8gccLMQhbq6pAuebEE1-Rql7MIsz8FRs4F-FEpmXY8UVwbFBUww034DCDZt09JAd8C6GGA1wiHCS0GHIshMNmVQed4YZR42CDamTI8cZCMzz0hkI60JCW2XjkUZnTX0yostw6CGb1F3TokREM5ZYh62uxzVZbp5-GOmqpp5Lxwld3ZOSWDOQ-hIbkMuAA-F24ZmQ2HdKR2kJyaUyJpwtkjBGDDDXP0TlDNiwt8g115fBQ6hkd9EXqq3-FHkU3OBw7DZozJgJ6rDMUfFfCFt-y7WANbRwcX0gHvPDNN62R0M4hRAfbrVYkLKwQiaFX1yLVwcZEafG8kPFjfAb_5TpsIcJX-D-U__3698____vDXxf6oICAAA%3D%3D\u0026s=cdcf2b54e7b1a5596ed765bde0c259cc16be241d9166a2de838d14db1af5798c1764634800\u0026w=t\u0026r=1\u0026d=1191\u0026priv=true","fqdn":"pxl-eu.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"94.130.167.182","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0959ba36d476b6dc1994ba3c678b07c4","sha1":"d30b94da72daa02766965206a85b7e0356375f5e","sha256":"897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a","sha512":"843f2144ba55d59ba3e62053dc018f4f6d51ae482c741cb4dc85f7af3375b77c75f66e2e73ff55ff7fe3b79314e7ba28a92fddec1ba17839ba33b34792bfce22","ssdeep":"","tlshash":"ea70008030b22e88e022000802a08000000288220a8032b0020800a80002202ca3c30a","size":24,"data":"","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-04-03T18:21:27.290641Z","times_seen":6722,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"de7507ad26c6c904109c87dd5dfac288","sha1":"952cae1ce6ce1e74b010b31b4357424c12a5960c","sha256":"09f81a5c463b570b389ce0b118a29bf489353d0ae7d47eefee9b9e7b703e0e02","sha512":"bf1e05b722c1990f20aba1abe8aa7bedeb660957e0adc012e757cfa9cd9b4d13b39d5f7d0688bc341f7d630b28c160b3e22dacc0ac0f9f37ed22230e6ffe68b1","ssdeep":"","tlshash":"fba002353403501e20265c517d266a0cf84e9475e198345707070470d0e3c4b5d004c7","size":59,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-03T19:37:19.147375Z","times_seen":11342,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"de7507ad26c6c904109c87dd5dfac288","sha1":"952cae1ce6ce1e74b010b31b4357424c12a5960c","sha256":"09f81a5c463b570b389ce0b118a29bf489353d0ae7d47eefee9b9e7b703e0e02","sha512":"bf1e05b722c1990f20aba1abe8aa7bedeb660957e0adc012e757cfa9cd9b4d13b39d5f7d0688bc341f7d630b28c160b3e22dacc0ac0f9f37ed22230e6ffe68b1","ssdeep":"","tlshash":"fba002353403501e20265c517d266a0cf84e9475e198345707070470d0e3c4b5d004c7","size":59,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-03T19:37:19.147375Z","times_seen":11342,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/bi.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f2df2696dec627783d1eb7170feea2d","sha1":"37e2e42f854e007185c942897b2a55e5d06a52eb","sha256":"45d1b15de00ad4e8b8551c7144dde989af93e1c9f3f91c514e3dc99545ef0ebd","sha512":"98e561b81de15c6d0f7269a0608f3c8a42ada04b6941bbe54933d75875b0fad3a708025a085f950a45bbb18ee8859d9918144b56f58f30969e36d93b0b786183","ssdeep":"192:p3osvtOztEOzGSC6npKyxtuyMYeUYK7r62Fii4zTd4/iiL/u:p3VOt/1pKEheUFrCDzTd4/iaW","tlshash":"45f1f9fa758231a4996794a1c5afe61fb6387a15360f8c50c07af5823c78dcb9037e6c","size":7702,"data":"","first_seen":"2025-11-12T10:23:36.745664Z","last_seen":"2026-02-09T11:49:45.468172Z","times_seen":349,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#231","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"73efee88167877492d83199e3131fced","sha1":"8bd0bf33ced16383a440a6edd9422acf5802bc9c","sha256":"6cc7995add4b625c63d8c0c5e4aea9f063123a11d26384a8ae44fec862b7004f","sha512":"7d3a92342e61e0a5f8f515da51a6f271aa8ca80c190ca1f1773d7c1655a7390e58a6ffb5ce66c61dc7ca0dff01ea41c56fb9505fe7c7f7a52cd6eeaec1c624cf","ssdeep":"","tlshash":"f451ea08d358a3530b06425da4e014ce572bff589665fdc176e0a017cafab9f8c1a4d7","size":2776,"data":"","first_seen":"2025-12-02T00:20:49.503432Z","last_seen":"2025-12-02T00:20:49.503432Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpushsdk.com/npc/sdk/wpu/npush.m.js","fqdn":"js.wpushsdk.com","domain":"wpushsdk.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"890b25a31b9950ceaa2d1ec6e57f594b","sha1":"9dc5cf1967ceebd48d3cdc108e0490a2492ac087","sha256":"6632492bb1e1ec1013641b25a6919f30a3761d50a5ff3e24f55513e0f31473d5","sha512":"399f3fd08013ac720bc49423fd7cbd4bfbf0b3ad1ad1e796dd8d4ec398d7816991d8e5b124bbb751644823ecfc37803b0731a58a9b4f4228b5a503ea086612e1","ssdeep":"3072:vt+5CPB7vcQ7qKEPsvQaEvpiBz3gJ7BWCqS+8Q43XG2nl2LqR9TkK:FSCdcQ716vbFBWM+6hf9TT","tlshash":"bc446bd1369478b00593c0afd0770201b2382609f529b56cbabddeea6586dce2377f79","size":255489,"data":"","first_seen":"2025-11-27T13:51:32.267119Z","last_seen":"2025-12-03T08:16:20.468572Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026keywords=HCLIPS-PORN+%3A+HD+XXX+CLIPS+VIDEO+TUBE%21\u0026preview_mode=hover\u0026s1=LTZJZIwxquwYSMCxJZeHJwSKTmYJe30DIrnjrAco-1wPa1glfV2aqrq6TaBL7ptNNn4Moj_KZZGYDoXDoobmDooQuTciRoNPBFiENsHGCPBJyO4_gUIDRUi","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"104.21.88.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e463281b87bb81fa612d5819e954ead6","sha1":"0984be8e454e92200de246f08bed9090295952d7","sha256":"d61365ec55fd702a8733ec8efb3c1132084128f0c9e8063d15bcd039221c9bae","sha512":"c77c107331e1da003344c08331eba57b06d2471dc99686267aa0f7291faefbf159aceaf7c56df2e62dd94230a4f523306a132a4fc8f87a8dcf56926bd55a5476","ssdeep":"192:9quVZ0OLaEwL5U+F8QOQhkmLYIzRGEC+icNc6:9b/0OLa9866mLYApq6","tlshash":"eff150b4d2b71472519360d9af8b6264727c9107ba12da84bfae82c40fdad05c1f3bcd","size":8169,"data":"","first_seen":"2025-11-18T15:37:38.906756Z","last_seen":"2025-12-03T23:52:44.19896Z","times_seen":131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpushsdk.com/skins/nmain.m.js","fqdn":"js.wpushsdk.com","domain":"wpushsdk.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"138b2e57355bf85765f554b6a8d9acae","sha1":"6949055743b68f6b3053de83f9d8d6bf16844e27","sha256":"7efeeb1bc4be58763b65984bec37ee25e926fd9da5e23e808b9f6a1266ce143a","sha512":"1669c3a9ce16f68de16db81fca65d5fe1fa43cc8c446830879d2699315471fa2d74dccc046395177eba94bdcbd06d70496097676b54c7ab62d54ee854fda7fbe","ssdeep":"12288:EiO6pTQUIfDchOHO68RPO2Si6EHlPUfQC+dKJTowRinDGQf7jbLExMLPWwhMs4h/:JONux6EHOJcFnagwxd9wa","tlshash":"56d45b313290113870bfc8c6aa66278d336cf24be9174f55f96faaa583dbd54f625380","size":599544,"data":"","first_seen":"2025-11-27T15:12:09.178344Z","last_seen":"2025-12-03T08:16:20.450771Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtbrenab.net/get/?go=1\u0026data=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","fqdn":"rtbrenab.net","domain":"rtbrenab.net","tld":"net"},"ip":{"addr":"116.202.60.226","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"320a976585050a85d1ad70382b18bfe0","sha1":"942298482b20537ef9a76fa3cd4dd7e8d41da828","sha256":"65a61a649f57726dd75aca60c93bf920d42797a5624fcd03b57b406f66dd5132","sha512":"b523381acfd75fed67a2446351fdcb6d08d82ceb5dfbac222d01069941a2f8eb49c09ba7b3071b8e55a86691ba9c2a5906524306711e9b0d433d3c5932232152","ssdeep":"192:nfnajLCXspfnajLCXsIfnajLCXsUnltjTN+8scnltjTN+8sZnltjTN+8sVy:S/CXt/CXg/CX9lTN+8DlTN+8glTN+8X","tlshash":"98620a548a668835dad5a1038060365452cdb743bcde6db5fa7cc332cbb87ba22ded0d","size":15891,"data":"","first_seen":"2025-12-02T00:20:49.504288Z","last_seen":"2025-12-02T00:20:49.504288Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/scripts/aqj.min.js","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c14a783dfeb3d238ccd3edd840d82ee","sha1":"ad886e472b3557f3dc7dfa2bc43468ab8d1cef5b","sha256":"80f04717f32ea0320c5e8618fbacedd1fee3a8775ad8292140a6113551d4b5b0","sha512":"fa3e021ca60a9adbe570c6565c7370727904c4396c23a4c519daf258d05fae3e17bfb7607a0ab6dfe2b7150a4ec1b6a95e6d49675291be5f6a4e5679ad78d858","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:DIh8GgP3hujzwbhd3XvSiDQ47GK/","tlshash":"6f9309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89500,"data":"","first_seen":"2023-03-07T01:06:20Z","last_seen":"2026-04-03T18:56:07.888804Z","times_seen":16441,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/n.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"65a151036a1be0f2dea657219852378d","sha1":"bbca04a868eafbf221012cf290d9ba0922156d5e","sha256":"14018b15aabec6f4250aa887e37a6c6d34667c88308bb6f1fd4dc7ff76ada63c","sha512":"738551912b7872ce07e989c87ff61e51acde85fb2395550c3d910dd24067492af272d1a7442030ce24692095dd77452ab8ad785456b1e5089d0a0780b70cbef1","ssdeep":"768:p3FYnfzZFWEZTCvv1cbnFW1Y1Ie2vI3Xdyc2avmP8vY7lfxOl4ub:pVYbioCHipWeD3Ec2ke8vY1c4c","tlshash":"e4333aed75957471216b01e6829f570b733e2516e80c4c40a0a7ead13abcdcad23bfad","size":52249,"data":"","first_seen":"2025-11-26T14:37:27.824506Z","last_seen":"2025-12-02T10:02:36.887972Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d92a5f5aaa5cb972e18a3886a9838952","sha1":"88a90b4969cdb377be11e515f53ed8af720ba149","sha256":"563ff9e65da46f4d8fdb1517f3c1dce9e63f9f16391d1b2f0bf7c15c33e6df68","sha512":"9e24fdc7c05d6f7cb273cc31dbf326186134c4ad5950a55ff09354c0fe7ad6e41e8b1183eb483f9f0de6e7d5ff2aa73cf82d3c3fbc572317dd70005f1c5917d9","ssdeep":"3072:5B3fUg+28VOk2DG2gjKzElwnRlqI1fsBHisGEolY4o/CXMXpo:D7+28VOk2621ElwnRjfs4s7hpo","tlshash":"00045c993792307441d3a11da9ff53093371506ab80f4884bb4dd8a427adeea51a3ffd","size":185607,"data":"","first_seen":"2025-11-25T14:43:10.663757Z","last_seen":"2025-12-02T09:18:34.719134Z","times_seen":264,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#230","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b740d1a7524a18e54a80454a2125859","sha1":"410fddb35b3bcfad2faa709d4155860ab436530c","sha256":"4339a4d121d8cd5f62fda64f1cc6284d9202fef41fa91f6b1f59b649c03e6a68","sha512":"6864da9acc08ba6359cc44161a482c7aa240c69c57e929e2db4b877101de87d74b5f0bb0f19d189d04889af9b8b1032792558b16a755fed72cae60dc50e27e39","ssdeep":"","tlshash":"f641d805364765332aef086b24f287cd36206d624445e54110e1f927c6b9fdbf93bac1","size":2317,"data":"","first_seen":"2025-12-02T00:20:49.505203Z","last_seen":"2025-12-02T00:20:49.505203Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#241","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"25c37d43745e1bb0c4983c87ac8f428a","sha1":"e0a6ddfc2dfc7c77b3d27921b344e1c1950715e1","sha256":"53c07a142d50ac35477f49df69ce186ef2d8568782aa6316f7c3ca5aec7a29ec","sha512":"b85e41419db7578eb5e29a95df9a1d2ae43a0da2b954902c531a4d584cd5cdd1a7f87ad8ddcf8d95b3a9f088b0216f8f0d45b229939c9598f3383cf646d7dea9","ssdeep":"","tlshash":"1331567837865c7346c9f159fb1e9715b9f949772149e0124408dcdc3ca4e164747af4","size":1574,"data":"","first_seen":"2025-07-28T21:31:50.383085Z","last_seen":"2026-04-03T18:21:27.316788Z","times_seen":953,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#244","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"25c37d43745e1bb0c4983c87ac8f428a","sha1":"e0a6ddfc2dfc7c77b3d27921b344e1c1950715e1","sha256":"53c07a142d50ac35477f49df69ce186ef2d8568782aa6316f7c3ca5aec7a29ec","sha512":"b85e41419db7578eb5e29a95df9a1d2ae43a0da2b954902c531a4d584cd5cdd1a7f87ad8ddcf8d95b3a9f088b0216f8f0d45b229939c9598f3383cf646d7dea9","ssdeep":"","tlshash":"1331567837865c7346c9f159fb1e9715b9f949772149e0124408dcdc3ca4e164747af4","size":1574,"data":"","first_seen":"2025-07-28T21:31:50.383085Z","last_seen":"2026-04-03T18:21:27.316788Z","times_seen":953,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"f4eab0dd386b5f2cb483400a019996ba","sha1":"b113ebb609f027f388396fd03a48a59d39fd8db1","sha256":"f502a200218dd04220fb3a1c981bb34f8a2c8a4be218885840a4ae2810a464db","sha512":"65dfad89bdfdeae106ad2cd7a02f2239e9764737686d3d4cba80767935cf00f72ce9af5f97ef1c8afa8158c1587c67f87c39bd40874c4fba4e9243d59fa093e9","ssdeep":"","tlshash":"6560000f03c0c00030300c0033000c33030300c0000cc0330c0000c033000000000000","size":12,"data":"","first_seen":"2025-12-02T00:20:49.506021Z","last_seen":"2025-12-02T00:20:49.506021Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pxl-eu.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0WUqTGGDI0YZWy0iBEmDI4WNGrcINMiBxmQLcqQMWNmJo0ZN2bEuCHiYZg6YzLSsCEmRo4yMUSOgSFmBsoyOcy0CGNGhowWZHB0tGGmBsmhOHpCJGOH4gycMGQ8hFNHDMUYMHD6hANnIY0cOx_OgTNRhwwYN2rUmOFQxJg2dRnCuFkjBwyfMyk-FOPGzcLGM6zawPGwjRuMDDP_XesZ9E4ZXh_WiZERDR06cOboePGio5sWZsa4GPOmTW05BemksVNmzos6boYjnBOGzQs3YYQTf_FjTho9ZXrMgAEDD2oYXOpwl2GjDp02X8aEQRwmzRk3Pdq7aIMnS_jx5c-nf-OGTpn-PcxRxxlnFOcfGV_ckQYZBdJxX1o2wAGcHWmUcccXbbxxUA9ovEGcHA-SN0cMPegRxBpzzHCEHkZ8oYcWejRBxBFChGFEHkHcQcMaQ-hBRhx2sKGHHFnUEccUbqBBgxt3CIEGFkzg0IYZOeBwQxRiOKFEHDg4cZgZR2RhBR0tWBFEFWnkIeUUVGRBBh4woAFjDHMIQUQcaBzxhRtV0KGHHUsw2UYLUyShhQ1R4KEnFXnQscYXZ1SRBBFSoCkWGb21NgYbacTWAhxvyOHGbjWJpV5fW-jUxWRmLASDC9wVJocdiW2nWh1pZBTGDDTcgENXZbQwWFfCmoFTSznQIBUOYhyUQxg3iBHGZjOI1WlGeLngmAs0yOBCQzSIJccX1-ogQrbbdvttDeGqFkZGTbyhRxpssBHGCzXACgIKV6ThBqZ3zAGCE1SAABesO4DQrxs20JAwHg0nPGtoNMCaAghHlDHGGm-88BdcMMAVAwhGpAGcGW_g8UIMvMJqalDmOvGEWKGmB7MIMovFxs1FOHFpGXZ8ARwbFKnk6wybcfeQHO8thJqVDx0UtBhyLIQDZyJIjaGGTuNgQ0VZy_HGQjM89IZCOtCwlth45HHZ0l9ImLLbOhSmtZ8ZwSBuGa2a6xpsstGGxqadzvFpqKOOUdMLYt2REVwytDvQ4zLgoLdes2YkNh3RhdoCcmmQGUMMLpAxRgwy0DxH5jrMgEMNm_11Awx233zQF6ajLtZ5FN3QsA28Wv6YCOelzpDvQwXPXVJgGyR0cXB8EV3vvys_PNDSs4EQHWinWhGvq0IkRl9Z8_0TGxOttbOrD40B2vBjoLHQFiKIZf9D99eP__7695-__V3ogwICAg%3D%3D\u0026s=c72601e20373885a6494502142330670c76b37cfa92f25e97d862c4fb939ed2d1764634800\u0026w=t\u0026r=1\u0026d=1100\u0026priv=true","fqdn":"pxl-eu.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"94.130.167.182","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0959ba36d476b6dc1994ba3c678b07c4","sha1":"d30b94da72daa02766965206a85b7e0356375f5e","sha256":"897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a","sha512":"843f2144ba55d59ba3e62053dc018f4f6d51ae482c741cb4dc85f7af3375b77c75f66e2e73ff55ff7fe3b79314e7ba28a92fddec1ba17839ba33b34792bfce22","ssdeep":"","tlshash":"ea70008030b22e88e022000802a08000000288220a8032b0020800a80002202ca3c30a","size":24,"data":"","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-04-03T18:21:27.290641Z","times_seen":6722,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d92a5f5aaa5cb972e18a3886a9838952","sha1":"88a90b4969cdb377be11e515f53ed8af720ba149","sha256":"563ff9e65da46f4d8fdb1517f3c1dce9e63f9f16391d1b2f0bf7c15c33e6df68","sha512":"9e24fdc7c05d6f7cb273cc31dbf326186134c4ad5950a55ff09354c0fe7ad6e41e8b1183eb483f9f0de6e7d5ff2aa73cf82d3c3fbc572317dd70005f1c5917d9","ssdeep":"3072:5B3fUg+28VOk2DG2gjKzElwnRlqI1fsBHisGEolY4o/CXMXpo:D7+28VOk2621ElwnRjfs4s7hpo","tlshash":"00045c993792307441d3a11da9ff53093371506ab80f4884bb4dd8a427adeea51a3ffd","size":185607,"data":"","first_seen":"2025-11-25T14:43:10.663757Z","last_seen":"2025-12-02T09:18:34.719134Z","times_seen":264,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/bi.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f2df2696dec627783d1eb7170feea2d","sha1":"37e2e42f854e007185c942897b2a55e5d06a52eb","sha256":"45d1b15de00ad4e8b8551c7144dde989af93e1c9f3f91c514e3dc99545ef0ebd","sha512":"98e561b81de15c6d0f7269a0608f3c8a42ada04b6941bbe54933d75875b0fad3a708025a085f950a45bbb18ee8859d9918144b56f58f30969e36d93b0b786183","ssdeep":"192:p3osvtOztEOzGSC6npKyxtuyMYeUYK7r62Fii4zTd4/iiL/u:p3VOt/1pKEheUFrCDzTd4/iaW","tlshash":"45f1f9fa758231a4996794a1c5afe61fb6387a15360f8c50c07af5823c78dcb9037e6c","size":7702,"data":"","first_seen":"2025-11-12T10:23:36.745664Z","last_seen":"2026-02-09T11:49:45.468172Z","times_seen":349,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#242","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6aae8e6484176687119f891d601f6dca","sha1":"3d91cc345047848d8cf0484579a2917bbc1b8536","sha256":"023a91f9568580f3de847d108a26d7adace637686b150286614b583990d6ab55","sha512":"4346a3bd6344381c8525cd75cf82e9e3528ac770fe2760a26e5ff9fbfe00ada4a17b40c59d9d64eace0fb1d807633b846eb85b088359b31cd9f66b6c4529be16","ssdeep":"","tlshash":"1541e957340728352aef1c6b64d28784360044b44c46e10981a9fe2bd719ee8fb2bbc4","size":2389,"data":"","first_seen":"2025-12-02T00:20:49.506876Z","last_seen":"2025-12-02T00:20:49.506876Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#246","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"88b8e056c0c435268a73b415b49a75f4","sha1":"b9062f4b43e8e4f6b9231fb1a11fcbab33150397","sha256":"064bc8c5ea2fc1b7bf9f1348c197c6475cb11606ace49970e640f95a0058815d","sha512":"7c4a49caae17d3a3d8e6254b26e8267190859e72acaa9e5fc689289d55713cea5e06ae0e786ea85db759829fd2a8198e08bbf65ff3b9947177eca34731ae83ae","ssdeep":"","tlshash":"b5510b854ea56cbc20a64c6ad4c783f8e50aad7c0b71286fcfd16542d197fb885f204b","size":2768,"data":"","first_seen":"2025-12-02T00:20:49.507795Z","last_seen":"2025-12-02T00:20:49.507795Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/native/native.min.js?v=5.1","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"104.21.88.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4048141d0220abc8d43480485d4a8c5e","sha1":"2a5f76d2300a5cbfcb7fb2614ddba567bd7737c3","sha256":"4fecaffe6ddd437921ad07fcf094aac397088ab64c85869fbec5f769583b7a06","sha512":"7e2709bc48d27c61cee1a6de75bbc4ddb35198598bb6e7a49aa1194fa4bb9020d5d25c4884769298fb0bdc16e01010716a5860a77771fdae261cad1ea97ad9cb","ssdeep":"","tlshash":"0361f9c4d2c8d923073532cf4953a675f67c8e06fdba4c50a60b4f8a8e15e469b17fa4","size":3262,"data":"","first_seen":"2025-11-07T11:37:41.733538Z","last_seen":"2025-12-18T00:26:58.218815Z","times_seen":314,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"3fa814c0534255f7b54b0a1ba87a549a","sha1":"a6733c21a3471248a115b49221af3f20975a74f3","sha256":"3fb7b69a91feac106ee140151b4d4466219c9d5eb7b99a8e29fb84a8b39e07be","sha512":"f5ff97c9751f135cab9adff8fdd43b91ff9123b23ca2ee39bd387706c2ca295d910fd61e55474ca4fb5154ec031a1315f1ab3405673066e69719ed98f9198f99","ssdeep":"","tlshash":"5f6000000fc0c0ccc00c3f0330000030300f03303c30c0000000030c0000000c00c000","size":12,"data":"","first_seen":"2025-12-02T00:20:49.508677Z","last_seen":"2025-12-02T00:20:49.508677Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"de7507ad26c6c904109c87dd5dfac288","sha1":"952cae1ce6ce1e74b010b31b4357424c12a5960c","sha256":"09f81a5c463b570b389ce0b118a29bf489353d0ae7d47eefee9b9e7b703e0e02","sha512":"bf1e05b722c1990f20aba1abe8aa7bedeb660957e0adc012e757cfa9cd9b4d13b39d5f7d0688bc341f7d630b28c160b3e22dacc0ac0f9f37ed22230e6ffe68b1","ssdeep":"","tlshash":"fba002353403501e20265c517d266a0cf84e9475e198345707070470d0e3c4b5d004c7","size":59,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-03T19:37:19.147375Z","times_seen":11342,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d92a5f5aaa5cb972e18a3886a9838952","sha1":"88a90b4969cdb377be11e515f53ed8af720ba149","sha256":"563ff9e65da46f4d8fdb1517f3c1dce9e63f9f16391d1b2f0bf7c15c33e6df68","sha512":"9e24fdc7c05d6f7cb273cc31dbf326186134c4ad5950a55ff09354c0fe7ad6e41e8b1183eb483f9f0de6e7d5ff2aa73cf82d3c3fbc572317dd70005f1c5917d9","ssdeep":"3072:5B3fUg+28VOk2DG2gjKzElwnRlqI1fsBHisGEolY4o/CXMXpo:D7+28VOk2621ElwnRjfs4s7hpo","tlshash":"00045c993792307441d3a11da9ff53093371506ab80f4884bb4dd8a427adeea51a3ffd","size":185607,"data":"","first_seen":"2025-11-25T14:43:10.663757Z","last_seen":"2025-12-02T09:18:34.719134Z","times_seen":264,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.cabnnr.com/banner-admanager/build.m.js","fqdn":"js.cabnnr.com","domain":"cabnnr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"91d6dc1d186222b2187a485ff1b5eb71","sha1":"08da08e51bf80d074d5e7a2652f2bab04747bad1","sha256":"0952562045d829b7788a430dad577ca03bfac5dca71a069fffbfd3930062252c","sha512":"e62a98499335b7552c2818ef33744a68a99f44f57f3c8a8b527a976f804fcde0fd5c94a254cd8b2ecbe83502ece17c92a3a333fc6918dc0d8ddb63ef1b6bc626","ssdeep":"1536:T16pn6bOBjpIDxrTaNEsa1DFYx6mgIE9XpMI46BhMSH:s96dTaNtIK4m8546XH","tlshash":"0e835c843290b4b541e640af943f4306f3392d06b80ba458f66dedd67b79e89a173f39","size":86020,"data":"","first_seen":"2025-11-28T11:54:09.308109Z","last_seen":"2025-12-02T11:51:57.049665Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/native/native.min.js?v=5.1","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"104.21.88.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4048141d0220abc8d43480485d4a8c5e","sha1":"2a5f76d2300a5cbfcb7fb2614ddba567bd7737c3","sha256":"4fecaffe6ddd437921ad07fcf094aac397088ab64c85869fbec5f769583b7a06","sha512":"7e2709bc48d27c61cee1a6de75bbc4ddb35198598bb6e7a49aa1194fa4bb9020d5d25c4884769298fb0bdc16e01010716a5860a77771fdae261cad1ea97ad9cb","ssdeep":"","tlshash":"0361f9c4d2c8d923073532cf4953a675f67c8e06fdba4c50a60b4f8a8e15e469b17fa4","size":3262,"data":"","first_seen":"2025-11-07T11:37:41.733538Z","last_seen":"2025-12-18T00:26:58.218815Z","times_seen":314,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=zAks3GzF_zZzMDGBaFyAw4kCzdqvlzrYuqSnh4nwBhXL8mf987QbNJq8NcmfGYVt-VAUiy8mSTYdx0hZz1sBDqhG_nUtzvKnwm-SIZ6QxG_Tytk_gUIDRUi","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"104.21.88.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e463281b87bb81fa612d5819e954ead6","sha1":"0984be8e454e92200de246f08bed9090295952d7","sha256":"d61365ec55fd702a8733ec8efb3c1132084128f0c9e8063d15bcd039221c9bae","sha512":"c77c107331e1da003344c08331eba57b06d2471dc99686267aa0f7291faefbf159aceaf7c56df2e62dd94230a4f523306a132a4fc8f87a8dcf56926bd55a5476","ssdeep":"192:9quVZ0OLaEwL5U+F8QOQhkmLYIzRGEC+icNc6:9b/0OLa9866mLYApq6","tlshash":"eff150b4d2b71472519360d9af8b6264727c9107ba12da84bfae82c40fdad05c1f3bcd","size":8169,"data":"","first_seen":"2025-11-18T15:37:38.906756Z","last_seen":"2025-12-03T23:52:44.19896Z","times_seen":131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab23ddc5958c1676a0a09004142c0275","sha1":"e823f53714e2ac09ed7451ce8517bbb5babacd23","sha256":"d128fb06a34c557f59618431262beb18a72257a4d680fd36f4b47bee82653d14","sha512":"3f616f81a2ae0e0264b0444702a456adcc4740a32b9a379311316ee8a9d99cd23054ca940a3694438534afdb10b75495d3524d23d359ff6c643086944a1be1af","ssdeep":"","tlshash":"96e0a797057091661213332fc92f4301227048479978fd35344d01840f0c00d12ff6d5","size":308,"data":"","first_seen":"2023-10-16T17:48:40Z","last_seen":"2026-03-27T19:42:57.195296Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/bi.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f2df2696dec627783d1eb7170feea2d","sha1":"37e2e42f854e007185c942897b2a55e5d06a52eb","sha256":"45d1b15de00ad4e8b8551c7144dde989af93e1c9f3f91c514e3dc99545ef0ebd","sha512":"98e561b81de15c6d0f7269a0608f3c8a42ada04b6941bbe54933d75875b0fad3a708025a085f950a45bbb18ee8859d9918144b56f58f30969e36d93b0b786183","ssdeep":"192:p3osvtOztEOzGSC6npKyxtuyMYeUYK7r62Fii4zTd4/iiL/u:p3VOt/1pKEheUFrCDzTd4/iaW","tlshash":"45f1f9fa758231a4996794a1c5afe61fb6387a15360f8c50c07af5823c78dcb9037e6c","size":7702,"data":"","first_seen":"2025-11-12T10:23:36.745664Z","last_seen":"2026-02-09T11:49:45.468172Z","times_seen":349,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/129_indulges-creampie.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/129_indulges-creampie.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18554\r\nlast-modified: Fri, 29 Aug 2025 06:43:22 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14c0a-487a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 41085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JF3wCyyIdm1Nhnq%2FbGgaPx2SxFLwihbDS0lFFRGA7s45GFF4Rl85vs%2BKLDFZkge5dgn9ZaYHUgmQS8YorCLkiQ6mREesaadEwFmgk2Jrew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e18ec932fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18554,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"3a4e1aece850e3200975980eabca83e9","sha1":"6bda336276890696d0f125a62c1867c4a5a98c70","sha256":"92b9fa8e33b4bd95373be290451858b7f6a8460ec6c8c78541b6302f34ac7ab5","sha512":"ef11ef39e3214a94cfdce263c69b80583f28b69eada116f3a7a4e9a9deb0111473ca4c32a9d4565dad198cae87ee31f6deb2d7ed2485999fb7182a8c80e339a8","ssdeep":"384:laU6sJc6MnHOvUvhT138TWYaOXtokNMfrZQQXSNloI+zs/hh4opq:IsJvwxhT13yW7OXtotFyaHgh4oI","tlshash":"d482e0d6f2acc0fd51acaf761dce8160d3ade2a93570c53ced02eea4112c1816a69e94","first_seen":"2025-10-19T02:15:18.859405Z","last_seen":"2026-03-27T19:42:57.095314Z","times_seen":24,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":167,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/123.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/123.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12284\r\nlast-modified: Fri, 29 Aug 2025 06:43:16 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14c04-2ffc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lp155EGWyCT2ZsugM1OKu8mw8B8T%2FVIIUwAG%2Bp00F1BnnLO2RzS%2BKnjuz%2BrlfopIewz4IaHZjqv5L6rKYVxBv5bvdj7E719vXe2ELtsduw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e19ecf32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12284,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 640x639, segment length 16, baseline, precision 8, 400x300, components 3","md5":"3933879d7c7b64954c4d03504d38b55b","sha1":"d6d13f319b73d7b16d350ab4c1ca23f4cc186c47","sha256":"c76e20d7bfbb30814ce2133cac4384eaa4386949077bcee881e61131b6b426e0","sha512":"daf4f3161c6e1e754b18338c9e483511bd52ce3289597d73a9c0f9a009fbaaa1341d23c9fa75642f995f13c394e7bb1b162743d6c6abceac54fdadf39f3427bb","ssdeep":"192:0bLAp9EBTwirLIuwzoIvZJ4jEwMax21KO0L09697zzH8It7zn1gb3L1Hi43yI3:8+ninrwlT+x5O0LG6NzzHX5718b1Hi4D","tlshash":"1142cf554a8f1028d33047a21c6ee2dfa606b90538168dde297fdcdc55db2f94caa273","first_seen":"2025-10-05T06:06:00.039337Z","last_seen":"2026-03-27T19:42:57.021622Z","times_seen":26,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/122_cosplay-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/122_cosplay-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20844\r\nlast-modified: Fri, 29 Aug 2025 06:43:15 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14c03-516c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 41085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4fk%2BPWUvL2VEPhIYpFyRrqByo0pSnfZg%2B2oLwE8qspCbtKhjos5s8xe5YjAUbFoRT8G8mvRHgx0OhBHs42GFp280NJxVJ%2FT5hMb5dDZGsQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e19ed032fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20844,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"ad12fbe0ec75e9e9fd6a7acdbd7423cf","sha1":"1c2cb4706ab7638b782b723fb55b62a909de0620","sha256":"78a96cd9c703161fb42659830252618d609303d1354fea805ce85614d3fd4f78","sha512":"d9f7d01b99ee79ff00b64914c51a199471d204b859c739f7c4f493a382cc691beb9999cc99bd1475dcee6ad949bff06d496d61baee177900ff6a3065bfeac0e3","ssdeep":"384:WDVh2HwsiH+Nw5CUqlnTmBUmBgqIf1xV+KsfDgNGRgdcDUvTDlgpS22/NjnqBe:lHiG/9CBUMtI1j+FqHdplgXOJEe","tlshash":"7d92e0c134b08646ded4b1b4577356932e9a7d0c238ed7d0ae9258cf3025bb9b858836","first_seen":"2025-10-05T06:06:00.166282Z","last_seen":"2026-03-27T19:42:57.053766Z","times_seen":26,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":189,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/030_stepmom-apologizes.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/030_stepmom-apologizes.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25934\r\nlast-modified: Fri, 29 Aug 2025 06:41:02 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b7e-654e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wC%2F8%2BETmwAkUSpL5EqCxxOnKHodfUx1Bzmnpih9c0K%2FRIPqNW2oByaQbN75HF7ntZ0fRN6U7H0wxbCUm9%2Bd2pM%2FnuSLe8IOtmeY8SHIXdw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e2bf3832fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25934,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"15c6763773b49b935210c0e374248e51","sha1":"78ca37b154393609bcdb7766256f77463aadefd0","sha256":"776c5907e9cde8f1862f7f2986fc34318cfca9a61ea34b601e28b6baf0b2f5f7","sha512":"35cd90548179601be66f429f3281665b5e29e587697f970c85b8161e747ef77bce6ac159e24e471c1d2e8f9d7d1ea85bec0b1a174dfb91a7831a71d6a6928885","ssdeep":"384:cC5+jt2QQEKEUngippGCpsIXap+2dY3+oA4TIS5waLPHv3LrarXp:cC4jtEE6P7GCOkak22+otTIiwajP8Z","tlshash":"88c2d090574d63f2268fd6374e61b81517ead04b61e56f4cba608fa0093e0f3e79ac29","first_seen":"2025-10-31T12:17:27.001802Z","last_seen":"2026-03-27T19:42:57.060177Z","times_seen":17,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":128,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ntvpforever.com/keywords","fqdn":"ntvpforever.com","domain":"ntvpforever.com","tld":"com"},"ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:01.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 02:00:40 GMT","end":"Sat, 24 Jan 2026 02:00:39 GMT"},"fingerprint":{"sha1":"2B:72:A9:3F:14:00:92:B9:05:AC:BC:3B:22:CB:D9:87:80:23:C8:3D","sha256":"60:5B:BA:7E:5F:7A:B1:E0:55:4D:4C:29:EA:C7:21:68:37:AF:03:5B:A7:3D:15:98:F1:65:96:AB:4A:3E:17:3B"}}},"request":{"raw":"POST /keywords HTTP/1.1\r\nHost: ntvpforever.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 96\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":96,"data":"{\"ad_tags\":\"HCLIPS-PORN%2CHD%2CXXX%2CCLIPS%2CVIDEO%2CTUBE!\",\"page\":\"https%3A//hclips-porn.cfd/\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Tue, 02 Dec 2025 00:20:01 GMT\r\ncontent-type: application/json\r\ncontent-length: 27\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1341fc8c623c978d6890cef9af52fd7f","sha1":"d3e8f82270fce2fc541127bed30e155bd42ef731","sha256":"7147a5c81dc941513f607ae0f438b518ba07a8517efc9d5b8afe5f2d8312635c","sha512":"8acec287827731162abca523d86b49137d70ebea027be47f18f9e1924a2e28efc5b4191061a5498c512d1ca7dbacd0142b2ba7822cd5c91c4ce396285233ff2a","ssdeep":"","tlshash":"ff80000830ca0c038c88b00032008a202008a2c2a002bceca0a2280083002802208c0c","first_seen":"2025-08-20T10:26:40.019594Z","last_seen":"2026-03-27T07:32:18.993381Z","times_seen":133,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/438437/105caeacb1e6b7b19e021f2d5a276facda1e7676.mp4","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:01.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/438437/105caeacb1e6b7b19e021f2d5a276facda1e7676.mp4 HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Tue, 02 Dec 2025 00:20:01 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 23117\r\nlast-modified: Mon, 11 Mar 2024 16:08:46 GMT\r\netag: \"65ef2c8e-5a4d\"\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version\r\nexpires: Wed, 12 Mar 2025 15:40:36 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-77-nzt: EwwBX63NDQH36YRcAQwBuUwKAQH37eEGAAwBJRPCMQG3quFtAQ\r\nx-77-nzt-ray: 2a494a15ef3a6de8d6302e69028c6626\r\nx-77-cache: HIT\r\nx-77-age: 22840553\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-23116/23117\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":23117,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"207ab512e415ef7173e1b58b5a071a76","sha1":"105caeacb1e6b7b19e021f2d5a276facda1e7676","sha256":"f351abb62f5dd43218f9c948239d6facb9d5c442ca7927c4c125bf773c968154","sha512":"d818f8d0f255c51f055bb9635d3166187a2fc52b1b0597181defbd5333b5e1ef11da6b1676bf114f4bac5b0f6765de964060c7481c4e311975c9ab2d10b05310","ssdeep":"384:of+xmnS0nRNznPPEnXbM9SmoWAB6U1akzPnNUd/om8qvR/TFMTtEYVQm7l057:WfRlEnXoXjJU5zPnOdw0pcG","tlshash":"70a2e1af53bdc175f45a44b6e6d6870fe6a7f516b384b3c28b8118287c43810f952a0f","first_seen":"2024-11-30T23:31:44.135863Z","last_seen":"2026-04-02T11:11:20.643858Z","times_seen":124,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/089_leads.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/089_leads.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19977\r\nlast-modified: Fri, 29 Aug 2025 06:42:30 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bd6-4e09\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W16MI3rF7WY%2Fb%2BLv%2FdVAHHGEeImQvvg0eVJM8YgNhpn00ObNOpd%2B7dzDFWXhwzgr1VXq6GEFfeHSXHLb6k42Az30KQEnbdZe5HCi3imPtA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1cefa32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19977,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"241f91f24dcfc88d49d8f5a2d0130278","sha1":"c1ee3322725fc466a697e11a7b46bad5890fd86f","sha256":"3b56e4f562639660bf4d4c8a8a47eafb6483aa18a96695e441f85203651f9d36","sha512":"099aab75d128bdae401855b6ecad98e30a284be356d8950d9c84ad862639257dd6c7ddb0db795c1274ecb983fd83e18012827b6f4224c579d350b9134b2c52a0","ssdeep":"384:WS62evvaRcV14Vi4xatXwF5h3O9bDo2DK2xyE5ambJ13Krt0noG4+:WSMlV1GiS8AFiREBSamdtKrt0j4+","tlshash":"a292c0c5c12e12f4ea5925f421e31782bb5af5966a739937bc4342cc0cc58365ee8c49","first_seen":"2025-10-19T02:15:18.077126Z","last_seen":"2026-03-27T19:42:57.075728Z","times_seen":24,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/058_over-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/058_over-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23125\r\nlast-modified: Fri, 29 Aug 2025 06:41:36 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14ba0-5a55\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xNtQH44hjqkGPPQJoIVEYjnNzwL8VIihn8Tw5kaEMQ%2B1Vg7dQ9uvvESLPyfXXSdzmeIe6O6yDAZDfjVfcKNaKRjF4%2BsPYVa9Ku39O2QAUQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e22f1c32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23125,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"da8534cf4507104db6656d42ca17f5f3","sha1":"51bb2d8e7b363f15a1a241a2d646b4fb64ae665d","sha256":"cb87af4bc8afff7be96c06feba0b5395fcb7b9c199dbae61013944dbd2e2f1ea","sha512":"409420d07f8019fc96478c8c44a0884aec46b97e8403fcb685bf819f3ea4f30d5b4985dfeeaef6cb0c16c3674c92cc8c1a81aa2e28ed16dba54ee8ee01724b85","ssdeep":"384:yqviiwD9uV4wCh9anljGA0djGe2dl4B0s1AiDUQsCeBL0TIvzv/2sJNu076A9ZVM:yq6iwDwVWPala3694fUQWBVbV7lbVKss","tlshash":"f7a2e1fc873223fbbcbbc42c602462dd770e55ca3c2a294949d5a3ef6589981fc8c540","first_seen":"2025-10-31T12:17:26.860584Z","last_seen":"2026-03-27T19:42:56.79117Z","times_seen":21,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":226,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/052_2-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/052_2-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26870\r\nlast-modified: Fri, 29 Aug 2025 06:41:29 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b99-68f6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O2bEdd4z%2BA7XFhZYgK7oohDHiWxiWMVCj%2F%2F6nQYc1NF2liYJ%2FyFYl8Mfvf42HE%2BinUfwRjxiBlpAlBNr8aT4B0gMZq1Bau6BWeeAnfYibw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e24f2132fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26870,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"eef857136c116d9dfc073a4c5176769f","sha1":"2752c27fcc781129132ef64a72ab55de4cdbbc57","sha256":"ec3605ad6639da67169af0865c3f1019ef20e748a2790b6b6abedd2eb652353f","sha512":"53e8bb5ced9c9439616544c1e1b18048104d46da826041f5c24cfa42b59548a484d73571c364628ded82bc5d77b28a79b16e77ed51de4985cb2228af27303286","ssdeep":"768:d/L2B+qOgW5xlrw9Hv3Vv0SnRGKUZAZOkQs875:dD6+rgN9P3+iEse5","tlshash":"5dc2e19518938469366802e598730ec7ae73746d7bfd07720bc917e5b6a3b3e9ea1800","first_seen":"2025-10-31T12:17:27.105162Z","last_seen":"2026-03-27T19:42:57.015753Z","times_seen":21,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ntvpforever.com/keywords","fqdn":"ntvpforever.com","domain":"ntvpforever.com","tld":"com"},"ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:01.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 02:00:40 GMT","end":"Sat, 24 Jan 2026 02:00:39 GMT"},"fingerprint":{"sha1":"2B:72:A9:3F:14:00:92:B9:05:AC:BC:3B:22:CB:D9:87:80:23:C8:3D","sha256":"60:5B:BA:7E:5F:7A:B1:E0:55:4D:4C:29:EA:C7:21:68:37:AF:03:5B:A7:3D:15:98:F1:65:96:AB:4A:3E:17:3B"}}},"request":{"raw":"OPTIONS /keywords HTTP/1.1\r\nHost: ntvpforever.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://hclips-porn.cfd/\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.24.0\r\ndate: Tue, 02 Dec 2025 00:20:01 GMT\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fh-wgt.com/api/request/v1/affiliate_1?exp={%222008%22:{%22g%22:%22b%22,%22v%22:2}}\u0026language=en\u0026orientation=straight\u0026quantity=4\u0026target=video\u0026utmCampaign=ai.mxY","fqdn":"fh-wgt.com","domain":"fh-wgt.com","tld":"com"},"ip":{"addr":"104.21.63.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=OontXWdG7kOZcKr9WU8KIhiLdZ9DrUwEBPwyYIFNal_NhEt-mDttlRQnwqDBmGvsQJYLHGZqJm0nEw921KfpD47qgwYlm6Xh4z-1wSyu3B0B1s8_gUIDRUi","date":"2025-12-02T00:20:02.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fh-wgt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Oct 2025 07:34:46 GMT","end":"Mon, 12 Jan 2026 08:31:45 GMT"},"fingerprint":{"sha1":"1F:39:26:5D:89:FD:89:58:E9:FE:18:68:D6:A0:DC:A5:5E:BE:2B:21","sha256":"FA:B4:8E:E6:FC:1A:A4:6C:F7:C4:C9:E7:32:A9:4C:73:00:BB:31:5E:5A:68:EF:BC:5A:34:37:34:79:B4:0E:B3"}}},"request":{"raw":"GET /api/request/v1/affiliate_1?exp={%222008%22:{%22g%22:%22b%22,%22v%22:2}}\u0026language=en\u0026orientation=straight\u0026quantity=4\u0026target=video\u0026utmCampaign=ai.mxY HTTP/1.1\r\nHost: fh-wgt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cdn-fc.com/\r\nOrigin: https://cdn-fc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:02 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: https://cdn-fc.com\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-headers: Cache-Control,Content-Language,Content-Type,Expires,Last-Modified,Pragma,Access-Control-Allow-Credentials,Access-Control-Allow-Origin,X-Referrer,X-URL,x-stats-uid,x-guid\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 600\r\nx-robots-tag: googlebot:noindex, indexifembedded\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B5fKyqYNYmZ8ZMAc3gRknQEDCk%2F9%2BTTh9v3hpY%2BTDw6bWf0JWhcvNXLjdd1dhBYWhXPjPoCQNMiVIJM%2B6AOmCLpKFXDTl65ewfQ%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9a76a7fa48cc5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3996,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"efe502143eab337a7228febc4ffaaaa7","sha1":"e27cac3b72cc8f98ec7ca08eb2de6d4fd6542b61","sha256":"0241696237921f692f312c9811b19dfd6fb4b304aef625209c1739cf00155d63","sha512":"b13d72cd0810997acd5700ce14cbbb64455c3004da32984590a43aada3c4ae317b456562a8bf61a78b37fa71fbef0ad5eca9f2a546a526f994b56871050f0d45","ssdeep":"","tlshash":"448153f70b9e0b5b0bd827c6884bf95da1e52c0a48d0ef83fc51da8d013c8ab553e596","first_seen":"2025-12-02T00:20:49.381149Z","last_seen":"2025-12-02T00:20:49.381149Z","times_seen":1,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":40,"dns":5,"connect":1,"send":0,"wait":53,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"fh-wgt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"fh-wgt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.cabnnr.com/banner-admanager/iframe-scripts.js","fqdn":"js.cabnnr.com","domain":"cabnnr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rtbrenab.net/get/?go=1\u0026data=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","date":"2025-12-02T00:20:02.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.cabnnr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 03:33:00 GMT","end":"Fri, 09 Jan 2026 03:32:59 GMT"},"fingerprint":{"sha1":"85:63:AE:48:6B:AD:8D:E9:E4:CD:7F:E2:D7:5B:64:4D:77:5B:E4:C3","sha256":"9A:63:5D:CA:8D:4E:67:CF:06:6E:57:73:69:15:F1:FD:98:61:8F:E4:00:90:48:4D:6B:F3:D6:73:32:4F:D3:38"}}},"request":{"raw":"GET /banner-admanager/iframe-scripts.js HTTP/1.1\r\nHost: js.cabnnr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rtbrenab.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Mon, 01 Dec 2025 11:19:04 GMT\r\netag: W/\"692d79a8-178\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 02 Dec 2025 00:25:02 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":376,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (376), with no line terminators","md5":"89433f6864b61ee5dc3398a327f35069","sha1":"14d840847e8154f6ec2931a9d90126ed5c91fdb9","sha256":"587fc8a495b9e66cfaa0092ac5c3ebe3aeff08fee83fab4be94dc4ae09c982cb","sha512":"96863711edb791ffefa6188b2077dc1db9e270a7e27874140740a0820481ade585e20765f42f6df33afb77e5b1d20db281bfa9541f2be87cf97481de257cbc6a","ssdeep":"","tlshash":"dfe0682821a067bc006f266ef29a5aacf93801a6704a040884b1488d7c3ed76a6f4f24","first_seen":"2025-07-25T01:42:49.250588Z","last_seen":"2026-04-03T17:32:49.403307Z","times_seen":1505,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/078_-brashness.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/078_-brashness.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23435\r\nlast-modified: Fri, 29 Aug 2025 06:42:12 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bc4-5b8b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OQJktRZFflECbsxQcpUsitOhJ2KwWctXHRe5qNz5WceMD0HOQ4JopET2kYW2o6HaF6KCmVjzid%2Fn8bAKVKxVoIVsP4YckpBwgOdf2XB5tA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1ef0432fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23435,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"ce51b4e9f83383ff5c58b06f88e3570c","sha1":"466a37a289937aa2b41935154b32f15511c414da","sha256":"4a6046e5fb6e1b398d33814db50a1271bf0f987dab442e9786f2b58f29935095","sha512":"869eeaa25d13cfead9d4a690a43d3f82437fbeab1320841a4e3030cd21a3caa8c31c71a8f3613333580d1627d9307a89842b4103f34155da6a4ea8c7f4a204de","ssdeep":"384:nitLTLtK12P0i6L3P06/J26U65WgtPU2X+RbKnvH3h4MMa1s/gtIuV00VnMVDXmK:nitvLtHzcf06/JBUsW28bR+v3h49aaUC","tlshash":"0bb2d0c7f0aa1a2dcdac5e7002c886646357548db8b30d7d868f70cb0a977a171e19ab","first_seen":"2025-10-19T02:15:18.127289Z","last_seen":"2026-03-27T19:42:56.787422Z","times_seen":24,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":168,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/n.v2.css","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:59.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 07:32:01 GMT","end":"Sat, 28 Feb 2026 07:32:00 GMT"},"fingerprint":{"sha1":"30:27:D8:5A:59:AD:E2:2E:0E:9D:6A:5B:1B:BF:60:BE:D2:80:8B:DF","sha256":"A9:DE:14:B5:E6:07:9A:21:0C:4B:AC:5D:B3:F1:DB:EB:1F:27:9B:A9:C9:AD:51:72:F0:5B:0D:91:81:C1:D3:6D"}}},"request":{"raw":"GET /sdk/v1/n.v2.css HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:19:59 GMT\r\ncontent-type: text/css\r\nserver: nginx\r\nlast-modified: Wed, 26 Nov 2025 12:02:04 GMT\r\netag: W/\"6926ec3c-5bdf\"\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncache-control: max-age=172800\r\nexpires: Thu, 04 Dec 2025 00:19:59 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS5833\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23519,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (23519), with no line terminators","md5":"404ea1d68252ba43e10a747111d15958","sha1":"ddb82185f7bae33cd6086a5db8ac13f4156a5a59","sha256":"f6c8d01a944a5e54aac7f1e0dc612f44a6f780ec84642b402eb57d2585494795","sha512":"0129ae2a20b668b10f1f3981ad8f49259375dc0e96030d2480d21f5baa973e65d75211e099f9af5529ccbf4d9e2c447edd5948e2c9e6e3789cb86a48c435f094","ssdeep":"384:ORsyvHAnK1CezhZBhJVhhkhfu3IhDaezh9jhbxfKaFXMSTsrFsNpwtcSTzKX:ORswAnK1V9JfcfmyD99tbRXD","tlshash":"38b2c8b449c0403cf9aacbaee521795c7269c41ae3d2876ed71cbb30e1d51c973789b8","first_seen":"2025-11-05T12:21:31.220759Z","last_seen":"2025-12-02T10:02:36.810122Z","times_seen":86,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.uuidksinc.net/match/1924/?remote_uid=94551fa65a169fd1","fqdn":"s.uuidksinc.net","domain":"uuidksinc.net","tld":"net"},"ip":{"addr":"31.220.27.134","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:00.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uuidksinc.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 23:22:15 GMT","end":"Tue, 27 Jan 2026 23:22:14 GMT"},"fingerprint":{"sha1":"62:22:C8:E0:46:E7:EE:A7:88:39:BB:AC:4C:CB:ED:F8:EC:E3:92:16","sha256":"E0:B8:E3:03:E3:8D:55:52:B8:D1:68:52:87:58:B0:8F:8D:2A:29:3B:97:7A:33:0B:BA:73:FD:C2:40:D2:D1:EB"}}},"request":{"raw":"GET /match/1924/?remote_uid=94551fa65a169fd1 HTTP/1.1\r\nHost: s.uuidksinc.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 02 Dec 2025 00:20:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 74\r\naccess-control-allow-headers: X-Requested-With, Cache-Control, Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://hclips-porn.cfd\r\nset-cookie: jcsuuid=BcgaAaDeJoNFfIIqueJg; expires=Wed, 02 Dec 2026 00:20:00 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced","md5":"9e24e19b024c44b778301d880bd8e6f4","sha1":"d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e","sha256":"01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb","sha512":"4957e24a00b7ff54b350c33392560937e69ee5accf2e439781e27b4ac506eeeddef3bebd5d911185add175d648f4636dc5116e311b9c6c6ed34b842153e0b124","ssdeep":"","tlshash":"1ba022e22380fcbccc220033002003b0ceb0802808208e0f0c2c8c3a0800a0880cc383","first_seen":"2023-04-06T20:02:01Z","last_seen":"2026-04-03T18:53:30.67059Z","times_seen":6187,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":40,"dns":3,"connect":18,"send":0,"wait":18,"receive":1,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/133_hclips-absorbing-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/133_hclips-absorbing-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25918\r\nlast-modified: Fri, 29 Aug 2025 06:43:27 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14c0f-653e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 16984\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hs4W8shmwM2aUNkbzZ04b8HECQd6Ny9sUeP5NHUiMtzuk%2FjQnrnZbuTgYfi%2BjX8BWZ324PsSYaAjQH5uWFWDuh9CpC3vDwZL%2BkUnCYd%2FJw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e16ec032fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25918,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"f252728cfc68bd70b8f7025b4f362fe5","sha1":"ed5e049c5f4535ed9a0bc77f4a17460015d669d6","sha256":"3bf91da371298490e795ed715b970394379543c4f8eab2a6b5fd514c8a3f8b68","sha512":"e35ebe46059b56cb0427c40b64fc7b2c3cb447de120e7c155314d1fa9095e7d663cfe8ef4675b781580414cb0bf2c025455a766d061b070e668d58e40ac713b2","ssdeep":"768:byuojNQOm3ZsRnSplOVHLIf55/fFLra2s0:sjNBm3ZeNm7fZra2s0","tlshash":"37c2d1001be9fb2b5b22b7f2051c7a8e68b9c6f176ab55f58dc382c5159ed0a50f1e08","first_seen":"2025-10-05T06:05:59.907027Z","last_seen":"2026-03-27T19:42:56.851541Z","times_seen":25,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/026_xxx.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:59.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/026_xxx.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21810\r\nlast-modified: Fri, 29 Aug 2025 06:40:59 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b7b-5532\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 41085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l8UoUfEZhgUIIEdjwaWYaKZUMe0tMHttbImENNih5b6eymv7TJUzPTjsfgU4PKb%2BOzQkVuIR6fgO6dCTjjNPmwbtDMKz80r9NK%2BZ1SsC%2Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e2cf3d32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21810,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"c1b40d7e901da528cded3bac2233052b","sha1":"fbe919d9c0dacb2f876dbbbc6e6e7baaf83dc6a3","sha256":"40cc42052c5395300266e75089f089ab0776393bd8449504df0f74e55a53e59b","sha512":"1f3e6741e4caa70dc641d7bd89e04e090c1a7d12881ab57c4c7d4ba8c5ab7ddb9f42f2da4d380831e5d5b7a30bad3d572f90ab48b0df33f5424b4ae0e249abe2","ssdeep":"384:+LU/CL2yM/Uu4mvefcn5acHY224uc5TsCwacwJRQ8Br8eHmJGXGm/BKA:sk/Uu4mvjax22s5wzahJi43mJGX//Bt","tlshash":"80a2e10dfd4d2d61c9e6223e0298df90934e0578bcea51acb1c5c6d894aed8fbb4465c","first_seen":"2025-10-31T12:17:27.081936Z","last_seen":"2026-01-10T06:47:19.717915Z","times_seen":9,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=281215","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:01.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 11:47:47 GMT","end":"Sun, 08 Feb 2026 11:47:46 GMT"},"fingerprint":{"sha1":"05:1E:63:2F:40:1F:87:C3:0D:F0:42:C7:EA:E8:B1:D8:6F:76:7C:FC","sha256":"1C:13:0E:F6:58:8A:8C:D7:DE:1F:9F:20:D5:17:50:15:02:D5:C8:8E:39:40:68:3F:01:24:F2:73:14:BA:25:0F"}}},"request":{"raw":"OPTIONS /fp?tag_id=281215 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://hclips-porn.cfd/\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.20.1\r\nDate: Tue, 02 Dec 2025 00:20:01 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nAccess-Control-Allow-Origin: https://hclips-porn.cfd\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/090_hclips-arisa.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/090_hclips-arisa.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 36539\r\nlast-modified: Fri, 29 Aug 2025 06:42:32 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bd8-8ebb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0NltCf0lqYpGNJ3%2FR%2FT%2Bb%2BN45x4bUBPgfCbUMsUeLK1P%2FAKWHg8r6dMyOZP1tQwD9a3celyIEybjCMLziquxhFCMPu3zSJiQpqJeceqUdg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1cef932fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36539,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"cbc66c7d2997340a582188be7a92b1e1","sha1":"ebbfcbde4178c1f428c6155750473e750e3a71e3","sha256":"5579ca41d1e45d4203544ee428a922dde7cced1b5735866bbf057ac7884a2a0c","sha512":"7a3cd2199da34592d4bc25600f46d66638c85a41bdd27f556be2ef2ae5dc39bff4aab0ba933223434eb33bf437e02a4ad18f5caf4d26a6dc88ef49a3874399da","ssdeep":"768:2oFX7cNYt6+mdgDnZO32iCQ5zpZ5l4+zL9UYY99gK+iIf9YvOG:2o5G+JmdgDn3i75lZXdNHc9g7sZ","tlshash":"12f2f14e7258214c7c458b2c1efae9292322df38e1ca5e0d406ce5a85f14ab3afed517","first_seen":"2025-10-19T02:15:14.213383Z","last_seen":"2026-03-27T19:42:57.026921Z","times_seen":24,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":310,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=281437","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:01.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 11:47:47 GMT","end":"Sun, 08 Feb 2026 11:47:46 GMT"},"fingerprint":{"sha1":"05:1E:63:2F:40:1F:87:C3:0D:F0:42:C7:EA:E8:B1:D8:6F:76:7C:FC","sha256":"1C:13:0E:F6:58:8A:8C:D7:DE:1F:9F:20:D5:17:50:15:02:D5:C8:8E:39:40:68:3F:01:24:F2:73:14:BA:25:0F"}}},"request":{"raw":"POST /fp?tag_id=281437 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 1972\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1972,"data":"{\"timezoneOlson\":\"UTC\",\"incognito\":true,\"fonts\":{\"value\":[\"Bitstream Vera Sans Mono\",\"Century\"],\"duration\":444},\"fontPreferences\":{\"value\":{\"default\":173.11666870117188,\"apple\":173.11666870117188,\"serif\":173.11666870117188,\"sans\":162.01666259765625,\"mono\":122.68333435058594,\"min\":10.800003051757812,\"system\":162.01666259765625},\"duration\":196},\"languages\":{\"value\":[[\"en-US\"],[\"en-US\",\"en\"]],\"duration\":0},\"colorDepth\":{\"value\":24,\"duration\":0},\"deviceMemory\":{\"duration\":0},\"screenResolution\":{\"value\":[1280,1024],\"duration\":0},\"hardwareConcurrency\":{\"value\":48,\"duration\":1},\"timezone\":{\"value\":\"UTC\",\"duration\":24},\"sessionStorage\":{\"value\":true,\"duration\":0},\"localStorage\":{\"value\":true,\"duration\":0},\"indexedDB\":{\"value\":true,\"duration\":0},\"platform\":{\"value\":\"Win32\",\"duration\":0},\"plugins\":{\"value\":[{\"name\":\"PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chrome PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chromium PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Microsoft Edge PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"WebKit built-in PDF\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]}],\"duration\":0},\"vendor\":{\"value\":\"\",\"duration\":0},\"cookiesEnabled\":{\"value\":true,\"duration\":1},\"colorGamut\":{\"value\":\"srgb\",\"duration\":0},\"rendererUnmasked\":{\"value\":\"\",\"duration\":36},\"brand\":\"\",\"device\":\"\",\"os_type\":\"desktop\",\"os_family\":\"Windows\",\"front_browser_family\":\"Firefox\",\"front_browser_name\":\"Firefox 134\",\"pixel_ratio\":1}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Tue, 02 Dec 2025 00:20:01 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 58\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://hclips-porn.cfd\r\nSet-Cookie: id=10775891226924815979; Expires=Wed, 02 Dec 2026 00:20:01 GMT; Secure; SameSite=None\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c4efc1d6d16235d9433cd2565d887460","sha1":"22d069a5f536640e46122475c79db933e82d7f2e","sha256":"f0a6b8c736b7d8c5d3304a9ccd10d2114a0f25f2ba946cce62204df3384a131f","sha512":"af1cfe529f3173efdc7f4aff67355529095e775d8edb38d8a7c9565e09807aff470a465ffdf89ef6555f06cc88efa675823becc942896c63fa64a3140858f539","ssdeep":"","tlshash":"5ba00294c5c00e3c80200c3a73cf901628e4d304120217880ca66b5108822abe333c91","first_seen":"2025-07-26T17:44:43.174102Z","last_seen":"2026-04-03T18:26:29.718072Z","times_seen":5971,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":50,"send":0,"wait":25,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/021_utter.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:59.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/021_utter.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25715\r\nlast-modified: Fri, 29 Aug 2025 06:35:55 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14a4b-6473\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FqA6EAhktMgffxzEaFtxQzAD7v8VNfOxAjTzLVlbdbI34Wm%2FtapnWoHCc54gHVpx6cCdJfUUnzH6wEhGo0YzoBw2TQNVSB2%2BnpNhcSqZhw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e2ef4332fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25715,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"86e7ad155f5bfb482a48a0a50f8616dd","sha1":"60527abb6751f47981052cc9e56e8a080ca8fd83","sha256":"9a5897bcb39690554efc2886126145576f5d16bfeee3e6ef30306a573e4e54c4","sha512":"0357d2a0562c17adf60013d6a799908627df7483e137ea75389b7a5d422a7b39a80e58f4059884901ecdfdef5cb43b5e5ba4c86d491c2dfd51eda8b7cdd309f0","ssdeep":"768:Yv/xEh+sCgD1e5GAa+c4p6o+OfCWXuj/RXypWZ8P:Yv/6LCWPOALWC6C/mWi","tlshash":"3ab2e1efef440a0c894d4e5068b0d57ca6a4a151cbae17ee471dcfc4a410b1b85cbfe9","first_seen":"2025-10-31T12:17:27.083059Z","last_seen":"2026-01-10T09:02:32.698915Z","times_seen":11,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/api.php","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:00.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 14:35:42 GMT","end":"Sat, 17 Jan 2026 14:35:41 GMT"},"fingerprint":{"sha1":"3E:F6:87:7D:18:68:79:FD:23:76:5D:6C:7B:90:75:64:CC:D7:CA:BB","sha256":"FD:93:B1:1C:F0:69:98:29:DB:E2:76:AD:30:DA:23:6B:BA:BB:04:54:58:11:41:09:09:5B:A4:BC:CB:5A:E3:AF"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 669\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":669,"data":"{\"user\":{\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en-US\",\"referer\":\"https://hclips-porn.cfd/\",\"consumer\":\"ad-provider\",\"gdpr\":{\"gdpr\":0},\"screen_resolution\":\"1280x1024\",\"window_orientation\":\"landscape\",\"cookies\":[],\"scr_info\":\"YXN5bmN8fDM%3D\"},\"zones\":[{\"custom_targeting\":{},\"id\":1577786,\"extra_params\":{\"first_request\":true,\"zone_type\":2}},{\"custom_targeting\":{},\"id\":1577786,\"extra_params\":{\"first_request\":true,\"zone_type\":2}},{\"custom_targeting\":{},\"id\":1577786,\"extra_params\":{\"first_request\":true,\"zone_type\":2}},{\"custom_targeting\":{},\"id\":1577786,\"extra_params\":{\"first_request\":true,\"zone_type\":2}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 02 Dec 2025 00:20:00 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hclips-porn.cfd\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nSet-Cookie: __uvt=s%3A32%3A%22b093803177f334c2cc2092c496ee81d7%22%3B; expires=Thu, 02 Dec 2027 00:20:00 GMT; Max-Age=63072000; path=/; domain=magsrv.com; secure; SameSite=None\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7272,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8778a45d97531f146ae8ac80a18e0d40","sha1":"ad95ae8f93b47a65288376db67dd9adf0a759210","sha256":"8ef27e8c4df7b4d54d7ab41ad4dec022ad36eb1f5f200068e04eaf0de6aa5375","sha512":"d4390f53451bf6bd4eda6f57d55e1c89e37723320ce201113319762905ce810018a624e61db00bd6939914cb3e52b8155b0ef24565d94d3e6d82601a622843da","ssdeep":"192:CNlQ8bb+tvtHz0GFbdh5gbgxkcGa3+3oZbIZ:CrJbb+fHz0GFbdh5gbgxT7uubIZ","tlshash":"59e14b72bac085fa9ffc29cd689f54bcad25352f5fb78889405ec404e93403e0a057a1","first_seen":"2025-12-02T00:20:49.387263Z","last_seen":"2025-12-02T00:20:49.387263Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1003,"timings":{"blocked":76,"dns":3,"connect":28,"send":0,"wait":850,"receive":1,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.wpushsdk.com/skins/nmain.m.js","fqdn":"js.wpushsdk.com","domain":"wpushsdk.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:01.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.wpushsdk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Nov 2025 07:32:11 GMT","end":"Sat, 31 Jan 2026 07:32:10 GMT"},"fingerprint":{"sha1":"5D:B0:51:22:B4:86:47:42:74:7D:68:50:E7:C9:08:D7:7B:41:91:8C","sha256":"09:01:AE:7A:8E:97:6A:90:A0:1C:ED:8A:B0:05:D4:B3:89:1C:C9:7F:8A:21:8B:8D:59:7F:5C:48:74:65:0E:99"}}},"request":{"raw":"GET /skins/nmain.m.js HTTP/1.1\r\nHost: js.wpushsdk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Thu, 27 Nov 2025 13:01:34 GMT\r\netag: W/\"69284bae-925f8\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 02 Dec 2025 00:25:01 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":599544,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"138b2e57355bf85765f554b6a8d9acae","sha1":"6949055743b68f6b3053de83f9d8d6bf16844e27","sha256":"7efeeb1bc4be58763b65984bec37ee25e926fd9da5e23e808b9f6a1266ce143a","sha512":"1669c3a9ce16f68de16db81fca65d5fe1fa43cc8c446830879d2699315471fa2d74dccc046395177eba94bdcbd06d70496097676b54c7ab62d54ee854fda7fbe","ssdeep":"12288:EiO6pTQUIfDchOHO68RPO2Si6EHlPUfQC+dKJTowRinDGQf7jbLExMLPWwhMs4h/:JONux6EHOJcFnagwxd9wa","tlshash":"56d45b313290113870bfc8c6aa66278d336cf24be9174f55f96faaa583dbd54f625380","first_seen":"2025-11-27T15:12:09.178344Z","last_seen":"2025-12-03T08:16:20.450771Z","times_seen":90,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"js.wpushsdk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bookmsg.com/creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790.webp","fqdn":"static.bookmsg.com","domain":"bookmsg.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:03.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.bookmsg.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Nov 2025 02:32:10 GMT","end":"Tue, 24 Feb 2026 02:32:09 GMT"},"fingerprint":{"sha1":"29:5C:89:52:D7:80:3C:68:75:40:DE:B6:BD:B5:5F:35:72:C7:1D:EF","sha256":"D8:38:DC:B0:0F:D6:AA:DF:02:2B:D2:7C:72:6A:97:38:42:7A:02:CE:89:F1:AE:0B:95:0B:DF:F4:4D:18:1E:DE"}}},"request":{"raw":"GET /creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790.webp HTTP/1.1\r\nHost: static.bookmsg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:03 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1066\r\nserver: nginx/1.24.0\r\nlast-modified: Fri, 31 May 2024 10:56:43 GMT\r\netag: \"6659aceb-42a\"\r\nexpires: Wed, 02 Dec 2026 00:20:03 GMT\r\ncache-control: max-age=31536000\r\nx-cdn-host-id: DS5058\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1066,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x240, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2a11e13b2bd67bb9a6cb347d7c73df13","sha1":"b85460a33f9b229f42c08a6a94ae433a4d5c32ab","sha256":"1d0d6b5176d6a48b3042a107f929bbfcefd4a057273ac488bbb7f7affd909b56","sha512":"059dd018bbf13a669d73f07442288f165bc6b305afb0df955773a0efb7454b8204095196231179fab4cb625e189c7c735fe41dc5b67fb8666d584214277186e6","ssdeep":"","tlshash":"7511b56be46c4dfede41f0408dd80256f8324a5c8aaeaf39058bc7da4f584143a6f01a","first_seen":"2024-02-20T18:30:33Z","last_seen":"2026-04-03T18:52:28.668607Z","times_seen":10766,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":89,"dns":45,"connect":19,"send":0,"wait":19,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/hp.css","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /hp.css HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 15 Jun 2025 16:45:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"684ef89e-77a8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LbNVjKFLe3bZ9zi0OsfJsalvnn3J5nxUkOq0SCNj3gBV%2F1nLhMEDiKFEcPSLUSj2ETTxajvxWjZZ3XJO3hjPzAMvtLsXNRmcoyqKkZLPTg%3D%3D\"}]}\r\ncf-ray: 9a76a7e13ea732fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30632,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (358)","md5":"764878e1ae4fdaa048a7c3f27e58f7c6","sha1":"83efdcfb70c45539ac31c31f04f8bf8311b92eda","sha256":"ad28e6b5934a6d0d30eb628e19e02a70f271277b9519e726d07e831de64b199f","sha512":"84f8f00a8486e4c2144d9d854c1a99641725985c7925443c61f43ba7d4730bdf263fb3df6a532ccf51d6f65181a5b2debc7cd6eabb94534481598ea19c754882","ssdeep":"384:p1Zpzw/A2571GsvCpi11aejCHircwPoSKxd:rw/j571vF11nWE9PoSKj","tlshash":"edd2866366302648b83ba5d6bef75b5e13295123f20558b8b9d6380cc28cc7505f3fea","first_seen":"2025-10-05T06:06:00.170783Z","last_seen":"2026-03-27T19:42:57.003068Z","times_seen":25,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/124_roughly-the.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/124_roughly-the.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25279\r\nlast-modified: Fri, 29 Aug 2025 06:43:18 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14c06-62bf\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 16982\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fMHosf%2FQhKzp3fIkj8IxGbwaKBb5Fa6NM91iGWWC%2FiQ9mO%2FS7YiC9uZeCRJ41Qohn2GrpSnp2SSq6Bu7P0pp1wxocMxzNdIFekMe02jSeA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e18ecd32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25279,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"b9f4db9280e7e89094778cb489a0f0c4","sha1":"e72baf09858fe9fd44d10c3b9f49b2654315b410","sha256":"db675e7863eaec180382956e211778c3da105b1f12913371d9db3881e36cd504","sha512":"f77020656eaa9c74edaceb907ed517b5f4685fa1294ce8dfa7cf0eaacabcf9c46b26588ad7489ba1e25227f4149f47021fa4fbfed49b443d574d0d042cf9c030","ssdeep":"768:qTphm7o/4YM0cBdQr0FyudxXdkN18SPY/vRAG:Kjkow0cBdvXdkkH/vCG","tlshash":"70b2d0537e5617c9f1a1bc258622c38523e1b7c6ac7192674b342bf1827f0f54f91a4e","first_seen":"2025-10-05T06:05:59.982453Z","last_seen":"2026-03-27T19:42:57.102844Z","times_seen":25,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":241,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/120_sexual-asian.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/120_sexual-asian.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24900\r\nlast-modified: Fri, 29 Aug 2025 06:43:12 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14c00-6144\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 41085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e9%2FjcSxdldm3NC%2BLsA5f708BZeOGkNrFvnpMDNVqYemXfqfQlFuTi%2B%2Fqm5AkRkcJaAlw5fHeWMFS149pEdw7yyOHDFZV5V21aMR1cNqiZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e19ed232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24900,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"eda5943d400fb8e8427867642534d288","sha1":"f838c488e3407379467d16d9f668b3fc78663429","sha256":"e09cc7dd0c614968a48cf77ec2695a73574966cf1c4ae1b8ef0c1161c23b1463","sha512":"23a9f73ae8ab34d1f0adfca4373ad2100b52a2f5b29c177ea5b09e4c503611a95e7ce6438ef5675e906ab8e433dc870b4eca651c3340d789fa4e128840ae85bc","ssdeep":"768:zLh36Tm18EUn+ZXL/on4jKQP6O1JYF+Kuwic:z92mGn+Z7/o4jKe6aQic","tlshash":"46b2e1ac50537e028cac4cb7e8696c7c46dc3f5eaee0142ad35f96ed834bae43128155","first_seen":"2025-10-05T06:06:00.065602Z","last_seen":"2026-03-27T19:42:57.07255Z","times_seen":25,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/099_x2x14f9d00d9338138460-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/099_x2x14f9d00d9338138460-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25470\r\nlast-modified: Fri, 29 Aug 2025 06:42:48 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14be8-637e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tfYYvGqhdT5YOLN0zsjMLhis5EVV8uqjqa%2FeqLjzY3f8NEMpWFAmf6bWgFwLxVI8cWVjVTfA%2FNNLJjpfMSK5Zr377fXUPJR20sWrx6SFAg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1beea32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25470,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 640x639, segment length 16, baseline, precision 8, 400x300, components 3","md5":"847e67b5f8a6898280c7a05df7a394b7","sha1":"17b463039ae3be28d32fcf4487a1ad6e08345f2f","sha256":"a31f063243b9477da3871a0f03eb15d202e0c4208fc17bec119c8ffa31ef94e8","sha512":"fbee6264ffce4e86813defd1b1d5943c8f510c37a890025e356a22487dfa515b2ad3887b024e16144272942f13d3823266f8c086b45e9fd6b830d7b577a52d27","ssdeep":"768:Si/EVWbwb0a5HQHb/SlJFbMEX5aUTs/Q3IxEWmLC:73w0Ywr2MEJzTs/Q3IxmO","tlshash":"d8b2d12b28619d10c00f25343d2fce728b3bd90efa6d91da1ac9b9d777a90421d7e539","first_seen":"2025-10-05T06:06:00.160768Z","last_seen":"2026-03-27T19:42:56.920024Z","times_seen":26,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":177,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/056_inspiriting-adjacent-to.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/056_inspiriting-adjacent-to.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22460\r\nlast-modified: Fri, 29 Aug 2025 06:41:33 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b9d-57bc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GLDPy3dTA1nrPL0C%2Fax7cc9u%2B9nmT4cuwH2GCx4qsKY88TPSbfez61Iy2Jnk4Q0wB9BAm%2Bb8dtRKtTJv6vYkmKU%2FJxOOOOQI3FgifUTVsw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e23f1e32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22460,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"cafa7852d53a43315f66cc470a312480","sha1":"ac9a8c17fb0896f0a9d99e2d8e019258d4ad2e2c","sha256":"e96242449eb814240f60f868dc8bc0c6e110515f48a65d395d426ba402159a06","sha512":"414fc589d9c1c555e0f7fdfd7f93a9892e288b2b4ca2306cbd57b21e6b4cc9289a9cf74119430ebd1cc7cb1e03854d14958a9c6c95febb3d5505aaf91e91f5d1","ssdeep":"384:75KMdaSkUyQQMa0OoI0Q7I7ZyJWB5YotQzeoO/jL+Z8msdprfIP3V9:75xPkVxMTA05PtzoO7LSSw/V9","tlshash":"94a2e0e08335b381f87a3ab095c28588c79cba399d7744edfac119c49f68f4dd5a2834","first_seen":"2025-10-31T12:17:27.194609Z","last_seen":"2026-03-27T19:42:56.870214Z","times_seen":20,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flepquix.com/in/dip?event_id=f6af6e19-517f-4263-9615-840228c6c6e6","fqdn":"flepquix.com","domain":"flepquix.com","tld":"com"},"ip":{"addr":"159.69.163.100","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:01.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"banner.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Oct 2025 11:40:25 GMT","end":"Wed, 07 Jan 2026 11:40:24 GMT"},"fingerprint":{"sha1":"4C:2F:3B:EF:F4:3B:F0:06:66:A4:CC:D0:2F:52:5E:96:B4:DA:FD:DF","sha256":"6F:15:D0:A4:DD:A4:6F:A6:5F:28:DB:5F:E9:A1:C0:15:5D:53:34:91:A8:84:99:BA:14:33:3D:36:3B:0C:BD:CA"}}},"request":{"raw":"GET /in/dip?event_id=f6af6e19-517f-4263-9615-840228c6c6e6 HTTP/1.1\r\nHost: flepquix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 02 Dec 2025 00:20:01 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":10,"dns":8,"connect":25,"send":0,"wait":26,"receive":1,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtbrenab.net/banner/in/show/?mid=3430344761818172101\u0026pid=0\u0026site=1433671\u0026sc=\u0026usage_type=DCH\u0026subid=1567158389\u0026sid=0\u0026cid=22334\u0026price=0\u0026is_cpm=1\u0026cpm=0.0014126132160000003\u0026ecpm=0.0014126132160000003\u0026crid=\u0026crtid=d41d8cd98f00b204e9800998ecf8427e\u0026tcid=0\u0026out_id=0\u0026ver=6.90.10\u0026ver_c=\u0026refdom=hclips-porn.cfd\u0026hostname=auc-banner-hz-16\u0026site_id=0\u0026spot_id=1433671\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=0\u0026created_at=0000-00-00\u0026is_native=6\u0026ip=\u0026testab=0\u0026px_id=1433671\u0026adblock=0\u0026auction_host=\u0026mm=0\u0026yc=0\u0026render_type=\u0026campaign_type=banner-ext\u0026uniq=\u0026exp=0\u0026resp_type=native\u0026min_cpm=0.000034346556757685046\u0026placement_type_id=269\u0026verify_hash=f7cd331a688e07e7b0f800ae1a55335c90abf3fdd684f4f6ac7c676c5c629845\u0026score=100\u0026kubik_score=100\u0026kaminari_bot_ip=1\u0026tag_ab=a\u0026v2=0\u0026ttl=0\u0026space_id=1496\u0026banner_width=300\u0026banner_height=250\u0026accel=0\u0026gyr=0\u0026iabcat=IAB25\u0026user_fp=3320490513170107167\u0026icon=https%3A%2F%2Fs3t3d2y1.afcdn.net%2Flibrary%2F623611%2F8e4d551c37e0849d99b9d795e0f0ab99925f04b1.jpg\u0026pr=\u0026bid_crid=\u0026bid_cid=\u0026is_iframe=1\u0026ad_tags=HCLIPS-PORN%2CHD%2CXXX%2CCLIPS%2CVIDEO%2CTUBE!,\u0026stratagem=\u0026ssp=3758\u0026refresh=1\u0026priority=0\u0026base_bidfloor=0.0001\u0026label_ids=\u0026site_id64=1433671\u0026original_bid_usd=0.0012129600000000001\u0026comeback=\u0026topics=\u0026original_domain=\u0026ectr=0.00010166255996870424\u0026client_price=0\u0026direct_client_price=0\u0026client_payment_model=\u0026ext_campaign_id=3915968\u0026auction_time=1764634801\u0026account_id=2140\u0026url=https://preroll.hostave3.net/notifications/zeropixel.png\u0026stime=1764634801\u0026ip_mismatch=false\u0026double_click_filter=false\u0026w=300\u0026h=100\u0026skin_id=4\u0026placement_id=2\u0026service_spot_id=0\u0026processed_keywords=Adult,HD\u0026user_keywords=\u0026segment_id=1440234390\u0026traffic_category=adult\u0026viewability=0.2893037336024218\u0026container=Skin%20300x250%20Small%20banners\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026iframe_click=1\u0026is_webview=0\u0026social_network=\u0026publisher_id=116783\u0026advanced_pub_id=116783\u0026lv_id=0\u0026entry_source=direct\u0026final_source_id=0\u0026payment_model=cpm\u0026is_second_price=0","fqdn":"rtbrenab.net","domain":"rtbrenab.net","tld":"net"},"ip":{"addr":"116.202.60.226","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rtbrenab.net/get/?go=1\u0026data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImEiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MTQ5NiwidHlwZSI6InBvcCIsImlkem9uZSI6bnVsbCwiYWRfdGFncyI6IkhDTElQUy1QT1JOJTJDSEQlMkNYWFglMkNDTElQUyUyQ1ZJREVPJTJDVFVCRSEsIiwibGFiZWxzIjoiIiwiYWxsb3dlZF9sYWJlbHMiOiIiLCJ0aXRsZSI6IiIsInN1YmlkIjoiMTU2NzE1ODM4OSIsInJlZnJlc2giOjEsInV0bTEiOiIiLCJ1dG0yIjoiIiwidXRtNCI6IiIsInNwb3RfaWQiOjE0MzM2NzEsIm11bHRpcGxlIjpmYWxzZSwiaXNfaWZyYW1lIjpmYWxzZSwicmVmZG9tYWluIjoiIiwicGwiOjAsInN0cmF0YWdlbSI6IiIsImd5ciI6MCwiYWNjZWwiOjAsInNzcCI6Mzc1OCwiYnR5cGUiOjAsInYyIjowLCJyY2hhbmdlIjpmYWxzZSwicG9zIjowLCJldmVudF9pZCI6ImY2YWY2ZTE5LTUxN2YtNDI2My05NjE1LTg0MDIyOGM2YzZlNiIsImFwcHJvdmVkX21haW5zdHJlYW0iOjAsIndsIjoxLCJ0ZXN0YWIiOjAsInZlciI6IjYuOTAuMTAifSwiYmFubmVyIjp7InciOjMwMCwiaCI6MjUwfSwibWV0cmljcyI6eyJ0b3BpY3MiOltdfX1dLCJzaXRlIjp7ImlkIjoiMTQzMzY3MSIsImNhdCI6WyJJQUIyNSJdLCJwYWdlIjoiaHR0cHM6Ly9oY2xpcHMtcG9ybi5jZmQvIiwiY3RpZCI6MX0sImRldmljZSI6eyJ3IjoxMjgwLCJoIjoxMDI0fSwiZnBfcGFyYW1zIjp7InBsdWdpbnMiOlsiUERGIFZpZXdlciIsIkNocm9tZSBQREYgVmlld2VyIiwiQ2hyb21pdW0gUERGIFZpZXdlciIsIk1pY3Jvc29mdCBFZGdlIFBERiBWaWV3ZXIiLCJXZWJLaXQgYnVpbHQtaW4gUERGIl0sImxhbmd1YWdlcyI6WyJlbi1VUyIsImVuIl0sImZvbnRzIjpbIkJpdHN0cmVhbSBWZXJhIFNhbnMgTW9ubyIsIkNlbnR1cnkiXSwiZm9udFByZWZlcmVuY2VzIjp7ImRlZmF1bHQiOjE3My4xMTY2Njg3MDExNzE4OCwiYXBwbGUiOjE3My4xMTY2Njg3MDExNzE4OCwic2VyaWYiOjE3My4xMTY2Njg3MDExNzE4OCwic2FucyI6MTYyLjAxNjY2MjU5NzY1NjI1LCJtb25vIjoxMjIuNjgzMzM0MzUwNTg1OTQsIm1pbiI6MTAuODAwMDAzMDUxNzU3ODEyLCJzeXN0ZW0iOjE2Mi4wMTY2NjI1OTc2NTYyNX0sInBsYXRmb3JtIjoiV2luMzIiLCJjb2xvckRlcHRoIjoyNCwiZGV2aWNlTWVtb3J5IjowLCJoYXJkd2FyZUNvbmN1cnJlbmN5Ijo0OCwiaW5kZXhlZERCIjp0cnVlLCJzZXNzaW9uU3RvcmFnZSI6dHJ1ZSwibG9jYWxTdG9yYWdlIjp0cnVlLCJjb29raWVzRW5hYmxlZCI6dHJ1ZSwiY29sb3JHYW11dCI6InNyZ2IifSwidXNlciI6eyJpZCI6IjU5YWY5NjI4ODdmMzM3ZDcyOTliMTQyZmE2MzM3Njg0IiwiZnAiOm51bGwsImZwX3N0ciI6IiIsInVhX2RhdGEiOm51bGwsImlzX3dlYnZpZXciOmZhbHNlLCJzb2NpYWxfbmV0d29yayI6IiJ9LCJleHQiOnsiZHQiOjE3NjQ2MzQ4MDEyODV9fQ==","date":"2025-12-02T00:20:02.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"banner.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Oct 2025 11:40:25 GMT","end":"Wed, 07 Jan 2026 11:40:24 GMT"},"fingerprint":{"sha1":"4C:2F:3B:EF:F4:3B:F0:06:66:A4:CC:D0:2F:52:5E:96:B4:DA:FD:DF","sha256":"6F:15:D0:A4:DD:A4:6F:A6:5F:28:DB:5F:E9:A1:C0:15:5D:53:34:91:A8:84:99:BA:14:33:3D:36:3B:0C:BD:CA"}}},"request":{"raw":"GET /banner/in/show/?mid=3430344761818172101\u0026pid=0\u0026site=1433671\u0026sc=\u0026usage_type=DCH\u0026subid=1567158389\u0026sid=0\u0026cid=22334\u0026price=0\u0026is_cpm=1\u0026cpm=0.0014126132160000003\u0026ecpm=0.0014126132160000003\u0026crid=\u0026crtid=d41d8cd98f00b204e9800998ecf8427e\u0026tcid=0\u0026out_id=0\u0026ver=6.90.10\u0026ver_c=\u0026refdom=hclips-porn.cfd\u0026hostname=auc-banner-hz-16\u0026site_id=0\u0026spot_id=1433671\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=0\u0026created_at=0000-00-00\u0026is_native=6\u0026ip=\u0026testab=0\u0026px_id=1433671\u0026adblock=0\u0026auction_host=\u0026mm=0\u0026yc=0\u0026render_type=\u0026campaign_type=banner-ext\u0026uniq=\u0026exp=0\u0026resp_type=native\u0026min_cpm=0.000034346556757685046\u0026placement_type_id=269\u0026verify_hash=f7cd331a688e07e7b0f800ae1a55335c90abf3fdd684f4f6ac7c676c5c629845\u0026score=100\u0026kubik_score=100\u0026kaminari_bot_ip=1\u0026tag_ab=a\u0026v2=0\u0026ttl=0\u0026space_id=1496\u0026banner_width=300\u0026banner_height=250\u0026accel=0\u0026gyr=0\u0026iabcat=IAB25\u0026user_fp=3320490513170107167\u0026icon=https%3A%2F%2Fs3t3d2y1.afcdn.net%2Flibrary%2F623611%2F8e4d551c37e0849d99b9d795e0f0ab99925f04b1.jpg\u0026pr=\u0026bid_crid=\u0026bid_cid=\u0026is_iframe=1\u0026ad_tags=HCLIPS-PORN%2CHD%2CXXX%2CCLIPS%2CVIDEO%2CTUBE!,\u0026stratagem=\u0026ssp=3758\u0026refresh=1\u0026priority=0\u0026base_bidfloor=0.0001\u0026label_ids=\u0026site_id64=1433671\u0026original_bid_usd=0.0012129600000000001\u0026comeback=\u0026topics=\u0026original_domain=\u0026ectr=0.00010166255996870424\u0026client_price=0\u0026direct_client_price=0\u0026client_payment_model=\u0026ext_campaign_id=3915968\u0026auction_time=1764634801\u0026account_id=2140\u0026url=https://preroll.hostave3.net/notifications/zeropixel.png\u0026stime=1764634801\u0026ip_mismatch=false\u0026double_click_filter=false\u0026w=300\u0026h=100\u0026skin_id=4\u0026placement_id=2\u0026service_spot_id=0\u0026processed_keywords=Adult,HD\u0026user_keywords=\u0026segment_id=1440234390\u0026traffic_category=adult\u0026viewability=0.2893037336024218\u0026container=Skin%20300x250%20Small%20banners\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026iframe_click=1\u0026is_webview=0\u0026social_network=\u0026publisher_id=116783\u0026advanced_pub_id=116783\u0026lv_id=0\u0026entry_source=direct\u0026final_source_id=0\u0026payment_model=cpm\u0026is_second_price=0 HTTP/1.1\r\nHost: rtbrenab.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rtbrenab.net/get/?go=1\u0026data=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\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.18.0\r\ndate: Tue, 02 Dec 2025 00:20:02 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nlocation: https://preroll.hostave3.net/notifications/zeropixel.png\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/044.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/044.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22199\r\nlast-modified: Fri, 29 Aug 2025 06:41:18 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b8e-56b7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BML34wQq7r1LbGwwxLtxlF5iVSvk1OoWl%2BTyhowSNXb79gyRlKi4VvYKpJxgyNBcw7Fjk2lzvBBVsoDJs%2BB%2FE9ijn4SK1lJr%2BQcWEjtbOg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e16ec132fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22199,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"ff2efff0b19e62f9f5665a8e3519c204","sha1":"747c0c1f703774748e74fa6ce4692c46d52036e2","sha256":"805f9451b749cd5f3d22879be031cbae0f1390639324eb30edc1d727c3e6fe99","sha512":"19b54eb9626be93e963158e111868157ae20f52ccdad35e6020ca4f0df9732e5986ba3deeb94f79c00383b09988d04d82ae8bffb49ae54cfedb25da531f4306d","ssdeep":"384:bAZsw8gtDRqTS+P608NexHbiGV2KBQVYLNVKkc/qvDlIVTwDSNw/syr:RSi8NqGGVHGMb8MDOTwZs0","tlshash":"0aa2e065829bf28fe4204a6f844b1b54d1ff48583879f1703b103ee0ab5ace2e71530e","first_seen":"2025-10-31T12:17:26.828289Z","last_seen":"2026-03-27T19:42:56.933936Z","times_seen":21,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":200,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/088_mechanical.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/088_mechanical.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15520\r\nlast-modified: Fri, 29 Aug 2025 06:42:29 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bd5-3ca0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 41085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=835Gp7rDekNtyvelywQhZVGSH4KtovO%2FsGZNeVwKcFGTnNmUZeYgpvBDiJjVWb13MR2qg93Bj5EM2FxIgSuPmV4Yy1ltziRqLl6zwWYbOw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1defb32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15520,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"46ae439e26a6d6dc6449587f3d467554","sha1":"b24a99bd9c49a7cc39faa8187dc9b72e740c4b1a","sha256":"aa69a5e032dd46dc06ba0f0163577936674418dd369ae5f12c43c318cba06a28","sha512":"ea4ec69d6348d3c57951a12ffc6f21c560fc9b5e6a7193976019afbee0cec9fcc286220340acca740f328a103d61e7e7b3500c1249ccd583c8660e5269882c88","ssdeep":"384:qPk4MYJ8KAPdwpAftdteY1Za8RUha8AtPBmTrZhCH4T:y3MYOKVAfbtD17RUha8A6ZhRT","tlshash":"a062d0bfcec43c6cf5584774141e194672ab8fe453859fb5a5b264bca2117077140cde","first_seen":"2025-10-19T02:15:18.881715Z","last_seen":"2026-03-27T19:42:57.114731Z","times_seen":21,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":170,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/031_interracial-surrounding-with.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/031_interracial-surrounding-with.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 37596\r\nlast-modified: Fri, 29 Aug 2025 06:41:03 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b7f-92dc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2bBafKvKcZTyZ3yEjFyIJqtICbx7RowSnFMKI0sXzP18m%2FbDMHk%2BOB9tRasNATqtR9fY7hFEXfEaeY27J6SLMxmzI%2FGn4V7hT16FM2YrdQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e2af3732fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37596,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"74b33d03b4607405ca148213567b6843","sha1":"76c4aa3d1368507fc4aa2bcccfe170cc956e5c2b","sha256":"5c44f9a270924fb8a6670911a46dc9cb527c5cef672ef0dbd7dcb46628eae61f","sha512":"f3a357ac4361fec4b0f28b8d33870520800991d7bb6284ae630192f69ba8fa1fd6053ee92f09becb57622c48e6f34fb85fde5cae8229fa098fc3483bce423571","ssdeep":"768:fbWji82a+vpJT2NcXR8enhrGxwzo5i0zMhzvrLLvVfgU96U:f6jNB+hFhBa2zrzDVvp","tlshash":"c4f2f11ccc56812be9323cba661db24cc8eb2d872d61466c9fd452610895ce47bcb7db","first_seen":"2025-10-31T12:17:27.063776Z","last_seen":"2026-03-27T19:42:56.801109Z","times_seen":21,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":188,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=281437","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:01.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 11:47:47 GMT","end":"Sun, 08 Feb 2026 11:47:46 GMT"},"fingerprint":{"sha1":"05:1E:63:2F:40:1F:87:C3:0D:F0:42:C7:EA:E8:B1:D8:6F:76:7C:FC","sha256":"1C:13:0E:F6:58:8A:8C:D7:DE:1F:9F:20:D5:17:50:15:02:D5:C8:8E:39:40:68:3F:01:24:F2:73:14:BA:25:0F"}}},"request":{"raw":"OPTIONS /fp?tag_id=281437 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://hclips-porn.cfd/\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.20.1\r\nDate: Tue, 02 Dec 2025 00:20:01 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nAccess-Control-Allow-Origin: https://hclips-porn.cfd\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":67,"dns":1,"connect":25,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/b.b.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:00.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 07:32:01 GMT","end":"Sat, 28 Feb 2026 07:32:00 GMT"},"fingerprint":{"sha1":"30:27:D8:5A:59:AD:E2:2E:0E:9D:6A:5B:1B:BF:60:BE:D2:80:8B:DF","sha256":"A9:DE:14:B5:E6:07:9A:21:0C:4B:AC:5D:B3:F1:DB:EB:1F:27:9B:A9:C9:AD:51:72:F0:5B:0D:91:81:C1:D3:6D"}}},"request":{"raw":"GET /sdk/v1/b.b.js HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: cookie_user_id=a3478f5e-53f5-5f37-994f-8bde9a7ba683; bfq=APeIECNCx5YaOWbIkGEDRxcWIsYU3BLjoYgyE2PcsEHjhowYMmDA6NJH\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Mon, 01 Dec 2025 12:09:30 GMT\r\netag: W/\"692d857a-2299\"\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncache-control: max-age=172800\r\nexpires: Thu, 04 Dec 2025 00:20:00 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS5833\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8857,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8777)","md5":"4972df0025f3a0b931a347672899c2b0","sha1":"0911b190d07a9fc3c2926c0f42965f980ee07be1","sha256":"88247a2b2d54b0f29f1a565cfa62990adcf8ea7f3b309893b10d0775cd231974","sha512":"4aa3086ca9db61c2ec96f9d7c8da3f83c576bb849d57591b2fd7fe2fe1c97780c23535e91db8a96e16f0d9357362a83773fa3d465c8146e9871bcdc36f09ee03","ssdeep":"192:paqucGdppOIWtlomlihFk76i69GDgJCS4qN9:paquXdONHSsgz9","tlshash":"8d02d86eb64e703591d910a7027f530d73f61252aa068890f1aadc52387cfdde513ece","first_seen":"2025-12-01T12:56:10.876324Z","last_seen":"2025-12-19T05:56:33.799189Z","times_seen":88,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/bi.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:59.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 07:32:01 GMT","end":"Sat, 28 Feb 2026 07:32:00 GMT"},"fingerprint":{"sha1":"30:27:D8:5A:59:AD:E2:2E:0E:9D:6A:5B:1B:BF:60:BE:D2:80:8B:DF","sha256":"A9:DE:14:B5:E6:07:9A:21:0C:4B:AC:5D:B3:F1:DB:EB:1F:27:9B:A9:C9:AD:51:72:F0:5B:0D:91:81:C1:D3:6D"}}},"request":{"raw":"GET /sdk/v1/bi.js HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 11 Nov 2025 11:07:54 GMT\r\netag: W/\"6913190a-1e16\"\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncache-control: max-age=172800\r\nexpires: Thu, 04 Dec 2025 00:19:58 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS5833\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7702,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7623)","md5":"0f2df2696dec627783d1eb7170feea2d","sha1":"37e2e42f854e007185c942897b2a55e5d06a52eb","sha256":"45d1b15de00ad4e8b8551c7144dde989af93e1c9f3f91c514e3dc99545ef0ebd","sha512":"98e561b81de15c6d0f7269a0608f3c8a42ada04b6941bbe54933d75875b0fad3a708025a085f950a45bbb18ee8859d9918144b56f58f30969e36d93b0b786183","ssdeep":"192:p3osvtOztEOzGSC6npKyxtuyMYeUYK7r62Fii4zTd4/iiL/u:p3VOt/1pKEheUFrCDzTd4/iaW","tlshash":"45f1f9fa758231a4996794a1c5afe61fb6387a15360f8c50c07af5823c78dcb9037e6c","first_seen":"2025-11-12T10:23:36.745664Z","last_seen":"2026-02-09T11:49:45.468172Z","times_seen":349,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:59.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.wpadmngr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Nov 2025 03:32:41 GMT","end":"Fri, 30 Jan 2026 03:32:40 GMT"},"fingerprint":{"sha1":"E3:9D:D3:89:FB:90:7B:AA:8C:19:20:0E:65:8F:8A:B8:25:1C:19:1C","sha256":"DA:2F:33:FE:DB:D4:DD:3C:4D:80:E7:DE:2D:70:4B:D7:61:B4:0C:64:DA:A2:78:BB:8F:0B:66:29:AA:A3:2F:37"}}},"request":{"raw":"GET /static/adManager.js HTTP/1.1\r\nHost: js.wpadmngr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:19:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Thu, 27 Nov 2025 13:21:53 GMT\r\netag: W/\"69285071-23ef9\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 02 Dec 2025 00:24:59 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":147193,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"f53567558bdea644af1ba8782f7bef6f","sha1":"427ef1766f7e2c19847cbde1e10cabd6c73db7b4","sha256":"ce967986ad0d59087854c3e9cfc27814a9b7eca95aee2ce82d9fe9e0929a0ca6","sha512":"3558bc6b343a3bc9de9e552b36619aa00167fbf5f11d25f2b23accdef7e1898e66416edf7f0c478d73abab83dbe03de19e4f0457d26abb5aefe1431f670cff1f","ssdeep":"1536:OpOPpA6P9rHRFts5dWmj6zzKEpKf7JbcacZwJ8jBl8Q8MdnCW9212FoXV0jtQyET:U6FDTts5dWmOzGoKFoaswoRebX","tlshash":"37e33adcb2d2b07407e75099d43f1206b73a1a16b80c9058f6a6e9c17878ddb5237f7a","first_seen":"2025-11-27T13:47:15.836385Z","last_seen":"2025-12-02T14:58:27.680717Z","times_seen":117,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"js.wpadmngr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/098_--1.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/098_--1.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 31240\r\nlast-modified: Fri, 29 Aug 2025 06:42:47 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14be7-7a08\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5472c8daE3Srt7M%2BTt%2BKdXzyY3%2Bd47HsM%2B0ukea0bNb1LChlPsIoyhZweUDvoz2t1RhUxtnAHbwn%2FH5FSKu9M8RayltTORV7qjGaoLzUlA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1beeb32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31240,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"3ee4877bdf1f641189e37046f19c9952","sha1":"4a582652dc0aa775442ec6fc249c635174f6bb93","sha256":"73b93415bdded53d89d6b16290383a5c2ad8c74fb88b1093be1cda0b9fb975ad","sha512":"bb63d8f11b7aca262e96cc86b8d7c0ff5d1678b305fd5f06e758718e2f1d6ec8992d2aacdba02ca0199a963fe9a7fa7774673c8945bd79173fc4d4662afcfe23","ssdeep":"768:85Z9HxdJDAbRDm51yetSke1XF3PWqH+2Dq2I7NNjiQJ:85/1ymqQWz+J5Nwk","tlshash":"5de2e17e4396e22aec1000563628ecce65b634734fbac35963e5279cb4cc9b93f50245","first_seen":"2025-10-19T02:15:16.987361Z","last_seen":"2026-03-27T19:42:57.145475Z","times_seen":24,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":270,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/096_-wholesale.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/096_-wholesale.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28431\r\nlast-modified: Fri, 29 Aug 2025 06:42:44 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14be4-6f0f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FXrnmrz6zAwSvn5k4vwBLaYiwkHiB6UZCHRzM6svg0bDTIhBeeiy7j7ROeIADeNtu4DzKWnA4P9rUaKIpLyovMatiE4mjEPF9UeVvCwwzA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1beec32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28431,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"0f2a224fec6267a95043dbebdfe9bedd","sha1":"446cc2ce04b6ed6e56aae76d0ca941531637d749","sha256":"648e0cc21165d2bdd87674d83ef3bfc30daf49607f02f1d766e11ea71455c35c","sha512":"21e62db4758b2c7f1bb293425a8351f09499bacef9c21b02689eeea148e04d5889c559549da8560fe78aafe18e2b0bd5d7e98f91b8e626bb6cf89bec918ad3b9","ssdeep":"768:siroo6CjqSWKfbRcChFyFzoSCBrbThM/uD5+lrYl7Dn:sYrW0T+XQ7grYhn","tlshash":"98d2e102a042aec0be7999661d61a39b267cb8739beed54cd467f4cb23f7042d771848","first_seen":"2025-10-19T02:15:20.393452Z","last_seen":"2026-03-23T06:42:57.632183Z","times_seen":23,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:59.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 14:35:42 GMT","end":"Sat, 17 Jan 2026 14:35:41 GMT"},"fingerprint":{"sha1":"3E:F6:87:7D:18:68:79:FD:23:76:5D:6C:7B:90:75:64:CC:D7:CA:BB","sha256":"FD:93:B1:1C:F0:69:98:29:DB:E2:76:AD:30:DA:23:6B:BA:BB:04:54:58:11:41:09:09:5B:A4:BC:CB:5A:E3:AF"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:19:59 GMT\r\ncontent-type: application/javascript\r\netag: W/\"88a90b4969cdb377be11e515f53\"\r\nexpires: Thu, 27 Nov 2025 18:26:16 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3lSgAAAwBuUwKDAH3BAAAAAwBw7WvFwG3GQAAAA\r\nx-77-nzt-ray: 2a494a154b6866d9d4302e699b72ef30\r\nx-77-cache: HIT\r\nx-77-age: 10389\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":185607,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39248)","md5":"d92a5f5aaa5cb972e18a3886a9838952","sha1":"88a90b4969cdb377be11e515f53ed8af720ba149","sha256":"563ff9e65da46f4d8fdb1517f3c1dce9e63f9f16391d1b2f0bf7c15c33e6df68","sha512":"9e24fdc7c05d6f7cb273cc31dbf326186134c4ad5950a55ff09354c0fe7ad6e41e8b1183eb483f9f0de6e7d5ff2aa73cf82d3c3fbc572317dd70005f1c5917d9","ssdeep":"3072:5B3fUg+28VOk2DG2gjKzElwnRlqI1fsBHisGEolY4o/CXMXpo:D7+28VOk2621ElwnRjfs4s7hpo","tlshash":"00045c993792307441d3a11da9ff53093371506ab80f4884bb4dd8a427adeea51a3ffd","first_seen":"2025-11-25T14:43:10.663757Z","last_seen":"2025-12-02T09:18:34.719134Z","times_seen":264,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ic-nss.flixcdn.com/a/ZmQ5OGQ0NmM1MTljMThmMjUwMDAzNDJiYzQyOTZhNTI/jpeg%2Cs%28w%3A480%2Ch%3A300%29/xc/U1/U1t174/frame/original/2.jpg","fqdn":"ic-nss.flixcdn.com","domain":"flixcdn.com","tld":"com"},"ip":{"addr":"185.76.9.4","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026keywords=HCLIPS-PORN+%3A+HD+XXX+CLIPS+VIDEO+TUBE%21\u0026preview_mode=hover\u0026s1=LTZJZIwxquwYSMCxJZeHJwSKTmYJe30DIrnjrAco-1wPa1glfV2aqrq6TaBL7ptNNn4Moj_KZZGYDoXDoobmDooQuTciRoNPBFiENsHGCPBJyO4_gUIDRUi","date":"2025-12-02T00:20:02.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1029385688.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 14:41:59 GMT","end":"Tue, 13 Jan 2026 14:41:58 GMT"},"fingerprint":{"sha1":"05:60:93:EB:D3:CD:8F:F9:A3:BB:E9:74:7C:66:6E:EC:91:A5:46:DC","sha256":"5C:72:8A:A5:67:37:9D:60:F7:D0:78:EF:E6:37:47:8C:8D:FC:66:5B:93:92:FD:45:D2:AF:FE:AA:D0:22:77:ED"}}},"request":{"raw":"GET /a/ZmQ5OGQ0NmM1MTljMThmMjUwMDAzNDJiYzQyOTZhNTI/jpeg%2Cs%28w%3A480%2Ch%3A300%29/xc/U1/U1t174/frame/original/2.jpg HTTP/1.1\r\nHost: ic-nss.flixcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 46340\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: ic-0\r\ncache-control: public, max-age=1296000\r\nexpires: 1765626748\r\nx-rsic-cached: mem\r\nx-rsic-responder: ic-0\r\nstrict-transport-security: max-age=63072000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-77-nzt: EgwBuUwJAQH3OXoEAAwBJRPCHgH3QCkAAA\r\nx-77-nzt-ray: 56376635532a89bab2302e69d9e1bc25\r\nx-77-cache: HIT\r\nx-77-age: 293433\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46340,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 533x300, components 3","md5":"d72c117ed0cd3d7deae140a3d0825eca","sha1":"1516e4b3231e3431fdc440a5fd96897c6afc487b","sha256":"526f2cbad5a8c7059e0ac95ece25a6a8e20b22084f0b67f568833c593b8914f4","sha512":"4538fd5b368583554893af88127875d69f789b7a937c6da9b12a3ef0570df31171780c96fac6fd786265de69ca0aa23d2ce44405a46816cb00098f13a55d26fc","ssdeep":"768:6DIah7g8PL6wvl1dDoTX8ddEDBSO23N3zGqDO7mMWebr8UKgoDRk9kOb7nkLK8sG:6DIj8TdvzCbWGBJk3zGbe7UKgoNkTcWS","tlshash":"a523f13863768f93fd92697a51950b898347bab03d530cee6cc228f0a48db709d7416b","first_seen":"2025-12-02T00:20:49.397985Z","last_seen":"2025-12-02T00:20:49.397985Z","times_seen":1,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":118,"dns":0,"connect":0,"send":0,"wait":35,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/scripts/asf.js","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /scripts/asf.js HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 22 Feb 2023 16:38:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"63f64502-a92\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bvwm7cwPnncjGU%2FhU7CQXfgMEOZakSnbet%2BkTYMhJL%2FPBVP4qjmCP%2Bfv%2FI0pts8T6ceMGmxbYCl53ILFmbC%2FEfP2GqqtoqYkajvEFzlyQQ%3D%3D\"}]}\r\ncf-ray: 9a76a7e13eab32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2706,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"b0191ea32bd357f18cdcdd82c739d754","sha1":"e9158d2a0035c4477cfc8ad1e462f6a1e3c7650e","sha256":"9a5d48b1ed565a6c36e5cbaa144ead8a89300a2cfb3c9777bab6fedae4425943","sha512":"75a7fe267bde393709fc822fdd5454f952d580ee8993c33bfb03ddb732b72b1217159d7c1337fcd9a195e794e051dc269e773a85bb0d4f1458f0269cde8440ce","ssdeep":"","tlshash":"7f517741f6ae7aa050bb212d8bf741443fad185f71099954fcec0cd91f213aea89270f","first_seen":"2023-10-16T17:48:40Z","last_seen":"2026-03-27T19:42:57.137381Z","times_seen":50,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/067_teases-nearby.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/067_teases-nearby.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25282\r\nlast-modified: Fri, 29 Aug 2025 06:41:54 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bb2-62c2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 41085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q2jkVte4ed97j3t783%2Fgw2uscD3IgH2aPhV%2FQ8V3uXtJODWDJQasvCGXlHsSe4RJERMfWUzCbgRIwhCDGvTn8JujyY8tPCx3%2FfCY0JiiUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1ff0d32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25282,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"5f5e1bdfe175aeceb1822e59b410ae4a","sha1":"d9e4013f22fdf4198c660adf3da07d6393486366","sha256":"02c65a8c032d496cd3d84e8363853f6e9ec38eec17902b24e6ffc0241c023755","sha512":"b9060cf0e8551fdb595061e2fccf093bec83163f90b5d02265cb7a4f6a7ddebdb8ea5a767f2a7e21735c9b4e8de92e825e8a113f6171c42b1789f5cbf148f8fb","ssdeep":"768:PkmsNt90GsWpAx/Dc6gSR+/LOxJNBdL2h+p:PVyAsU/DMStJfdLR","tlshash":"45b2f15d024e4cf8598aa0e31f9230305d5fa6931178dbf2e8923cf7f1298b9abd9475","first_seen":"2025-10-31T12:17:27.184967Z","last_seen":"2026-03-27T19:42:56.899553Z","times_seen":21,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":158,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.hpyjmp.com/api/models/ts?userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026tag=girls%2Fasian\u0026sourceId=CDN_campaign\u0026p1=dynnative","fqdn":"go.hpyjmp.com","domain":"hpyjmp.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:00.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.hpyjmp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 22:29:43 GMT","end":"Mon, 09 Feb 2026 22:29:42 GMT"},"fingerprint":{"sha1":"FA:75:62:4F:B4:83:62:D2:DD:21:72:38:A3:60:CB:2E:DA:1F:E3:F0","sha256":"F5:33:C1:AA:61:1C:C8:48:96:5C:58:36:81:E3:91:58:D0:3B:1D:A4:17:3F:70:CF:EC:F2:66:18:3E:8F:6E:40"}}},"request":{"raw":"GET /api/models/ts?userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026tag=girls%2Fasian\u0026sourceId=CDN_campaign\u0026p1=dynnative HTTP/1.1\r\nHost: go.hpyjmp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:00 GMT\r\ncontent-type: application/json\r\ncf-ray: 9a76a7f13f670daa-OSL\r\naccess-control-allow-origin: https://hclips-porn.cfd\r\naccess-control-allow-credentials: true\r\nvary: Origin, Accept-Encoding\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1106,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"143fbfeceb2609006a6236e999683fca","sha1":"9c9e38f1c4dce9622f9df219847a029588fa5dd5","sha256":"7ca44008c98f79a6679c6cfe347076f15d680a0b2fc9630116458320feb04e92","sha512":"0fb9f792607db86b1411731c7b676c2fcb3628d109d137d0dac886723f7ceac211858643ca877e5729939b91c1576dd8e1b4373cc86df6e572c382253988f1d0","ssdeep":"","tlshash":"7c11d0972554c86e2c117a816ddf4407e106313a70d078ca57d8d97594fccac320fe97","first_seen":"2025-12-02T00:20:49.400856Z","last_seen":"2025-12-02T00:20:49.400856Z","times_seen":1,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":34,"dns":6,"connect":6,"send":0,"wait":41,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:02.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:46 GMT","end":"Mon, 19 Jan 2026 08:35:45 GMT"},"fingerprint":{"sha1":"24:7C:52:9A:14:62:BE:F8:93:1F:AE:0D:94:C9:F5:D1:B7:6C:B1:16","sha256":"4E:59:5E:29:62:6C:9E:E6:D9:2F:72:AA:20:76:DD:CF:73:BC:E3:95:17:09:AD:C0:7B:3F:55:8E:44:6F:E9:58"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:fBIOreG_OjF4VT53IK2MUSKlgoU5lw:vU2yE4A_cclxLuJB; Expires=Thu, 02-Dec-2027 00:20:02 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 02 Dec 2025 00:20:02 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S-12901205:1764634802383509\u0026ifkv=ARESoU3Ur04tOTrRsg7f4zBKCCpLmkWlqIvBQPUzqH78k57n1CQ5DiSAbPzzdVER2zcXaaF9GEixsw\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-opener-policy: unsafe-none\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: script-src 'nonce-g5qUOl8v_EqO7m9HoliuEA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":335,"timings":{"blocked":137,"dns":0,"connect":36,"send":0,"wait":49,"receive":0,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/071_japanese-despondent.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/071_japanese-despondent.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21555\r\nlast-modified: Fri, 29 Aug 2025 06:42:00 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bb8-5433\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c53%2FUW4xNUSgBUrP5A1nLz2xnKjLt4nHMAaMbvWiJahzSZG1%2FUJbZ%2FI9t8YVbHnPgX%2BWrRAeizegU3LTYxXhYhqkIWUiKPEXW9lL1zx4qw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1ff0b32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21555,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x300, components 3","md5":"e5e76488730648f1a87435e491a44e63","sha1":"520dee5b0833d364e9f84bf24c9bc5538faa4f78","sha256":"16d3efcd3c879b98150ca9b76d24952411a61c1002cf01a4fb42bc2c18bd8352","sha512":"516a3e450834e819cc7902131036d9de300e3515d5518381de74fdce22015059f9a688759917e2de739d046d9d508c469860b99dbadcb07a917b91abb470ba7e","ssdeep":"384:4D7LyQSO1/aQltLpLWc9ziBJkrGzav7xpXIgZG/bQi9qcu9/pllkVkfMhwkxI:FViLWOrmgVVA/eXJkFhwcI","tlshash":"53a2d0a1a6163efccfb7183b4a5253a197c8554c78901b5ae64942f49b372cf85c7383","first_seen":"2025-10-05T06:06:00.063969Z","last_seen":"2026-03-23T06:42:57.770402Z","times_seen":23,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":220,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA11QQWrEMAz8Sj8QM1Lk2N5zzy209AGOk7SBbrJsypKCHl85LKXUwmbQjDSWGOwb4gb0QOnEOAGayCU4YUde9On5RYV032/zMK6bK0VFonjSFkhJVFhiFCUfQoidekT1ZNAaBSMQuFOBtgoL9q1IRQ4gDdC318fjkgXXljt7GK62ylCpDEfsBK6FwU+xpJRz6FPo+pCnSGkiYJSRc6py6Ef5nC9bc1mviyvTcDhbU8fs/eGD32iqviVp2f5lB3qk8/a9FNU/whr+PgUOl//snbkDZ/PZ09KhhW7unN+3682V9WypWu24UqxBSWxDt3yd89e8Lgdda2wf/dhN4wQqWRIVZsaQox/7PlPohh88+/wTvgEAAA==\u0026cb=e2e_692e30b0eb92b6.38965978","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:01.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 14:35:42 GMT","end":"Sat, 17 Jan 2026 14:35:41 GMT"},"fingerprint":{"sha1":"3E:F6:87:7D:18:68:79:FD:23:76:5D:6C:7B:90:75:64:CC:D7:CA:BB","sha256":"FD:93:B1:1C:F0:69:98:29:DB:E2:76:AD:30:DA:23:6B:BA:BB:04:54:58:11:41:09:09:5B:A4:BC:CB:5A:E3:AF"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA11QQWrEMAz8Sj8QM1Lk2N5zzy209AGOk7SBbrJsypKCHl85LKXUwmbQjDSWGOwb4gb0QOnEOAGayCU4YUde9On5RYV032/zMK6bK0VFonjSFkhJVFhiFCUfQoidekT1ZNAaBSMQuFOBtgoL9q1IRQ4gDdC318fjkgXXljt7GK62ylCpDEfsBK6FwU+xpJRz6FPo+pCnSGkiYJSRc6py6Ef5nC9bc1mviyvTcDhbU8fs/eGD32iqviVp2f5lB3qk8/a9FNU/whr+PgUOl//snbkDZ/PZ09KhhW7unN+3682V9WypWu24UqxBSWxDt3yd89e8Lgdda2wf/dhN4wQqWRIVZsaQox/7PlPohh88+/wTvgEAAA==\u0026cb=e2e_692e30b0eb92b6.38965978 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: __uvt=s%3A32%3A%22b093803177f334c2cc2092c496ee81d7%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 02 Dec 2025 00:20:01 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hclips-porn.cfd\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":1,"connect":25,"send":0,"wait":29,"receive":1,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f93c382250.1f0355218f.com/in/show/?tag_ab=a\u0026site_id=311433588\u0026adblock=0\u0026testab=0\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=hq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=0\u0026conditions=all,dch_ip,tz_offset\u0026ssp=3964\u0026page=https%3A%2F%2Fhclips-porn.cfd%2F\u0026refdom=hclips-porn.cfd\u0026auction_time=1764634802\u0026subid=485853577\u0026sid=85749476\u0026tcid=0\u0026ver=8.243.5\u0026ver_c=\u0026spot_id=1433588\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2025-12-02\u0026iabcat=IAB25-3\u0026user_fp=3062215412326782139\u0026score=96.99402384581049\u0026kubik_score=97.592\u0026kaminari_bot_ip=1\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D485853577%26spot_id%3D1433588%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fhclips-porn.cfd%252F%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=\u0026crid=\u0026crtid=b0681ff5c1739e7f8bdbb8527f77d810\u0026url=https%3A%2F%2Frcdn-web.com%2Ft%2Fr.html%3Ft%3Dhttps%253A%252F%252Fvww1.com%252Fsmart.php%253Flink%253D9915616%2526var%253Dremoby3_10301541_600415%2526ymid%253DGkMuhLLIBx72YjBIyIxv4SBsTy1RYIWTOozRQIh5UPmJAEYC1GBTlerx8ACbhQB\u0026icons=Z2ReyewbLgGxk4HNxZ0DAt3gWM_jBp95qirWEDfKv46PCix8j6tAOHSgKkeTn2KT1TZNz6MRJtiYB_7cADQyCdnG9DC1ZNO2MSghB14dGOYBKj0E5g6oAJXytCzClpJulWbeRWMFg9Gja-gFvATOvL0fNRc8ucw5H5emCnL1CwyOGwSjrA\u0026ext_cid=0\u0026px_id=1330877744\u0026min_cpm=0.1977294678976989\u0026out_id=1\u0026campaign_type=lq-pop\u0026aid=4217\u0026cid=22320\u0026uniq=\u0026mid=6129685428074245754\u0026skin_id=52\u0026vertical_id=0\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.08846122684579102\u0026cpm=0.010740907706479022\u0026verify_hash=b8491cf1426458d73d4ccf3c7cb4220a\u0026verify_hash_v2=a623e9352e4941c4ddbcb6ece31b1d1348494b25d2f9f599f58d5abe85693f30\u0026is_native=2\u0026real_bid=0.0003799999952316283\u0026original_bid_usd=0.0003799999952316283\u0026original_bid=0.0003799999952316283\u0026show_type=0\u0026exp=0\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=89,4,150,20,27,0,108\u0026need_redirect_show=0\u0026applied_features=coef_095,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=0\u0026image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_083be47dfc3e28c9a68305b76181a5033bc45790.webp\u0026site=native-push-adult\u0026price=0.0003799999952316283\u0026hostname=auc-inpage-hz-10-b\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=adult,hd\u0026pop_cpc=0.0003799999952316283\u0026ext_campaign_id_str=\u0026is_webview=0\u0026client_price=0\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=\u0026is_in_app=0\u0026auc_domain_type=hash\u0026script_type=general\u0026tma_wallet_balance=0\u0026processed_keywords=Adult%2CHD\u0026is_iframe=0\u0026traffic_category=adult\u0026iframe_click=0\u0026estimated_ctr=0.028265546950683305\u0026social_network=\u0026publisher_id=116783\u0026advanced_pub_id=120847467\u0026user_click_counter=1\u0026lv_id=0\u0026service_spot_id=0\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026entry_source=direct\u0026is_second_price=0\u0026payment_model=cpm\u0026final_source_id=0\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=iosNotification-view-m_m-body\u0026mlf=1\u0026mlc=1\u0026cpa=a1388a43-6b2c-4789-a42c-dfae66838317\u0026prev_step_diff=1456\u0026st=0.05","fqdn":"f93c382250.1f0355218f.com","domain":"1f0355218f.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:03.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1f0355218f.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 14:04:17 GMT","end":"Thu, 26 Feb 2026 14:04:16 GMT"},"fingerprint":{"sha1":"91:AD:7C:21:B5:6B:FF:3E:E7:14:52:3B:D9:19:76:C7:36:D9:6F:CA","sha256":"D1:F9:1F:D4:16:D5:AB:B7:FE:AC:D9:81:A9:14:2F:D3:AA:65:2D:E9:EC:90:49:7A:82:0C:38:82:9C:BC:84:F0"}}},"request":{"raw":"GET /in/show/?tag_ab=a\u0026site_id=311433588\u0026adblock=0\u0026testab=0\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=hq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=0\u0026conditions=all,dch_ip,tz_offset\u0026ssp=3964\u0026page=https%3A%2F%2Fhclips-porn.cfd%2F\u0026refdom=hclips-porn.cfd\u0026auction_time=1764634802\u0026subid=485853577\u0026sid=85749476\u0026tcid=0\u0026ver=8.243.5\u0026ver_c=\u0026spot_id=1433588\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2025-12-02\u0026iabcat=IAB25-3\u0026user_fp=3062215412326782139\u0026score=96.99402384581049\u0026kubik_score=97.592\u0026kaminari_bot_ip=1\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D485853577%26spot_id%3D1433588%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fhclips-porn.cfd%252F%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=\u0026crid=\u0026crtid=b0681ff5c1739e7f8bdbb8527f77d810\u0026url=https%3A%2F%2Frcdn-web.com%2Ft%2Fr.html%3Ft%3Dhttps%253A%252F%252Fvww1.com%252Fsmart.php%253Flink%253D9915616%2526var%253Dremoby3_10301541_600415%2526ymid%253DGkMuhLLIBx72YjBIyIxv4SBsTy1RYIWTOozRQIh5UPmJAEYC1GBTlerx8ACbhQB\u0026icons=Z2ReyewbLgGxk4HNxZ0DAt3gWM_jBp95qirWEDfKv46PCix8j6tAOHSgKkeTn2KT1TZNz6MRJtiYB_7cADQyCdnG9DC1ZNO2MSghB14dGOYBKj0E5g6oAJXytCzClpJulWbeRWMFg9Gja-gFvATOvL0fNRc8ucw5H5emCnL1CwyOGwSjrA\u0026ext_cid=0\u0026px_id=1330877744\u0026min_cpm=0.1977294678976989\u0026out_id=1\u0026campaign_type=lq-pop\u0026aid=4217\u0026cid=22320\u0026uniq=\u0026mid=6129685428074245754\u0026skin_id=52\u0026vertical_id=0\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.08846122684579102\u0026cpm=0.010740907706479022\u0026verify_hash=b8491cf1426458d73d4ccf3c7cb4220a\u0026verify_hash_v2=a623e9352e4941c4ddbcb6ece31b1d1348494b25d2f9f599f58d5abe85693f30\u0026is_native=2\u0026real_bid=0.0003799999952316283\u0026original_bid_usd=0.0003799999952316283\u0026original_bid=0.0003799999952316283\u0026show_type=0\u0026exp=0\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=89,4,150,20,27,0,108\u0026need_redirect_show=0\u0026applied_features=coef_095,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=0\u0026image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_083be47dfc3e28c9a68305b76181a5033bc45790.webp\u0026site=native-push-adult\u0026price=0.0003799999952316283\u0026hostname=auc-inpage-hz-10-b\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=adult,hd\u0026pop_cpc=0.0003799999952316283\u0026ext_campaign_id_str=\u0026is_webview=0\u0026client_price=0\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=\u0026is_in_app=0\u0026auc_domain_type=hash\u0026script_type=general\u0026tma_wallet_balance=0\u0026processed_keywords=Adult%2CHD\u0026is_iframe=0\u0026traffic_category=adult\u0026iframe_click=0\u0026estimated_ctr=0.028265546950683305\u0026social_network=\u0026publisher_id=116783\u0026advanced_pub_id=120847467\u0026user_click_counter=1\u0026lv_id=0\u0026service_spot_id=0\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026entry_source=direct\u0026is_second_price=0\u0026payment_model=cpm\u0026final_source_id=0\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=iosNotification-view-m_m-body\u0026mlf=1\u0026mlc=1\u0026cpa=a1388a43-6b2c-4789-a42c-dfae66838317\u0026prev_step_diff=1456\u0026st=0.05 HTTP/1.1\r\nHost: f93c382250.1f0355218f.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Tue, 02 Dec 2025 00:20:03 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"f93c382250.1f0355218f.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/112_x2x6f5de60018d92bd879-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/112_x2x6f5de60018d92bd879-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 34252\r\nlast-modified: Fri, 29 Aug 2025 06:43:00 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bf4-85cc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 41085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kWMB%2BE1Qv6jahzGMRZzPZu8lltDCl9LCTUp1qsNt6u9iTPMgSSJOmYknfTY1nvkL%2B4mps2eEY0izhfM%2Bu8s5GuHMILxVQddg1cE7pHCJEQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1aedb32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34252,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 640x639, segment length 16, baseline, precision 8, 400x300, components 3","md5":"7933a9c74e1afd59d899aef510afb068","sha1":"d4b55426373d2951aaf0dfb76fdf926ed4062d92","sha256":"757c0cdbed9771ed4778b3c6e9222ee1a3209d325ae79b583089e9a930962a6f","sha512":"f4c9057820a7f345f81c462e16c7c02072d8099072bcb1c873769f072c747a748aac2d45f29aa8b60d2fb2ea2d1050af5371aa158b792143af1b5de23a1ec03e","ssdeep":"768:ciwzhsCf2jb44CPGeRiPfBYrXk2uM44NR9pSvXPXKuwWl8370w2Sv:/wz2I5M36r7uMP3psCo3w2A","tlshash":"2cf2f193865bceba18c9f1bfab4e556ab58bdcc3809b80f0c25560fd993f8527141289","first_seen":"2025-10-05T06:06:00.11616Z","last_seen":"2026-03-27T19:42:57.099106Z","times_seen":26,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":264,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/108_--k1.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/108_--k1.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24129\r\nlast-modified: Fri, 29 Aug 2025 06:42:56 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bf0-5e41\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L0CijFvz8bMUzJp00isDDLQdDcczvda0QF32ocSPTY3Tke%2Fqvkxy4rX36NjWnhrO4z82niw29Y2v8Cgw7OxGojBJm2dSEwwWbP2fOWesoQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1aede32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24129,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 853x852, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"504efff3261d35044d811d89056a4746","sha1":"6c95f337aec8830610508a8d2cfc276dcd52c2e1","sha256":"b65ed5b51cfc8a38b13e594f309069c060c0302be90065ac3f9a88fb0d7f03db","sha512":"64d68aab8116cbde790098e9bcf86d951baed9749cf8de0a5ec0ad41a23c62402f77bbc4669602fcfa0eb2595dcdf71d0d8e83931c57c7172be806c9881222ed","ssdeep":"384:8Ai/cELUblMCChAvlMKWsu4C/n8GzAAB0kxVGVyRPpwjcURzW+NdYMNQ:8AkcELUCtWvll6nrzxB0oiyRPaj1capC","tlshash":"e7b2e16ae1ca2622c4b103a3624d1d765a8e0f464af27b934804dff4ca9f9546cfb917","first_seen":"2025-10-05T06:06:00.09492Z","last_seen":"2026-03-27T19:42:57.068596Z","times_seen":26,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":217,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/scripts/aqj.min.js","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /scripts/aqj.min.js HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Jan 2023 16:57:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"63c58208-15d9c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cMeAIGzKshy2W961ItDyrPBv%2Be6X5yGj0SNefbY6HYnlRfVWgwueW9ELPUaxHGQzmEH%2BJEvANs5Q9DhF8c4tCq4ELBuRPgZ70OfWiBBqRQ%3D%3D\"}]}\r\ncf-ray: 9a76a7e13eaa32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89500,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"7c14a783dfeb3d238ccd3edd840d82ee","sha1":"ad886e472b3557f3dc7dfa2bc43468ab8d1cef5b","sha256":"80f04717f32ea0320c5e8618fbacedd1fee3a8775ad8292140a6113551d4b5b0","sha512":"fa3e021ca60a9adbe570c6565c7370727904c4396c23a4c519daf258d05fae3e17bfb7607a0ab6dfe2b7150a4ec1b6a95e6d49675291be5f6a4e5679ad78d858","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:DIh8GgP3hujzwbhd3XvSiDQ47GK/","tlshash":"6f9309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:06:20Z","last_seen":"2026-04-03T18:56:07.888804Z","times_seen":16441,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/imges/native/backup/stripchat/sweet_kaia_3.jpeg","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:00.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 07:32:01 GMT","end":"Sat, 28 Feb 2026 07:32:00 GMT"},"fingerprint":{"sha1":"30:27:D8:5A:59:AD:E2:2E:0E:9D:6A:5B:1B:BF:60:BE:D2:80:8B:DF","sha256":"A9:DE:14:B5:E6:07:9A:21:0C:4B:AC:5D:B3:F1:DB:EB:1F:27:9B:A9:C9:AD:51:72:F0:5B:0D:91:81:C1:D3:6D"}}},"request":{"raw":"GET /imges/native/backup/stripchat/sweet_kaia_3.jpeg HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: cookie_user_id=a3478f5e-53f5-5f37-994f-8bde9a7ba683; bfq=APeIECNCx5YaOWbIkGEDRxcWIsYU3BLjoYgyE2PcsEHjhowYMmDA6NJH\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 29854\r\nserver: nginx\r\nlast-modified: Mon, 10 Nov 2025 10:05:50 GMT\r\netag: \"6911b8fe-749e\"\r\nx-robots-tag: noindex, nofollow\r\ncache-control: max-age=172800\r\nexpires: Thu, 04 Dec 2025 00:20:00 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS5833\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29854,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 300x300, components 3","md5":"84c00f4bf5ec02872f0fda9796d031b9","sha1":"445e9effab28ea604419cd4a6683bf1efe88f4fa","sha256":"ddc5f6722def0e52e3e38eb832da5a860d0783f7c744055e24b73b3aa03ecfbe","sha512":"fe888e4b8df4ea1f327c8891a540296bdad6bf6d22a86e7d2800bfafbbf78e209ce2dd45cdc90853402805a374de30ccec71708597ef1bdd42839d3ed151d2a3","ssdeep":"768:ncNc1iQtBDWSSFuQGC7eB9dahAnSwnAbSA6jcpNqg:ncN2dtBfS8QGMeB9dahyBBXIb","tlshash":"77d2e1a64fe8ad92f85571717df65fc0334a863a5a3003fe38c084366f5a6d3194f824","first_seen":"2025-06-25T15:14:16.996324Z","last_seen":"2026-03-22T08:13:39.654231Z","times_seen":12,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/234/616_reprobate.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/234/616_reprobate.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23310\r\nlast-modified: Wed, 06 Aug 2025 05:52:12 GMT\r\npriority: u=4,i=?0\r\netag: \"6892ed8c-5b0e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PsCP7VX6KUJjSaFfGjWPkOKgu%2BhGn9iH2v4zMiLp3bG59Q4v1Pz0abphYRSKfylF98Nw7To9LSHkk%2B40rjcfKJLaBIkwOmcT7CvA9Rtjhg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e16ebb32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23310,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"e8aec48b6e3831e36993cded4335f759","sha1":"d671edbc1798ace85326b481b7f4f8cd6215dddc","sha256":"6ffa0ffff1c090af5d73adee08d0b193cf7dc19fd2144b2fdc3963cb4a5f9c59","sha512":"acf4e747e1edfa67cffb5be27c1410fb52e38905a91911900af0181bdb92e349191c46f970c111ff7da5346ab6264f93dfc46acfed4b3881bb023f496c04fc9d","ssdeep":"384:OUZzPEO+BlKvwRjAupjq6cVKIAc6lpvsPzyT2Q0kMvZMF8EZpyjh:Op7BwvSjAuGUNF0o8EZpyV","tlshash":"7fa2e13293a7c012b36636525382f6601c6295f000d6cf0993b7fef4e5bb70b794a5d6","first_seen":"2025-11-29T11:26:28.228994Z","last_seen":"2025-12-16T05:53:54.09197Z","times_seen":6,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":340,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/060_x-tinker.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/060_x-tinker.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17712\r\nlast-modified: Fri, 29 Aug 2025 06:41:38 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14ba2-4530\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 41085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tSWghZWdNDfwrxJsgf1t%2FbRT6u616j2XJYJuKdpZdyTBO08iwhKheKAk1Hmul0uVIyeYlF%2BG5AXQV5lP5yR%2Bc%2B6CV3OYVQtnUW1HJNNucg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e21f1932fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17712,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"5c179c78ce50491b440347b758b0cfde","sha1":"7ccdde388523d38a7f812203fd743838d543d912","sha256":"fb59f0ed4706e37f20e90dff6287da0e4f027e4713445422b51dc2c4ea47521f","sha512":"f0dbf5369b23c0e48e5bbc5d24fb058cf7d681209a5cdf299d032bbe762de0c59389716a050c712106d154ba1e9243f283e136d4154ec021e62633708423298b","ssdeep":"384:e/TbKF1/3mIvJ1eIi1WakfMBr0ZM8IahIYT7t4M1:kbKHWUeaakkV0ZMBad/t4W","tlshash":"d982c0ded559f63bcd343d23e1426d4070aa808114e81bad4556148af7bdede4ec68c9","first_seen":"2025-10-31T12:17:27.190936Z","last_seen":"2026-03-27T19:42:57.135726Z","times_seen":20,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":251,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/036_womanlike-ohashi-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/036_womanlike-ohashi-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22101\r\nlast-modified: Fri, 29 Aug 2025 06:41:08 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b84-5655\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CpjmMqcwldwzwAZu3jRCk5NeEJv7OVUbSf1ik7HYOauhElxNRYpJHkvQ3gYiNJ0cI0kmswLQxjVK4I%2FOC3VX8Ght%2BXrPdvWuNeW9mrEzbQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e28f3132fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22101,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"2f1317ccb60d29e775de6a4bf0f0d8b5","sha1":"0bcb5647693db52c8970ec51121d942f121a0009","sha256":"bd5ac6e3d9253798d33fa8a78a6bb1f11e228010aa17686125fc715f31fe07a0","sha512":"4737ff7d04bc42b55ff83c782f3df9a09d42dea88eeb724ebbe547f778c3b77fda6c6c728090ff447f873ff1f444218c65f99b860ca83e7043139e680fc21426","ssdeep":"384:b1bJvf7UhzIJHp5sq85lMoIh1wDqCAbVPZh15rd+tsCQDeOWGcM6H860U2iEiq:Bl7uzIJJ5sNfc1weCAb7h15es5eXGpUE","tlshash":"78a2e0128110e54b556c4db80c9b94364e49cd7f8cc92ef34d7a4bf239706fe4b06253","first_seen":"2025-10-31T12:17:27.109864Z","last_seen":"2026-03-27T19:42:57.135007Z","times_seen":18,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":144,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/037_hclips-milf-skivvies.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/037_hclips-milf-skivvies.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19220\r\nlast-modified: Fri, 29 Aug 2025 06:41:09 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b85-4b14\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 41085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l5JZVEnRJ29PgdQgO8CEMAoUXUb3nYZkfoIq%2BSv2WqjT4vgCuyH5XJ5Et52YIYgO0RfK0LcVDlPkgF48UIGVeX9HZDZcvpnsOWNUdLHvFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e28f3032fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19220,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"44851af7495fc1a0c1db06f2671f3e16","sha1":"94ff40f8ff8a7e24165c43e7bc67178e0d596d5f","sha256":"44c00f66872392de9ebf43b31a7ac27fda7b0b203ed72285812e45c80ce7e61a","sha512":"944d45b09baafaba7247db3676d80c6190957e2edba5d168a9dc8d049555a1a5f7926e0162f8226f0782ad4593dff3d4990d7f837619d5200f8f722407a7ba5f","ssdeep":"384:Gx5GgY7Hg5rptD5u4355Z3XOX5dKK3da/UrBMAqDOHS2uw/uWkwz5ftX9zKW:GzGdHotD5ug7EX5a/7DeS2HGWFfd9zKW","tlshash":"dd82d0b91f7f86b046d80727de421974024ccaab47d5f550878b74f5ac3d8afbe185a0","first_seen":"2025-10-31T12:17:27.080636Z","last_seen":"2026-03-27T19:42:57.109255Z","times_seen":19,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/623611/8e4d551c37e0849d99b9d795e0f0ab99925f04b1.jpg","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rtbrenab.net/get/?go=1\u0026data=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","date":"2025-12-02T00:20:02.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/623611/8e4d551c37e0849d99b9d795e0f0ab99925f04b1.jpg HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rtbrenab.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22570\r\nlast-modified: Mon, 15 Jan 2024 11:57:42 GMT\r\netag: \"65a51db6-582a\"\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version\r\nexpires: Tue, 14 Jan 2025 12:02:04 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-77-nzt: EwwBX63NDQH3Z96nAQwBuUwKAQH3AwQAAAwB1GY4EQG34xzAAQ\r\nx-77-nzt-ray: 2a494a15ef3a6de8d7302e692e288f0f\r\nx-77-cache: HIT\r\nx-77-age: 27778663\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":22570,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 300x300, components 3","md5":"4ebb2cd55c49b82db3c50f18498ce874","sha1":"8e4d551c37e0849d99b9d795e0f0ab99925f04b1","sha256":"5225e5f7af447ea6bcbf00d07996b31dfa71b0bd686184ebcb2e0d279a01a2a5","sha512":"b5a72157b142db0adb344beacfa55af140c2509892026fba19330ad76021e18c6967402ceb2a869ac72f0a4fa235f722130d1d3949277db12818323059f44d01","ssdeep":"384:OTP7ZuQXXQFl38V86aSuu46FCpTrd/DeYR0Q9ynYPdp0OLX3Urt/9bYRaZC:OTEic3RLoFgCYRNL3A9bcaZC","tlshash":"aaa2cf2d56392ec87d3f561ef2d06eb286e222512f180a5b1cc70b879496f1b48dbf1d","first_seen":"2024-01-30T13:43:40Z","last_seen":"2026-03-30T01:11:06.510419Z","times_seen":94,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bookmsg.com/creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790_icon.webp","fqdn":"static.bookmsg.com","domain":"bookmsg.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:03.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.bookmsg.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Nov 2025 02:32:10 GMT","end":"Tue, 24 Feb 2026 02:32:09 GMT"},"fingerprint":{"sha1":"29:5C:89:52:D7:80:3C:68:75:40:DE:B6:BD:B5:5F:35:72:C7:1D:EF","sha256":"D8:38:DC:B0:0F:D6:AA:DF:02:2B:D2:7C:72:6A:97:38:42:7A:02:CE:89:F1:AE:0B:95:0B:DF:F4:4D:18:1E:DE"}}},"request":{"raw":"GET /creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790_icon.webp HTTP/1.1\r\nHost: static.bookmsg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:03 GMT\r\ncontent-type: image/webp\r\ncontent-length: 486\r\nserver: nginx/1.24.0\r\nlast-modified: Fri, 31 May 2024 10:56:43 GMT\r\netag: \"6659aceb-1e6\"\r\nexpires: Wed, 02 Dec 2026 00:20:03 GMT\r\ncache-control: max-age=31536000\r\nx-cdn-host-id: DS5058\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":486,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ceeb4e8840c24621c0e0352b42b38a5b","sha1":"03cbceb0134a39267014595938705e2916580644","sha256":"50cb77ae9715629235f102dd53a68559df1b64416f71179dbb4aa942725790b3","sha512":"80d4128488580567597ba5eb65dbff2dd4a8efc625c64cac6a027a1bb5c229545206669f04a50a252b54f471bee4fdc892e6bfe8347a50dd216bba67bd671a03","ssdeep":"","tlshash":"9bf00544191cd36c2a3c607afd74eb74a4074aa459226017cce447b08956811e856c1c","first_seen":"2024-02-20T18:30:33Z","last_seen":"2026-04-03T18:52:28.670864Z","times_seen":10777,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":94,"dns":46,"connect":20,"send":0,"wait":19,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-02T00:19:57.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=06IiFHmYmB1PhHhblzQSlgvARRYKA%2Fv9TP0R072ekLFJ0kWvJbQ5lOTktkkCDMaKEShSGtKoh7SsFGN0pj8BqubIdULluMgmSuoIJjoWDQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: 07703aded3c6848c9c99b6be0d6c5474=deleted; Path=/; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:01 GMT\n090e621d3974b5ef07e55ea947a6ccbf=noref; Path=/; Max-Age=86400; Expires=Wed, 03 Dec 2025 00:19:57 GMT\n74cb3a1086270c57e87a73565fee0b80=noref; Path=/; Max-Age=86400; Expires=Wed, 03 Dec 2025 00:19:57 GMT\n79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; Path=/; Max-Age=86400; Expires=Wed, 03 Dec 2025 00:19:57 GMT\n6cad29f337c0737293ec3c3ada398eb4=%2F; Path=/; Max-Age=86400; Expires=Wed, 03 Dec 2025 00:19:57 GMT\nc1fbee398ec90caf6f208bb55a474685=1; Path=/; Max-Age=86400; Expires=Wed, 03 Dec 2025 00:19:57 GMT\r\ncf-ray: 9a76a7debf538be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"TrafficStars","description":"TrafficStars is a self-served ad network and ad exchange that operates mainly in adult-related verticals.","website":"https://trafficstars.com","common_platform_enumeration":"","icon":"TrafficStars.png","categories":["Advertising"]}],"data":{"size":78044,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (360), with CRLF, LF line terminators","md5":"8cf78d867105668e9fe2e9274387c6cb","sha1":"fa11ba19cb408f4301a4c019397e529e36f269dd","sha256":"750d17c1504740dcc5552e3daf6466d92d240d9cf90a4826ba7e24cd9afe7d3b","sha512":"9b3d914ba259b659488178eb052c0c05246cbe25473c4e4a897544ebd979e7d1f94443d099a37288bdfbb9d9ee6ad1b19ec5fb91a5ed006ac4ffc030c93adeaf","ssdeep":"384:HnMatOLFc19LrGCR0zEk/lG1am+dNM4e6l4VVbpxzCfiRS:HnMfLW9LyI0zF/lsap+Ifi4","tlshash":"6b738a6186d2843b8973c5c246a99faefe996207c1825645b7ec37c71ffae01fc13429","first_seen":"2025-12-02T00:20:49.411064Z","last_seen":"2025-12-02T00:20:49.411064Z","times_seen":1,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/050_uchimura-in-hardcore.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/050_uchimura-in-hardcore.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18193\r\nlast-modified: Fri, 29 Aug 2025 06:41:27 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b97-4711\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DxjA3rBbTm%2FujSY%2FbNL%2BBJmCfinZ4KFMbL0lTYFrnsDWs%2ByzSLqo%2Fv4Z68p4jFMrLoXmKfyGDHQAxGhWiW62U1vOU3ZfFoZ4L1I9TXdWZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e24f2432fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18193,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"3b9cdf9245c8324510152632dfbde9a4","sha1":"96491e6e851e4903c63ba54dbd456db639cb4e9a","sha256":"a416ed7515cbb7af7ec7e34d0555439e875bb80975c7df5e5ed214e8c482b4c5","sha512":"3cc356ced1da0b8a264971d6c87c546fffb0cea9d03979f74354312de9686265424dcf6333809d59a3833d906637c686c37a987e225cfd27b3fce250517c09c6","ssdeep":"384:rTgt3wzS5Xq65dA+kVz4ilgeRKtRX5AkiVsNHFgCYCzV4Vvg/E+hT:rk6645V8mg4oJcV8lg5wB1T","tlshash":"9f82d0cd636c150a5e541dd8e0aec9df9afbad44da7b074f200544f4ca9a1327544e08","first_seen":"2025-10-31T12:17:26.959446Z","last_seen":"2026-03-22T10:23:03.807529Z","times_seen":17,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/130_akino-chihiro-xxx.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/130_akino-chihiro-xxx.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19641\r\nlast-modified: Fri, 29 Aug 2025 06:43:23 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14c0b-4cb9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VY3Iwy22KvGoMKmzK%2F4%2BgYucsct22utUF7dBmk98voew4gKcJZE1xkQJPmFCKPooUbaO0Zn286ikg7P1mj222vmz8mD11syf1wpiLSking%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e18ec832fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19641,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"7a06fd72cf1acbcfac02a6366ed0bc1f","sha1":"c6308a5017338627edeb9a065d515c5cd2c0bfaf","sha256":"26acfefef6905757b1fbd42ce665b4f7e4accf10bbbfa6ad34f23e8665c9c315","sha512":"12dc1d8ea73f36e376cb18180e83e9c47b9844e5611c438dc73a2337845b30360f67210251ed8a727c10470e53d2f3d05d78e76b50b6e849ca29861f00609964","ssdeep":"384:Z2Z+8BlZbgUrtYb8j2AQ+hi4Sr8VAuUODxM5ILzDlXm3T2G7q7DVNjYN:Z2Z+8Bfbg6jQ+hi5r8VqODxMW/JXmT2I","tlshash":"3c92d0278f54044e8cb45f964149f6802e11e8349607d43274edbbd2a4f2bbb6e4bf63","first_seen":"2025-10-05T06:06:00.086628Z","last_seen":"2026-03-27T19:42:57.086702Z","times_seen":26,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/126_to.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/126_to.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24503\r\nlast-modified: Fri, 29 Aug 2025 06:43:20 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14c08-5fb7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 41085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w1T0%2BsBALnjeDEGkxmto%2FKgk0XkZ4H1NWpYLNzRQApfJGQSs6aYpPgnY57XN0Qvdkku5cibm%2FGBFv0qKpcM%2FAUCc%2BP2kmsrHVOlQlHLIYw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e18ece32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24503,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"5a0823a297fc3b55ea2766391a6330b5","sha1":"400a20797209ebb4a965fa5a38e8522b064f50f8","sha256":"41fea39f4be52d78703b8123eff180ef17ba05145c4866b24f018a74c6fc5ad8","sha512":"2f9d471ee87593ec5d3dbcc9a735eb2eec451ace102d12448ed9b944d0521e226078fd868591e4ca1bfe0ac169a30e3500b8eb7c870e3da90f31dd8341eb2650","ssdeep":"384:2pVmaDbA/nvJJNB/8hsHTPSaUeCxVYJNsh7ZVkd0kw/cR/u7666OqdyZyN:s4JJNB/KMtCxVkZw/cR/u7666OO6c","tlshash":"f8b2d0559f14231a9d745e7306984e91e3537abf6b82c6fda540b2cd8368cd00fa9a2c","first_seen":"2025-10-05T06:06:00.112991Z","last_seen":"2026-03-27T19:42:57.012427Z","times_seen":26,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":304,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/100_--.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/100_--.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24843\r\nlast-modified: Fri, 29 Aug 2025 06:42:50 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bea-610b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DVNpZNAZ6eEJN44M7frVPaENDFkDJl6YykAOBRlXqxMdDzDO9sAYp%2F7Xlb%2FBNLQUFfCYpJnwtotT1ZKja7Y66Qe0wz%2B9YdvqbdBbLbjINA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1bee832fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24843,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"40e945f3f9a4dbfc02fcf28e058d7551","sha1":"8f0aba0dac426b70ec3fb510ec9b9e25b2b8764a","sha256":"971e2ba1213501b98a474d0e585034866c113e759c272a267ce21a07ba61ae4d","sha512":"7ef134c166959f44cde99bad1ecc61006d54ea2e58f8f6f183618f423ed79c2b53b891a564b835414ef1021ce6592b4d1cc1073355adbf789f141b3d3f6c5f40","ssdeep":"768:wkE1jBD+7gnGWuO/szla6nvAj9HnhRloIodKofL:wB+UGWd0ztnvAFloVUUL","tlshash":"3db2e15887279dbf17e81e32e7ac856ec5f000aa26759b47eba6bac400704477268e17","first_seen":"2025-10-19T02:15:16.746826Z","last_seen":"2026-03-27T19:42:57.128645Z","times_seen":24,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":167,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.cabnnr.com/banner-admanager/build.m.js","fqdn":"js.cabnnr.com","domain":"cabnnr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:01.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.cabnnr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Oct 2025 03:33:00 GMT","end":"Fri, 09 Jan 2026 03:32:59 GMT"},"fingerprint":{"sha1":"85:63:AE:48:6B:AD:8D:E9:E4:CD:7F:E2:D7:5B:64:4D:77:5B:E4:C3","sha256":"9A:63:5D:CA:8D:4E:67:CF:06:6E:57:73:69:15:F1:FD:98:61:8F:E4:00:90:48:4D:6B:F3:D6:73:32:4F:D3:38"}}},"request":{"raw":"GET /banner-admanager/build.m.js HTTP/1.1\r\nHost: js.cabnnr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 28 Nov 2025 10:02:11 GMT\r\netag: W/\"69297323-15004\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 02 Dec 2025 00:25:01 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86020,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"91d6dc1d186222b2187a485ff1b5eb71","sha1":"08da08e51bf80d074d5e7a2652f2bab04747bad1","sha256":"0952562045d829b7788a430dad577ca03bfac5dca71a069fffbfd3930062252c","sha512":"e62a98499335b7552c2818ef33744a68a99f44f57f3c8a8b527a976f804fcde0fd5c94a254cd8b2ecbe83502ece17c92a3a333fc6918dc0d8ddb63ef1b6bc626","ssdeep":"1536:T16pn6bOBjpIDxrTaNEsa1DFYx6mgIE9XpMI46BhMSH:s96dTaNtIK4m8546XH","tlshash":"0e835c843290b4b541e640af943f4306f3392d06b80ba458f66dedd67b79e89a173f39","first_seen":"2025-11-28T11:54:09.308109Z","last_seen":"2025-12-02T11:51:57.049665Z","times_seen":29,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":71,"dns":44,"connect":25,"send":0,"wait":49,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.adspector.io/sync?ssp=44","fqdn":"a.adspector.io","domain":"adspector.io","tld":"io"},"ip":{"addr":"104.21.15.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:01.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adspector.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 03:16:35 GMT","end":"Wed, 11 Feb 2026 04:14:56 GMT"},"fingerprint":{"sha1":"70:93:AE:0A:86:B3:EC:6A:26:43:0C:59:15:5C:6D:1C:C5:C6:F8:11","sha256":"16:49:F6:10:DA:6C:F1:EC:DB:5E:3C:6B:52:FE:1B:B8:2A:EC:A0:D1:73:71:15:1E:94:F3:29:C7:95:AB:81:A3"}}},"request":{"raw":"GET /sync?ssp=44 HTTP/1.1\r\nHost: a.adspector.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Tue, 02 Dec 2025 00:20:01 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5NJ3bzBSYVeYHAKieWhmTczep68gDL02%2Bju7%2B6NTSyxkT9mSLOhsSf2%2FnQRq9VQ%2FysmrBgBz7XpwtB2njHQs0tO7SZd39ASOuvUJ2%2FVW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9a76a7f68f73dfec-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":4,"connect":6,"send":0,"wait":3,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/104_x3xf71e91795568880121.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/104_x3xf71e91795568880121.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18284\r\nlast-modified: Fri, 29 Aug 2025 06:42:53 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bed-476c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U2YX0SB7p%2F5TTnQyUANMI2JhuKQ9MHC%2FjIsWCyJw8PDiyGlMg8vSKopkkPlTuSCIndPBp6W%2FnG4Cei%2BLZCpgbYPyrjpAuujHEVYhLbWgPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1aee132fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18284,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 640x639, segment length 16, baseline, precision 8, 400x300, components 3","md5":"3676333a633d8699b7b7c4d182bb5a5a","sha1":"7497cc791596abcb32523ed71606026d4e814111","sha256":"a2790a3dc20e6d7951cb0311d64441503fa41b3728268cb846fa0ce1a490b8fe","sha512":"2c201af1119a3477f707a815a9fd4667ef0c8c06aa2510b339fddc93176c20c288af2561521afb6f3b2bf2e95555150d6b34fc1acc3ae6c5313def7ccf112378","ssdeep":"384:kbM8L9y+4z02nqiVVeJJTx0z37+DjS0jq5lDAHddu:cMu9ydRvEJTx0z3K2R5lWdu","tlshash":"2f82e147d132a829ec6ac5fca489523b6fd18c8271439ba5473871f8d8c064b175fcab","first_seen":"2025-10-19T02:15:18.758072Z","last_seen":"2026-03-27T19:42:57.138431Z","times_seen":24,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/066_ewedghyuweuyhfdhhuehuheuw193.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/066_ewedghyuweuyhfdhhuehuheuw193.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16971\r\nlast-modified: Fri, 29 Aug 2025 06:41:51 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14baf-424b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TURFE%2BFshy%2FNoNW32tU5SiLmvJr5zvYdt3GBRsqNt5YrvAQMEcoSf8cfpA4LASVbNlqlhuhUaATdwOgtI%2F1ryfFmRj9Sdl0GrvS3ffqxvQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e20f0f32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16971,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"6643ed88ba386a93ad1b67f41a45728e","sha1":"cd077b4b562ce666b159145650c163548143c0db","sha256":"8b25d17830646e658aaa731ee21601ce76fef99304c6a6f92fd5bff72d100f87","sha512":"3f1e151f0d5031e01dd5a93f6cfaae9e19e19611410e468f77c7036d5d36297c1fd50437e53363d086a6c2c52b011114641ca3fef9189af17387732b95cdf2e9","ssdeep":"384:e3erAAfUg9vmJm96n9ODJcmk2Z/CCoP77fNkWQq2aHaxEXV:adAdA+6n+JZqbPORaH0EXV","tlshash":"7a72cf08f31c91b2c76a633459d24af2774e5dcf7cab1748a49924e7f841087898b3bb","first_seen":"2025-10-31T12:17:26.868323Z","last_seen":"2026-03-27T19:42:57.139462Z","times_seen":21,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":194,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nereserv.com/in/dip?site=native-push\u0026wl=1\u0026event_id=6da971e5-e6e4-485e-80f4-4e2ae98f6a15\u0026subid=485853577\u0026sid=85749476\u0026spot_id=1433588\u0026created_at=2025-12-02\u0026timezone=0\u0026ver=8.243.5\u0026is_native=1","fqdn":"nereserv.com","domain":"nereserv.com","tld":"com"},"ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:01.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 02:00:40 GMT","end":"Sat, 24 Jan 2026 02:00:39 GMT"},"fingerprint":{"sha1":"2B:72:A9:3F:14:00:92:B9:05:AC:BC:3B:22:CB:D9:87:80:23:C8:3D","sha256":"60:5B:BA:7E:5F:7A:B1:E0:55:4D:4C:29:EA:C7:21:68:37:AF:03:5B:A7:3D:15:98:F1:65:96:AB:4A:3E:17:3B"}}},"request":{"raw":"GET /in/dip?site=native-push\u0026wl=1\u0026event_id=6da971e5-e6e4-485e-80f4-4e2ae98f6a15\u0026subid=485853577\u0026sid=85749476\u0026spot_id=1433588\u0026created_at=2025-12-02\u0026timezone=0\u0026ver=8.243.5\u0026is_native=1 HTTP/1.1\r\nHost: nereserv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Tue, 02 Dec 2025 00:20:01 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ic-nss.flixcdn.com/a/OGE4NzA5NWE4Y2M3MTQwNzE4NWMyOTM2YjFiZGNiZjg/jpeg%2Cs%28w%3A480%2Ch%3A300%29/xc/7o/7oYV05/frame/original/3.jpg","fqdn":"ic-nss.flixcdn.com","domain":"flixcdn.com","tld":"com"},"ip":{"addr":"185.76.9.4","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026keywords=HCLIPS-PORN+%3A+HD+XXX+CLIPS+VIDEO+TUBE%21\u0026preview_mode=hover\u0026s1=LTZJZIwxquwYSMCxJZeHJwSKTmYJe30DIrnjrAco-1wPa1glfV2aqrq6TaBL7ptNNn4Moj_KZZGYDoXDoobmDooQuTciRoNPBFiENsHGCPBJyO4_gUIDRUi","date":"2025-12-02T00:20:02.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1029385688.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 14:41:59 GMT","end":"Tue, 13 Jan 2026 14:41:58 GMT"},"fingerprint":{"sha1":"05:60:93:EB:D3:CD:8F:F9:A3:BB:E9:74:7C:66:6E:EC:91:A5:46:DC","sha256":"5C:72:8A:A5:67:37:9D:60:F7:D0:78:EF:E6:37:47:8C:8D:FC:66:5B:93:92:FD:45:D2:AF:FE:AA:D0:22:77:ED"}}},"request":{"raw":"GET /a/OGE4NzA5NWE4Y2M3MTQwNzE4NWMyOTM2YjFiZGNiZjg/jpeg%2Cs%28w%3A480%2Ch%3A300%29/xc/7o/7oYV05/frame/original/3.jpg HTTP/1.1\r\nHost: ic-nss.flixcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 33004\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: ic-0\r\ncache-control: public, max-age=1296000\r\nexpires: 1765559718\r\nx-rsic-cached: yes\r\nx-rsic-responder: ic-1\r\nstrict-transport-security: max-age=63072000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-77-nzt: EgwBuUwJAQH3U1gDAAwBJRPCDQH3OVECAA\r\nx-77-nzt-ray: 56376635532a89bab2302e69d3770d26\r\nx-77-cache: HIT\r\nx-77-age: 219219\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33004,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 533x300, components 3","md5":"68f4cfb1d59fa2e553dc003bec261f78","sha1":"09b759bfea840a4d4ff716d3e546170c9b85555a","sha256":"0bbb8c4ec0e006a1d60b3cf46b44750ef0fc40c1fe915e3f1c02dffeae652c0b","sha512":"5fda721ba4d2c3a21d406e440679d7e807e8cc39741ad8878cb4bd1bf10a5e03b9daccc5ce2048aacb0a805814d88018f442f856e13e9a56c9baee2339cbfaed","ssdeep":"768:6cP3bYvKqg9nCpoy3QvRtqtTUrYGTuf32uRKGC:6O3bVqBoyMRtSTaYG6CGC","tlshash":"bbe2e19202c37da2f2667bf45ba39f61b0ff7f38001972a71be830d51d91b784546958","first_seen":"2025-12-02T00:20:49.417207Z","last_seen":"2026-03-06T18:02:48.737315Z","times_seen":10,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":122,"dns":0,"connect":0,"send":0,"wait":30,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/236/299_foremost-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/236/299_foremost-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24920\r\nlast-modified: Fri, 29 Aug 2025 05:42:32 GMT\r\npriority: u=4,i=?0\r\netag: \"68b13dc8-6158\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WacWxf5E5SrsXd5nSNl3y7Bk192YKq0d0HWDzhyij7DrHp1iWTQdYgObC4RgkDCjnaxG64h3pb5TjzewWsXpCMXZe23wDyCj%2FtWq5rRWCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e17ec232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24920,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"6edcb653f2d9efd6c9f42374e7f06644","sha1":"34f908490e29c141053166fb535164d4c9894882","sha256":"a2538d4e4871b4a4172fb25251b5be31b5a68528ae478320b679dfa081711bb1","sha512":"30b6aebc2335144b681b9db76cfb87e2a82a308d4eb5e10fd4647475e0a20c87bf0a7f21d1146c587599e1576f510beaf30fe3563d48ca0b6e71f12bbde071a7","ssdeep":"768:MiaAOR7q+zfdOb8oCdiE4TAAjHcbfHn3xxs9jODgPk:MrfdeGUAALcz3MMkM","tlshash":"cbb2e15d3a233eab11875f3bf5be0faad6bab532b5751b9400ba5cc39980b2510bc540","first_seen":"2025-11-29T11:26:28.288563Z","last_seen":"2025-12-02T00:20:49.418363Z","times_seen":4,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/070_yoshino.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/070_yoshino.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 36622\r\nlast-modified: Fri, 29 Aug 2025 06:41:58 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bb6-8f0e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ciAzO4gc3ejoXUAosgCpPl%2FeueFuwcJIs4DsJGbbj9SSts%2FGtt%2BGfzNsTMBtYcatR0bBq%2FfhxrSjO4gHs95PNyqIzJ%2F0YxCtO6Zr0%2F7WlA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1ff0c32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36622,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"60cd141ac57926c9c7e4fd69859cfaaf","sha1":"d0f8f84d2ae295e77a05c70796f4f02cdffb8e38","sha256":"0b9e20db4228f5085f8fc5127671c3750e2c546fdbb74a668109aa54b97cb6ef","sha512":"a8814e51aa33f047db991637632f407457fec083c7be21f71cd92922c7d31e989a1a8b5c09083e4b506eaa0dc5b2285baae2b36bdecd8594cfe73ee56c0adb3c","ssdeep":"768:8KpuKgziOaZvuFSv48wGOeXjiHtCUeSP4XaeGrRmopCPnPSwyCUm83B:80gz+vuFSwrBEjiHtwSBeKTCACUlx","tlshash":"e3f2f1c4b40c463abb7472aee30366b2d50474dc5068db66d2a8e3dfcf33b9548d5911","first_seen":"2025-10-19T03:23:59.311115Z","last_seen":"2026-03-27T19:42:57.115635Z","times_seen":23,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":288,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/062_anna-xxx-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/062_anna-xxx-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19319\r\nlast-modified: Fri, 29 Aug 2025 06:41:43 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14ba7-4b77\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zdHl7RaPujaMOAKkZMAf0sLOxD%2FzUneSVPp%2B2kkV4Ba6egZnGki0zT%2BEx1u%2FL7CQSsJW21refX3KUHQpmEuJJzzFKbiCElSjyc4XytM6aA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e21f1632fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19319,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"b0de1ca5d310e909407252bbdf0484a3","sha1":"1be6267157f5c1c365a50da401338cd70d8d1373","sha256":"c4cdff8de5506be977b0ff9e42a6c6323021d7f909e5376caf2e83c9c9e0a784","sha512":"a9bcb202fd9cb0b9ae7a5f8f0080c23f7eb0d21ca8a2d5c69b791d06c6811aba18d5890112838f498d271315a4b3303d53b11c9e71a72e3c9fe12e3c777eb419","ssdeep":"384:aIASjk6z2q2ws00ts/bqo2E+g/GU52b+KLyIDzGCY/7jpqiXI:aIAZW2q2Dfpo2EjJ5uyUz1gPkCI","tlshash":"d082d0c68b3e3627a76c44da913d8e25a2355c79403207eaca8d5df39caabd12059622","first_seen":"2025-10-31T12:17:27.014656Z","last_seen":"2026-03-27T19:42:57.070064Z","times_seen":20,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/042_japanese-milf.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/042_japanese-milf.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25702\r\nlast-modified: Fri, 29 Aug 2025 06:41:15 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b8b-6466\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2wPp3Z5NcrkLU3K%2F%2B5Im8Io9u81dTypUtQ76ydEg3i6uSXEsmwUe5Ggs0ZLcQNicYajobb6LOYO2I9YW4qAbhEMoLP0eDqyJWdbAxFw1og%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e26f2b32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25702,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x300, components 3","md5":"e0a28a3eec60a400f5b56a6d8f616b24","sha1":"5e5570ed5d6979a98d1eefeb8e93d92e6e42387e","sha256":"19d5ddcdc8647a7e1830bf74eb4a6084424ec5123fcfbba001c6b2f2436a8e40","sha512":"9114267af473b2fefc57ef8b554862bdbf231a1507be50effc01e6114d335028c9a9c0af6831817b33c610f93fc5b80b95233bc356abaebf5485959bdeae2fd3","ssdeep":"768:18KbVvCInvdNgXCF89HfW+aOJHlXhhV0L9pXEg:18KxaVCCVe6JFhhi30g","tlshash":"03b2d0ac37c99849ce924a656e9457c33d2b0709399ca713328fcbc29ba0fd8ed11665","first_seen":"2025-10-31T12:17:27.202863Z","last_seen":"2026-03-27T19:42:56.758038Z","times_seen":21,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA11QQWrEMAz8Sj8QI8lyLO+55xZa+gCvnbSBbrIkJaSgx9f2LqXUg4WQZjSWCch1SB3gA4YTwQlAA5oAhsmgY316flFGPY59ysOymZSUWdihWoAQWJlYhBWd9156dSDqsKRlECIJFhYpg1qFAnKWuWYGANWDvr0+tosFVGce5Iqy+SqBcu2QwIFAVejdKCmEGP05+P7s4ygYxuIy8EAxVDroR/qcrlt3XdbZpDE35+opTm4+8Iuu8i2ypfKuckBbOW7fc1L9Q6xw9y2gufzv3kB3iin7lWCxcUE3c4nv27qbtFxKqaoN9lWgXpHLD+1xneLXtMytXTV6zr2zQmIRUuxzYJ9lCGPOyAI8jD9Y3SMcvwEAAA==\u0026cb=e2e_692e30b0eb8230.63936712","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:01.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 14:35:42 GMT","end":"Sat, 17 Jan 2026 14:35:41 GMT"},"fingerprint":{"sha1":"3E:F6:87:7D:18:68:79:FD:23:76:5D:6C:7B:90:75:64:CC:D7:CA:BB","sha256":"FD:93:B1:1C:F0:69:98:29:DB:E2:76:AD:30:DA:23:6B:BA:BB:04:54:58:11:41:09:09:5B:A4:BC:CB:5A:E3:AF"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA11QQWrEMAz8Sj8QI8lyLO+55xZa+gCvnbSBbrIkJaSgx9f2LqXUg4WQZjSWCch1SB3gA4YTwQlAA5oAhsmgY316flFGPY59ysOymZSUWdihWoAQWJlYhBWd9156dSDqsKRlECIJFhYpg1qFAnKWuWYGANWDvr0+tosFVGce5Iqy+SqBcu2QwIFAVejdKCmEGP05+P7s4ygYxuIy8EAxVDroR/qcrlt3XdbZpDE35+opTm4+8Iuu8i2ypfKuckBbOW7fc1L9Q6xw9y2gufzv3kB3iin7lWCxcUE3c4nv27qbtFxKqaoN9lWgXpHLD+1xneLXtMytXTV6zr2zQmIRUuxzYJ9lCGPOyAI8jD9Y3SMcvwEAAA==\u0026cb=e2e_692e30b0eb8230.63936712 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: __uvt=s%3A32%3A%22b093803177f334c2cc2092c496ee81d7%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 02 Dec 2025 00:20:01 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hclips-porn.cfd\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA11Q7UoEMQx8FV9gyyRNv+63vxUUH6Db29UF7/a4lWOFPLxtFRE7tIRkJpOUwW4gHkB3lA6MA6CJTIIRNuREHx6fVEj3/bYcp3UzpahIFEdqgZREhSVGUXIhhOjVIaqjGtZGxELwSKwCtYoKdlakRQYgDdCX5/t+qYJbz51dVXZfZai0CkfsBG7C4OZYUso5jCn4MeQ5UpoJmGTinBod+lbel8s2XNbr2ZT52J2bp4Rouw9+MTS+JbFc56oH2tN5+zwX1T/EBvezBbrL/+o3+pR9QWqPpc6FbuaUX7frzZT1VFNNbSg1gQYlqT90y9clfyzruZfRR/Fp8gWTKwgTZR+PMqfRx9FRKUj2C8mxex2/AQAA\u0026cb=e2e_692e30b0eb6f90.10016432","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:01.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 14:35:42 GMT","end":"Sat, 17 Jan 2026 14:35:41 GMT"},"fingerprint":{"sha1":"3E:F6:87:7D:18:68:79:FD:23:76:5D:6C:7B:90:75:64:CC:D7:CA:BB","sha256":"FD:93:B1:1C:F0:69:98:29:DB:E2:76:AD:30:DA:23:6B:BA:BB:04:54:58:11:41:09:09:5B:A4:BC:CB:5A:E3:AF"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA11Q7UoEMQx8FV9gyyRNv+63vxUUH6Db29UF7/a4lWOFPLxtFRE7tIRkJpOUwW4gHkB3lA6MA6CJTIIRNuREHx6fVEj3/bYcp3UzpahIFEdqgZREhSVGUXIhhOjVIaqjGtZGxELwSKwCtYoKdlakRQYgDdCX5/t+qYJbz51dVXZfZai0CkfsBG7C4OZYUso5jCn4MeQ5UpoJmGTinBod+lbel8s2XNbr2ZT52J2bp4Rouw9+MTS+JbFc56oH2tN5+zwX1T/EBvezBbrL/+o3+pR9QWqPpc6FbuaUX7frzZT1VFNNbSg1gQYlqT90y9clfyzruZfRR/Fp8gWTKwgTZR+PMqfRx9FRKUj2C8mxex2/AQAA\u0026cb=e2e_692e30b0eb6f90.10016432 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: __uvt=s%3A32%3A%22b093803177f334c2cc2092c496ee81d7%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 02 Dec 2025 00:20:01 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hclips-porn.cfd\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":1,"connect":24,"send":0,"wait":28,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fh-wgt.com/api/request/v1/affiliate_1?exp={%222008%22:{%22g%22:%22b%22,%22v%22:2}}\u0026language=en\u0026orientation=straight\u0026quantity=4\u0026target=video\u0026utmCampaign=ai.mxY","fqdn":"fh-wgt.com","domain":"fh-wgt.com","tld":"com"},"ip":{"addr":"104.21.63.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=zAks3GzF_zZzMDGBaFyAw4kCzdqvlzrYuqSnh4nwBhXL8mf987QbNJq8NcmfGYVt-VAUiy8mSTYdx0hZz1sBDqhG_nUtzvKnwm-SIZ6QxG_Tytk_gUIDRUi","date":"2025-12-02T00:20:02.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fh-wgt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Oct 2025 07:34:46 GMT","end":"Mon, 12 Jan 2026 08:31:45 GMT"},"fingerprint":{"sha1":"1F:39:26:5D:89:FD:89:58:E9:FE:18:68:D6:A0:DC:A5:5E:BE:2B:21","sha256":"FA:B4:8E:E6:FC:1A:A4:6C:F7:C4:C9:E7:32:A9:4C:73:00:BB:31:5E:5A:68:EF:BC:5A:34:37:34:79:B4:0E:B3"}}},"request":{"raw":"GET /api/request/v1/affiliate_1?exp={%222008%22:{%22g%22:%22b%22,%22v%22:2}}\u0026language=en\u0026orientation=straight\u0026quantity=4\u0026target=video\u0026utmCampaign=ai.mxY HTTP/1.1\r\nHost: fh-wgt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cdn-fc.com/\r\nOrigin: https://cdn-fc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:02 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: https://cdn-fc.com\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-headers: Cache-Control,Content-Language,Content-Type,Expires,Last-Modified,Pragma,Access-Control-Allow-Credentials,Access-Control-Allow-Origin,X-Referrer,X-URL,x-stats-uid,x-guid\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 600\r\nx-robots-tag: googlebot:noindex, indexifembedded\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U7OHMl6znfQGNRSbFJa4mbdLQYpYdX2Riq8kgdBV8AfqAOscdYITERTRu6VWcbPyOn2jcW4dI7yhSiaPhH%2FzwZZQR8ELoVH0AUA%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9a76a7fa48cf5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3996,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"cb04bfa905e89709427a64c615faaf08","sha1":"724bed542c53485720b4f6c8cdb9c225d974e260","sha256":"2630d949e4d5230d8d4a0049dd72b1f472b214d6a2fa3d4cdc3dc387b97e17e3","sha512":"179d496ee8e39747d65f6e1b00e6f40cf61d205d1264922c2aef2b00781fc0f3fecb72f5183333e1b253717dd978d536fe6c097be1c369f06294b01977c84cb4","ssdeep":"","tlshash":"318153f70b9e0b5b0bd827c6884bf85da1e52c0a48d0ef83fc51da8d013c8ab557e596","first_seen":"2025-12-02T00:20:49.421231Z","last_seen":"2025-12-02T00:20:49.421231Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"fh-wgt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"fh-wgt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"72c5f4f03e.482e528949.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxMTk4NTcxMzU4MDExOTU1ODAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIyLjM5LjIiLCJ0YWdfaWQiOjI4MTIxNSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjowLjc2LCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9","fqdn":"72c5f4f03e.482e528949.com","domain":"482e528949.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:01.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"72c5f4f03e.482e528949.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 02:48:05 GMT","end":"Fri, 27 Feb 2026 02:48:04 GMT"},"fingerprint":{"sha1":"F2:12:38:86:54:A9:0E:26:D7:00:85:86:1F:1B:53:DE:99:AF:5D:F3","sha256":"B7:C4:17:44:16:5F:00:A2:4D:95:53:38:93:2A:BE:F3:03:3E:32:68:1A:36:18:95:04:8A:35:70:19:A1:53:1C"}}},"request":{"raw":"GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxMTk4NTcxMzU4MDExOTU1ODAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIyLjM5LjIiLCJ0YWdfaWQiOjI4MTIxNSwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjowLjc2LCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9 HTTP/1.1\r\nHost: 72c5f4f03e.482e528949.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:01 GMT\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nx-cdn-host-id: AH1747\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"72c5f4f03e.482e528949.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/bi.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:59.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 07:32:01 GMT","end":"Sat, 28 Feb 2026 07:32:00 GMT"},"fingerprint":{"sha1":"30:27:D8:5A:59:AD:E2:2E:0E:9D:6A:5B:1B:BF:60:BE:D2:80:8B:DF","sha256":"A9:DE:14:B5:E6:07:9A:21:0C:4B:AC:5D:B3:F1:DB:EB:1F:27:9B:A9:C9:AD:51:72:F0:5B:0D:91:81:C1:D3:6D"}}},"request":{"raw":"GET /sdk/v1/bi.js HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:19:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 11 Nov 2025 11:07:54 GMT\r\netag: W/\"6913190a-1e16\"\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncache-control: max-age=172800\r\nexpires: Thu, 04 Dec 2025 00:19:59 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS5833\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7702,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7623)","md5":"0f2df2696dec627783d1eb7170feea2d","sha1":"37e2e42f854e007185c942897b2a55e5d06a52eb","sha256":"45d1b15de00ad4e8b8551c7144dde989af93e1c9f3f91c514e3dc99545ef0ebd","sha512":"98e561b81de15c6d0f7269a0608f3c8a42ada04b6941bbe54933d75875b0fad3a708025a085f950a45bbb18ee8859d9918144b56f58f30969e36d93b0b786183","ssdeep":"192:p3osvtOztEOzGSC6npKyxtuyMYeUYK7r62Fii4zTd4/iiL/u:p3VOt/1pKEheUFrCDzTd4/iaW","tlshash":"45f1f9fa758231a4996794a1c5afe61fb6387a15360f8c50c07af5823c78dcb9037e6c","first_seen":"2025-11-12T10:23:36.745664Z","last_seen":"2026-02-09T11:49:45.468172Z","times_seen":349,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/072_hclips-couple-finalize.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/072_hclips-couple-finalize.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19666\r\nlast-modified: Fri, 29 Aug 2025 06:42:03 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bbb-4cd2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 41085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x%2FTaYtxA5C4ERFhho9UC6sGVPJD7aEmAXgZCJaf8UAcPUq9A8kuZamWEPwqPc5%2BCShfTO0Lo8NmMjp%2F9c8ZAPQXom0Kn2QAgiq1eZiKwJQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1ff0a32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19666,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"01a75b025d7a65fc1f2a5c298e23b368","sha1":"8c0a315f19905cf1c88337687f2ffafc49472020","sha256":"908b4dc1eb2e5a27e58ee9fc30e287ee5ec6904f301c64d9fe43e5f71cb882f8","sha512":"dd99024e069bcebb58a5044afe4a6368d30eee1e3546b8d70a4a9d833b6dad7b6804eabeac9a93b0816b4d5062214d0be31c092fcec1a5af94b9cbfe0fb3d3fd","ssdeep":"384:w7U44GcoAcNzghMzn4MVstKLmsomcvV7UC/Jt1rgDs+jSRGVl/B6:uco9jTba8mssvRbb2DHO8Vl/B6","tlshash":"f192e09d72ec91f0cbbde1b9a6393328539d303946df5193c20229d5450ace68ade64c","first_seen":"2025-10-19T03:23:59.117959Z","last_seen":"2026-03-27T19:42:57.000175Z","times_seen":23,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":178,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/quicksand/v37/6xKtdSZaM9iE8KbpRA_hK1QN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:59.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/quicksand/v37/6xKtdSZaM9iE8KbpRA_hK1QN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28244\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 25 Nov 2025 20:28:02 GMT\r\nexpires: Wed, 25 Nov 2026 20:28:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 532317\r\nlast-modified: Wed, 27 Aug 2025 19:19:09 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28244,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28244, version 1.0","md5":"9d503278216c2225184a236c64e0924b","sha1":"0c24c621374506ce70403a7473b47acd86bbf919","sha256":"2add7d60b1cd2ab84c9967e23d5ec08eb3fc9635c46855b17d59404dec6b410e","sha512":"fa1aca723eb40b6026aa1d21b36ce2573e4164516c9a0b55ff830a434c3954833a06b1df76236b1d682107df1bd3d263ed19cba854c1a6795566a7091749696d","ssdeep":"768:/6zZ6KBVHUlHvwCa0z1sCvODsIBMTKmJ3GG5x4:yzdKvwtszvdNjz4","tlshash":"3cc2e083d14afb33d0afb77adc52d022e9756bccec7e587a97a900398895c1b0644285","first_seen":"2025-09-02T18:36:17.739185Z","last_seen":"2026-04-03T19:33:43.563224Z","times_seen":7390,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":121,"dns":1,"connect":20,"send":0,"wait":22,"receive":21,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1764634770/98120209_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.223.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:01.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1764634770/98120209_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:01 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8180\r\ncf-ray: 9a76a7f2b99bb4f4-OSL\r\netag: \"85c4cb3efa3b2c390061c618da2019a9\"\r\nlast-modified: Tue, 02 Dec 2025 00:18:52 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 4\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8180,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"85c4cb3efa3b2c390061c618da2019a9","sha1":"9ac7f1eafeecbc3e429293e90b57340b10beef34","sha256":"317aef4045480c3f6e157bc695e99f78a7b6138361a1c3e30091c7612f3c068b","sha512":"7ea0c1c79dae0ff3903317a672430a9e6e567df8f8c0c671260990cf0bca8e130003a8143516718c367b439da9e84a1ce1c4100ef51d6aca47f46e1e40688912","ssdeep":"192:CNEPh8pv0MP8v+NBZaaLjvnDquz28Jd8dxXCSqdKow1xCirOgPiWvIMD:CaZc0rvIB8cfDqa3z5ADCirNSMD","tlshash":"6ef1af62c25f3ebed3c4dd990856d21bede7bf1408e2172d462868e710ecee1845687d","first_seen":"2025-12-02T00:20:49.423295Z","last_seen":"2025-12-02T00:20:49.423295Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/057_flannel-ruru-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/057_flannel-ruru-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21034\r\nlast-modified: Fri, 29 Aug 2025 06:41:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b9f-522a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sDQvYgpwj2LyaBMt8yyOXfAbSdSjmyRDgNpsHU%2FQ3AklUbKmOT7Ctjz%2Fu3LEb%2B4Nq3vepv0rSIocmvBOsc8r87klGEEQLoqzQrMS8KJlFg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e22f1d32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21034,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"34d3c60cffea353df4a8919127b6f3df","sha1":"e5159a9cb5a833bab222b1387eb604ed55d5c75f","sha256":"650801f2f5eca088b72b3bc9f357418f8872c9eac684f61fa27ddd82b58173ee","sha512":"29c64ef751ce5a4d15ad868d211e4a357cc793a463a1f56ab462f51512e29d51ea84fa83040c84f70bd2330d7051f0e67a774e51604f04720fcce10802223430","ssdeep":"384:fFFbIHly+T3GlYjJ9AxbdFMPGyajHGrHu/ZUlLP1Wok6V57wBj4vez:f3T09gb8PKHGrOg9WZ4ajz","tlshash":"ec92e148742a395a82088538b9d2eaf527ef3da6f0c44e88a46975d2109eb1c82ad7d5","first_seen":"2025-10-31T12:17:27.062584Z","last_seen":"2026-03-27T19:42:57.041698Z","times_seen":21,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/bi.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:59.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 07:32:01 GMT","end":"Sat, 28 Feb 2026 07:32:00 GMT"},"fingerprint":{"sha1":"30:27:D8:5A:59:AD:E2:2E:0E:9D:6A:5B:1B:BF:60:BE:D2:80:8B:DF","sha256":"A9:DE:14:B5:E6:07:9A:21:0C:4B:AC:5D:B3:F1:DB:EB:1F:27:9B:A9:C9:AD:51:72:F0:5B:0D:91:81:C1:D3:6D"}}},"request":{"raw":"GET /sdk/v1/bi.js HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:19:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 11 Nov 2025 11:07:54 GMT\r\netag: W/\"6913190a-1e16\"\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncache-control: max-age=172800\r\nexpires: Thu, 04 Dec 2025 00:19:59 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS5833\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7702,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7623)","md5":"0f2df2696dec627783d1eb7170feea2d","sha1":"37e2e42f854e007185c942897b2a55e5d06a52eb","sha256":"45d1b15de00ad4e8b8551c7144dde989af93e1c9f3f91c514e3dc99545ef0ebd","sha512":"98e561b81de15c6d0f7269a0608f3c8a42ada04b6941bbe54933d75875b0fad3a708025a085f950a45bbb18ee8859d9918144b56f58f30969e36d93b0b786183","ssdeep":"192:p3osvtOztEOzGSC6npKyxtuyMYeUYK7r62Fii4zTd4/iiL/u:p3VOt/1pKEheUFrCDzTd4/iaW","tlshash":"45f1f9fa758231a4996794a1c5afe61fb6387a15360f8c50c07af5823c78dcb9037e6c","first_seen":"2025-11-12T10:23:36.745664Z","last_seen":"2026-02-09T11:49:45.468172Z","times_seen":349,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/080_uriewqqhqhifdnddsnkjnjfjdfjhj138-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/080_uriewqqhqhifdnddsnkjnjfjdfjhj138-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 30063\r\nlast-modified: Fri, 29 Aug 2025 06:42:14 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bc6-756f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 41085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BySbcy%2F5U8b4zt6yzBm9SVXr9AGVVmVVq19jM5JI04MwFvuoNfetLd9BeMyF%2B82LMdXoGrbHx04NJaX07CIUA%2BUlJsflxbNUZRLrf4BZRg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e16eb632fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30063,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"0c5717e20528a401c75eb311e156be25","sha1":"d8105a519c20edc0aa72a7cc4e7223edf9102e94","sha256":"ce2ec9064336b0bda5f98f333b18b4eb8ba2b921b19865284eeccebf8b1dd220","sha512":"3f26d937a406a2da6249c258a7bed87a3cbf43a4cc52a24bfcef45d2fed45efd62727d2bb640590eed36a83f05c47ea795038632761de014fc488b070945e49f","ssdeep":"768:kZ1X0qewWjOR7hYHUmdh/WPBTqKlcK3KeBP:M1X02WiR7hY0mdhuPB+OcCKex","tlshash":"7ed2e12278b79abfa874756489da0359e37a4080cec700ad407878efa5d27e9c9c65f4","first_seen":"2025-10-19T02:15:14.787805Z","last_seen":"2026-03-27T19:42:57.059418Z","times_seen":24,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/127_x3x50ba1fdabfc98cd2c3-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/127_x3x50ba1fdabfc98cd2c3-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16715\r\nlast-modified: Fri, 29 Aug 2025 06:43:21 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14c09-414b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=32MgWeTB7acSNCrXmQAmi6gBhMMZZvGJnasxVSISPQI7LFwbGLh19YSKOFxYda%2FnUtEwO%2FAxINymsW2BPsCbgmAGxTj3eeu2mSBpzUEMfg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e18ecb32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16715,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 640x639, segment length 16, baseline, precision 8, 400x300, components 3","md5":"7960457af031b40da2718661f4a82fab","sha1":"994c4e2e2cdc7e5ab91833cbaeeaa43c941a8ecd","sha256":"3f379678477b18a9fa84da55bbc64fa047e0c1faaa11bb566af12828d7c41b99","sha512":"6595737be759f6c0e3da27fedadf30aa50433edd04772d1c02638bfd62178590b3096c7d3b6ddf44a289a712fbef2c43aadd2a8b44dc9e92644062b553fefba1","ssdeep":"384:lV4uDa73rPoHpQ5jjh6dWpgi7ZEckGOe9TxQ:ltG3rgHpAjjh6dWllv99Q","tlshash":"8172c07ebe407174da9cc17015d774c3d8d578925c898f22a6a930ec8f7e1c943d8e89","first_seen":"2025-10-05T06:06:00.162496Z","last_seen":"2026-03-27T19:42:57.011172Z","times_seen":27,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/114_gives-winning-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/114_gives-winning-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 30062\r\nlast-modified: Fri, 29 Aug 2025 06:43:03 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bf7-756e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xgat%2Fh8Ujp%2FM6NzgKFHnyV0Zx6kSir6%2Fw8uq%2FDiatccePHB6lHMk58MIo%2BJsTGnuug6FRYJA%2FUvoxUy1ZT1tda5HQM18Q8J9nhNVbGoUSQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e19ed832fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30062,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"acb495353d59b45378dcd4cf6b50aec7","sha1":"33acd9b239f39be6f3ea15579feeaa2002e2e096","sha256":"b3d5b00a6e3482b45e8efe30f9136df42b6c1285e9a4ab907f211b5bc90cbea4","sha512":"15b94bf35c1d577fc90ebacdff77f0ebc8d4f1a79b61b6f77a31cd67dc661965a86fde322d34559635e8ca24e7059cd77555d33beb2f312e52da27c0fe7c2e0f","ssdeep":"768:RJHcL9RzIlcjAN1qU5CKssDeFcQc8HKd4IAsx9myumbl:jHA9V4cjQ1qFsDeWQc8HKqIDl5bl","tlshash":"b7d2f1583ab1248feb1090769e48a116fa985f9c8290c2c7d6db32d1d8f6e4d1f30b5e","first_seen":"2025-10-05T06:06:00.152299Z","last_seen":"2026-03-27T19:42:57.067804Z","times_seen":25,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":306,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/077_side-lovemaking-karin.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/077_side-lovemaking-karin.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19321\r\nlast-modified: Fri, 29 Aug 2025 06:42:11 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bc3-4b79\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CyXfdKKm090VXHLEVUh3XbRYbnuS9PJTC86RmmD6rtPI6YxoEfN1gF7lpvxd1H7T9XDzTBfHq5%2BThnskBA8wOWmEHHRm6L%2BF3WP02PEazg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1ef0632fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19321,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"0aa5498cd1da060b60da9452d3ce7454","sha1":"c9d65cbaa7045df445379ce7bb92e16e2e2b56e7","sha256":"a6899050d901408c1112e96abfacd6b20c07590fa508056adca8620ddd76a2ad","sha512":"26e871a569eff9c3fa042b2561987a20a203f6e0509b0a1c70a99fb653fbb86e8196ad9f7f5addedf9c3c4e6dd53a1975a8181cd17df09cb2a7c519c672a628c","ssdeep":"384:uylBYe3QRQIcvbLrUNLlSrIAuBIYjkZYE51uX/qMaP8RkOGzSu3pN:uylBB3mEvQNpS0FaokyJyfP8+zf5N","tlshash":"d282f110953ce1f6d19e25b7101546fd98a84c3078f716d2afda22fbc6f0ad0b9c6a68","first_seen":"2025-10-05T06:06:00.085134Z","last_seen":"2026-03-27T19:42:57.050016Z","times_seen":26,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":216,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/045_disposal.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/045_disposal.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24021\r\nlast-modified: Fri, 29 Aug 2025 06:41:19 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b8f-5dd5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 41085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XWBymw0D%2FhhkQMRIFsLdbrAxPiZUdtZq%2F1KIiHL6qNuu06YYElIwGlFr4vlvQ6RZ9L7%2BWSl1Sciaaea%2Fmn2rSTjgTMlXWzNJ21AqZk6LTw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e25f2932fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24021,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"35b2282457057db4ada071013571f482","sha1":"7a0f96146bac680240e74c5651d44615af848d20","sha256":"81a9205f64f5626bb0e8ebe19ae3dcce3d2d7edb035bea90368435255a785e21","sha512":"dd098b4ff0e853d13ecfc057a29c481179357c4b09b92fef7fc3b2a984eeeee8162ee3a49e8940bbef737b167fa8b0e91e01f71802a8a2ec3dee80345384d4d9","ssdeep":"384:65pBQ0o5B9tWqBxpr6n6vhVUtBQGGKEO5stxmDmvldOpVDQIf+hzFsrWFevpUBwF:6vBQ0oL9YqBxFbtGGKfCzC2hzF6WFevh","tlshash":"b8b2d0af1fb3e814d2146e4001b85ce9a3aa74c9fed496d669d342e47c243cd1bc16d8","first_seen":"2025-10-31T12:17:27.173831Z","last_seen":"2026-03-27T19:42:57.141263Z","times_seen":19,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":206,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.capndr.com/advertising.js","fqdn":"js.capndr.com","domain":"capndr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:00.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.capndr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Oct 2025 02:32:03 GMT","end":"Sun, 11 Jan 2026 02:32:02 GMT"},"fingerprint":{"sha1":"4F:91:E2:5E:A1:B1:4D:7F:49:01:1E:73:C6:07:EB:0A:BE:44:4C:44","sha256":"7B:0D:8E:03:0E:6E:23:65:30:3D:E8:FC:0C:E7:66:46:E2:5B:7F:FA:FD:D2:FF:61:4C:A4:18:08:24:70:51:6B"}}},"request":{"raw":"GET /advertising.js HTTP/1.1\r\nHost: js.capndr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 14 Jul 2023 08:23:25 GMT\r\netag: \"64b105fd-0\"\r\nexpires: Tue, 02 Dec 2025 00:25:00 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":86,"dns":31,"connect":22,"send":0,"wait":23,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"js.capndr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Quicksand:wght@400;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:58 GMT","end":"Mon, 19 Jan 2026 08:34:57 GMT"},"fingerprint":{"sha1":"56:14:7E:EF:FA:D2:CF:DD:3B:30:9C:AE:7A:C9:AD:9E:A7:87:3D:E9","sha256":"72:DD:0F:82:4D:8A:09:2D:BB:5B:E6:1B:6F:09:F8:1E:BD:BD:D3:3E:B8:A4:8C:B9:49:13:4D:DC:D7:EF:EA:77"}}},"request":{"raw":"GET /css2?family=Quicksand:wght@400;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 02 Dec 2025 00:19:59 GMT\r\ndate: Tue, 02 Dec 2025 00:19:59 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2502,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a24505ab43fb92b485b3ec9db136af86","sha1":"225daade2b7f4394995f97235316a3385d944bed","sha256":"e0307bcbd8d4fd955b90970a7ca30c6d5215d893dfa75777653f849e3451beef","sha512":"4e8e3c2c6e0c475147164ad766ad99776550e57026631b7e6667c265796d39efb3488a7bf433a5c363ea9196f8968b36c785c7be5fdf91e327916c1aa199ca3c","ssdeep":"","tlshash":"3551afd1447f7510db871cc122ce7d32ae4ea1547061d9799ffd1888ac9ac253395b2d","first_seen":"2025-09-04T01:55:54.011593Z","last_seen":"2026-04-02T23:33:51.310314Z","times_seen":277,"resource_available":false,"data":null}},"time_used":1699,"timings":{"blocked":794,"dns":1,"connect":14,"send":0,"wait":19,"receive":0,"ssl":865},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/028_butch-away.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:59.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/028_butch-away.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21722\r\nlast-modified: Fri, 29 Aug 2025 06:41:00 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b7c-54da\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 41085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8JgI5N2aA%2F4su2o7zN%2FCQILCVrsc0KKHOI5tbt4b7kPSraAGsY1%2BgK7BKVgV3sTafy2wWhI%2BYUAB6R8U9DXNnj6knSfSUUgM%2Bcuo8vzd9A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e2cf3b32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21722,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"054228884fba7025be0af6210858ac4e","sha1":"845033a8c39d65fbf71edffeba333b2dc1b899b2","sha256":"904a4e35e5cab95a81238f50e4760fb53c448ac36710f14e65e15ab7457c0235","sha512":"25a5e89a0b0ba4921cee72994f34308c35947ed969ff0808fb0a288ab888f2a8262c26dd2229c2faf5f01a6c69ec1cb9a832d57406df8a055c51b187fee6d3e9","ssdeep":"384:mDYe1rvyi6X0T1eYbisa/zByoDvyLIbF2OrJuHJLPtCYPfequ25Me5vjIX0:mDXTVTjro7yFEJuHJPoSNJ5Me5jK0","tlshash":"56a2e17a67257ba2e7f30b33e893817d84f5391da24497f124d1e8d850952cbb23364d","first_seen":"2025-10-31T12:17:26.889855Z","last_seen":"2026-01-10T09:02:32.789873Z","times_seen":13,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:59.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 14:35:42 GMT","end":"Sat, 17 Jan 2026 14:35:41 GMT"},"fingerprint":{"sha1":"3E:F6:87:7D:18:68:79:FD:23:76:5D:6C:7B:90:75:64:CC:D7:CA:BB","sha256":"FD:93:B1:1C:F0:69:98:29:DB:E2:76:AD:30:DA:23:6B:BA:BB:04:54:58:11:41:09:09:5B:A4:BC:CB:5A:E3:AF"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: application/javascript\r\netag: W/\"88a90b4969cdb377be11e515f53\"\r\nexpires: Thu, 27 Nov 2025 18:26:16 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3lCgAAAwBuUwKDAH3BAAAAAwBw7WvFwG3GQAAAA\r\nx-77-nzt-ray: 2a494a154b6866d9d3302e69f1c0e926\r\nx-77-cache: HIT\r\nx-77-age: 10388\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":185607,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39248)","md5":"d92a5f5aaa5cb972e18a3886a9838952","sha1":"88a90b4969cdb377be11e515f53ed8af720ba149","sha256":"563ff9e65da46f4d8fdb1517f3c1dce9e63f9f16391d1b2f0bf7c15c33e6df68","sha512":"9e24fdc7c05d6f7cb273cc31dbf326186134c4ad5950a55ff09354c0fe7ad6e41e8b1183eb483f9f0de6e7d5ff2aa73cf82d3c3fbc572317dd70005f1c5917d9","ssdeep":"3072:5B3fUg+28VOk2DG2gjKzElwnRlqI1fsBHisGEolY4o/CXMXpo:D7+28VOk2621ElwnRjfs4s7hpo","tlshash":"00045c993792307441d3a11da9ff53093371506ab80f4884bb4dd8a427adeea51a3ffd","first_seen":"2025-11-25T14:43:10.663757Z","last_seen":"2025-12-02T09:18:34.719134Z","times_seen":264,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":34,"connect":6,"send":0,"wait":9,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S-12901205:1764634802383509\u0026ifkv=ARESoU3Ur04tOTrRsg7f4zBKCCpLmkWlqIvBQPUzqH78k57n1CQ5DiSAbPzzdVER2zcXaaF9GEixsw","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:02.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:46 GMT","end":"Mon, 19 Jan 2026 08:35:45 GMT"},"fingerprint":{"sha1":"24:7C:52:9A:14:62:BE:F8:93:1F:AE:0D:94:C9:F5:D1:B7:6C:B1:16","sha256":"4E:59:5E:29:62:6C:9E:E6:D9:2F:72:AA:20:76:DD:CF:73:BC:E3:95:17:09:AD:C0:7B:3F:55:8E:44:6F:E9:58"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S-12901205:1764634802383509\u0026ifkv=ARESoU3Ur04tOTrRsg7f4zBKCCpLmkWlqIvBQPUzqH78k57n1CQ5DiSAbPzzdVER2zcXaaF9GEixsw HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:lDQPW1vN0QQ7WeLWny5zMnJKvxo4wA:nFtkb_xoYw8k8xGI;Path=/;Expires=Thu, 02-Dec-2027 00:20:02 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 02 Dec 2025 00:20:02 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026dsh=S-12901205%3A1764634802383509\u0026hl=en\u0026ifkv=ARESoU1gpf4Y98V79Sz0EieU26IHmEua0ZZd30OX6Rh5UWn8qEwulOvKyxjywzuECKAfawqPmV_-wA\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-Ppia5Ic5VCA-xJNCZc3CgA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 417\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/131_--throat.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/131_--throat.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18799\r\nlast-modified: Fri, 29 Aug 2025 06:43:25 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14c0d-496f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xwd4T%2FQWgvw37NhFJVg%2B0N7a6CAKtc5ybrLKJ5g4pOWP9r5W8QhAQfV%2Fl%2BrvD12vn5BpJJbzuq0KDkZ7r3shGRBI3dFTOWwsQUpbeVA5FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e17ec632fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18799,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"a8abcafe24651f3f12c1081a878829e5","sha1":"e3186a7e0f746a7746d659ccc2f0cd7781e4b08a","sha256":"7941fc96cf8c89535dc0cd571f6e2ec9fcfa1d523c6d7adb9f7d8d0876220b32","sha512":"aaa90be20b77735493941a980abd9f32e4886ef3e725ea26c71be82a9381871ed6ec9e095fcd6a90ac8a1866888e33b36d56af7cd26392366cd167f9971be399","ssdeep":"384:JS/U8P7Nzh3EnxHvx/xj/M4fMu7d1jdKM9mQClAkuqBQYPxBtSMS9j:8X7N93ExH5BM4fMurjddLjkR5SMq","tlshash":"0282d06b2708931ac34d7a3b9db6c24140e8873bd5e54e1e4f35c2d22ee97df041d15a","first_seen":"2025-10-05T06:05:59.91322Z","last_seen":"2026-03-27T19:42:56.927242Z","times_seen":25,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/116_ehfdhdjjdsjfooewpiewiriweieiesdh76-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/116_ehfdhdjjdsjfooewpiewiriweieiesdh76-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 29103\r\nlast-modified: Fri, 29 Aug 2025 06:43:05 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bf9-71af\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7vBWXrokoIHC352Kmdmf8kCmVDJv1yIQpq3nZCdo%2BdPxjs9JRca4HPXsqyYNFQvKWInyEGztFycD4FvVflB%2FcxNM8EwsILLK3ceXrKJE0g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e19ed632fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29103,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"4472c011720b868b26258356a312ef46","sha1":"d94c2a2a9fbd343735794b56f9ec57875be2cefd","sha256":"219feb3e92ef104198ef700a9645e6645c8cd47ea8d21031f396869f53914b78","sha512":"16e48b9cd9aade66365a725024db74c8c7bae30c0e8de55814cb2e01a79e33a79451a22ccaaf6d57cc0833f05a1cc092a41d894ebf94e74d8e60bdfd63e57b2c","ssdeep":"768:G07TafBwI7fyOkbrdz4tqPeaeW4Ki8/kCbkx:G07kBnf/QCtkraSSx","tlshash":"dcd2e1f158260a0addf1ebf189f18a60e4b56c22c354cc4e11b111f80aea5dba1df75e","first_seen":"2025-10-05T06:05:59.951432Z","last_seen":"2026-03-27T19:42:57.140336Z","times_seen":26,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":309,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/093_japanese-the.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/093_japanese-the.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27765\r\nlast-modified: Fri, 29 Aug 2025 06:42:37 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bdd-6c75\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 41085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1raIN3tIDUZQFFmHKYTCFbaelpmYJeISSzywcjl1aY%2FSAkYEKCo4sWhQ4f0u9suk1gsJCt9IMD9ZD2LZEC538qFHZSEc5miHh3hJadznhA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1cef232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27765,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"91072b32ec4cf8d1e0d846435cb6ff31","sha1":"c9dfc950affd97bb6bd06c441d9d05f2605affda","sha256":"a10337791049e76af74169a186cbebede835bcd77ffaaa0d9bb473f90f6ee705","sha512":"bf1afc6a5b6aa9b76c1ab8427f521917413a4e636a7252b2702e2548e0afa67bc1d2a7466b5759266055241afa2b7b91cea79be8a32d9e76fae4c7976c28b0b3","ssdeep":"768:MOgYB79E0M7SqAR5mlmrn4EGLrYJARSsUcCP8697:Md+9kXla4EGLkJAAsUcS7","tlshash":"5fc2e136493bd98dc35a02f503300bf4862dab44ed1ca099d881eff93d1275ead8a6f4","first_seen":"2025-10-19T02:15:15.737617Z","last_seen":"2026-03-27T19:42:57.118943Z","times_seen":24,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":296,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/039_the-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/039_the-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23336\r\nlast-modified: Fri, 29 Aug 2025 06:41:11 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b87-5b28\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mQUs0tOv0q05cHkTbs3Hx0%2B63ZKxJJ7PRRQcB7t6Xgrq7WyV9ayOQZLqk0Bij1ypHNj3tG2xZuQi%2BZNYEIFZatfZdBIQdtUZpt2DCvOvtg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e27f2f32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23336,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x300, components 3","md5":"0852b79c73978ba355c4046afa95f70f","sha1":"3fda4eda4ad4166b816ab7e2d85c20ae1684d2a1","sha256":"0254394d79aad3c95bf5c17454c6dadd7961941b56592315c911eb57884ce745","sha512":"a4566dc56f04ae2241b44f8022765908d377dfcaaf97e461df5c17574dadd21c210e89073ba507891809a83d7eee3927a7272ee9bf0349c09b8e5736cb56f9ba","ssdeep":"384:8F69u2DgspoMFtpOT6Clk+fhx7tsi+J0J6BxH/CiaV+BoZB/41twma:6lsGMQR5zZ+J0JeCialZBgt/a","tlshash":"b5a2e035750013a4a8f3a5326e4c7d362fcb00514885a33e9b4bd6e2a71cbc1097b7de","first_seen":"2025-10-31T12:17:26.999938Z","last_seen":"2026-03-27T19:42:56.805906Z","times_seen":20,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpushsdk.com/npc/sdk/wpu/npush.m.js","fqdn":"js.wpushsdk.com","domain":"wpushsdk.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:01.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.wpushsdk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Nov 2025 07:32:11 GMT","end":"Sat, 31 Jan 2026 07:32:10 GMT"},"fingerprint":{"sha1":"5D:B0:51:22:B4:86:47:42:74:7D:68:50:E7:C9:08:D7:7B:41:91:8C","sha256":"09:01:AE:7A:8E:97:6A:90:A0:1C:ED:8A:B0:05:D4:B3:89:1C:C9:7F:8A:21:8B:8D:59:7F:5C:48:74:65:0E:99"}}},"request":{"raw":"GET /npc/sdk/wpu/npush.m.js HTTP/1.1\r\nHost: js.wpushsdk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Thu, 27 Nov 2025 13:01:40 GMT\r\netag: W/\"69284bb4-3e601\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 02 Dec 2025 00:25:01 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":255489,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"890b25a31b9950ceaa2d1ec6e57f594b","sha1":"9dc5cf1967ceebd48d3cdc108e0490a2492ac087","sha256":"6632492bb1e1ec1013641b25a6919f30a3761d50a5ff3e24f55513e0f31473d5","sha512":"399f3fd08013ac720bc49423fd7cbd4bfbf0b3ad1ad1e796dd8d4ec398d7816991d8e5b124bbb751644823ecfc37803b0731a58a9b4f4228b5a503ea086612e1","ssdeep":"3072:vt+5CPB7vcQ7qKEPsvQaEvpiBz3gJ7BWCqS+8Q43XG2nl2LqR9TkK:FSCdcQ716vbFBWM+6hf9TT","tlshash":"bc446bd1369478b00593c0afd0770201b2382609f529b56cbabddeea6586dce2377f79","first_seen":"2025-11-27T13:51:32.267119Z","last_seen":"2025-12-03T08:16:20.468572Z","times_seen":94,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":35,"dns":26,"connect":21,"send":0,"wait":41,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"js.wpushsdk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ic-nss.flixcdn.com/a/NWRlODU3ODE5ZmQ1ZDZlZjQzYTQyOWVlYzRjYTUwN2U/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/YU/YU3phE/screen/1-HDF.jpg","fqdn":"ic-nss.flixcdn.com","domain":"flixcdn.com","tld":"com"},"ip":{"addr":"185.76.9.4","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=OontXWdG7kOZcKr9WU8KIhiLdZ9DrUwEBPwyYIFNal_NhEt-mDttlRQnwqDBmGvsQJYLHGZqJm0nEw921KfpD47qgwYlm6Xh4z-1wSyu3B0B1s8_gUIDRUi","date":"2025-12-02T00:20:02.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1029385688.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 14:41:59 GMT","end":"Tue, 13 Jan 2026 14:41:58 GMT"},"fingerprint":{"sha1":"05:60:93:EB:D3:CD:8F:F9:A3:BB:E9:74:7C:66:6E:EC:91:A5:46:DC","sha256":"5C:72:8A:A5:67:37:9D:60:F7:D0:78:EF:E6:37:47:8C:8D:FC:66:5B:93:92:FD:45:D2:AF:FE:AA:D0:22:77:ED"}}},"request":{"raw":"GET /a/NWRlODU3ODE5ZmQ1ZDZlZjQzYTQyOWVlYzRjYTUwN2U/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/YU/YU3phE/screen/1-HDF.jpg HTTP/1.1\r\nHost: ic-nss.flixcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 39747\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: ic-0\r\ncache-control: public, max-age=1296000\r\nexpires: 1765205445\r\nx-rsic-cached: yes\r\nx-rsic-responder: ic-0\r\nstrict-transport-security: max-age=63072000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-77-nzt: EgwBuUwJAQH3LxcKAAwBT3/Y5gH3PvoAAA\r\nx-77-nzt-ray: 56376635532a89bab2302e69b7192028\r\nx-77-cache: HIT\r\nx-77-age: 661295\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":39747,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 536x300, components 3","md5":"238a3981af457af4d86a7f4a912a70d4","sha1":"37f35705c0e3c1e40bfc9ae5a77ee9b3a6c10b4d","sha256":"17ca21974ec9ca2d39b7f211b42acfd335c775c04de514cca44455f96c2e7596","sha512":"f2e9bc58d7de12a86d368ab4f381f3b2bd6d0d69829b39d7ea689cbcc2a293727932c0484de14e810ee688f7ce3e69cbcbce01003a99eed74d7ec8ebd4c442b4","ssdeep":"768:rnVA9XFahvCF5NcR60Bq33DntXXSkMfqc+Rq3zZrltbBwoBsJo:rVGFWvOLCcnt1fc++T3wTG","tlshash":"f003f253a142cfd0ff6b2fb5619cdf2ab2efb80618ed9937bbc505185a24f609818111","first_seen":"2025-11-26T18:17:59.81602Z","last_seen":"2026-02-20T20:09:48.996401Z","times_seen":27,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":187,"dns":29,"connect":14,"send":0,"wait":14,"receive":10,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/n.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 07:32:01 GMT","end":"Sat, 28 Feb 2026 07:32:00 GMT"},"fingerprint":{"sha1":"30:27:D8:5A:59:AD:E2:2E:0E:9D:6A:5B:1B:BF:60:BE:D2:80:8B:DF","sha256":"A9:DE:14:B5:E6:07:9A:21:0C:4B:AC:5D:B3:F1:DB:EB:1F:27:9B:A9:C9:AD:51:72:F0:5B:0D:91:81:C1:D3:6D"}}},"request":{"raw":"GET /sdk/v1/n.js HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 26 Nov 2025 12:24:38 GMT\r\netag: W/\"6926f186-cc19\"\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncache-control: max-age=172800\r\nexpires: Thu, 04 Dec 2025 00:19:58 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS5833\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52249,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (52171)","md5":"65a151036a1be0f2dea657219852378d","sha1":"bbca04a868eafbf221012cf290d9ba0922156d5e","sha256":"14018b15aabec6f4250aa887e37a6c6d34667c88308bb6f1fd4dc7ff76ada63c","sha512":"738551912b7872ce07e989c87ff61e51acde85fb2395550c3d910dd24067492af272d1a7442030ce24692095dd77452ab8ad785456b1e5089d0a0780b70cbef1","ssdeep":"768:p3FYnfzZFWEZTCvv1cbnFW1Y1Ie2vI3Xdyc2avmP8vY7lfxOl4ub:pVYbioCHipWeD3Ec2ke8vY1c4c","tlshash":"e4333aed75957471216b01e6829f570b733e2516e80c4c40a0a7ead13abcdcad23bfad","first_seen":"2025-11-26T14:37:27.824506Z","last_seen":"2025-12-02T10:02:36.887972Z","times_seen":26,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":37,"connect":20,"send":0,"wait":36,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/448451/24e71bfa55d5a8de099ac18a0c8b235be02b215d.mp4","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:01.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/448451/24e71bfa55d5a8de099ac18a0c8b235be02b215d.mp4 HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Tue, 02 Dec 2025 00:20:01 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 24780\r\nlast-modified: Tue, 21 Oct 2025 18:19:17 GMT\r\netag: \"68f7cea5-60cc\"\r\nexpires: Wed, 21 Oct 2026 20:43:35 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap01-sec02-prg1-1\r\nx-77-nzt: EwwBX63NDQH3UD82AAwBuUwKDAH31QAAAAwBT3/Y+AG3FQAAAA\r\nx-77-nzt-ray: 2a494a15ef3a6de8d6302e69a8208226\r\nx-77-cache: HIT\r\nx-77-age: 3555152\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-24779/24780\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":24780,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"01933e536028bf3c6d6bc3f96f1e42d7","sha1":"24e71bfa55d5a8de099ac18a0c8b235be02b215d","sha256":"23a856178a03cdcdebc21613461032abf4d4303a2850e282d5c6457a3e282147","sha512":"80f0383afb3359484bcf3a6fa8b49acd6d4086d0c6f19b9f9ecbcc717ead8de6eff23d1d9e1f6bc7a967f2beddd7c224accbc17cabb1cca39d0615c66103e0d3","ssdeep":"384:4xCXKH0edX3Xb6HOT+XzOmaD8hf/iIldpLIB6loY72B1EdOj8zJxhEku67:4xCcfdX3kzVtfpoY7AOdEuR","tlshash":"90b2e0afeaa14456f379823932d84b423613f1353a9fe2369e23b950e519870cc8361f","first_seen":"2025-10-22T00:34:07.170017Z","last_seen":"2026-02-15T16:32:05.740065Z","times_seen":299,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/020_porn-young-man.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:59.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/020_porn-young-man.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 30230\r\nlast-modified: Fri, 29 Aug 2025 06:35:54 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14a4a-7616\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pVSvkekpW4v9Lmf1lFTQeVz8mLIPQdlio5Z3%2FVIWsxjyC8mH1hE%2FlKZ6nop0Ci%2BccV%2F0HyyvSrHFmIp%2Bk0AyJIxy4eVa63bnqdIfbMd8Yw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e2ff4432fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30230,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"453a3543850e623c33b137a518e9b775","sha1":"3d75a836cd43c3cd9a87647e4f645273d892eceb","sha256":"4627a2e667351ede70f4ffee605a9bc797c201fc306209f1edf92092cde5371d","sha512":"2ea94d67c8f2c8c094f3887435094a9a2be035362433f9a1789a674ce0d71e5a6eeb5b205a8debf9b9df78bfe5da666a002a9ce58a07720c6143167d36da8f66","ssdeep":"768:V+gIs7k8fmSA1kbEZUmWuy61nyGLQ4ELdIKCEDRz:M5s3+SnbEZ5xywncVLdIKCm","tlshash":"05d2e1547789e928eed53172a23463961c1c9e10870d62746393d9f4a471f2e4ac3e8f","first_seen":"2025-10-31T12:17:27.088075Z","last_seen":"2026-01-10T09:02:32.728127Z","times_seen":11,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/091_mei.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/091_mei.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25300\r\nlast-modified: Fri, 29 Aug 2025 06:42:34 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bda-62d4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9ysWHn7HmeLhqUX79vqlsSO3EOnjT03%2FgPk6vjLAVaS2ywCHjFE%2F6cA794sJUTaX%2FZ0mzeNTKCbb0IPd5%2BYEs2SR43IUssaTw2vpWqSiwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1cef732fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25300,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"2969f4675950432211d3efd1093e2e03","sha1":"f5b39358d873f941f9d392aba894eb5ec87ff2af","sha256":"6bc89bd87173d460b7dd99ec592cf1b4746a055613b96cb0d4bc40a7e16db922","sha512":"35ca6ce813d5d8b3cef5df47512013a9df72406bab856b061a05f7ae072e15f30a3905d3295cc270dd0276563789b5bd7169e52c99c698f376a36c674ef0c905","ssdeep":"768:PBRixq+5WyPzH867/FgTRGkO1s6e+B6T6494dh9ybqS:ZQjP78s/FSGkos6eq6O4qBybz","tlshash":"edb2d1612a96e599e828f1ed43795478f0a7cb7ed132334175c0a7c004e854a5be33f9","first_seen":"2025-10-19T02:15:18.046471Z","last_seen":"2026-03-27T19:42:56.755442Z","times_seen":24,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":300,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/040_milf-grown-up.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/040_milf-grown-up.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22364\r\nlast-modified: Fri, 29 Aug 2025 06:41:13 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b89-575c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cy5pspqPLJdimsQkiVXzC%2BdG5CeTK0xJnvGWDsq3ZXnPslwuHGSo4ZmH97EPL30ZvxKKN1ilMeVpuFQnIHWeYd%2BklR2n3nuPBP62lhMmUQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e27f2d32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22364,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"d63a06cc2e8b283b693badb28536e827","sha1":"bbe258fa58d1db41040c0090d58c4b24c31b62b4","sha256":"b6ba6f3772c630052293e1cc9be4a0824cddb06313fbde39c64f76ff45d20880","sha512":"5cd80cd519570a1506ee52a08bdf8c05fafcc4b386dc67de5115c5fff5ac8fb237170092865cdc54d681c020913b6e7d40bfac3b7107f80857825607b8cd4303","ssdeep":"384:1cwZrqLVJUkbdeeKYuvvk3PHDzbNHx2pMNIDyM6k6pcfd:1GLVuk/Avvk//ZRsMCDynk6pe","tlshash":"8ba2f1f719f89814c8323b3a672563f08e667621170447b96c17b8fc8b6127d5baf984","first_seen":"2025-10-31T12:17:26.896166Z","last_seen":"2026-03-27T19:42:57.092666Z","times_seen":21,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/favicon.ico","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:00.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:20:00 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5xSpD86bwvsU3iKFCrc8nVgy4DB3iBkdcaHysTmZ7SelngMI9P4NrCEh3ZgY7t8LoNJ6RG%2FlbzJJ4%2FBrIOkqzFgeEeFeSjrby%2FgKB3vu3A%3D%3D\"}]}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a76a7eebfea32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-04-03T19:31:01.10913Z","times_seen":476903,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"72c5f4f03e.482e528949.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxMTk4NTcxMzU4MDExOTU1ODAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIyLjM5LjIiLCJ0YWdfaWQiOjI4MTQzNywic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjowLjgzLCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9","fqdn":"72c5f4f03e.482e528949.com","domain":"482e528949.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:01.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"72c5f4f03e.482e528949.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 02:48:05 GMT","end":"Fri, 27 Feb 2026 02:48:04 GMT"},"fingerprint":{"sha1":"F2:12:38:86:54:A9:0E:26:D7:00:85:86:1F:1B:53:DE:99:AF:5D:F3","sha256":"B7:C4:17:44:16:5F:00:A2:4D:95:53:38:93:2A:BE:F3:03:3E:32:68:1A:36:18:95:04:8A:35:70:19:A1:53:1C"}}},"request":{"raw":"GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxMTk4NTcxMzU4MDExOTU1ODAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIyLjM5LjIiLCJ0YWdfaWQiOjI4MTQzNywic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjowLjgzLCJpc192MiI6MCwiaXNfdjJfZW1wdHkiOjB9 HTTP/1.1\r\nHost: 72c5f4f03e.482e528949.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:01 GMT\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nx-cdn-host-id: AH1747\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":320,"timings":{"blocked":117,"dns":94,"connect":27,"send":0,"wait":31,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"72c5f4f03e.482e528949.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/623611/8e4d551c37e0849d99b9d795e0f0ab99925f04b1.jpg","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rtbrenab.net/get/?go=1\u0026data=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","date":"2025-12-02T00:20:02.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/623611/8e4d551c37e0849d99b9d795e0f0ab99925f04b1.jpg HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rtbrenab.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22570\r\nlast-modified: Mon, 15 Jan 2024 11:57:42 GMT\r\netag: \"65a51db6-582a\"\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version\r\nexpires: Tue, 14 Jan 2025 12:02:04 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-77-nzt: EwwBX63NDQH3Z96nAQwBuUwKAQH3AwQAAAwB1GY4EQG34xzAAQ\r\nx-77-nzt-ray: 2a494a15ef3a6de8d7302e69ca886720\r\nx-77-cache: HIT\r\nx-77-age: 27778663\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":22570,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 300x300, components 3","md5":"4ebb2cd55c49b82db3c50f18498ce874","sha1":"8e4d551c37e0849d99b9d795e0f0ab99925f04b1","sha256":"5225e5f7af447ea6bcbf00d07996b31dfa71b0bd686184ebcb2e0d279a01a2a5","sha512":"b5a72157b142db0adb344beacfa55af140c2509892026fba19330ad76021e18c6967402ceb2a869ac72f0a4fa235f722130d1d3949277db12818323059f44d01","ssdeep":"384:OTP7ZuQXXQFl38V86aSuu46FCpTrd/DeYR0Q9ynYPdp0OLX3Urt/9bYRaZC:OTEic3RLoFgCYRNL3A9bcaZC","tlshash":"aaa2cf2d56392ec87d3f561ef2d06eb286e222512f180a5b1cc70b879496f1b48dbf1d","first_seen":"2024-01-30T13:43:40Z","last_seen":"2026-03-30T01:11:06.510419Z","times_seen":94,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/033_facesitting-tribadic-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/033_facesitting-tribadic-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22151\r\nlast-modified: Fri, 29 Aug 2025 06:41:05 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b81-5687\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FYxVPGdFtQLbtNTDmDUjzMpNZNlf9Imu%2B7HhbTqE4Q%2FIeECQRBNlcA%2BLSzGgPGXnprvLKaLKS8OXbc6pAfymaaqQXxLy6W8lXZbkVFcYzg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e15eb332fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22151,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"e01e4f7a4df7fd75ee9a16335fecf731","sha1":"21f2e9476f205781cdec5aa2687f3de5bd8b4c21","sha256":"a2a2f3132089c50f172fc09534aedde0d58c44c88e79e40fcd671c6b53b169b6","sha512":"638a6d15ef9a682e0055dbce8d347bfd20f8875085ffd2ccf1ff300e979a320b0745b5017d1e9d8a66fe43afaff0a03278791fd23c98cea43a076e84ae4c5a8b","ssdeep":"384:OBK52UHIF5jBo2hqKPTKzxiWgGcS3kAniVJOiV1uQJGuyX1HNoKjETlA:0S2UoDjnqKLKcWNUuc0imQvyX1HOKjEe","tlshash":"83a2e191b0037c99bc8a21fe5d992522814ee75e2bb85d093854efa8ec057031f7ca9c","first_seen":"2025-10-31T12:17:27.181264Z","last_seen":"2026-03-27T19:42:57.141935Z","times_seen":21,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":324,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/082_bikini.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/082_bikini.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23233\r\nlast-modified: Fri, 29 Aug 2025 06:42:18 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bca-5ac1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GUCrdHLxaQdAgOoPBI8%2Fqhl3npdV%2BFDIBkkopvfHPvEuSrGj9XG89fcL2Ral8mq4DAhNdanamAExdodiO%2FplR%2FSx762FbNWP79el3uDQlw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1ef0132fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23233,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"b2b5bfe3e317b08510770106627a1154","sha1":"c1ef67ce995dba15b9be7d3bcf6f02e9cd24c346","sha256":"dd6624ecc04ac4da201eabd11ac412a2217f66e1c9f4e13036a48eb0792f65b3","sha512":"55ca5faf5b561a99b437c2de3d3130a3918c2aa97706981018a4bf7fc56150f07ffa7f24b767b723f477ac6df0b39bd37f7052687515e061e1ad86a57c260f2a","ssdeep":"384:ihDLJobMiJxh5SdoBktpOqhBbjiFfJRUXYXBg02sc+RZdUKoGqyXyg0:kDUMi7hOFb5NOROQNFrfdrlX4","tlshash":"f8a2e14a79f0ba93f0e4d1eaeb75d521470c16a306d23f8b149c939ce669381dec374a","first_seen":"2025-10-05T21:57:54.201211Z","last_seen":"2026-03-27T19:42:57.049345Z","times_seen":25,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":234,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/046_wicked-close.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/046_wicked-close.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18685\r\nlast-modified: Fri, 29 Aug 2025 06:41:21 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b91-48fd\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 41085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hONgai6ueo%2FCHLMtec7aZpsCfM1xc17mZC7wBZxd270n%2FbP4sqQM20topCj2qZ7ML22jKiTyA7341eJfDXZyteNYWa7XcymC0xFJRm%2F%2BNA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e25f2732fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18685,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"be495d6eeda10c414b03911119ac2adf","sha1":"c5555d5a071b1fbe4ab75eff166a17f77bb541d9","sha256":"364711d502f8381d2b64046a7de44283ecefce01427764648b88419dcf7af1b0","sha512":"45a6a3c821f8a3a175673ed6692b2401bb99c02e70e2cbd893d3367cb6656b208e1ece6eefddfff717479895778f72affa9161b5d2533f918dd8463d522cfeb2","ssdeep":"384:m1kwxzzGBHQ/1wsaKkpeqam/3TCi1cPluz58oRp8jpo0:m/xXy7YqL/DCi6PluzNpUpt","tlshash":"1982d1b0281ae3e74774e71303abca20964705ec956acbd4d5b73cf7d1498901c9a3fa","first_seen":"2025-10-31T12:17:27.079698Z","last_seen":"2026-03-27T19:42:56.923832Z","times_seen":20,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/dsp-pixels","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:59.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 07:32:01 GMT","end":"Sat, 28 Feb 2026 07:32:00 GMT"},"fingerprint":{"sha1":"30:27:D8:5A:59:AD:E2:2E:0E:9D:6A:5B:1B:BF:60:BE:D2:80:8B:DF","sha256":"A9:DE:14:B5:E6:07:9A:21:0C:4B:AC:5D:B3:F1:DB:EB:1F:27:9B:A9:C9:AD:51:72:F0:5B:0D:91:81:C1:D3:6D"}}},"request":{"raw":"GET /dsp-pixels HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:19:59 GMT\r\ncontent-type: application/json\r\ncontent-length: 70\r\nserver: nginx\r\ncache-control: max-age=172800\r\nx-request-id: 145bea61-0517-4c63-9479-b6cf35982958\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Accept\r\nexpires: Thu, 04 Dec 2025 00:19:59 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS5833\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d65d54baa73d8c5cf1b4145ed2f566ce","sha1":"1924c807418dc7cdf8135bbf2be4e89402e21bfd","sha256":"282322db040ca32cc2f1657864a542d7b60f5d47f4f0f0f7708704acb3c54a88","sha512":"4d9b73b80c65606c0e31a0666a398ee5660fba63277c5abba2938038ba02c1de315fc3e9be8db67e252b8789699f93644347c5805b5a6cdc1b1063cfc9eb4b37","ssdeep":"","tlshash":"5ba022bb00a8b0ceaf20e0c83008a0000ccf80b820a88088ccf22cc0820b3a23030288","first_seen":"2025-06-26T11:56:09.222052Z","last_seen":"2026-04-03T18:53:30.669989Z","times_seen":2899,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pxl-eu.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0WUqTGGDI0YZWy0iBEmDI4WNGrcINMiBxmQLcqQMWNmJo0ZN2bEuCHiYZg6YzLSsCEmRo4yMUSOgSFmBsoyOcy0CGNGhowWZHB0tGGmBsmhOHpCJGOH4gycMGQ8hFNHDMUYMHD6hANnIY0cOx_OgTNRhwwYN2rUmOFQxJg2dRnCuFkjBwyfMyk-FOPGzcLGM6zawPGwjRuMDDP_XesZ9E4ZXh_WiZERDR06cOboePGio5sWZsa4GPOmTW05BemksVNmzos6boYjnBOGzQs3YYQTf_FjTho9ZXrMgAEDD2oYXOpwl2GjDp02X8aEQRwmzRk3Pdq7aIMnS_jx5c-nf-OGTpn-PcxRxxlnFOcfGV_ckQYZBdJxX1o2wAGcHWmUcccXbbxxUA9ovEGcHA-SN0cMPegRxBpzzHCEHkZ8oYcWejRBxBFChGFEHkHcQcMaQ-hBRhx2sKGHHFnUEccUbqBBgxt3CIEGFkzg0IYZOeBwQxRiOKFEHDg4cZgZR2RhBR0tWBFEFWnkIeUUVGRBBh4woAFjDHMIQUQcaBzxhRtV0KGHHUsw2UYLUyShhQ1R4KEnFXnQscYXZ1SRBBFSoCkWGb21NgYbacTWAhxvyOHGbjWJpV5fW-jUxWRmLASDC9wVJocdiW2nWh1pZBTGDDTcgENXZbQwWFfCmoFTSznQIBUOYhyUQxg3iBHGZjOI1WlGeLngmAs0yOBCQzSIJccX1-ogQrbbdvttDeGqFkZGTbyhRxpssBHGCzXACgIKV6ThBqZ3zAGCE1SAABesO4DQrxs20JAwHg0nPGtoNMCaAghHlDHGGm-88BdcMMAVAwhGpAGcGW_g8UIMvMJqalDmOvGEWKGmB7MIMovFxs1FOHFpGXZ8ARwbFKnk6wybcfeQHO8thJqVDx0UtBhyLIQDZyJIjaGGTuNgQ0VZy_HGQjM89IZCOtCwlth45HHZ0l9ImLLbOhSmtZ8ZwSBuGa2a6xpsstGGxqadzvFpqKOOUdMLYt2REVwytDvQ4zLgoLdes2YkNh3RhdoCcmmQGUMMLpAxRgwy0DxH5jrMgEMNm_11Awx233zQF6ajLtZ5FN3QsA28Wv6YCOelzpDvQwXPXVJgGyR0cXB8EV3vvys_PNDSs4EQHWinWhGvq0IkRl9Z8_0TGxOttbOrD40B2vBjoLHQFiKIZf9D99eP__7695-__V3ogwICAg%3D%3D\u0026s=c72601e20373885a6494502142330670c76b37cfa92f25e97d862c4fb939ed2d1764634800\u0026w=t\u0026r=1\u0026d=1100\u0026priv=true","fqdn":"pxl-eu.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"94.130.167.182","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:02.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 21:10:04 GMT","end":"Tue, 10 Feb 2026 21:10:03 GMT"},"fingerprint":{"sha1":"BB:2C:CE:C9:92:0E:A9:18:50:BD:8C:7E:7D:B2:E6:CC:72:54:29:18","sha256":"3B:E3:8E:A4:C5:EC:08:3B:96:2B:B0:16:ED:56:3F:0A:CD:55:81:4A:8F:FC:97:83:57:FC:6E:F9:FD:F4:43:83"}}},"request":{"raw":"GET /api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0WUqTGGDI0YZWy0iBEmDI4WNGrcINMiBxmQLcqQMWNmJo0ZN2bEuCHiYZg6YzLSsCEmRo4yMUSOgSFmBsoyOcy0CGNGhowWZHB0tGGmBsmhOHpCJGOH4gycMGQ8hFNHDMUYMHD6hANnIY0cOx_OgTNRhwwYN2rUmOFQxJg2dRnCuFkjBwyfMyk-FOPGzcLGM6zawPGwjRuMDDP_XesZ9E4ZXh_WiZERDR06cOboePGio5sWZsa4GPOmTW05BemksVNmzos6boYjnBOGzQs3YYQTf_FjTho9ZXrMgAEDD2oYXOpwl2GjDp02X8aEQRwmzRk3Pdq7aIMnS_jx5c-nf-OGTpn-PcxRxxlnFOcfGV_ckQYZBdJxX1o2wAGcHWmUcccXbbxxUA9ovEGcHA-SN0cMPegRxBpzzHCEHkZ8oYcWejRBxBFChGFEHkHcQcMaQ-hBRhx2sKGHHFnUEccUbqBBgxt3CIEGFkzg0IYZOeBwQxRiOKFEHDg4cZgZR2RhBR0tWBFEFWnkIeUUVGRBBh4woAFjDHMIQUQcaBzxhRtV0KGHHUsw2UYLUyShhQ1R4KEnFXnQscYXZ1SRBBFSoCkWGb21NgYbacTWAhxvyOHGbjWJpV5fW-jUxWRmLASDC9wVJocdiW2nWh1pZBTGDDTcgENXZbQwWFfCmoFTSznQIBUOYhyUQxg3iBHGZjOI1WlGeLngmAs0yOBCQzSIJccX1-ogQrbbdvttDeGqFkZGTbyhRxpssBHGCzXACgIKV6ThBqZ3zAGCE1SAABesO4DQrxs20JAwHg0nPGtoNMCaAghHlDHGGm-88BdcMMAVAwhGpAGcGW_g8UIMvMJqalDmOvGEWKGmB7MIMovFxs1FOHFpGXZ8ARwbFKnk6wybcfeQHO8thJqVDx0UtBhyLIQDZyJIjaGGTuNgQ0VZy_HGQjM89IZCOtCwlth45HHZ0l9ImLLbOhSmtZ8ZwSBuGa2a6xpsstGGxqadzvFpqKOOUdMLYt2REVwytDvQ4zLgoLdes2YkNh3RhdoCcmmQGUMMLpAxRgwy0DxH5jrMgEMNm_11Awx233zQF6ajLtZ5FN3QsA28Wv6YCOelzpDvQwXPXVJgGyR0cXB8EV3vvys_PNDSs4EQHWinWhGvq0IkRl9Z8_0TGxOttbOrD40B2vBjoLHQFiKIZf9D99eP__7695-__V3ogwICAg%3D%3D\u0026s=c72601e20373885a6494502142330670c76b37cfa92f25e97d862c4fb939ed2d1764634800\u0026w=t\u0026r=1\u0026d=1100\u0026priv=true HTTP/1.1\r\nHost: pxl-eu.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: cookie_user_id=a3478f5e-53f5-5f37-994f-8bde9a7ba683; bfq=APeIECNCx5YaOWbIkGEDRxcWIsYU3BLjoYgyE2PcsEHjhowYMmDA6NJH\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 02 Dec 2025 00:20:02 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 24\r\nx-robots-tag: noindex, nofollow\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"0959ba36d476b6dc1994ba3c678b07c4","sha1":"d30b94da72daa02766965206a85b7e0356375f5e","sha256":"897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a","sha512":"843f2144ba55d59ba3e62053dc018f4f6d51ae482c741cb4dc85f7af3375b77c75f66e2e73ff55ff7fe3b79314e7ba28a92fddec1ba17839ba33b34792bfce22","ssdeep":"","tlshash":"ea70008030b22e88e022000802a08000000288220a8032b0020800a80002202ca3c30a","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-04-03T18:21:27.290641Z","times_seen":6722,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":2,"connect":31,"send":0,"wait":25,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/132_dewy.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/132_dewy.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20198\r\nlast-modified: Fri, 29 Aug 2025 06:43:26 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14c0e-4ee6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iwBQpL%2BXlIcOJ46VgTcrNdachhWPpLkDS2Vv4UEy%2B7HpzFSc%2BUouK%2Fh4c2iyVHUuwnt%2BEzT0SGOWE3x%2FQptfWvvjEAm%2FeBNJohmE52X9RA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e17ec532fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20198,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"5b957177ec016c4a61bf364abbea9d6e","sha1":"2f254fbb0cc4180f33893da352e7f59cbccd01cf","sha256":"4c7e5a744bc640460e39388b0a6e19a8d7179f6661d5204b13a9b2b220da587f","sha512":"67d285f1eed4184f190c6ebd335a059dd31ef070f0f4ce1a0932e57878ecc761b2d12e68023a72b9596850c28767f449c4d037f55e57d37db1921066f7297cd9","ssdeep":"384:lwbRkL5RIJ+cGClFipDVXC/jLstn5Fh+t9kXsmCd0GV/3E:2bMiFijXC/kbCeXstd0GV/0","tlshash":"f292d0efd3375919684f1ba5442102d9fa504f30e7a247784a8aeedaf7470724628db0","first_seen":"2025-10-05T06:06:00.052607Z","last_seen":"2026-03-22T17:36:45.305313Z","times_seen":24,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/032_air-eva.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/032_air-eva.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25475\r\nlast-modified: Fri, 29 Aug 2025 06:41:04 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b80-6383\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NxBW0wkAsnlEuj48jTRY%2Fli%2FA9wT%2Bu%2FSbALfoJmDJIKOtWcJ6VMdHBuemzOUjyvrZ69srw26lZLGv5tB9kMrCaGHdlOVsDt5tTvEG3KyYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e2af3532fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25475,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"c7bb9a7748d261f5e0af82ff358066b6","sha1":"3803fa9bfd6f400958bccd5e5f5b7f38d1f7ac9f","sha256":"d0c4c0a09d81df85d7184cd7b54f61da3f848b238d5efdc1c859d892746f9815","sha512":"95a50fb1e927f63a616f028458f2d17904967049270da06c58f7d135e4bcf17afae79b857053ed9ac38fd381149acd497db39470d3b85bf14e1aeedc554afad7","ssdeep":"768:yhdKI82JCnZYAKA09RGXg2YxPPuxqrCzzVG:yhcp2STKn9RMYxPPuZ4","tlshash":"cbb2e1f32a2a6329b86e3003a125ee9b678dc4c87b3ae110145fe0c5df5b6c6c59614f","first_seen":"2025-10-31T12:17:26.873735Z","last_seen":"2026-03-23T06:42:57.764768Z","times_seen":17,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":185,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/025_not.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:59.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/025_not.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 32487\r\nlast-modified: Fri, 29 Aug 2025 06:40:58 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b7a-7ee7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ttDz6jRa0EIbZiPwHwiHRhu4gTKWoOCrVk397u99W4Er1rN4KVe7wlR9yNnbfFYvU3jDvkUiFaObkGobMMAEUkgPHJOHq0ngb7kedh1DRw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e2df3f32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32487,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"66eddc797dbb2c533d09d7a6875ccccf","sha1":"7c07aa8adb7227dc440521f956d2100adbebc343","sha256":"e6fa5e49aebda96a0aec4684a3fef9558286185c48217120b25922fc9f4ef7a6","sha512":"adb1fb6dc04b672730a9d99c3967d1b97c19fa8dd82a3ee2c534135f17ad1c22ff82c32fc016d8e9ae52a97a0020c4123b86084432bf35148755601d2ef114df","ssdeep":"768:WR+j78XzPoB0owVUBW8XtNxJfpu1Ue5f2IAQ3E+VAjs32P:WAnUzPoB0oXnx61b5uIAQ1AjsGP","tlshash":"dfe2e12fa76e0372f35157b181328fe6b3e0c82a1e1d1c691ee805dc665064bf5daae4","first_seen":"2025-10-31T12:17:26.944929Z","last_seen":"2026-01-10T09:02:32.777327Z","times_seen":11,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:59.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 14:35:42 GMT","end":"Sat, 17 Jan 2026 14:35:41 GMT"},"fingerprint":{"sha1":"3E:F6:87:7D:18:68:79:FD:23:76:5D:6C:7B:90:75:64:CC:D7:CA:BB","sha256":"FD:93:B1:1C:F0:69:98:29:DB:E2:76:AD:30:DA:23:6B:BA:BB:04:54:58:11:41:09:09:5B:A4:BC:CB:5A:E3:AF"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:19:59 GMT\r\ncontent-type: application/javascript\r\netag: W/\"88a90b4969cdb377be11e515f53\"\r\nexpires: Thu, 27 Nov 2025 18:26:16 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3lSgAAAwBuUwKDAH3BAAAAAwBw7WvFwG3GQAAAA\r\nx-77-nzt-ray: 2a494a154b6866d9d4302e693925fd30\r\nx-77-cache: HIT\r\nx-77-age: 10389\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":185607,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39248)","md5":"d92a5f5aaa5cb972e18a3886a9838952","sha1":"88a90b4969cdb377be11e515f53ed8af720ba149","sha256":"563ff9e65da46f4d8fdb1517f3c1dce9e63f9f16391d1b2f0bf7c15c33e6df68","sha512":"9e24fdc7c05d6f7cb273cc31dbf326186134c4ad5950a55ff09354c0fe7ad6e41e8b1183eb483f9f0de6e7d5ff2aa73cf82d3c3fbc572317dd70005f1c5917d9","ssdeep":"3072:5B3fUg+28VOk2DG2gjKzElwnRlqI1fsBHisGEolY4o/CXMXpo:D7+28VOk2621ElwnRjfs4s7hpo","tlshash":"00045c993792307441d3a11da9ff53093371506ab80f4884bb4dd8a427adeea51a3ffd","first_seen":"2025-11-25T14:43:10.663757Z","last_seen":"2025-12-02T09:18:34.719134Z","times_seen":264,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tsyndicate.com/do2/bd16f693d3144ae0b0b2ce10c53c7d0a/dynamic?xu=94551fa65a169fd1\u0026count=5\u0026w=1280\u0026h=1024\u0026keywords=%7B%20hardcore%20%7D%2CHCLIPS-PORN%20%3A%20HD%20XXX%20CLIPS%20VIDEO%20TUBE!\u0026adtype=image\u0026tz=0","fqdn":"tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"78.46.88.185","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:59.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 21:10:04 GMT","end":"Tue, 10 Feb 2026 21:10:03 GMT"},"fingerprint":{"sha1":"BB:2C:CE:C9:92:0E:A9:18:50:BD:8C:7E:7D:B2:E6:CC:72:54:29:18","sha256":"3B:E3:8E:A4:C5:EC:08:3B:96:2B:B0:16:ED:56:3F:0A:CD:55:81:4A:8F:FC:97:83:57:FC:6E:F9:FD:F4:43:83"}}},"request":{"raw":"GET /do2/bd16f693d3144ae0b0b2ce10c53c7d0a/dynamic?xu=94551fa65a169fd1\u0026count=5\u0026w=1280\u0026h=1024\u0026keywords=%7B%20hardcore%20%7D%2CHCLIPS-PORN%20%3A%20HD%20XXX%20CLIPS%20VIDEO%20TUBE!\u0026adtype=image\u0026tz=0 HTTP/1.1\r\nHost: tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Tue, 02 Dec 2025 00:20:00 GMT\r\naccess-control-allow-origin: https://hclips-porn.cfd\r\naccess-control-allow-methods: POST, GET, HEAD\r\naccess-control-allow-headers: Accept, X-Requested-With, X-Forwarded-For, X-Real-IP, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Legacy, Content-Type,Authorization, Nav-Ua-He-Mobile, Nav-Ua-He-Platform, Nav-Ua-He-Brands, Nav-Ua-He-Platformversion, Nav-Ua-He-Model, Nav-Ua-He-Architecture, Nav-Ua-He-Bitness, Nav-Ua-He-Fullversionlist, Nav-Ua-He-Uafullversion, Nav-Ua-He-Wow64\r\naccess-control-allow-credentials: true\r\npragma: no-cache\r\nexpires: 0\r\nvary: *\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, no-transform\r\nx-robots-tag: none, noindex, nofollow\r\nreport-to: { \"url\": \"https://pxl.tsyndicate.com/api/v1/heavy-ad/report\", \"max_age\": 86401 }\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\npermissions-policy: ch-ua-model=(self \"https://tsyndicate.com\"), ch-ua-platform-version=(self)\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":84,"dns":11,"connect":24,"send":0,"wait":37,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pxl-eu.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XMoHFDzA0ZZca08EgjRguONnC0wEEGhowWM2CUtFEjhs2WY0Q8DFMnpw4RZsKwhJFjzI0WNmQQPVmGzIyVN6K2gEGmRo0xMGqQiVHGDA6dEMnYoThjxg2XD-HUEUMxBgyzO-HAWUgjR4wbD-fAmahD6Q2rMxyKGNNmLkOZgXPA2EnGDMWHYty4WVgDR44cMnDQeNjGDUaGM2QoTdv5810ZNR_WiZERDR06cOboePFiDBk3LcyMcTHmTZvacgrSSWOnzJwXddwQRzgnDJsXbsIML_7ix5w0esr0iAkDD2oYXOrAcGmjDp02X8aEKRwmzRk3Pdq7aIMnS_jxMsqfT__GDZ0y_vUwRx1nnGHcf2R8cUcaZBhIx33krVFGHne8IQcZc_SAxBBMJAHFFC1A8YQUTqxQwgxBrIAEEStg4eIKHHo4xQpWJEFEEU-sQEUVQhRRggwxQJgfHMHZkUYZd3zRxhsH9YDGG8XJIaQNc8TQAxNUaKGEFkncgUccddyRxRRNDIHHlmUgocQdUyxBRRtZKFFGTEQkIYcbasgRRG8txHAHFGHEcAYbZlghQxhxyBGHDVSEIQQTN-zlhBNu0NDEG2p8sYQWWhyRBRFvYAHqG2K0MWoUdVAxRhpSvOEEFEIYkUYRTsyBxBFDwKpEHk_Q8MUZVdgoRRVpgEWGb62NwUYasbUAh4Vu8GYGGWCpx9cWM8TQBWSO6QCDC-MJJocdhsWkWh3F_hTGRjfgYEYNZbRQwwzvymuGWS1cRoMZK4lxUA5hdBRGSjOAxWxGdrmgmAs0yOBCQzSAJccXB_-U8MINP1xDxKqFkdGleqTBBhthvFADuCCgcEUabhx7xxwgOEEFCG6BuwMIK7thAw0347HzzeOCRgO4KYBwREhrvPGCUm7B4FYMIMganBlv4PFCDBuBW61PIjjxBFgWpse112CxwTWtxpZhxxfBsUFRDVHhMENK4z0kx3sLoYYDXiIctLYYciyEAw4P-a0kk3njYENFfcvxxkIzPPSGQjpsJgKRVedBmd1fYI6H5joIZjgdemQEg8RdtfZabLO9gIayzM7hLLTSkvECWHdk5JYMHA-ke2an5zVuRo7TIZ2FLSSXBh3yzuACGWPEIAPYcwzPkFVOy23DDZH3zfVBX0AvPVjnUXTDzjZshEPdIpw3PUPn05A-Des7PS9jbBsHxxfSmY---uxTG__YgBA6UA5bFdnItiAiBr70rSs8YcNE0mK2hSxmMJ-54BjQsJAtiAAsIHxICD8owhKS8IQjBGEX-qCAgAA%3D\u0026s=fa7c2690a46f1be5df60a3372a79bdf3a021708bfa7c8d004899ddccac20ba2f1764634800\u0026w=t\u0026r=1\u0026d=1106\u0026priv=true","fqdn":"pxl-eu.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"94.130.167.182","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:02.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 21:10:04 GMT","end":"Tue, 10 Feb 2026 21:10:03 GMT"},"fingerprint":{"sha1":"BB:2C:CE:C9:92:0E:A9:18:50:BD:8C:7E:7D:B2:E6:CC:72:54:29:18","sha256":"3B:E3:8E:A4:C5:EC:08:3B:96:2B:B0:16:ED:56:3F:0A:CD:55:81:4A:8F:FC:97:83:57:FC:6E:F9:FD:F4:43:83"}}},"request":{"raw":"GET /api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XMoHFDzA0ZZca08EgjRguONnC0wEEGhowWM2CUtFEjhs2WY0Q8DFMnpw4RZsKwhJFjzI0WNmQQPVmGzIyVN6K2gEGmRo0xMGqQiVHGDA6dEMnYoThjxg2XD-HUEUMxBgyzO-HAWUgjR4wbD-fAmahD6Q2rMxyKGNNmLkOZgXPA2EnGDMWHYty4WVgDR44cMnDQeNjGDUaGM2QoTdv5810ZNR_WiZERDR06cOboePFiDBk3LcyMcTHmTZvacgrSSWOnzJwXddwQRzgnDJsXbsIML_7ix5w0esr0iAkDD2oYXOrAcGmjDp02X8aEKRwmzRk3Pdq7aIMnS_jxMsqfT__GDZ0y_vUwRx1nnGHcf2R8cUcaZBhIx33krVFGHne8IQcZc_SAxBBMJAHFFC1A8YQUTqxQwgxBrIAEEStg4eIKHHo4xQpWJEFEEU-sQEUVQhRRggwxQJgfHMHZkUYZd3zRxhsH9YDGG8XJIaQNc8TQAxNUaKGEFkncgUccddyRxRRNDIHHlmUgocQdUyxBRRtZKFFGTEQkIYcbasgRRG8txHAHFGHEcAYbZlghQxhxyBGHDVSEIQQTN-zlhBNu0NDEG2p8sYQWWhyRBRFvYAHqG2K0MWoUdVAxRhpSvOEEFEIYkUYRTsyBxBFDwKpEHk_Q8MUZVdgoRRVpgEWGb62NwUYasbUAh4Vu8GYGGWCpx9cWM8TQBWSO6QCDC-MJJocdhsWkWh3F_hTGRjfgYEYNZbRQwwzvymuGWS1cRoMZK4lxUA5hdBRGSjOAxWxGdrmgmAs0yOBCQzSAJccXB_-U8MINP1xDxKqFkdGleqTBBhthvFADuCCgcEUabhx7xxwgOEEFCG6BuwMIK7thAw0347HzzeOCRgO4KYBwREhrvPGCUm7B4FYMIMganBlv4PFCDBuBW61PIjjxBFgWpse112CxwTWtxpZhxxfBsUFRDVHhMENK4z0kx3sLoYYDXiIctLYYciyEAw4P-a0kk3njYENFfcvxxkIzPPSGQjpsJgKRVedBmd1fYI6H5joIZjgdemQEg8RdtfZabLO9gIayzM7hLLTSkvECWHdk5JYMHA-ke2an5zVuRo7TIZ2FLSSXBh3yzuACGWPEIAPYcwzPkFVOy23DDZH3zfVBX0AvPVjnUXTDzjZshEPdIpw3PUPn05A-Des7PS9jbBsHxxfSmY---uxTG__YgBA6UA5bFdnItiAiBr70rSs8YcNE0mK2hSxmMJ-54BjQsJAtiAAsIHxICD8owhKS8IQjBGEX-qCAgAA%3D\u0026s=fa7c2690a46f1be5df60a3372a79bdf3a021708bfa7c8d004899ddccac20ba2f1764634800\u0026w=t\u0026r=1\u0026d=1106\u0026priv=true HTTP/1.1\r\nHost: pxl-eu.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: cookie_user_id=a3478f5e-53f5-5f37-994f-8bde9a7ba683; bfq=APeIECNCx5YaOWbIkGEDRxcWIsYU3BLjoYgyE2PcsEHjhowYMmDA6NJH\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 02 Dec 2025 00:20:02 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 24\r\nx-robots-tag: noindex, nofollow\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"0959ba36d476b6dc1994ba3c678b07c4","sha1":"d30b94da72daa02766965206a85b7e0356375f5e","sha256":"897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a","sha512":"843f2144ba55d59ba3e62053dc018f4f6d51ae482c741cb4dc85f7af3375b77c75f66e2e73ff55ff7fe3b79314e7ba28a92fddec1ba17839ba33b34792bfce22","ssdeep":"","tlshash":"ea70008030b22e88e022000802a08000000288220a8032b0020800a80002202ca3c30a","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-04-03T18:21:27.290641Z","times_seen":6722,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":108,"dns":2,"connect":33,"send":0,"wait":25,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtbrenab.net/get/?go=1\u0026data=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","fqdn":"rtbrenab.net","domain":"rtbrenab.net","tld":"net"},"ip":{"addr":"116.202.60.226","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:01.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"banner.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Oct 2025 11:40:25 GMT","end":"Wed, 07 Jan 2026 11:40:24 GMT"},"fingerprint":{"sha1":"4C:2F:3B:EF:F4:3B:F0:06:66:A4:CC:D0:2F:52:5E:96:B4:DA:FD:DF","sha256":"6F:15:D0:A4:DD:A4:6F:A6:5F:28:DB:5F:E9:A1:C0:15:5D:53:34:91:A8:84:99:BA:14:33:3D:36:3B:0C:BD:CA"}}},"request":{"raw":"GET /get/?go=1\u0026data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImEiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MTQ5NiwidHlwZSI6InBvcCIsImlkem9uZSI6bnVsbCwiYWRfdGFncyI6IkhDTElQUy1QT1JOJTJDSEQlMkNYWFglMkNDTElQUyUyQ1ZJREVPJTJDVFVCRSEsIiwibGFiZWxzIjoiIiwiYWxsb3dlZF9sYWJlbHMiOiIiLCJ0aXRsZSI6IiIsInN1YmlkIjoiMTU2NzE1ODM4OSIsInJlZnJlc2giOjEsInV0bTEiOiIiLCJ1dG0yIjoiIiwidXRtNCI6IiIsInNwb3RfaWQiOjE0MzM2NzEsIm11bHRpcGxlIjpmYWxzZSwiaXNfaWZyYW1lIjpmYWxzZSwicmVmZG9tYWluIjoiIiwicGwiOjAsInN0cmF0YWdlbSI6IiIsImd5ciI6MCwiYWNjZWwiOjAsInNzcCI6Mzc1OCwiYnR5cGUiOjAsInYyIjowLCJyY2hhbmdlIjpmYWxzZSwicG9zIjowLCJldmVudF9pZCI6ImY2YWY2ZTE5LTUxN2YtNDI2My05NjE1LTg0MDIyOGM2YzZlNiIsImFwcHJvdmVkX21haW5zdHJlYW0iOjAsIndsIjoxLCJ0ZXN0YWIiOjAsInZlciI6IjYuOTAuMTAifSwiYmFubmVyIjp7InciOjMwMCwiaCI6MjUwfSwibWV0cmljcyI6eyJ0b3BpY3MiOltdfX1dLCJzaXRlIjp7ImlkIjoiMTQzMzY3MSIsImNhdCI6WyJJQUIyNSJdLCJwYWdlIjoiaHR0cHM6Ly9oY2xpcHMtcG9ybi5jZmQvIiwiY3RpZCI6MX0sImRldmljZSI6eyJ3IjoxMjgwLCJoIjoxMDI0fSwiZnBfcGFyYW1zIjp7InBsdWdpbnMiOlsiUERGIFZpZXdlciIsIkNocm9tZSBQREYgVmlld2VyIiwiQ2hyb21pdW0gUERGIFZpZXdlciIsIk1pY3Jvc29mdCBFZGdlIFBERiBWaWV3ZXIiLCJXZWJLaXQgYnVpbHQtaW4gUERGIl0sImxhbmd1YWdlcyI6WyJlbi1VUyIsImVuIl0sImZvbnRzIjpbIkJpdHN0cmVhbSBWZXJhIFNhbnMgTW9ubyIsIkNlbnR1cnkiXSwiZm9udFByZWZlcmVuY2VzIjp7ImRlZmF1bHQiOjE3My4xMTY2Njg3MDExNzE4OCwiYXBwbGUiOjE3My4xMTY2Njg3MDExNzE4OCwic2VyaWYiOjE3My4xMTY2Njg3MDExNzE4OCwic2FucyI6MTYyLjAxNjY2MjU5NzY1NjI1LCJtb25vIjoxMjIuNjgzMzM0MzUwNTg1OTQsIm1pbiI6MTAuODAwMDAzMDUxNzU3ODEyLCJzeXN0ZW0iOjE2Mi4wMTY2NjI1OTc2NTYyNX0sInBsYXRmb3JtIjoiV2luMzIiLCJjb2xvckRlcHRoIjoyNCwiZGV2aWNlTWVtb3J5IjowLCJoYXJkd2FyZUNvbmN1cnJlbmN5Ijo0OCwiaW5kZXhlZERCIjp0cnVlLCJzZXNzaW9uU3RvcmFnZSI6dHJ1ZSwibG9jYWxTdG9yYWdlIjp0cnVlLCJjb29raWVzRW5hYmxlZCI6dHJ1ZSwiY29sb3JHYW11dCI6InNyZ2IifSwidXNlciI6eyJpZCI6IjU5YWY5NjI4ODdmMzM3ZDcyOTliMTQyZmE2MzM3Njg0IiwiZnAiOm51bGwsImZwX3N0ciI6IiIsInVhX2RhdGEiOm51bGwsImlzX3dlYnZpZXciOmZhbHNlLCJzb2NpYWxfbmV0d29yayI6IiJ9LCJleHQiOnsiZHQiOjE3NjQ2MzQ4MDEyODV9fQ== HTTP/1.1\r\nHost: rtbrenab.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 02 Dec 2025 00:20:01 GMT\r\ncontent-type: text/html\r\ncontent-length: 4474\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26459,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2597)","md5":"649f3b1149cd663cfacb6c6933c8cece","sha1":"72b677f11402b271a0215b4c813024793713c306","sha256":"7c30238ed9c92ed55e1b3c9df9e0d5cc2ee2a0e20c860741a42a9be84b854aa6","sha512":"6e472f12a6d085e342d1798d72033c43c9c3253e44328e77a2eba5abeac18c7476d99eadf9727e78fce4a60d76c98dc8bdcbd3530f0f50887234b8d1128f8cc6","ssdeep":"384:ZI+C9lDfaXmnlTN+8lI8qb3Db/CXt/CXg/CX9lTN+8DlTN+8glTN+8X:ZI+C9lTvxsb3PWTQXWr","tlshash":"77c22b558aa6c836d9d5a1038060355451cefa43acde5cb5fa7cc332cabc7ba21dee0d","first_seen":"2025-12-02T00:20:49.441623Z","last_seen":"2025-12-02T00:20:49.441623Z","times_seen":1,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":5,"connect":25,"send":0,"wait":142,"receive":1,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ic-nss.flixcdn.com/a/Njc4YzdkYTMwOWQ3MWYxZTNmM2ZmNjI5MGU0ZmFhYjU/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/dv/dv9U1I/screen/1-m4T.jpg","fqdn":"ic-nss.flixcdn.com","domain":"flixcdn.com","tld":"com"},"ip":{"addr":"185.76.9.4","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026keywords=HCLIPS-PORN+%3A+HD+XXX+CLIPS+VIDEO+TUBE%21\u0026preview_mode=hover\u0026s1=LTZJZIwxquwYSMCxJZeHJwSKTmYJe30DIrnjrAco-1wPa1glfV2aqrq6TaBL7ptNNn4Moj_KZZGYDoXDoobmDooQuTciRoNPBFiENsHGCPBJyO4_gUIDRUi","date":"2025-12-02T00:20:02.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1029385688.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 14:41:59 GMT","end":"Tue, 13 Jan 2026 14:41:58 GMT"},"fingerprint":{"sha1":"05:60:93:EB:D3:CD:8F:F9:A3:BB:E9:74:7C:66:6E:EC:91:A5:46:DC","sha256":"5C:72:8A:A5:67:37:9D:60:F7:D0:78:EF:E6:37:47:8C:8D:FC:66:5B:93:92:FD:45:D2:AF:FE:AA:D0:22:77:ED"}}},"request":{"raw":"GET /a/Njc4YzdkYTMwOWQ3MWYxZTNmM2ZmNjI5MGU0ZmFhYjU/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/dv/dv9U1I/screen/1-m4T.jpg HTTP/1.1\r\nHost: ic-nss.flixcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 38995\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: ic-1\r\ncache-control: public, max-age=1296000\r\nexpires: 1765627656\r\nx-rsic-cached: yes\r\nx-rsic-responder: ic-1\r\nstrict-transport-security: max-age=63072000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-77-nzt: EgwBuUwJAQH3KqAEAAgBWd59zQFB\r\nx-77-nzt-ray: 56376635532a89bab2302e69dbcfba25\r\nx-77-cache: HIT\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nx-77-age: 303146\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":38995,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 480x300, components 3","md5":"537395a761eb43048784168413e5c3c2","sha1":"4a7c624055105da41ddb77488446e9cb3eb37b05","sha256":"d40f4229a58a8b729f240afb0dc2c989f91d234b3175bffdc3264a7a48931826","sha512":"3c769f2aac2c34ac156c87dea474cfb66006edc81c7669a657fba6ac681f1b4d8f6cc65e7f00a8f40453ed040689c52f49c7b532551a963bef94942f6de678e8","ssdeep":"768:CatxugDda+uXlnoK0kwoIVjxgzBYT1iE1tZw3R/dpkMRh+GN7q8QzevW:CExugDda+uVlwoIVjxgzGT1Bbw3RRRxY","tlshash":"1f03f1a46e47c742fa014e3bfb372be3c2e8f7eda8930e409755921afc6145519253b8","first_seen":"2025-07-11T17:18:17.233257Z","last_seen":"2026-03-15T19:56:48.764598Z","times_seen":62,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":120,"dns":0,"connect":0,"send":0,"wait":35,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ic-nss.flixcdn.com/a/MDljMjIxYmFjYzY2YjQ3YjQ5MzM5ODgzZjU1MzFlMWQ/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/tD/tDcB5c/screen/2240-W9f.jpg","fqdn":"ic-nss.flixcdn.com","domain":"flixcdn.com","tld":"com"},"ip":{"addr":"185.76.9.4","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026keywords=HCLIPS-PORN+%3A+HD+XXX+CLIPS+VIDEO+TUBE%21\u0026preview_mode=hover\u0026s1=LTZJZIwxquwYSMCxJZeHJwSKTmYJe30DIrnjrAco-1wPa1glfV2aqrq6TaBL7ptNNn4Moj_KZZGYDoXDoobmDooQuTciRoNPBFiENsHGCPBJyO4_gUIDRUi","date":"2025-12-02T00:20:02.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1029385688.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 14:41:59 GMT","end":"Tue, 13 Jan 2026 14:41:58 GMT"},"fingerprint":{"sha1":"05:60:93:EB:D3:CD:8F:F9:A3:BB:E9:74:7C:66:6E:EC:91:A5:46:DC","sha256":"5C:72:8A:A5:67:37:9D:60:F7:D0:78:EF:E6:37:47:8C:8D:FC:66:5B:93:92:FD:45:D2:AF:FE:AA:D0:22:77:ED"}}},"request":{"raw":"GET /a/MDljMjIxYmFjYzY2YjQ3YjQ5MzM5ODgzZjU1MzFlMWQ/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/tD/tDcB5c/screen/2240-W9f.jpg HTTP/1.1\r\nHost: ic-nss.flixcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 34705\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: ic-1\r\ncache-control: public, max-age=1296000\r\nexpires: 1765528582\r\nx-rsic-cached: mem\r\nx-rsic-responder: ic-1\r\nstrict-transport-security: max-age=63072000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-77-nzt: EgwBuUwJAQH3/CIGAAwBJRPCHgH3LwAAAA\r\nx-77-nzt-ray: 56376635532a89bab2302e69c6214b27\r\nx-77-cache: HIT\r\nx-77-age: 402172\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":34705,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 533x300, components 3","md5":"e8a3fa7ed1fb7b574d7a6d97256677e2","sha1":"2d0827bafe4b4647a311edd6aa38a1bcdc70f2ab","sha256":"5dc4246cf86c631b37bf4ce8681670e2ae06251454de2758cf74e24d12e32c26","sha512":"c9b18ef6c9eb8363f9ecb1c97035d2fc226d174a47b331dff64c23b63f42a1a9794738f7bda860e6e138c43ec071bd4750f60fd35b673f02d8ef15151126316d","ssdeep":"768:6XWgeIhzp67opNZoaZZeU1/NkYzJ1Nu72svyvIC7V:6mA6EjhPeU1/NkONuuIMV","tlshash":"68f2f2e62a49f6ddf456537c8b5d6f819ff52a2290ce068eb689f045fcc1302ec0d885","first_seen":"2025-12-02T00:20:49.442923Z","last_seen":"2026-01-26T07:39:16.804573Z","times_seen":5,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":142,"dns":0,"connect":0,"send":0,"wait":19,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/027_put.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:59.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/027_put.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 29966\r\nlast-modified: Fri, 29 Aug 2025 06:40:59 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b7b-750e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 41085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=orX4AsAApM6dALc2Yb8eQpjwTzl53gWi%2BRsjGqM4cHSAMiwknNCrUjRqy%2B6KY5MoYBP0WN9pujVSm5CK8A8IxhSvuQckZc7%2BppDK6CYc3A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e2cf3c32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29966,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"8990800af4d5e999267db5d7e8a5eb0f","sha1":"4210c6adb0ad51b57dff0ecee3693a670fe6db33","sha256":"67d144103bba425e3a9ff1a87a38391265795ee7a76bb07b5583002767692e30","sha512":"8bd171b4a915f9cee6a5381e9e7f9ece75a287beb4db097dc9f0e27670a4136ab15f9104d4b427e28ec600ffe5012b5734434023d7875d05052c3d350ce9bbf4","ssdeep":"768:YeHJFu1w2g4WAIAgFp9ESRuZomnnDWEhsoA7b:YepFu1jgdAIAgFrfRuZom16b","tlshash":"70d2f1eeb026ef1f504a04b9f0cb3679d87859c5e332e7e9854009f29167fa10d8e19d","first_seen":"2025-10-31T12:17:27.058144Z","last_seen":"2026-01-10T09:02:32.765806Z","times_seen":12,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/native/native.min.js?v=5.1","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"104.21.88.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=OontXWdG7kOZcKr9WU8KIhiLdZ9DrUwEBPwyYIFNal_NhEt-mDttlRQnwqDBmGvsQJYLHGZqJm0nEw921KfpD47qgwYlm6Xh4z-1wSyu3B0B1s8_gUIDRUi","date":"2025-12-02T00:20:02.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 05:59:35 GMT","end":"Sun, 01 Mar 2026 06:57:06 GMT"},"fingerprint":{"sha1":"1B:6D:8E:48:22:E7:FC:C2:4F:06:18:95:F0:8E:39:C2:A6:C8:47:2C","sha256":"DD:CF:71:A7:71:DB:68:1A:18:D5:6C:B8:43:76:78:71:E2:E1:0D:30:1E:09:92:A8:A5:4D:14:57:D3:66:8C:E5"}}},"request":{"raw":"GET /creatives/native/native.min.js?v=5.1 HTTP/1.1\r\nHost: cdn-fc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=OontXWdG7kOZcKr9WU8KIhiLdZ9DrUwEBPwyYIFNal_NhEt-mDttlRQnwqDBmGvsQJYLHGZqJm0nEw921KfpD47qgwYlm6Xh4z-1wSyu3B0B1s8_gUIDRUi\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LY4BjvUDH1NkW%2Fu51Vl7D08TC%2BaLH2tWizH%2BrOgSyhcKsbnYgZ%2F55DUH1liwz3tUbOhBlYm1fvL7FvIn67ymyN%2Bvs5yV9Q5B\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 17 Nov 2025 15:10:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=3600, must-revalidate\r\nserver: cloudflare\r\nage: 352\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\netag: W/\"691b3ad3-cbe\"\r\nvary: accept-encoding\r\ncf-ray: 9a76a7f94b9656b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3262,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3262), with no line terminators","md5":"4048141d0220abc8d43480485d4a8c5e","sha1":"2a5f76d2300a5cbfcb7fb2614ddba567bd7737c3","sha256":"4fecaffe6ddd437921ad07fcf094aac397088ab64c85869fbec5f769583b7a06","sha512":"7e2709bc48d27c61cee1a6de75bbc4ddb35198598bb6e7a49aa1194fa4bb9020d5d25c4884769298fb0bdc16e01010716a5860a77771fdae261cad1ea97ad9cb","ssdeep":"","tlshash":"0361f9c4d2c8d923073532cf4953a675f67c8e06fdba4c50a60b4f8a8e15e469b17fa4","first_seen":"2025-11-07T11:37:41.733538Z","last_seen":"2025-12-18T00:26:58.218815Z","times_seen":314,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"cdn-fc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"track-us.mymetricpath.xyz/banner/imp?auth=2kyb9y\u0026price=${AUCTION_PRICE}\u0026c=aO2lTS0SThJ_ku-Xnkxzu4OgmPSHfnjYGy367vaktAHo8HIRBC0S34en1Wtgzau5wVKzfYtoGtPgLmq6sBq0YPDY3b1IKj9gtzXmo9y_2_bTYxVwUU_fLQRaYon8SB7WJd4vLWFQ_lz-X4qhuXJ_mVAJIGTEkPg3cnL1RaciJ1gp1vXCfwy--Fou-IvgmR_TQA2czKuPn1_VDV5GPOs90Oi63tlwBbfTewby4dm3oBDN0zO7Kna_w7-qVCb4bECidNu-kvI4j-awHxbHbfOXQ75dgGSmPWhgOyF1wYEvO8H6u9AIwf3X7X1nI72RsOBsjQvpsVJZ8ka5dNiOA6cwARW5xeezlZR6xUrZ3XJpmiqbfSNndg7xQw","fqdn":"track-us.mymetricpath.xyz","domain":"mymetricpath.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rtbrenab.net/get/?go=1\u0026data=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","date":"2025-12-02T00:20:02.265Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /banner/imp?auth=2kyb9y\u0026price=${AUCTION_PRICE}\u0026c=aO2lTS0SThJ_ku-Xnkxzu4OgmPSHfnjYGy367vaktAHo8HIRBC0S34en1Wtgzau5wVKzfYtoGtPgLmq6sBq0YPDY3b1IKj9gtzXmo9y_2_bTYxVwUU_fLQRaYon8SB7WJd4vLWFQ_lz-X4qhuXJ_mVAJIGTEkPg3cnL1RaciJ1gp1vXCfwy--Fou-IvgmR_TQA2czKuPn1_VDV5GPOs90Oi63tlwBbfTewby4dm3oBDN0zO7Kna_w7-qVCb4bECidNu-kvI4j-awHxbHbfOXQ75dgGSmPWhgOyF1wYEvO8H6u9AIwf3X7X1nI72RsOBsjQvpsVJZ8ka5dNiOA6cwARW5xeezlZR6xUrZ3XJpmiqbfSNndg7xQw HTTP/1.1\r\nHost: track-us.mymetricpath.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rtbrenab.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":316,"timings":{"blocked":0,"dns":6,"connect":100,"send":0,"wait":0,"receive":0,"ssl":207},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/106_x1x17519ab5d9339de8e2-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/106_x1x17519ab5d9339de8e2-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16386\r\nlast-modified: Fri, 29 Aug 2025 06:42:55 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bef-4002\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9x5forrL7hTlppOB5bs8ooqvy%2FQLDFN50HEo%2BaIQ5ni1M78S9XtxNdI%2Fzt3chUHpJTOY8%2B%2Fk4bL%2B7%2BNvYU484okhIeHJMOULUV8gFpLyyg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e16eb932fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16386,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 640x639, segment length 16, baseline, precision 8, 400x300, components 3","md5":"aa3ff403187cf5731b223a4675963076","sha1":"676dc0da2cd3e684e317b5f113b3394255dfe4a8","sha256":"97dd352a1429a7c2f667fdc9aabdacc5b48772aa273b1ef1acdd1ec271787654","sha512":"c222ca32ecfb75dd3452f22ae79084f42edcbe7f3e97ee5acc410ea794924f4bd35a28bb72c0d1c117e3b5e9717e02901e0d5db19348b256819e043c247f438f","ssdeep":"384:8cd3eREpGXoab0ADiZfYr59IWQDyuGWesdYgh/aT:88uhXZbeZfYLI7DJZeClO","tlshash":"1372d1b1c8d4e11bfc353e340819433805786ad215b36e7a17bb7ee9ba3da3058c56ad","first_seen":"2025-10-19T02:15:16.433971Z","last_seen":"2026-03-27T19:42:57.01351Z","times_seen":24,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":270,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/111_x3x50c3d41c81af780d76-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/111_x3x50c3d41c81af780d76-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 29184\r\nlast-modified: Fri, 29 Aug 2025 06:43:00 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bf4-7200\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nfvrmqTKhH1qlMkzEd4jCop7RP9wnq5nnb182FltZp3ETl5GVuozLD%2FAgT2wqLQuwt79bWIUn8wIhMQYxa9b32bnnXXvC6%2FagJPB%2BKf31w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1aeda32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29184,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 640x639, segment length 16, baseline, precision 8, 400x300, components 3","md5":"1b9041552a43e2d086cec185f60d5f67","sha1":"1b02a69c0665a302ffb3f3fac62179f5d37f591c","sha256":"ca2bd46f515c5200b2b7a46c247a3ce7335852c5d6b88b930db9ad09eb110f24","sha512":"aa74ed9dec9c5b4394aab738954e50a948be76e5bf1254108779006cff6e8438b92685d0fd80b26114d95637ec89ae9662791467e2db7a988a06297749a354c0","ssdeep":"768:XZfixdInv/dBOYXTPCuRRTRSULjIACvRTdfIj:JfiBQaYRTRPeZRAj","tlshash":"e1d2e138c5c3b34a479a171caa50eeadc25298f624949f66702d3ef77ab501096e702f","first_seen":"2025-10-05T06:06:00.187156Z","last_seen":"2026-03-27T19:42:57.04862Z","times_seen":26,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":227,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/073_anna-lip-long.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/073_anna-lip-long.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24553\r\nlast-modified: Fri, 29 Aug 2025 06:42:04 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bbc-5fe9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X2c0%2BeaIbJHoJJWHY%2Bd9zD6SZxfgd%2FK7zV2%2BE5wzvjKhFOagt80W4uVwsrMETaawscMHfUDmO3GjvVDcHhcseUnRY5NFh%2FBL0XRO%2FOUtUg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1ef0732fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24553,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"6c449e8828cc6801266555bafbcfd933","sha1":"bf68e0db3db8184b4ab0b7393dbe87c287a44e1d","sha256":"d87bcd322f497597aeb3220a5691e55cf09a0810ad255c3836dc4e458bd066c0","sha512":"cc892516b78feedd0afd453fae24384727463b0406e9d1b3736a04389f1d9a25d1336834baed485aa25166406b7615c5cce319f465739cf247ace4068084607b","ssdeep":"384:Ay6DSiUgOp8y7PjC7+JjNAoswhI8WUH0T8ClbvaG9Oxd+77+BnsxVr0KufrFJxjM:AnTUgOr7PTbAy33MH9gUyBnbfrzxjNFg","tlshash":"fdb2e16ba78b1415c63c4276312939c3ce4bce166fe047d07eda1ac4936448bb0f3b68","first_seen":"2025-10-19T02:15:15.008986Z","last_seen":"2026-03-27T19:42:57.094573Z","times_seen":23,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":207,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preroll.hostave3.net/notifications/zeropixel.png","fqdn":"preroll.hostave3.net","domain":"hostave3.net","tld":"net"},"ip":{"addr":"172.67.145.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rtbrenab.net/get/?go=1\u0026data=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","date":"2025-12-02T00:20:02.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hostave3.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Oct 2025 15:42:06 GMT","end":"Fri, 16 Jan 2026 16:38:31 GMT"},"fingerprint":{"sha1":"9C:B6:7E:A5:66:3E:09:B0:5A:6A:5B:E3:1C:8A:39:86:1E:8C:0E:2E","sha256":"8A:64:70:8D:53:EF:02:B2:64:D4:50:D9:06:4F:0D:99:CB:AA:54:BD:FC:15:6C:44:D4:FE:C7:42:30:F6:95:D1"}}},"request":{"raw":"GET /notifications/zeropixel.png HTTP/1.1\r\nHost: preroll.hostave3.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rtbrenab.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 42\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 11 Sep 2018 08:40:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tbPS6s0A8u5ZTCPzBIbF4mda9%2FsphgyUHdBxsZVDV%2FGiLE02Yagoy52W%2Bn22nXoynExrDDbWeO1Te5tCZoeo7r6wwGzWbCuOaawCrXPQY%2BZbj0lI\"}]}\r\netag: \"5b977f94-2a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 856105\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nvary: accept-encoding\r\ncf-ray: 9a76a7fb1db1b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-03T19:31:02.04768Z","times_seen":760557,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/107_x3xa3989bdda2f42b9255-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/107_x3xa3989bdda2f42b9255-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15253\r\nlast-modified: Fri, 29 Aug 2025 06:42:55 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bef-3b95\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9hv17ArdlV3zCQAS8Gww7rmsqz1x1yEQfmYmcYV0qEPF0Sj4XriUCOttC2dA5aBw68e%2FbYbkdRIkJgKm1J3ZaezuT6x%2BFz4Jexxs5qhWdA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1aedf32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15253,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 640x639, segment length 16, baseline, precision 8, 400x300, components 3","md5":"ff127391758b6d5681a7676e87f53f60","sha1":"15f08983984ad97e3e74c342d219b2d6507cad2d","sha256":"181f7f4078b9147b1ab9a64495df7305245bbd1c4a6d03096cfe05be76a80183","sha512":"ede2838a20abc7211115afbea02f31acd071d537e781db820dc2e977f5615ed23779a03d7c96dc86d6f24cc2c98e40373abf0a5427c5a6b78348aa3093d13ad8","ssdeep":"384:syxuZXGICoGZXn4VdbHLWzchWcnHxWS+W3U2xhfw6:syeGIC16VdD6ohfHxWwUsf","tlshash":"3c62c0fd0d5f44039e6cdc34808bf54f8e6abdbc54a8255409058bc737cba9e9ba246d","first_seen":"2025-10-19T02:15:20.240005Z","last_seen":"2026-03-27T19:42:57.098413Z","times_seen":24,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":167,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/imges/native/backup/stripchat/oxyana_3.jpeg","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:00.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 07:32:01 GMT","end":"Sat, 28 Feb 2026 07:32:00 GMT"},"fingerprint":{"sha1":"30:27:D8:5A:59:AD:E2:2E:0E:9D:6A:5B:1B:BF:60:BE:D2:80:8B:DF","sha256":"A9:DE:14:B5:E6:07:9A:21:0C:4B:AC:5D:B3:F1:DB:EB:1F:27:9B:A9:C9:AD:51:72:F0:5B:0D:91:81:C1:D3:6D"}}},"request":{"raw":"GET /imges/native/backup/stripchat/oxyana_3.jpeg HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: cookie_user_id=a3478f5e-53f5-5f37-994f-8bde9a7ba683; bfq=APeIECNCx5YaOWbIkGEDRxcWIsYU3BLjoYgyE2PcsEHjhowYMmDA6NJH\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25765\r\nserver: nginx\r\nlast-modified: Mon, 10 Nov 2025 10:05:51 GMT\r\netag: \"6911b8ff-64a5\"\r\nx-robots-tag: noindex, nofollow\r\ncache-control: max-age=172800\r\nexpires: Thu, 04 Dec 2025 00:20:00 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS5833\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25765,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 300x300, components 3","md5":"06610239c69f82a3695fc9b8e4e05cea","sha1":"b55e14ecdb3bc2bfc15963e745401b492f1db70e","sha256":"ad32261218f221b6f2f6a73d044bc076a646445d72925e1bd23fd63bfe356d36","sha512":"de255d8484d8ecaa7088f48f82667901e8fa955a6ed75f167b96a11844b8be62f20458d1a12b1134d80097d464e966aa775dd14f0388fc03d8b4e92031b82dba","ssdeep":"384:qLrojZisgSXRFx0CgtrraHT4eoCqI9mwP2BbJhIskMb9XCIoYLajveuW:Mro1XOQHTHoCqQgbk4XDraq/","tlshash":"16c2e10e231c3e94f2b36ab0578a7bc8752ca8f5a31119b7bdc140153079ad61fe264b","first_seen":"2025-06-27T01:51:04.041385Z","last_seen":"2026-03-22T17:36:45.269699Z","times_seen":10,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pxl.tsyndicate.com/api/v1/backup.gif?t=native\u0026tct=adult\u0026s=bd16f693d3144ae0b0b2ce10c53c7d0a","fqdn":"pxl.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"78.46.88.185","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:00.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 21:10:04 GMT","end":"Tue, 10 Feb 2026 21:10:03 GMT"},"fingerprint":{"sha1":"BB:2C:CE:C9:92:0E:A9:18:50:BD:8C:7E:7D:B2:E6:CC:72:54:29:18","sha256":"3B:E3:8E:A4:C5:EC:08:3B:96:2B:B0:16:ED:56:3F:0A:CD:55:81:4A:8F:FC:97:83:57:FC:6E:F9:FD:F4:43:83"}}},"request":{"raw":"GET /api/v1/backup.gif?t=native\u0026tct=adult\u0026s=bd16f693d3144ae0b0b2ce10c53c7d0a HTTP/1.1\r\nHost: pxl.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: cookie_user_id=a3478f5e-53f5-5f37-994f-8bde9a7ba683; bfq=APeIECNCx5YaOWbIkGEDRxcWIsYU3BLjoYgyE2PcsEHjhowYMmDA6NJH\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 02 Dec 2025 00:20:00 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-robots-tag: noindex, nofollow\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ba036c43037cfe89320d1ef7b64cd43f","sha1":"88c72d3e26047eb1e45e5564a76427734f120efe","sha256":"42cb846e07917f6731406e500f24aeb2e88c42cda124eaa59e08c5331cad8bcb","sha512":"aa80ccd27c05eb729f730b9d830b011650bcf12cbb25d19edf29efcf962c7465bb5685a5ff5d084356c6710c08e829d16b59e7a59a41767eb14744f326b6c124","ssdeep":"","tlshash":"19900403f5400003d175d03107170340134cd110057c0307405d505cdc553510c01010","first_seen":"2023-05-10T09:10:20Z","last_seen":"2026-04-03T19:07:46.57008Z","times_seen":14403,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/imges/native/backup/stripchat/aryanna_ray_4.jpeg","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:00.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 07:32:01 GMT","end":"Sat, 28 Feb 2026 07:32:00 GMT"},"fingerprint":{"sha1":"30:27:D8:5A:59:AD:E2:2E:0E:9D:6A:5B:1B:BF:60:BE:D2:80:8B:DF","sha256":"A9:DE:14:B5:E6:07:9A:21:0C:4B:AC:5D:B3:F1:DB:EB:1F:27:9B:A9:C9:AD:51:72:F0:5B:0D:91:81:C1:D3:6D"}}},"request":{"raw":"GET /imges/native/backup/stripchat/aryanna_ray_4.jpeg HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: cookie_user_id=a3478f5e-53f5-5f37-994f-8bde9a7ba683; bfq=APeIECNCx5YaOWbIkGEDRxcWIsYU3BLjoYgyE2PcsEHjhowYMmDA6NJH\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27920\r\nserver: nginx\r\nlast-modified: Mon, 10 Nov 2025 10:05:51 GMT\r\netag: \"6911b8ff-6d10\"\r\nx-robots-tag: noindex, nofollow\r\ncache-control: max-age=172800\r\nexpires: Thu, 04 Dec 2025 00:20:00 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS5833\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27920,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 300x300, components 3","md5":"9411ff396ae867517db904e1ea313910","sha1":"c1eb5f5d5124cb076a4311c47b2a5565ae6fb31b","sha256":"b1bb25f4671fab3f2b1e4424b044c83242e4840c0a7d580eaad032f2ce854653","sha512":"bf770d1a03a7db59ed3fc498c2669c1569ff8042d84760ce7260b7972bfca580bac0aa438411cf77f421819520b1386dfbac05baf77cc808b71af67a2c54e11d","ssdeep":"768:2V1PaBdJpN2o6DW9lpfDuaiSB7DTjJtMK3AU0dBe/cx:EPaBdJj2bOpbuLADJDwU0d0/q","tlshash":"d8c2f2444a621049f1b793775eec9630b7afca7f9424632b30ec2e371e443e4167a857","first_seen":"2023-11-04T23:13:33Z","last_seen":"2026-03-22T10:23:03.88983Z","times_seen":12,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtbrenab.net/banner/in/show/?mid=3430344761818172101\u0026pid=0\u0026site=1433671\u0026sc=\u0026usage_type=DCH\u0026subid=1567158389\u0026sid=0\u0026cid=17861\u0026price=0\u0026is_cpm=1\u0026cpm=0.07\u0026ecpm=0.043911001682281306\u0026crid=\u0026crtid=d41d8cd98f00b204e9800998ecf8427e\u0026tcid=0\u0026out_id=0\u0026ver=6.90.10\u0026ver_c=\u0026refdom=hclips-porn.cfd\u0026hostname=auc-banner-hz-16\u0026site_id=0\u0026spot_id=1433671\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=0\u0026created_at=0000-00-00\u0026is_native=6\u0026ip=\u0026testab=0\u0026px_id=1433671\u0026adblock=0\u0026auction_host=\u0026mm=0\u0026yc=0\u0026render_type=\u0026campaign_type=banner-ext\u0026uniq=\u0026exp=0\u0026resp_type=a2\u0026min_cpm=0.0000637653410928642\u0026placement_type_id=269\u0026verify_hash=baaa20274932fa17293bd5f878762374b55d9da553c2db722b1f99a9b17b6474\u0026score=100\u0026kubik_score=100\u0026kaminari_bot_ip=1\u0026tag_ab=a\u0026v2=0\u0026ttl=0\u0026space_id=1496\u0026banner_width=300\u0026banner_height=250\u0026accel=0\u0026gyr=0\u0026iabcat=IAB25\u0026user_fp=3320490513170107167\u0026icon=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png\u0026pr=\u0026bid_crid=\u0026bid_cid=\u0026is_iframe=1\u0026ad_tags=HCLIPS-PORN%2CHD%2CXXX%2CCLIPS%2CVIDEO%2CTUBE!,\u0026stratagem=\u0026ssp=3758\u0026refresh=1\u0026priority=0\u0026base_bidfloor=0.0001\u0026label_ids=\u0026site_id64=1433671\u0026original_bid_usd=0.07\u0026comeback=\u0026topics=\u0026original_domain=\u0026ectr=0.00010166255996870424\u0026client_price=0\u0026direct_client_price=0\u0026client_payment_model=\u0026ext_campaign_id=4600\u0026auction_time=1764634801\u0026account_id=3835\u0026url=https://preroll.hostave3.net/notifications/zeropixel.png\u0026stime=1764634801\u0026ip_mismatch=91.90.42.154\u0026double_click_filter=false\u0026w=300\u0026h=100\u0026skin_id=4\u0026placement_id=1\u0026service_spot_id=0\u0026processed_keywords=Adult,HD\u0026user_keywords=\u0026segment_id=1440234390\u0026traffic_category=adult\u0026viewability=0.2893037336024218\u0026container=Skin%20300x250%20Small%20banners\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026iframe_click=1\u0026is_webview=0\u0026social_network=\u0026publisher_id=116783\u0026advanced_pub_id=116783\u0026lv_id=0\u0026entry_source=direct\u0026final_source_id=0\u0026payment_model=cpm\u0026is_second_price=0","fqdn":"rtbrenab.net","domain":"rtbrenab.net","tld":"net"},"ip":{"addr":"116.202.60.226","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rtbrenab.net/get/?go=1\u0026data=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","date":"2025-12-02T00:20:02.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"banner.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Oct 2025 11:40:25 GMT","end":"Wed, 07 Jan 2026 11:40:24 GMT"},"fingerprint":{"sha1":"4C:2F:3B:EF:F4:3B:F0:06:66:A4:CC:D0:2F:52:5E:96:B4:DA:FD:DF","sha256":"6F:15:D0:A4:DD:A4:6F:A6:5F:28:DB:5F:E9:A1:C0:15:5D:53:34:91:A8:84:99:BA:14:33:3D:36:3B:0C:BD:CA"}}},"request":{"raw":"GET /banner/in/show/?mid=3430344761818172101\u0026pid=0\u0026site=1433671\u0026sc=\u0026usage_type=DCH\u0026subid=1567158389\u0026sid=0\u0026cid=17861\u0026price=0\u0026is_cpm=1\u0026cpm=0.07\u0026ecpm=0.043911001682281306\u0026crid=\u0026crtid=d41d8cd98f00b204e9800998ecf8427e\u0026tcid=0\u0026out_id=0\u0026ver=6.90.10\u0026ver_c=\u0026refdom=hclips-porn.cfd\u0026hostname=auc-banner-hz-16\u0026site_id=0\u0026spot_id=1433671\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=0\u0026created_at=0000-00-00\u0026is_native=6\u0026ip=\u0026testab=0\u0026px_id=1433671\u0026adblock=0\u0026auction_host=\u0026mm=0\u0026yc=0\u0026render_type=\u0026campaign_type=banner-ext\u0026uniq=\u0026exp=0\u0026resp_type=a2\u0026min_cpm=0.0000637653410928642\u0026placement_type_id=269\u0026verify_hash=baaa20274932fa17293bd5f878762374b55d9da553c2db722b1f99a9b17b6474\u0026score=100\u0026kubik_score=100\u0026kaminari_bot_ip=1\u0026tag_ab=a\u0026v2=0\u0026ttl=0\u0026space_id=1496\u0026banner_width=300\u0026banner_height=250\u0026accel=0\u0026gyr=0\u0026iabcat=IAB25\u0026user_fp=3320490513170107167\u0026icon=https%3A%2F%2Fpreroll.hostave3.net%2Fnotifications%2Fzeropixel.png\u0026pr=\u0026bid_crid=\u0026bid_cid=\u0026is_iframe=1\u0026ad_tags=HCLIPS-PORN%2CHD%2CXXX%2CCLIPS%2CVIDEO%2CTUBE!,\u0026stratagem=\u0026ssp=3758\u0026refresh=1\u0026priority=0\u0026base_bidfloor=0.0001\u0026label_ids=\u0026site_id64=1433671\u0026original_bid_usd=0.07\u0026comeback=\u0026topics=\u0026original_domain=\u0026ectr=0.00010166255996870424\u0026client_price=0\u0026direct_client_price=0\u0026client_payment_model=\u0026ext_campaign_id=4600\u0026auction_time=1764634801\u0026account_id=3835\u0026url=https://preroll.hostave3.net/notifications/zeropixel.png\u0026stime=1764634801\u0026ip_mismatch=91.90.42.154\u0026double_click_filter=false\u0026w=300\u0026h=100\u0026skin_id=4\u0026placement_id=1\u0026service_spot_id=0\u0026processed_keywords=Adult,HD\u0026user_keywords=\u0026segment_id=1440234390\u0026traffic_category=adult\u0026viewability=0.2893037336024218\u0026container=Skin%20300x250%20Small%20banners\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026iframe_click=1\u0026is_webview=0\u0026social_network=\u0026publisher_id=116783\u0026advanced_pub_id=116783\u0026lv_id=0\u0026entry_source=direct\u0026final_source_id=0\u0026payment_model=cpm\u0026is_second_price=0 HTTP/1.1\r\nHost: rtbrenab.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rtbrenab.net/get/?go=1\u0026data=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\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.18.0\r\ndate: Tue, 02 Dec 2025 00:20:02 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nlocation: https://preroll.hostave3.net/notifications/zeropixel.png\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/076_x1x839ded11226993ddcd-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/076_x1x839ded11226993ddcd-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26098\r\nlast-modified: Fri, 29 Aug 2025 06:42:09 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bc1-65f2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Iks%2FRB9KwsEp6NZFy%2FwCHeirwEIpls6ZGW0yR3jxlD493SJzFNWvIS3J8C99SRVs4QTILrMlHu5Jx1KFot6gXzPB8a5iLhiebWePpmqrdg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e16eb732fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26098,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 640x639, segment length 16, baseline, precision 8, 400x300, components 3","md5":"471a0082550b1ac18530393cda46474f","sha1":"69efd02d487dd14126441ab2a382eb0c2aa420d1","sha256":"77bfd6967be7ed04e9107fcc08a3ee70a98837458aee073de46225485944800e","sha512":"d903927112a21d5064d18dce54ab19633548c72e27d72a40384aea3b14301702345525edff16eb828c515e1122ccfde3c6756a1c11c9dc426ceacd7304915e01","ssdeep":"384:3kLqKnKrZCTrEOuMxiIp3bQ+v8kCNc/H4NamuS6ORAWYF08famtX2m42hV:3kQNOu7I5bafpQ26OzsamEmtV","tlshash":"eec2d00e4a8d0c16c9a6f8361869a7f17d1d3ef0520a1269b5397cf59c762eb0c4fe89","first_seen":"2025-10-19T02:15:17.185838Z","last_seen":"2026-03-27T19:42:57.151463Z","times_seen":24,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":264,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/047_matsuoka.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/047_matsuoka.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19310\r\nlast-modified: Fri, 29 Aug 2025 06:41:22 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b92-4b6e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=43M4ZvIYMf5ql17huxt7AY6H56Gy0b%2FoZC5gcb4oE1YMKNMGGj7F8tVV3aUi5O9phhCaNwSAMTKsbrZ4PcIhtYETvEceaYxQHrIrMXmB8Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e25f2632fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19310,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"3d80b1ac5ff8f956de7c3735c93fb436","sha1":"9e1966e5777bb384b8dc9fa262f639de45eca245","sha256":"a7decf823ee51d8993d01a28d868b05111ddd9679022de3cec1741b5b4df45bf","sha512":"212e7130489e8237bc3e9ff2b1ebec05a086e582e91967c843133a70a8e836cc4247a168994eea600ee45f0b428987b0d3b5b29c0a6c2dea314512578e72e409","ssdeep":"384:/E1RIrnERaMBjtz/PTI/5XAVHdkFX+A7+RtBCrf3/yD4lsviJyHNjbEUSMORA:/EH0nExBZ/PTIRXoEL7+XEj/yDMsviM7","tlshash":"cf82e2225711f114c03b3777403a65fe835b6e675972034a42b271db99ee88f456294e","first_seen":"2025-10-31T12:17:27.038068Z","last_seen":"2026-03-27T19:42:57.071679Z","times_seen":19,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/022_fanfick-dem-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:59.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/022_fanfick-dem-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23580\r\nlast-modified: Fri, 29 Aug 2025 06:35:57 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14a4d-5c1c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 41085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GtC3XoAhebJqlAcomFoCs%2FxFWxi8%2FUv4cKIgO0bWKOwxQL4eOv3%2FnLbMGA7cbnXo%2FGFFQGRy6Ffe9VNXQ49J0I3068xAHYJt%2Fjlp1NqxSA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e2ef4232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23580,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"c1fc479d4d395a9f057af09cac162b6e","sha1":"f27f91e9da4fcaa73eec7a928869ebb8029f0b2f","sha256":"2e75a69f8bfebda7fffcb17a0a6282c941847bd7a569c00a67aebc745d03645a","sha512":"928bc5cf05661ff1c6a2c5a5c8b73039e1a5c155977503c18ab667869eb288dff4f574dca5e1d90d0869bb37d5629fe6f827c4e9dae4c8a758d5030db2fe7e52","ssdeep":"384:hy1rHdQxBxqmo9p0BNdp6eKLHDu3QVX+N6wXDlOWLFwVBdzUUHkE1pUlrW6Q:hy121qX9INdp6eKW3aeTnpwVwE1pUa","tlshash":"10b2d0b2407ca6336736da7556fceb2998be0c40c72fe8332e5486f530c925a4635d17","first_seen":"2025-10-31T12:17:26.965864Z","last_seen":"2026-01-10T09:02:32.788064Z","times_seen":11,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":132,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=281215","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:01.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 11:47:47 GMT","end":"Sun, 08 Feb 2026 11:47:46 GMT"},"fingerprint":{"sha1":"05:1E:63:2F:40:1F:87:C3:0D:F0:42:C7:EA:E8:B1:D8:6F:76:7C:FC","sha256":"1C:13:0E:F6:58:8A:8C:D7:DE:1F:9F:20:D5:17:50:15:02:D5:C8:8E:39:40:68:3F:01:24:F2:73:14:BA:25:0F"}}},"request":{"raw":"POST /fp?tag_id=281215 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 1971\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1971,"data":"{\"timezoneOlson\":\"UTC\",\"incognito\":true,\"fonts\":{\"value\":[\"Bitstream Vera Sans Mono\",\"Century\"],\"duration\":225},\"fontPreferences\":{\"value\":{\"default\":173.11666870117188,\"apple\":173.11666870117188,\"serif\":173.11666870117188,\"sans\":162.01666259765625,\"mono\":122.68333435058594,\"min\":10.800003051757812,\"system\":162.01666259765625},\"duration\":404},\"languages\":{\"value\":[[\"en-US\"],[\"en-US\",\"en\"]],\"duration\":0},\"colorDepth\":{\"value\":24,\"duration\":0},\"deviceMemory\":{\"duration\":0},\"screenResolution\":{\"value\":[1280,1024],\"duration\":0},\"hardwareConcurrency\":{\"value\":48,\"duration\":0},\"timezone\":{\"value\":\"UTC\",\"duration\":1},\"sessionStorage\":{\"value\":true,\"duration\":0},\"localStorage\":{\"value\":true,\"duration\":0},\"indexedDB\":{\"value\":true,\"duration\":0},\"platform\":{\"value\":\"Win32\",\"duration\":0},\"plugins\":{\"value\":[{\"name\":\"PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chrome PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chromium PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Microsoft Edge PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"WebKit built-in PDF\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]}],\"duration\":1},\"vendor\":{\"value\":\"\",\"duration\":0},\"cookiesEnabled\":{\"value\":true,\"duration\":0},\"colorGamut\":{\"value\":\"srgb\",\"duration\":0},\"rendererUnmasked\":{\"value\":\"\",\"duration\":35},\"brand\":\"\",\"device\":\"\",\"os_type\":\"desktop\",\"os_family\":\"Windows\",\"front_browser_family\":\"Firefox\",\"front_browser_name\":\"Firefox 134\",\"pixel_ratio\":1}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Tue, 02 Dec 2025 00:20:01 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 60\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://hclips-porn.cfd\r\nSet-Cookie: id=14128772867803734541; Expires=Wed, 02 Dec 2026 00:20:01 GMT; Secure; SameSite=None\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":60,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a53e936f5aed8f51fde120eebf3ec8df","sha1":"306e4810969991f8d2fdff17da714d645675ad51","sha256":"6a1f16f8062843b82cf44375eb852db6710543fe70f67aa6fdd4cd10e6b0cf78","sha512":"044eebb9b90e2fd4370aeea1bc39cbeeb99560f6d850cd4c41af9d637908474326ff4d4b6ecf96a83de60d601274e3330d38387dad508616582fbd9054d7709b","ssdeep":"","tlshash":"24a002e3aac01107a0608310c24718168e487d30f41313400544c743a07a08036d2085","first_seen":"2025-07-26T23:55:29.904633Z","last_seen":"2026-04-03T18:52:28.672298Z","times_seen":964,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f93c382250.1f0355218f.com/in/show/?tag_ab=a\u0026site_id=311433588\u0026adblock=0\u0026testab=0\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=hq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=0\u0026conditions=all,dch_ip,tz_offset\u0026ssp=3964\u0026page=https%3A%2F%2Fhclips-porn.cfd%2F\u0026refdom=hclips-porn.cfd\u0026auction_time=1764634802\u0026subid=485853577\u0026sid=85749476\u0026tcid=0\u0026ver=8.243.5\u0026ver_c=\u0026spot_id=1433588\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2025-12-02\u0026iabcat=IAB25-3\u0026user_fp=3062215412326782139\u0026score=96.99402384581049\u0026kubik_score=97.592\u0026kaminari_bot_ip=1\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D485853577%26spot_id%3D1433588%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fhclips-porn.cfd%252F%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=\u0026crid=219996\u0026crtid=47daa2de33a8a1088a04eea7be34b6aa\u0026url=https%3A%2F%2Fpointcontinentrtb.com%2Fv1%2Ftrack%2Fclick%3Fdata%3DeyJhbGciOiJIUzI1NiJ9.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.DgGaQQesNCiXKkrbFA3wu-kb5-7l-isCBM4ZfGypSbs%26sp%3D5.2e-05%26skin_id%3D52\u0026icons=XbD2XVgi_cwyQVOwpgaL2dWmKcTXq-eW2Xemkf9FEAVvrvvoyFjzu4hxtgufJLoM0xNQVmXa1uy94nE3avE77np4wjWx0_PqO-DBoilnJqeniOOW7NvWuEpEjx9jISQUEEMgF_n9-YAAU0JZEt4pwyHuqqEHmAYnU5ux0-IGFk-fKjTOt1A1ImA2Njg8fHklxurNvejB5EY7vYmOhF9iO5AJxu5byLHK4q5aEEDt85FHdxpnLBdjMXbGPyMckQ9YhNyfW4PuXrDb8z_xX1cdmecQvfRvyuRZ83kX488BcZNHfSyM46mbc2fvUwAC82OLNkkZQ1D6mJw4S7oRygUfCabViHfiyIE3n6NNO5fdLjnrNILNCGRUdSPlBNM32PFaYm4eXDyoy5kLsKBToRoG1x4unhis0la84wNooJZx_prcJU3Vtr890bgTQfhC3-b7LwsEvCMqiXwFgDiG-gsOU7Klrf91Vc0sGlVrb6asxCkv18ygd7Pb6saYY_TMmwDGVwxxIRavC_3DzrRqNbW4yItRsHY2F4s3oKYh8OghOvx__bYAiQW2zY4ZwAUemlfBWYPpZm1EooxjJI9zdrMpDUo8Itt7mvpAxAZ7_p7qjTuMfOSA189x9ud0ZGniiMDw9uLm8BmvNPlpQ_xP5ug2_mZ6fLQF-V8PXBgVxWL0u2nUHUQB_oWEv0Pd_Ifq1F-pEGlC4-3TsS18YzlbYmxDGtNDlBxPgjtmArkqOIqV_0LQGOMeT1h1l9sOdk6RBMC_ZM6H2ve0i58JK3zvJt86DgFluSgyl-Hmo43IdZTIBGMTTd7kbsGUAk-LZTrfHL9MZJcZpcQCBaWNdlaVZzmVxd5NhsYNlhcyG5Mvbgita29n4MPJocyiEKXwnod1i8evhLeR3Vr7BfKe6UMBzPXJa9vDHsnY1e8PLORts0Q2QrkKkD92XMZVGJUxs1kLGlvuMINR-RhYyboyGVQPhTwc8CexnKMjvVbIpjOCxEWnJ-ZP3_kiRC5yeqFYbPOaTJLV6h7q5fZJW4JHJNKLDYLWI0O22OH6qSpbRt8IFf3G153YAhRHgRGbNlxGHckLsZsbzEw_3pyLpt-VvcUO4lurXxZJd0icX0WtHNkTetBlb2gBmXvpm5Uqfgg4MqxwE-tWxhQ1uxyL_tOWB1BjG0jf2Y6-cMKwFneG-RDWoY0KKS9yUxek1vqFC28w-4EHMvQN63v8xOY4R2tVa5TjpDzTOwcCch5FFIRW9gp13S4rN-1TamqquJqKUyRZngigznEDQT7Ll1izk1jyygAGmq6UmvdsTts1ORC1OhaF4dglSO0RYl1RmS-UY550FNIJDdf1oTTR4Dlw4gB9sbRISWhiY213daIpk9ajvLlwaLUHYcqIIycHZwHWDhcvTM8QDV0BpVxaZ7ZJVIOL_Vnx99qgwoBONS7CqUbfOoaG90oA8J9jL_dUEJimq2appLpBalPr1adnVgzCExvc_NQSJLkW4_HZnKdnDRDHbFfJWQIl2cqzoOe9S6G7o-AkYjAlyZ2CcbYFlJupj8fq_foizklUycwbiJJQfFoK091DKoRwazCy75v0lMk8AMGEhHJLVWUflKOeovmVi2TkMRKLbEVi55EJTc9MB1GFChHDGjYutwqaZIc47RlCNJ6qz6JmgLYGmawbFJdPFDHRJBBAkgr9KNVDZbN7Cxws5c0woPJ-u6UdBduwFbfJfBzYzknpMgHWpGrGH8-OuTs4\u0026ext_cid=83312\u0026px_id=731433588\u0026min_cpm=0.09577205682154484\u0026out_id=0\u0026campaign_type=hq\u0026aid=3296\u0026cid=17910\u0026uniq=973c1c0f6c10d47f2d37ee44d284f1ba7aadd543a389a88e8eb80eebc110f598\u0026mid=6129685428074245754\u0026skin_id=52\u0026vertical_id=4\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.005542552016479246\u0026cpm=0.005863273157738975\u0026verify_hash=8d2d44659e8349a7934bc3e4b044b2c2\u0026verify_hash_v2=5abcaf0532994ee619849e5ab029928c3171af93c9e289ef408fbca05dcfa4ee\u0026is_native=1\u0026real_bid=4.91555991172792e-05\u0026original_bid_usd=0.000052\u0026original_bid=5.2e-05\u0026show_type=0\u0026exp=180\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=90,148,98,4\u0026need_redirect_show=0\u0026applied_features=coef_095,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=1764721202\u0026image_url=https%3A%2F%2Fassets.ahmybid.net%2Fc525a788-57c6-416f-ba51-b4deda4bf4b8.jpg\u0026site=native-push-adult\u0026price=0.000052\u0026hostname=auc-inpage-hz-10-b\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=adult,hd\u0026pop_cpc=0.000052\u0026ext_campaign_id_str=83312\u0026is_webview=0\u0026client_price=0.0000491555991172792\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=cpc\u0026is_in_app=0\u0026auc_domain_type=hash\u0026script_type=general\u0026tma_wallet_balance=0\u0026processed_keywords=Adult%2CHD\u0026is_iframe=0\u0026traffic_category=adult\u0026iframe_click=0\u0026estimated_ctr=0.11275525303344185\u0026social_network=\u0026publisher_id=116783\u0026advanced_pub_id=73116783\u0026user_click_counter=1\u0026lv_id=1\u0026service_spot_id=0\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026entry_source=direct\u0026is_second_price=0\u0026payment_model=cpc\u0026final_source_id=0\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=iosNotification-view-m_m-body\u0026cpa=88a6ee28-54e2-45a7-871a-84909143f914\u0026prev_step_diff=1457\u0026st=0.05","fqdn":"f93c382250.1f0355218f.com","domain":"1f0355218f.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:03.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1f0355218f.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 14:04:17 GMT","end":"Thu, 26 Feb 2026 14:04:16 GMT"},"fingerprint":{"sha1":"91:AD:7C:21:B5:6B:FF:3E:E7:14:52:3B:D9:19:76:C7:36:D9:6F:CA","sha256":"D1:F9:1F:D4:16:D5:AB:B7:FE:AC:D9:81:A9:14:2F:D3:AA:65:2D:E9:EC:90:49:7A:82:0C:38:82:9C:BC:84:F0"}}},"request":{"raw":"GET /in/show/?tag_ab=a\u0026site_id=311433588\u0026adblock=0\u0026testab=0\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=hq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=0\u0026conditions=all,dch_ip,tz_offset\u0026ssp=3964\u0026page=https%3A%2F%2Fhclips-porn.cfd%2F\u0026refdom=hclips-porn.cfd\u0026auction_time=1764634802\u0026subid=485853577\u0026sid=85749476\u0026tcid=0\u0026ver=8.243.5\u0026ver_c=\u0026spot_id=1433588\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2025-12-02\u0026iabcat=IAB25-3\u0026user_fp=3062215412326782139\u0026score=96.99402384581049\u0026kubik_score=97.592\u0026kaminari_bot_ip=1\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D485853577%26spot_id%3D1433588%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fhclips-porn.cfd%252F%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=\u0026crid=219996\u0026crtid=47daa2de33a8a1088a04eea7be34b6aa\u0026url=https%3A%2F%2Fpointcontinentrtb.com%2Fv1%2Ftrack%2Fclick%3Fdata%3DeyJhbGciOiJIUzI1NiJ9.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.DgGaQQesNCiXKkrbFA3wu-kb5-7l-isCBM4ZfGypSbs%26sp%3D5.2e-05%26skin_id%3D52\u0026icons=XbD2XVgi_cwyQVOwpgaL2dWmKcTXq-eW2Xemkf9FEAVvrvvoyFjzu4hxtgufJLoM0xNQVmXa1uy94nE3avE77np4wjWx0_PqO-DBoilnJqeniOOW7NvWuEpEjx9jISQUEEMgF_n9-YAAU0JZEt4pwyHuqqEHmAYnU5ux0-IGFk-fKjTOt1A1ImA2Njg8fHklxurNvejB5EY7vYmOhF9iO5AJxu5byLHK4q5aEEDt85FHdxpnLBdjMXbGPyMckQ9YhNyfW4PuXrDb8z_xX1cdmecQvfRvyuRZ83kX488BcZNHfSyM46mbc2fvUwAC82OLNkkZQ1D6mJw4S7oRygUfCabViHfiyIE3n6NNO5fdLjnrNILNCGRUdSPlBNM32PFaYm4eXDyoy5kLsKBToRoG1x4unhis0la84wNooJZx_prcJU3Vtr890bgTQfhC3-b7LwsEvCMqiXwFgDiG-gsOU7Klrf91Vc0sGlVrb6asxCkv18ygd7Pb6saYY_TMmwDGVwxxIRavC_3DzrRqNbW4yItRsHY2F4s3oKYh8OghOvx__bYAiQW2zY4ZwAUemlfBWYPpZm1EooxjJI9zdrMpDUo8Itt7mvpAxAZ7_p7qjTuMfOSA189x9ud0ZGniiMDw9uLm8BmvNPlpQ_xP5ug2_mZ6fLQF-V8PXBgVxWL0u2nUHUQB_oWEv0Pd_Ifq1F-pEGlC4-3TsS18YzlbYmxDGtNDlBxPgjtmArkqOIqV_0LQGOMeT1h1l9sOdk6RBMC_ZM6H2ve0i58JK3zvJt86DgFluSgyl-Hmo43IdZTIBGMTTd7kbsGUAk-LZTrfHL9MZJcZpcQCBaWNdlaVZzmVxd5NhsYNlhcyG5Mvbgita29n4MPJocyiEKXwnod1i8evhLeR3Vr7BfKe6UMBzPXJa9vDHsnY1e8PLORts0Q2QrkKkD92XMZVGJUxs1kLGlvuMINR-RhYyboyGVQPhTwc8CexnKMjvVbIpjOCxEWnJ-ZP3_kiRC5yeqFYbPOaTJLV6h7q5fZJW4JHJNKLDYLWI0O22OH6qSpbRt8IFf3G153YAhRHgRGbNlxGHckLsZsbzEw_3pyLpt-VvcUO4lurXxZJd0icX0WtHNkTetBlb2gBmXvpm5Uqfgg4MqxwE-tWxhQ1uxyL_tOWB1BjG0jf2Y6-cMKwFneG-RDWoY0KKS9yUxek1vqFC28w-4EHMvQN63v8xOY4R2tVa5TjpDzTOwcCch5FFIRW9gp13S4rN-1TamqquJqKUyRZngigznEDQT7Ll1izk1jyygAGmq6UmvdsTts1ORC1OhaF4dglSO0RYl1RmS-UY550FNIJDdf1oTTR4Dlw4gB9sbRISWhiY213daIpk9ajvLlwaLUHYcqIIycHZwHWDhcvTM8QDV0BpVxaZ7ZJVIOL_Vnx99qgwoBONS7CqUbfOoaG90oA8J9jL_dUEJimq2appLpBalPr1adnVgzCExvc_NQSJLkW4_HZnKdnDRDHbFfJWQIl2cqzoOe9S6G7o-AkYjAlyZ2CcbYFlJupj8fq_foizklUycwbiJJQfFoK091DKoRwazCy75v0lMk8AMGEhHJLVWUflKOeovmVi2TkMRKLbEVi55EJTc9MB1GFChHDGjYutwqaZIc47RlCNJ6qz6JmgLYGmawbFJdPFDHRJBBAkgr9KNVDZbN7Cxws5c0woPJ-u6UdBduwFbfJfBzYzknpMgHWpGrGH8-OuTs4\u0026ext_cid=83312\u0026px_id=731433588\u0026min_cpm=0.09577205682154484\u0026out_id=0\u0026campaign_type=hq\u0026aid=3296\u0026cid=17910\u0026uniq=973c1c0f6c10d47f2d37ee44d284f1ba7aadd543a389a88e8eb80eebc110f598\u0026mid=6129685428074245754\u0026skin_id=52\u0026vertical_id=4\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.005542552016479246\u0026cpm=0.005863273157738975\u0026verify_hash=8d2d44659e8349a7934bc3e4b044b2c2\u0026verify_hash_v2=5abcaf0532994ee619849e5ab029928c3171af93c9e289ef408fbca05dcfa4ee\u0026is_native=1\u0026real_bid=4.91555991172792e-05\u0026original_bid_usd=0.000052\u0026original_bid=5.2e-05\u0026show_type=0\u0026exp=180\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=90,148,98,4\u0026need_redirect_show=0\u0026applied_features=coef_095,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=1764721202\u0026image_url=https%3A%2F%2Fassets.ahmybid.net%2Fc525a788-57c6-416f-ba51-b4deda4bf4b8.jpg\u0026site=native-push-adult\u0026price=0.000052\u0026hostname=auc-inpage-hz-10-b\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=adult,hd\u0026pop_cpc=0.000052\u0026ext_campaign_id_str=83312\u0026is_webview=0\u0026client_price=0.0000491555991172792\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=cpc\u0026is_in_app=0\u0026auc_domain_type=hash\u0026script_type=general\u0026tma_wallet_balance=0\u0026processed_keywords=Adult%2CHD\u0026is_iframe=0\u0026traffic_category=adult\u0026iframe_click=0\u0026estimated_ctr=0.11275525303344185\u0026social_network=\u0026publisher_id=116783\u0026advanced_pub_id=73116783\u0026user_click_counter=1\u0026lv_id=1\u0026service_spot_id=0\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026entry_source=direct\u0026is_second_price=0\u0026payment_model=cpc\u0026final_source_id=0\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=iosNotification-view-m_m-body\u0026cpa=88a6ee28-54e2-45a7-871a-84909143f914\u0026prev_step_diff=1457\u0026st=0.05 HTTP/1.1\r\nHost: f93c382250.1f0355218f.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Tue, 02 Dec 2025 00:20:03 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"f93c382250.1f0355218f.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/113_tuweuhuewuuhiwiuuiuieuwui-sdh78-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/113_tuweuhuewuuhiwiuuiuieuwui-sdh78-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 30451\r\nlast-modified: Fri, 29 Aug 2025 06:43:02 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bf6-76f3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HHUPh25ZNIz7iHoTHHzOvaKAtG8mq3MM3EbS7k0suNvRDtyfnEapgeKlD0v5RCNX%2FBvsR%2FrjAsBNspPm2P8qOSasGOZuf5gD3RKSmY1y%2BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1aed932fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30451,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"80a4ea896669dc659f3ce695a4ec8143","sha1":"b509e4ec0fd978e40b100c030b2a8b95e6befddc","sha256":"afe34075ccbf404b6ddc3e7bf7fb483c9cd954f9d8496ec83fe0e335169bb116","sha512":"12b1f9331619811311521b0b40c886c305d79a75a82eebf831cf41116a771d34e2d98c53e2e921c93ceea0eba466590c421cfbf58c33c8d4cfa80da2a404299b","ssdeep":"768:WcP0jx23FqvikAicKa+ffHh4/b9n5qfWvXI5CNca0VTxazHUo6aA:Wo0s1+iga+fPh4/b9nJvm0cxVNUUo6aA","tlshash":"eed2f141e41e729aa95ac07393f99cf41fe31d824255598cd8e5e3c0d9a18fede80fe0","first_seen":"2025-10-05T06:06:00.185682Z","last_seen":"2026-03-27T19:42:57.042511Z","times_seen":26,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":207,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/075.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/075.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18524\r\nlast-modified: Fri, 29 Aug 2025 06:42:07 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bbf-485c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OGXq6r13liHJiaRYqizZS%2BWx7GCC7%2BWsu9tq54yZLUQmsDLWCshR9Yp%2FSb59FPwgJzmZLdVjZ%2BM8GJjn46KAP%2BDJHCaB%2FnJjiToV3GCPuw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1ef0532fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18524,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x300, components 3","md5":"6834ce0b03113285371273e4461ad3a7","sha1":"e264db5be7f39047387b714afc1ea054a44fdb68","sha256":"45a79942fefdc8401fe6dad7b5ca2d83e2e4fee20eaf07e28c0c40033601c1b4","sha512":"bf9b99e744b91760198911bbbacee4572e6da4ce4bfbafb5e2d314a759f7054dbd91a40e884b1007c6c05cf8d53e6e88e3a4394d8ba388ca469b85bb5ca579e3","ssdeep":"384:FX1HUm1ePwSWNZtlUHIyLHx0uMzeCvVyaes+vKBEJ7npE5Rb0luQPb:FL1e4SWNtUxR0uMzeCm4EJtsb0keb","tlshash":"2e82c0505faa80d3c2baeb36a097790bc75af51f538480f9e66406f1993b4c755403cb","first_seen":"2025-10-19T02:15:13.989572Z","last_seen":"2026-03-27T19:42:57.061342Z","times_seen":24,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/018_queen-aunt.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:59.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/018_queen-aunt.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 30166\r\nlast-modified: Fri, 29 Aug 2025 06:35:50 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14a46-75d6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 16984\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vA1V6YR530igU7Fl%2Fjus02mznyi9XfXnxPUMNY%2FF6xaA7sIQ0GBQI4wcWCurl6l6yzwjesQNxHmD0DA6o6PMbNM9pW%2Bx6YthW4X0IrN44A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e2ff4632fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30166,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"44ebcf7d5bf6ab16a0a34595e77af4e2","sha1":"6d9c6f3dbef8df1e8fb779a76f050a49986b651a","sha256":"d0cfb5c3527ef51fb5cddf777d53786f683a9aa588e252d58c841e08efddcdf6","sha512":"f2bcaebd5da265fd4183592b1613ffeb5edade6192b7ac4cbdcfca68702023b737fecbed72f06d08073b7eff4aa6ae9f4e9fdff93016d217021a1e602e6ce41a","ssdeep":"768:SBlG0fTj2MCqHLzdkQlc+sZccwmxmgR3u8A0DRtDMe:SB3f2WrxkynsZKmpFZA0n4e","tlshash":"cfd2e1edb169678c530c2cb99ca2383f7b8c5f1124263925ab48f6e3736d115afd2709","first_seen":"2025-10-31T12:17:26.974406Z","last_seen":"2026-01-10T09:02:32.853621Z","times_seen":7,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":135,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tsyndicate.com/iframes2/fc768f97a2f74ef6a818a54f5de471ce.html?keywords=HCLIPS-PORN%20%3A%20HD%20XXX%20CLIPS%20VIDEO%20TUBE!\u0026extid=%7Bextid%7D\u0026adb=0\u0026clientjs=1\u0026w=1280\u0026h=1024\u0026tz=0","fqdn":"tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"78.46.88.185","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:00.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 21:10:04 GMT","end":"Tue, 10 Feb 2026 21:10:03 GMT"},"fingerprint":{"sha1":"BB:2C:CE:C9:92:0E:A9:18:50:BD:8C:7E:7D:B2:E6:CC:72:54:29:18","sha256":"3B:E3:8E:A4:C5:EC:08:3B:96:2B:B0:16:ED:56:3F:0A:CD:55:81:4A:8F:FC:97:83:57:FC:6E:F9:FD:F4:43:83"}}},"request":{"raw":"GET /iframes2/fc768f97a2f74ef6a818a54f5de471ce.html?keywords=HCLIPS-PORN%20%3A%20HD%20XXX%20CLIPS%20VIDEO%20TUBE!\u0026extid=%7Bextid%7D\u0026adb=0\u0026clientjs=1\u0026w=1280\u0026h=1024\u0026tz=0 HTTP/1.1\r\nHost: tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 02 Dec 2025 00:20:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: https://hclips-porn.cfd\r\naccess-control-allow-methods: POST, GET, HEAD\r\naccess-control-allow-headers: Accept, X-Requested-With, X-Forwarded-For, X-Real-IP, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Legacy, Content-Type,Authorization, Nav-Ua-He-Mobile, Nav-Ua-He-Platform, Nav-Ua-He-Brands, Nav-Ua-He-Platformversion, Nav-Ua-He-Model, Nav-Ua-He-Architecture, Nav-Ua-He-Bitness, Nav-Ua-He-Fullversionlist, Nav-Ua-He-Uafullversion, Nav-Ua-He-Wow64\r\naccess-control-allow-credentials: true\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding, *\r\nset-cookie: cookie_user_id=a3478f5e-53f5-5f37-994f-8bde9a7ba683; expires=Tue, 02 Jun 2026 00:20:00 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None\nbfq=APeIECNCx5YaOWbIkGEDRxcWIsYU3BLjoYgyE2PcsEHjhowYMmDA6NJH; expires=Wed, 03 Dec 2025 00:20:00 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, no-transform\r\nx-robots-tag: none, noindex, nofollow\r\nreport-to: { \"url\": \"https://pxl.tsyndicate.com/api/v1/heavy-ad/report\", \"max_age\": 86401 }\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\npermissions-policy: ch-ua-model=(self \"https://tsyndicate.com\"), ch-ua-platform-version=(self)\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"TrafficStars","description":"TrafficStars is a self-served ad network and ad exchange that operates mainly in adult-related verticals.","website":"https://trafficstars.com","common_platform_enumeration":"","icon":"TrafficStars.png","categories":["Advertising"]}],"data":{"size":11955,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (7148)","md5":"fda89e573335921787a5f7f93a763d6a","sha1":"3b56c90e8ca7fc5b23d80c6623acfd458978accd","sha256":"f292dfedc5563bc1db199de88efff7f319032778cb8c47d00d9d5a6b65d75107","sha512":"530f06ecf3d81c46edd8dc30477df6f1b7e345bb566e80e2eca5105ba99eb279e00d7eb18cf1dc5b238b4caea8f9b64072de4d96f9a353beef7c8b81fe137811","ssdeep":"192:QRSKXILOKCtHf5/keTv0FP1BBAMjQpPuBAMHBAMqLBAMjkcI:kXbKCtHVLTsFP7CMjQBuCMHCMCCM4cI","tlshash":"3f324b612a821838609b6c9af4dac7dcf2068d361601442f8bd1b859d5d7ff487b77ca","first_seen":"2025-12-02T00:20:49.453029Z","last_seen":"2025-12-02T00:20:49.453029Z","times_seen":1,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":98,"dns":1,"connect":31,"send":0,"wait":61,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preroll.hostave3.net/notifications/zeropixel.png","fqdn":"preroll.hostave3.net","domain":"hostave3.net","tld":"net"},"ip":{"addr":"172.67.145.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rtbrenab.net/get/?go=1\u0026data=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","date":"2025-12-02T00:20:02.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hostave3.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Oct 2025 15:42:06 GMT","end":"Fri, 16 Jan 2026 16:38:31 GMT"},"fingerprint":{"sha1":"9C:B6:7E:A5:66:3E:09:B0:5A:6A:5B:E3:1C:8A:39:86:1E:8C:0E:2E","sha256":"8A:64:70:8D:53:EF:02:B2:64:D4:50:D9:06:4F:0D:99:CB:AA:54:BD:FC:15:6C:44:D4:FE:C7:42:30:F6:95:D1"}}},"request":{"raw":"GET /notifications/zeropixel.png HTTP/1.1\r\nHost: preroll.hostave3.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rtbrenab.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 42\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 11 Sep 2018 08:40:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZVb6U%2BCKH4GdLJ%2BAHIkLbmPS24Fr9IhzXn2gfZTPcrFf%2Bvv58gPORDN1G0S9RSA5D%2Fqyg6JelmPj9mgZikT65qDmyJXpk0uLsMSYys8N2G%2BqpNZ6\"}]}\r\netag: \"5b977f94-2a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 856105\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nvary: accept-encoding\r\ncf-ray: 9a76a7fa6c9eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-03T19:31:02.04768Z","times_seen":760557,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":45,"dns":5,"connect":5,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/134_creampie-chiefly-emiri.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/134_creampie-chiefly-emiri.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21911\r\nlast-modified: Fri, 29 Aug 2025 06:43:28 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14c10-5597\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 41085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xhWJ5ieCqJCn8%2FrXM3HQe4ItqDPMKT1Wx1YeKkRTAFAwrqHKQ0%2BJFD5zN9auDu1VfThZi1q2JdW8s4Tx1iZ7FD6wKLhXPNOYjPcwQ9G%2BbA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e17ec332fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21911,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"f1fb266652687eaccffb565102673193","sha1":"4b09278295f700976e2ac18792603614ba282ebe","sha256":"46630ed8d215b37ded52a361371a0591b1246b1e9425bc5c602b124a5d13c460","sha512":"bfa762b31993b1e53f32be6f06a884c3f97c49ef99c5e15fb1a1774fad0c60be36c9a3229b578bcfc9b8c18a85b41d57e48f942e19682e062733f8838196bc90","ssdeep":"384:zATyfEjXM0r91ozvRehxhqCSXKzC7bXU24tgNewlY7ocZCvqUr3R5Pt+Of:cCEjl1c5eh7JS2IbXv4f7ocZCvnR+Of","tlshash":"3aa2e15a433c8b72f91a02ab2c7f4ca8a28d66867b076534c42e18f0879725f34946a7","first_seen":"2025-10-05T06:06:00.121645Z","last_seen":"2026-03-27T19:42:56.865228Z","times_seen":26,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":185,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/097_mikamis.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/097_mikamis.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25193\r\nlast-modified: Fri, 29 Aug 2025 06:42:45 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14be5-6269\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WWKeic6CikqdIzAn1HA7TsLB%2BqSKiMcueCbiEYW%2BpHOySZrmOAhUEYLVTAQf9NaWSO8FuqW0lhfCDyMPWvGib8I%2BBEts6AJRl4RLdcHFjw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1beed32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25193,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"00a117e9ede2ee23bd4384d42c1abd3d","sha1":"05ba702e163c874949fc0b5c0ea50bedb5e6f92c","sha256":"a1b4e7c343f94765601d8d691e2884c66c0600984f06dbad330430ba5c7c8988","sha512":"13bb65ccae66614fc4409a264a8f00c5e9ccffc9db729da3af5012f947a28c012f484a87ec5c9cb72b3f6b5bc62ded6f4fed8666e9c1711a57f09f4cf482a347","ssdeep":"768:f0jDN8nOVVSeCtGNITSQ6U82o/YyLPSRx:SR6aQ6U82o/rLSn","tlshash":"77b2d143c72982e5ce72db4bb920311297d39676c869e534d805b4bf7a5b42d2e34f13","first_seen":"2025-10-05T06:06:00.125367Z","last_seen":"2026-03-27T19:42:56.831263Z","times_seen":26,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":272,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"na.nawpush.com/tags/281437?version_name=a\u0026domain=hclips-porn.cfd","fqdn":"na.nawpush.com","domain":"nawpush.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:00.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"na.nawpush.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 02:32:21 GMT","end":"Mon, 16 Feb 2026 02:32:20 GMT"},"fingerprint":{"sha1":"2B:B2:C7:E4:0C:35:8B:EA:A3:45:09:54:58:1F:96:D4:28:92:9E:24","sha256":"5D:DA:64:89:43:2F:60:A7:F1:43:BE:04:58:13:73:0E:73:99:6E:4B:50:A4:E4:06:23:B2:73:B0:E0:22:86:AF"}}},"request":{"raw":"GET /tags/281437?version_name=a\u0026domain=hclips-porn.cfd HTTP/1.1\r\nHost: na.nawpush.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:00 GMT\r\ncontent-type: application/json\r\nserver: nginx/1.24.0\r\ncache-control: max-age=300, public\r\nx-cdn-host-id: DS5058\r\nx-proxy-cache: MISS\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2233,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3a72e86fe0473879f30c409e6c323d2b","sha1":"a1a0eb5de953aef199393c4c0e015d7dbb7b70b0","sha256":"6c037c608b4df34623b48149d3202b4be976d718690d6224e50a1b3331ee3fbf","sha512":"2a24bae0b1bd5f9f27f4d20ebc9e352a0a54e51f23ed4423613cfd789eafef702efdf05aad95dc9abefab1fd9dacf83daaabb389c5ddc1c5c7fd66e75b37cbcc","ssdeep":"","tlshash":"c941c0bc9aa844ff41e507cae688350902573047f0d8b599e5bc8e7c228f6e61b6734f","first_seen":"2025-10-01T06:48:54.626503Z","last_seen":"2025-12-31T20:41:04.448738Z","times_seen":4,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":113,"dns":56,"connect":19,"send":0,"wait":31,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"na.nawpush.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026keywords=HCLIPS-PORN+%3A+HD+XXX+CLIPS+VIDEO+TUBE%21\u0026preview_mode=hover\u0026s1=LTZJZIwxquwYSMCxJZeHJwSKTmYJe30DIrnjrAco-1wPa1glfV2aqrq6TaBL7ptNNn4Moj_KZZGYDoXDoobmDooQuTciRoNPBFiENsHGCPBJyO4_gUIDRUi","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"104.21.88.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:01.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 05:59:35 GMT","end":"Sun, 01 Mar 2026 06:57:06 GMT"},"fingerprint":{"sha1":"1B:6D:8E:48:22:E7:FC:C2:4F:06:18:95:F0:8E:39:C2:A6:C8:47:2C","sha256":"DD:CF:71:A7:71:DB:68:1A:18:D5:6C:B8:43:76:78:71:E2:E1:0D:30:1E:09:92:A8:A5:4D:14:57:D3:66:8C:E5"}}},"request":{"raw":"GET /creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026keywords=HCLIPS-PORN+%3A+HD+XXX+CLIPS+VIDEO+TUBE%21\u0026preview_mode=hover\u0026s1=LTZJZIwxquwYSMCxJZeHJwSKTmYJe30DIrnjrAco-1wPa1glfV2aqrq6TaBL7ptNNn4Moj_KZZGYDoXDoobmDooQuTciRoNPBFiENsHGCPBJyO4_gUIDRUi HTTP/1.1\r\nHost: cdn-fc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:01 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 17 Nov 2025 15:10:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D2gFGku0Zy5Se1CNMoEPHAFLdIfLjFvHwQ09hgst4OnpFTy6UwCEgDMyS0Ji78ez32zDdS9xzR15FJZA9Hy32LadC%2BcWZaQn\"}]}\r\ncache-control: public, max-age=3600, must-revalidate\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9a76a7f57b855688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9831,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"748a80ff3897b844f91a894e52771b7e","sha1":"cb755d71a5cd0bf37bd33efc9c9d050d5f067590","sha256":"aa2078071035658b7bd0fb8360f91ef6df5be7d7b0481de62c1aaa81fe867f67","sha512":"cf82c7786b90a3b7529dc94bee6be9a144bda00f68b7b2bff40b0368f2015912b0d378ff848c3038eaac7ca8b11ecca49beff1a28e7b67da5f89f0f8327ece2c","ssdeep":"192:8uqWH4QquVZ0OLaEwL5U+F8QOQhkmLYIzRGEC+icNcj:K24Qb/0OLa9866mLYApqj","tlshash":"651273a5d7bf1461515361d8afa76394613c9107f602ce89bfae92d40fc9d0881e3bcd","first_seen":"2025-11-18T15:37:38.807039Z","last_seen":"2025-12-04T07:42:59.402995Z","times_seen":132,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"cdn-fc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/scripts/ars.min.js","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /scripts/ars.min.js HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 22 Feb 2023 12:21:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"63f608bc-22277\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gn8hNW%2F7A33kF9X%2B0ZyuafxGejQ60ZZUbmRzmXS0TJNfRM2YFRgbYm2841uY0YF4jauFLSdtvnKJyWdBEnglQs9JfkYAbSX4ki6V5A3snA%3D%3D\"}]}\r\ncf-ray: 9a76a7e13eac32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":139895,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8ce0fa9ff43f3e0ef0f94a4c850d18a5","sha1":"b057ebbbe39dfbb1cf8faab58c2f51759267167d","sha256":"bb91fb256ba4a5bdf280ef71861cadbf247c777f24ba75a4d3880f1f50916942","sha512":"aa6db0adcdcf9c0e293755e4016c33859e0ddc04870123fe7b89aaf0981b0cb1a11d05eb6b4a7b10d4dd997a14ed74725b01ee96920ff37aaa30c8d5fc173f48","ssdeep":"3072:/JBpGHlkl2DgRca+pDU9v8cnWM50Vz9+TG46VbzRht08LfD:/JBpwlkl2DgRca+pA9v8cnWM2Vz9+TG5","tlshash":"01d3d79c7320b1a556e72287d2a9c651e3b51840b809d4e471b90cab2c7dd8c13eeffe","first_seen":"2023-10-16T17:48:40Z","last_seen":"2026-03-27T19:42:57.117046Z","times_seen":51,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tsyndicate.com/iframes2/fc768f97a2f74ef6a818a54f5de471ce.html?keywords=HCLIPS-PORN%20%3A%20HD%20XXX%20CLIPS%20VIDEO%20TUBE!\u0026extid=%7Bextid%7D\u0026adb=0\u0026clientjs=1\u0026w=1280\u0026h=1024\u0026tz=0","fqdn":"tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"78.46.88.185","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:00.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 21:10:04 GMT","end":"Tue, 10 Feb 2026 21:10:03 GMT"},"fingerprint":{"sha1":"BB:2C:CE:C9:92:0E:A9:18:50:BD:8C:7E:7D:B2:E6:CC:72:54:29:18","sha256":"3B:E3:8E:A4:C5:EC:08:3B:96:2B:B0:16:ED:56:3F:0A:CD:55:81:4A:8F:FC:97:83:57:FC:6E:F9:FD:F4:43:83"}}},"request":{"raw":"GET /iframes2/fc768f97a2f74ef6a818a54f5de471ce.html?keywords=HCLIPS-PORN%20%3A%20HD%20XXX%20CLIPS%20VIDEO%20TUBE!\u0026extid=%7Bextid%7D\u0026adb=0\u0026clientjs=1\u0026w=1280\u0026h=1024\u0026tz=0 HTTP/1.1\r\nHost: tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 02 Dec 2025 00:20:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: https://hclips-porn.cfd\r\naccess-control-allow-methods: POST, GET, HEAD\r\naccess-control-allow-headers: Accept, X-Requested-With, X-Forwarded-For, X-Real-IP, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Legacy, Content-Type,Authorization, Nav-Ua-He-Mobile, Nav-Ua-He-Platform, Nav-Ua-He-Brands, Nav-Ua-He-Platformversion, Nav-Ua-He-Model, Nav-Ua-He-Architecture, Nav-Ua-He-Bitness, Nav-Ua-He-Fullversionlist, Nav-Ua-He-Uafullversion, Nav-Ua-He-Wow64\r\naccess-control-allow-credentials: true\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding, *\r\nset-cookie: cookie_user_id=a3478f5e-53f5-5f37-994f-8bde9a7ba683; expires=Tue, 02 Jun 2026 00:20:00 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None\nbfq=APeIECNCx5YaOWbIkGEDRxcWIsYU3BLjoYgyE2PcsEHjhowYMmDA6NJH; expires=Wed, 03 Dec 2025 00:20:00 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, no-transform\r\nx-robots-tag: none, noindex, nofollow\r\nreport-to: { \"url\": \"https://pxl.tsyndicate.com/api/v1/heavy-ad/report\", \"max_age\": 86401 }\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\npermissions-policy: ch-ua-model=(self \"https://tsyndicate.com\"), ch-ua-platform-version=(self)\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"TrafficStars","description":"TrafficStars is a self-served ad network and ad exchange that operates mainly in adult-related verticals.","website":"https://trafficstars.com","common_platform_enumeration":"","icon":"TrafficStars.png","categories":["Advertising"]}],"data":{"size":11971,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (7152)","md5":"ba931435b3e620c3590983ecffced13d","sha1":"0b6868e1bd9f437bfdb34a74f1bc21c89d9ce8c7","sha256":"f14dc9862270f288b6e22cbbcb7c99ec22ba4995bf56f08e8cc0d0d040e1bf37","sha512":"50c106671bc2569b002599869c10661dd512da7e8752492933be1b238916af89d9a8a050b40b44dafd84fb75f8145ac58f49d23309e93d9741fa966e5cc0ab3e","ssdeep":"192:QRSKXILOKCtHf5/keTv0FP1beKoQpUoeKAeK6leKqzbrW:kXbKCtHVLTsFPYlQ8w0FbrW","tlshash":"ac324a2076415223950b50ddf8f057cd362bcf539501c9a226e0f82acaebbeb4b277d5","first_seen":"2025-12-02T00:20:49.456934Z","last_seen":"2025-12-02T00:20:49.456934Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":76,"dns":4,"connect":30,"send":0,"wait":46,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"na.nawpush.com/tags/281215?version_name=a\u0026domain=hclips-porn.cfd","fqdn":"na.nawpush.com","domain":"nawpush.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:00.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"na.nawpush.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 02:32:21 GMT","end":"Mon, 16 Feb 2026 02:32:20 GMT"},"fingerprint":{"sha1":"2B:B2:C7:E4:0C:35:8B:EA:A3:45:09:54:58:1F:96:D4:28:92:9E:24","sha256":"5D:DA:64:89:43:2F:60:A7:F1:43:BE:04:58:13:73:0E:73:99:6E:4B:50:A4:E4:06:23:B2:73:B0:E0:22:86:AF"}}},"request":{"raw":"GET /tags/281215?version_name=a\u0026domain=hclips-porn.cfd HTTP/1.1\r\nHost: na.nawpush.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:00 GMT\r\ncontent-type: application/json\r\nserver: nginx/1.24.0\r\ncache-control: max-age=300, public\r\nx-cdn-host-id: DS5058\r\nx-proxy-cache: MISS\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1556,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ca8a52554d636421a8ca61d91b9b0e0e","sha1":"032f4c8c34453accc63549391a8c277d07a27c1b","sha256":"f02b04a9ed526ee0328dc8806f37fe837dbd8378dd42b97f6846a841b3dbe496","sha512":"c21cb11ca603906ef5439366489d973fbee607af38f64b2f59d08932d29ef30733d8e5a105bf7fc5f14dd6f455c80014f93c61de647e75426a0349f495f4e669","ssdeep":"","tlshash":"a531a7a0d934d4b6d1f0474bb046778a943c21ab61c4791ef4bd88b849eed3b1b6211b","first_seen":"2025-11-13T14:11:00.507681Z","last_seen":"2026-03-27T19:42:56.883318Z","times_seen":26,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"na.nawpush.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/117_milf-hclips-runa.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/117_milf-hclips-runa.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22038\r\nlast-modified: Fri, 29 Aug 2025 06:43:07 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bfb-5616\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BAqGWVyHUoBwcBQmLXhV8MQgPaL8DA3iQqJEdsIrHZE%2FmGBJU8metVaTa6lVJy%2FMFoQAlTbMomxvhPiXYbVwH3%2BeWFNHF7FeDxQUkYUgcA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e19ed532fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22038,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"b7b085eca73e79f3f97d81468dff012a","sha1":"15b8f6a578b9c3c488408cb5e04e36c0054a0406","sha256":"8e55141ac89b756e5947555441b46e1899460ba9ad1c3037c867e4c7e1c664a5","sha512":"589592157d12ba4342aff352435139100ddc43dc44685213c811c63248a11dc70869557b3e9e0ad937512c5596ae2c4283db803c286f53a64b64305df6e40a0c","ssdeep":"384:4UN7SsitNlxoW46LazFMc+/Rvghjb8r1sn3BKpoFl:p5SsSNe6LWFM1/RuoV6Fl","tlshash":"67a2e02f390c8656ef62b1358091f9bedf594845b3e08f6d41dd20fb887dc682be2844","first_seen":"2025-10-05T06:05:59.959384Z","last_seen":"2026-03-23T06:42:57.639043Z","times_seen":24,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":238,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/064_tomoka-at.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/064_tomoka-at.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24644\r\nlast-modified: Fri, 29 Aug 2025 06:41:46 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14baa-6044\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 41085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3sDUukJBko8%2BYTx3NVNHOmzMPiPthnmhhOcreiO1GexQWN98b1%2F%2FWmSZLvC9rgsdLXSr%2FEgI%2FiSEe0ww8q98eXzS9f%2BEzOkCRlhQDM%2FaXQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e20f1132fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24644,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"ee5b949c4b9f84969414916e0864599c","sha1":"16039da582c8db37f8354ba2ab8a21e730ccf1b8","sha256":"3356b06ed80694bd959e89024c291182da5490729c15276327f0d597baaa5fd1","sha512":"c92120b2c646484b5d866b4e5db058b191fdb7b97466fe094fcfbfe243a3767f82bf58b3151da3a9551a22b98773b79e24c479237b8dfc058c7386d304ca52a1","ssdeep":"384:RZts0dye2pj48fb/oghtDOk8JZNvHai+RFtRa98PtQzvIf8kML1x4wBs:vvX2pU8fr/Hf8JT/+RFK98ld+hxXm","tlshash":"1ab2e141c80fbf8cec081ea69a753b5b866c4db98b5152b440a17adc4330eac8ff1d31","first_seen":"2025-10-31T12:17:27.074744Z","last_seen":"2026-03-27T19:42:57.016766Z","times_seen":21,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":210,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=OontXWdG7kOZcKr9WU8KIhiLdZ9DrUwEBPwyYIFNal_NhEt-mDttlRQnwqDBmGvsQJYLHGZqJm0nEw921KfpD47qgwYlm6Xh4z-1wSyu3B0B1s8_gUIDRUi","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"104.21.88.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:01.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 05:59:35 GMT","end":"Sun, 01 Mar 2026 06:57:06 GMT"},"fingerprint":{"sha1":"1B:6D:8E:48:22:E7:FC:C2:4F:06:18:95:F0:8E:39:C2:A6:C8:47:2C","sha256":"DD:CF:71:A7:71:DB:68:1A:18:D5:6C:B8:43:76:78:71:E2:E1:0D:30:1E:09:92:A8:A5:4D:14:57:D3:66:8C:E5"}}},"request":{"raw":"GET /creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=OontXWdG7kOZcKr9WU8KIhiLdZ9DrUwEBPwyYIFNal_NhEt-mDttlRQnwqDBmGvsQJYLHGZqJm0nEw921KfpD47qgwYlm6Xh4z-1wSyu3B0B1s8_gUIDRUi HTTP/1.1\r\nHost: cdn-fc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:01 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 17 Nov 2025 15:10:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sYE3Yx5R93GDovu6xeJdetAXpbc4%2F3tL7zgMVz3Ftdp8pu%2F0sGRoabFipT6bHfrIhdEV0XIzpiROXxls40%2FU6KPPvQ%2FJr6kP\"}]}\r\ncache-control: public, max-age=3600, must-revalidate\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9a76a7f339995688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9831,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"748a80ff3897b844f91a894e52771b7e","sha1":"cb755d71a5cd0bf37bd33efc9c9d050d5f067590","sha256":"aa2078071035658b7bd0fb8360f91ef6df5be7d7b0481de62c1aaa81fe867f67","sha512":"cf82c7786b90a3b7529dc94bee6be9a144bda00f68b7b2bff40b0368f2015912b0d378ff848c3038eaac7ca8b11ecca49beff1a28e7b67da5f89f0f8327ece2c","ssdeep":"192:8uqWH4QquVZ0OLaEwL5U+F8QOQhkmLYIzRGEC+icNcj:K24Qb/0OLa9866mLYApqj","tlshash":"651273a5d7bf1461515361d8afa76394613c9107f602ce89bfae92d40fc9d0881e3bcd","first_seen":"2025-11-18T15:37:38.807039Z","last_seen":"2025-12-04T07:42:59.402995Z","times_seen":132,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":5,"connect":2,"send":0,"wait":39,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"cdn-fc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pxl-eu.tsyndicate.com/api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0WUyRGRhpmNLcyEESOmBQ0xNXC0wGHGTI4WMRrCGFPDDAwxMmTEEPEwTJ0xGc3EwEGDhs4bLWDMYGmyzIwxLcTcyBFjpU6qN8R8NEPDBk-IZOxQnDHjBgwZD-HUEUMxhtIbPeHAWUgD68M5cCbqkAHjRo0aMxyKGNNmLkMYNALngNGTjBmKD8W4cbOwRo4ZOW3geNjGDUaGmPmm7fw5xg0ZNSqKqLNTx0A6dODM0fHixRgybkKOcTHmTRvbcgrSSWOnzJwXddwQRzgnDJsXbsIML_7ix5w0esr0mAEDBh7UMLjU6S7DRh06bb6MCVM4TJozbnq4d9EGTxbx5M2jV__GDZ0y_vUwRx1nnGHcf2R8cUcaZBhIB35n2QBHcHakUcYdX7TxxkE9oPFGcXJAWN4cMfTwRH90YHEFGUfcsMYTWoyxhBw5XFEFDkskgUYaTJChRQ5EyFHFHUUIAcUdeWSRhBFOOPeFE2gUQUcLbRABGxtSROHGHXEQIUQbR9gxRxRKZMEEEkdoEYcSbcDgRhF35KDTEmbAQQQNN8Rxxh1ZsNGGDVigQYMeMN0xRR51zCAEDELEMAcOX5xRRRJESFFFGl-R4VtGaIzBRhqytQDHG3K4wZsZZHy1nl5bzBBDF5E9pgMMLnQnmBx2GMbdQ3XUgalrYcyAJ0s1lNECYGbUcKwZZbWQQw4erSTGQRxlFYZmM3wFakZUubCYC0a50BANX8nxxbaudfttuON-VUcYGTXxhh5psMFGGC_UUCsIKFyRhhua3jEHCE5QAYJbte4Agr9u2ECDwng4rDCuoNFQawogHFHGGGu88QJfbsHgVgwgGJFGcGa8gccLMQhbq6pAuebEE1-Rql7MIsz8FRs4F-FEpmXY8UVwbFBUww034DCDZt09JAd8C6GGA1wiHCS0GHIshMNmVQed4YZR42CDamTI8cZCMzz0hkI60JCW2XjkUZnTX0yostw6CGb1F3TokREM5ZYh62uxzVZbp5-GOmqpp5Lxwld3ZOSWDOQ-hIbkMuAA-F24ZmQ2HdKR2kJyaUyJpwtkjBGDDDXP0TlDNiwt8g115fBQ6hkd9EXqq3-FHkU3OBw7DZozJgJ6rDMUfFfCFt-y7WANbRwcX0gHvPDNN62R0M4hRAfbrVYkLKwQiaFX1yLVwcZEafG8kPFjfAb_5TpsIcJX-D-U__3698____vDXxf6oICAAA%3D%3D\u0026s=cdcf2b54e7b1a5596ed765bde0c259cc16be241d9166a2de838d14db1af5798c1764634800\u0026w=t\u0026r=1\u0026d=1191\u0026priv=true","fqdn":"pxl-eu.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"94.130.167.182","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:02.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 21:10:04 GMT","end":"Tue, 10 Feb 2026 21:10:03 GMT"},"fingerprint":{"sha1":"BB:2C:CE:C9:92:0E:A9:18:50:BD:8C:7E:7D:B2:E6:CC:72:54:29:18","sha256":"3B:E3:8E:A4:C5:EC:08:3B:96:2B:B0:16:ED:56:3F:0A:CD:55:81:4A:8F:FC:97:83:57:FC:6E:F9:FD:F4:43:83"}}},"request":{"raw":"GET /api/v1/p/p.js?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0WUyRGRhpmNLcyEESOmBQ0xNXC0wGHGTI4WMRrCGFPDDAwxMmTEEPEwTJ0xGc3EwEGDhs4bLWDMYGmyzIwxLcTcyBFjpU6qN8R8NEPDBk-IZOxQnDHjBgwZD-HUEUMxhtIbPeHAWUgD68M5cCbqkAHjRo0aMxyKGNNmLkMYNALngNGTjBmKD8W4cbOwRo4ZOW3geNjGDUaGmPmm7fw5xg0ZNSqKqLNTx0A6dODM0fHixRgybkKOcTHmTRvbcgrSSWOnzJwXddwQRzgnDJsXbsIML_7ix5w0esr0mAEDBh7UMLjU6S7DRh06bb6MCVM4TJozbnq4d9EGTxbx5M2jV__GDZ0y_vUwRx1nnGHcf2R8cUcaZBhIB35n2QBHcHakUcYdX7TxxkE9oPFGcXJAWN4cMfTwRH90YHEFGUfcsMYTWoyxhBw5XFEFDkskgUYaTJChRQ5EyFHFHUUIAcUdeWSRhBFOOPeFE2gUQUcLbRABGxtSROHGHXEQIUQbR9gxRxRKZMEEEkdoEYcSbcDgRhF35KDTEmbAQQQNN8Rxxh1ZsNGGDVigQYMeMN0xRR51zCAEDELEMAcOX5xRRRJESFFFGl-R4VtGaIzBRhqytQDHG3K4wZsZZHy1nl5bzBBDF5E9pgMMLnQnmBx2GMbdQ3XUgalrYcyAJ0s1lNECYGbUcKwZZbWQQw4erSTGQRxlFYZmM3wFakZUubCYC0a50BANX8nxxbaudfttuON-VUcYGTXxhh5psMFGGC_UUCsIKFyRhhua3jEHCE5QAYJbte4Agr9u2ECDwng4rDCuoNFQawogHFHGGGu88QJfbsHgVgwgGJFGcGa8gccLMQhbq6pAuebEE1-Rql7MIsz8FRs4F-FEpmXY8UVwbFBUww034DCDZt09JAd8C6GGA1wiHCS0GHIshMNmVQed4YZR42CDamTI8cZCMzz0hkI60JCW2XjkUZnTX0yostw6CGb1F3TokREM5ZYh62uxzVZbp5-GOmqpp5Lxwld3ZOSWDOQ-hIbkMuAA-F24ZmQ2HdKR2kJyaUyJpwtkjBGDDDXP0TlDNiwt8g115fBQ6hkd9EXqq3-FHkU3OBw7DZozJgJ6rDMUfFfCFt-y7WANbRwcX0gHvPDNN62R0M4hRAfbrVYkLKwQiaFX1yLVwcZEafG8kPFjfAb_5TpsIcJX-D-U__3698____vDXxf6oICAAA%3D%3D\u0026s=cdcf2b54e7b1a5596ed765bde0c259cc16be241d9166a2de838d14db1af5798c1764634800\u0026w=t\u0026r=1\u0026d=1191\u0026priv=true HTTP/1.1\r\nHost: pxl-eu.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: cookie_user_id=a3478f5e-53f5-5f37-994f-8bde9a7ba683; bfq=APeIECNCx5YaOWbIkGEDRxcWIsYU3BLjoYgyE2PcsEHjhowYMmDA6NJH\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 02 Dec 2025 00:20:02 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 24\r\nx-robots-tag: noindex, nofollow\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"0959ba36d476b6dc1994ba3c678b07c4","sha1":"d30b94da72daa02766965206a85b7e0356375f5e","sha256":"897410b87e27e3dfba3a7d6caab315a5e69cc941bb96d91fc74878a9b051843a","sha512":"843f2144ba55d59ba3e62053dc018f4f6d51ae482c741cb4dc85f7af3375b77c75f66e2e73ff55ff7fe3b79314e7ba28a92fddec1ba17839ba33b34792bfce22","ssdeep":"","tlshash":"ea70008030b22e88e022000802a08000000288220a8032b0020800a80002202ca3c30a","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-04-03T18:21:27.290641Z","times_seen":6722,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":21,"connect":27,"send":0,"wait":25,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/084.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/084.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 31865\r\nlast-modified: Fri, 29 Aug 2025 06:42:22 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bce-7c79\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 41085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b%2BsT%2BHiY%2B79%2FmWnWh44CRvU3wP1ke3XhaPfDUBKbZ3TnhjY%2FEGd4LthBm%2Bw7QipnryJrLHDi7Qy4Db%2FVgkKBj%2FLNCeSWSrsWAnA1H5AJ6w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e16eb832fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31865,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 640x639, segment length 16, baseline, precision 8, 400x300, components 3","md5":"fc165637c25dfe7fdf313df1c6dba84b","sha1":"3b368677eb7af98a36103e99a595788c9bbbdbb2","sha256":"788a8924790c2b90a71873f46c2dc9d750ddbea49d29d18eaddcf70b6d964598","sha512":"104ab3e2e838bdcb6ec00c51e1c85249dfe70c4f6a5c0da5493823a2e9ad5e985b2ec3761f38c45a6c70f2baf809e10446891ba6e8c8346795830f80ee69af08","ssdeep":"768:d3yTWacDAWtcLZtxoS/bTaeu38X8RHYerNs1IM2WAIM:ATWtVtcLZtxo6XaXu8RHYerNsIJ","tlshash":"e5e201b831fa38910578f159281a2e0fd38ebcae78bbc357b81811cdf021d3885e5567","first_seen":"2025-10-19T02:15:18.731501Z","last_seen":"2026-03-27T19:42:57.122809Z","times_seen":24,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/059.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/059.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21970\r\nlast-modified: Fri, 29 Aug 2025 06:41:37 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14ba1-55d2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wuXTc9hmIm8U5eEJkZ%2Bt%2Bt8WO%2B%2BaeFj7JSmjwo5rBKxKcYXdn%2FkqOllHrcmHWyV5HoKl0A1SuPGEjViq2NjPeeBvd%2F6N%2Bz0A%2BhzoDHuW2w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e21f1b32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21970,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"a6c568950e4dc6a290f0406596147c13","sha1":"8758eea43ed5ac3877ffab1c8de674e2b43f4467","sha256":"34133ef8e8fc568f459c058e0b032b35c419bcd9ebe7b6efbf1dafb8b902899a","sha512":"fc314baa10a209b354ca3d66e45976a84dac376d5f8e7737ec8849c4636458f424b15b5a39eef3bbc58c31ae2f230e01adf21581d1d44e2d13fe4b7c62f83b34","ssdeep":"384:JX9Qtt+e0az91w5ACu03XRn5ejzpvlqfq0R+kdwvYuAhUI:JNQN0Qu+CuSXRn5Q0fq8urAmI","tlshash":"2ea2e13c5c96e65cf684de7a0b5f5249037296d527d286c6210f02f6db132ae79fc01e","first_seen":"2025-10-31T12:17:26.859548Z","last_seen":"2026-03-27T19:42:56.964374Z","times_seen":20,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":221,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.magsrv.com/ad-provider.js","fqdn":"a.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:59.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 14:35:42 GMT","end":"Sat, 17 Jan 2026 14:35:41 GMT"},"fingerprint":{"sha1":"3E:F6:87:7D:18:68:79:FD:23:76:5D:6C:7B:90:75:64:CC:D7:CA:BB","sha256":"FD:93:B1:1C:F0:69:98:29:DB:E2:76:AD:30:DA:23:6B:BA:BB:04:54:58:11:41:09:09:5B:A4:BC:CB:5A:E3:AF"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:19:59 GMT\r\ncontent-type: application/javascript\r\netag: W/\"88a90b4969cdb377be11e515f53\"\r\nexpires: Thu, 27 Nov 2025 18:26:16 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH3lSgAAAwBuUwKDAH3BAAAAAwBw7WvFwG3GQAAAA\r\nx-77-nzt-ray: 2a494a154b6866d9d4302e690b552e31\r\nx-77-cache: HIT\r\nx-77-age: 10389\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":185607,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39248)","md5":"d92a5f5aaa5cb972e18a3886a9838952","sha1":"88a90b4969cdb377be11e515f53ed8af720ba149","sha256":"563ff9e65da46f4d8fdb1517f3c1dce9e63f9f16391d1b2f0bf7c15c33e6df68","sha512":"9e24fdc7c05d6f7cb273cc31dbf326186134c4ad5950a55ff09354c0fe7ad6e41e8b1183eb483f9f0de6e7d5ff2aa73cf82d3c3fbc572317dd70005f1c5917d9","ssdeep":"3072:5B3fUg+28VOk2DG2gjKzElwnRlqI1fsBHisGEolY4o/CXMXpo:D7+28VOk2621ElwnRjfs4s7hpo","tlshash":"00045c993792307441d3a11da9ff53093371506ab80f4884bb4dd8a427adeea51a3ffd","first_seen":"2025-11-25T14:43:10.663757Z","last_seen":"2025-12-02T09:18:34.719134Z","times_seen":264,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"a.magsrv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/053_--.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/053_--.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24948\r\nlast-modified: Fri, 29 Aug 2025 06:41:31 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b9b-6174\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZWyVWCJ5RI3q8NvFqZbt8Uv1TFyLCWEeUToPnzazoe8sROnkfCPibhR5bE%2FTeZw6YTn%2BF8ibXxMn7DL6v2fw2XhuTtZ0hpimowGhoQSH7A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e15eb132fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24948,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"6d1f87ac17bfb574b42baa81cf8606b5","sha1":"4499361bb6c8c70f69a6fe4da0edcd564a8fcd9a","sha256":"783dd4b7470f24c062bd3ffc5301f3956e06065139483ca7d875cc439d070bca","sha512":"36b7ee8298fc25e07b2d0e6622d3d9efb55c06ddeb2095cd295850b6393d58bb68a23ba0b9b1115167ab57cd9c5b6fa951bb8ead79e69075a49e99b5009849b8","ssdeep":"384:YFQassTHqg7nQXQRWBV8Q+BjU2XR1JGggyhbA0duk67l1BRZ6t3Lgctz1GAsW7q+:gQjmHqgTfU3cth1mynukE6tc8P120","tlshash":"87b2f183fd544414336a59f84ef98228b6e1b53223f4486fbc7e06d3a4f124d9d85db8","first_seen":"2025-10-31T12:17:27.072304Z","last_seen":"2026-03-27T19:42:57.001854Z","times_seen":21,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/061_over.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/061_over.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25865\r\nlast-modified: Fri, 29 Aug 2025 06:41:41 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14ba5-6509\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NoNGs68C9%2Fx%2BUFY8zHvFVjf3WwKEHA5bXrP3sP9nubCXjPF44lO35LE0XjReIGn4p4ObHbHfyTKHNvwc%2FfMW4x3WAGxecYd%2BIyFdNA7y4A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e21f1832fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25865,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"c7cd3303e5dce83f5cd48c15c4f53f62","sha1":"c87258ef4c3a25b00049e1820252118991be81bf","sha256":"917523f22b9912c67653114f187b64540e96531df27abb6b3f7c2a4ff405bd8d","sha512":"0edef990a1daf8a6529933fd8a0a1816e09e339d930f489a7a256ae7f55e928a4a3223f7a1c9bdd7031aea8b0cb3ae53ad976f4afa11b7e15901ce44bc4314d8","ssdeep":"384:VD93vxEcEFNOg/m+WF765lwK8MYwFv7lsOB+W+FB6n0oXiu3ZXYEelPlqk8X3lvR:VDp5EccmL6H8q3s0+yponL4lvtC2","tlshash":"59c2f1cd27e920bfe86a8d2179815cfa1c10c41d27bcd26b2dde2cca418558fe69e44d","first_seen":"2025-10-31T12:17:26.821341Z","last_seen":"2026-03-27T19:42:56.778124Z","times_seen":21,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":259,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jcdn.tsyndicate.com/bd16f693d3144ae0b0b2ce10c53c7d0a.js","fqdn":"jcdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:59.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jcdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 04:32:41 GMT","end":"Wed, 28 Jan 2026 04:32:40 GMT"},"fingerprint":{"sha1":"D8:8A:28:20:23:93:87:45:D6:84:0E:28:89:18:B6:13:A3:EE:FE:7B","sha256":"F2:DF:10:82:00:83:3A:EF:75:08:33:F7:B9:6C:AF:7A:F7:ED:EF:B6:84:84:92:CB:F5:90:22:29:F7:1C:48:08"}}},"request":{"raw":"GET /bd16f693d3144ae0b0b2ce10c53c7d0a.js HTTP/1.1\r\nHost: jcdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:19:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 2\r\nserver: nginx\r\nx-request-id: 37159818-8e7e-4caa-a2cf-1d64308b64fd\r\nx-robots-tag: noindex, nofollow\r\ncache-control: max-age=300\r\nexpires: Tue, 02 Dec 2025 00:24:59 GMT\r\nx-cdn-host-id: DS9225,DS5833\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-03T19:31:06.190051Z","times_seen":552080,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":89,"dns":26,"connect":25,"send":0,"wait":19,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/115_fit-asian-enough.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/115_fit-asian-enough.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22588\r\nlast-modified: Fri, 29 Aug 2025 06:43:04 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bf8-583c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 41085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KUQjbHK6KrJSff51tZ1PxaDK%2FD0WGS9rbgxLc9qA507EZd3Xzgz7EBxwF%2BGuS2pD7wbJU0LJkmLPzTtrmQhO1q78sBtfT8UNs9vjZWUU%2BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e19ed732fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22588,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"8e94cb6757b105fc70330e8fbea8f970","sha1":"c6442ca23ddb37e7dc465ae2d4c9c6c1335f6d68","sha256":"f56607dcef3e908495cd21eca1f72b16be6efd1cc7f058df52c03864f34bef72","sha512":"c66614a97033ece83862d861ecb05fbf4d38557e73fd17d666e58ddaa5d3573b849f64a46de856bac701e67fe130b19c04cdea3e747124e9e1be780a599d64c9","ssdeep":"384:lkMItcJolCOd4guUfchfWjOr+8rMR4UFowzVi2Ra7rSlvQckqW8VAwpE+z5im:Oxce7d4UefeOC8ie2+r8XkZKAOEa5p","tlshash":"58a2e086bfcd5508de6b87164f5d81c052a3b461ac52b3382912f3be598c9378fec155","first_seen":"2025-10-05T06:06:00.062266Z","last_seen":"2026-03-27T19:42:57.031692Z","times_seen":25,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/110_hclips-to-a.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/110_hclips-to-a.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23707\r\nlast-modified: Fri, 29 Aug 2025 06:42:59 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bf3-5c9b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YSxOkRdzs5Ut5TlsPNFozppjnFKCq%2FtJ0WrOv6a7aL67jGBKPTzzu0uRif8m4H6p4G1GVeBqhuew6Cs%2FX4bqWboO6TQdDkBebnw3jGuKwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1aedc32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23707,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"636d2df428acb3eabcce54707bc1e07c","sha1":"9d0f6c1680daea6ce23eb54fdbf4feb3bfc96de2","sha256":"f4557b244027e06feca3d2760f01461d79afd270ff3f14ee7598a11402477a90","sha512":"c662b757d1e55813b75418713730449a46852e290438c3403a089e6102e81deb7d5011e9c54057e0b45c0125391064a78cd8241557f087beb7a7a5d0963f0578","ssdeep":"384:ikO1kkIeB15FJx314gleLAl+0xtr66gv6dvz1bk7nAfx2aHQ/6sMxH2cTJCOW5os:iB1zI015n74gk4JH2vaz1bk7Afx2aH03","tlshash":"cdb2d15a215fe7f5e0c4edaae03933e9235d3df2b86e26418030e7ddaa078925274c74","first_seen":"2025-10-19T02:15:16.938324Z","last_seen":"2026-03-27T19:42:57.103869Z","times_seen":24,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":165,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/102_x1xb7cf316483b4d8b937-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/102_x1xb7cf316483b4d8b937-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21530\r\nlast-modified: Fri, 29 Aug 2025 06:42:52 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bec-541a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 41085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o2sDVKfgDms96pCzb7jGpYzgNwMBmn7U4uQlWMffy79oJWJ7nZsj1bHQCs9JQNqjHFSGFnBr8%2F7bgM9PUdq%2B8mkOLST0AMoUzUEyUtzLTQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1aee332fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21530,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 640x639, segment length 16, baseline, precision 8, 400x300, components 3","md5":"1190bd9907b0c2c4d520ef6c1326d12c","sha1":"cd798a1eeeb18cc1d01646897e3dcd18fa6ce945","sha256":"66a43788f253d7bd0bdfb2faae97d73719ac4e7bcfdea7ec7ce43ea027cde9b8","sha512":"0b3d728b0ff935bac6ca0ee7e4505f450dfaf0eb5582e262fc1797691ee41d847ae6f954d081e867c98afe192ca143dcd41e0e1be019e762f3d4a257b487c2c8","ssdeep":"384:JeNIC5/dAyRp10dECcybj5Y25Rx4F+oZHQUEaI+nmtzjviaNVaY7GtFN2ir1AIL5:JfCRSyRIcyP5xROFVHQUHIWmtKaL17G7","tlshash":"0fa2e1795a2c908fcf4903fbd8435f76b815311a0983bce76c0f9be1ad1e4a6401a57e","first_seen":"2025-10-19T02:15:20.260606Z","last_seen":"2026-03-27T19:42:57.14271Z","times_seen":24,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":260,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/b.b.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:01.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 07:32:01 GMT","end":"Sat, 28 Feb 2026 07:32:00 GMT"},"fingerprint":{"sha1":"30:27:D8:5A:59:AD:E2:2E:0E:9D:6A:5B:1B:BF:60:BE:D2:80:8B:DF","sha256":"A9:DE:14:B5:E6:07:9A:21:0C:4B:AC:5D:B3:F1:DB:EB:1F:27:9B:A9:C9:AD:51:72:F0:5B:0D:91:81:C1:D3:6D"}}},"request":{"raw":"GET /sdk/v1/b.b.js HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: cookie_user_id=a3478f5e-53f5-5f37-994f-8bde9a7ba683; bfq=APeIECNCx5YaOWbIkGEDRxcWIsYU3BLjoYgyE2PcsEHjhowYMmDA6NJH\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Mon, 01 Dec 2025 12:09:30 GMT\r\netag: W/\"692d857a-2299\"\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncache-control: max-age=172800\r\nexpires: Thu, 04 Dec 2025 00:20:00 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS5833\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8857,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8777)","md5":"4972df0025f3a0b931a347672899c2b0","sha1":"0911b190d07a9fc3c2926c0f42965f980ee07be1","sha256":"88247a2b2d54b0f29f1a565cfa62990adcf8ea7f3b309893b10d0775cd231974","sha512":"4aa3086ca9db61c2ec96f9d7c8da3f83c576bb849d57591b2fd7fe2fe1c97780c23535e91db8a96e16f0d9357362a83773fa3d465c8146e9871bcdc36f09ee03","ssdeep":"192:paqucGdppOIWtlomlihFk76i69GDgJCS4qN9:paquXdONHSsgz9","tlshash":"8d02d86eb64e703591d910a7027f530d73f61252aa068890f1aadc52387cfdde513ece","first_seen":"2025-12-01T12:56:10.876324Z","last_seen":"2025-12-19T05:56:33.799189Z","times_seen":88,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/236/339_escalade-handjob-s.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/236/339_escalade-handjob-s.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28607\r\nlast-modified: Fri, 29 Aug 2025 05:45:30 GMT\r\npriority: u=4,i=?0\r\netag: \"68b13e7a-6fbf\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PRbdZjLVVee63yFUaAmnx3SJ3Y6iK9XWLhJlHGfpLqElarM4Yho7fYwPTOjiFZT1mp3n%2FhnRBcjlEMrAseT2gadpCP1UIUsPHH%2BxZ3QRoA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e16ebe32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28607,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc56.60.100\", baseline, precision 8, 400x300, components 3","md5":"ce2de273320caddb1b61d40625d2558e","sha1":"3532c23f9e5bec4dcfede55efece07825c6fe442","sha256":"9f2db33cd9373c6434ba1ff6021f1c9eea875ba14dd946aa61dd179938c37655","sha512":"efff21873645a14cadea5edc7e741ede36d01657f3a4fde4cfad8f228697672cfdef9e29555f932e05782691cdd1db971adfba25f6e12d26a0c59ff47eb261ab","ssdeep":"768:5zJJJUaDc5d4fssqgOAtqHrhT94GrjKBFN3FzAaknGNxvv:5FFDcFs1tqLLH3SVl6GNxvv","tlshash":"2ed2d110205b1f9ce2440e99be1d7710996f9972faba97cab1e6ffdd820812073750c3","first_seen":"2025-11-29T11:26:28.259784Z","last_seen":"2025-12-02T02:34:06.868092Z","times_seen":5,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":246,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/086_descendant.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/086_descendant.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22548\r\nlast-modified: Fri, 29 Aug 2025 06:42:25 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bd1-5814\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 41085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zTibRVm1W%2FQVSIteZW8sSKxYKefh0EOvL4T2zYkF4dW1tcMXLQ52PyCZgq2JLokaqles8%2FSgho7THwkVH0K2xEt2hup4BEez%2FPsBlUmdPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1defe32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22548,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"693ccb4edab1e32345010d6d9672e004","sha1":"acb5e5ccd6ed5a7e98bf4481e6c02b94e94d5418","sha256":"9dac39ec7642831beeca2d16758a4e1ccfa00903cba903001fd9694879746cb1","sha512":"18c2dd6709dc9bea92931e73092fe333216a0522ef1754e17b4c49c086f0077e1f91106b1e742ae2211203d25cd197a498b55e5446042f66b54311bb88694c39","ssdeep":"384:m4zi2SZ4rsHccHhaVrair/UD+4NePrOqCQNV2cntDYSeXwyE:mYSZ4YHhH4rr/UD+4IqqCcVLntDYSefE","tlshash":"fba2e1772787f2d5b79f0c9118414d26cd809a49bca9efa86d30b3ed3c20962936a5b4","first_seen":"2025-10-19T02:15:19.932851Z","last_seen":"2026-03-23T06:42:57.683448Z","times_seen":23,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":179,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/023_requests-credentials.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:59.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/023_requests-credentials.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28699\r\nlast-modified: Fri, 29 Aug 2025 06:40:56 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b78-701b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 41085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j9a%2Bl60JHQ5ANEK%2BiXmDcv7YPD%2FNPriSyaVI3G3D2tmW7SbL%2BMbl7WVwXIw%2Fg6zjdibgFTqFvvT19StS1E5v5cmaAw2mPyZOLE0XnzgwGw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e2ef4132fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28699,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"c86400cebec55069fb9e55147593990d","sha1":"fc357dcb4a79c639ace687ccbc3f30923a0de3f3","sha256":"c5d45fd9ec1299c6dc2ab62bac76b630f843f3e94efe60f0a438579860cfcb26","sha512":"b33120d85cd4857ce9651b3fab4d4c0674d4985dc9fe22b0a9347f42fc593660896ae73ae7102d2de542a7644aacf1f1d96547dc04c7b6968fbe4a21a130bbf4","ssdeep":"768:yoowUZDNkJxEhhl1S/yqlo1rYFwK3SSkrFVUU8X80A:yopU9w+hIjyrHgSv7UPbA","tlshash":"2bd2f1cdc821d996c2e6d57b484981ce0b8a18f52381ef47da2c46e1bdc5ec3da7cd86","first_seen":"2025-10-31T12:17:26.972525Z","last_seen":"2026-01-10T09:02:32.747414Z","times_seen":10,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/448451/9543d83d369507849757a700910f06a57a1232fe.gif","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:02.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/448451/9543d83d369507849757a700910f06a57a1232fe.gif HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:01 GMT\r\ncontent-type: image/gif\r\ncontent-length: 97939\r\nlast-modified: Tue, 21 Nov 2023 20:33:06 GMT\r\netag: \"655d1402-17e93\"\r\nexpires: Wed, 04 Mar 2026 00:24:22 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap01-sec02-prg1-1\r\nx-77-nzt: EwwBX63NDQH3zH9nAQwBuUwKEwH3rmgAAAwBw7WvAgW1AAAAAA\r\nx-77-nzt-ray: 2a494a15ef3a6de8d6302e6936130739\r\nx-77-cache: HIT\r\nx-77-age: 23560140\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":97939,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 250","md5":"b299e593d7893e617d46d337bba11ab4","sha1":"9543d83d369507849757a700910f06a57a1232fe","sha256":"ae360167ff0f6f893df3c693ec213eb94ea70d27c5bd2dd5b6d26ba71d6fcac5","sha512":"7b427856e5d085f6d51f9deefcb1006e0a6dfe488f84bc8096dd992d7ad0d2ea429dce43ecb04c9ef2d522958c797aa22fb37eb86998792a03bc1e91d95259b9","ssdeep":"1536:/jLkg0PfrqiCN77Cs5+xBB1sJFzpIm1aPB98fgnibY+IQiKEZW9vY7xmHXHLow/J:foifCpB7e1aJ98fgQIQipci7odXFqLuB","tlshash":"47a312e9ce6b4d4aa7dbe079a5d53f032c897ad1663f8b5b2f801483f3446aab014650","first_seen":"2024-01-21T00:35:41Z","last_seen":"2026-04-02T22:26:36.57964Z","times_seen":344,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fh-wgt.com/api/request/v1/affiliate_1?exp={%222008%22:{%22g%22:%22b%22,%22v%22:2}}\u0026language=en\u0026orientation=straight\u0026q=hclips%20porn%20%3A%20hd%20xxx%20clips%20video%20tube!\u0026quantity=4\u0026target=video\u0026utmCampaign=ai.mxY","fqdn":"fh-wgt.com","domain":"fh-wgt.com","tld":"com"},"ip":{"addr":"104.21.63.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026keywords=HCLIPS-PORN+%3A+HD+XXX+CLIPS+VIDEO+TUBE%21\u0026preview_mode=hover\u0026s1=LTZJZIwxquwYSMCxJZeHJwSKTmYJe30DIrnjrAco-1wPa1glfV2aqrq6TaBL7ptNNn4Moj_KZZGYDoXDoobmDooQuTciRoNPBFiENsHGCPBJyO4_gUIDRUi","date":"2025-12-02T00:20:02.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fh-wgt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Oct 2025 07:34:46 GMT","end":"Mon, 12 Jan 2026 08:31:45 GMT"},"fingerprint":{"sha1":"1F:39:26:5D:89:FD:89:58:E9:FE:18:68:D6:A0:DC:A5:5E:BE:2B:21","sha256":"FA:B4:8E:E6:FC:1A:A4:6C:F7:C4:C9:E7:32:A9:4C:73:00:BB:31:5E:5A:68:EF:BC:5A:34:37:34:79:B4:0E:B3"}}},"request":{"raw":"GET /api/request/v1/affiliate_1?exp={%222008%22:{%22g%22:%22b%22,%22v%22:2}}\u0026language=en\u0026orientation=straight\u0026q=hclips%20porn%20%3A%20hd%20xxx%20clips%20video%20tube!\u0026quantity=4\u0026target=video\u0026utmCampaign=ai.mxY HTTP/1.1\r\nHost: fh-wgt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cdn-fc.com/\r\nOrigin: https://cdn-fc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:02 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: https://cdn-fc.com\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-headers: Cache-Control,Content-Language,Content-Type,Expires,Last-Modified,Pragma,Access-Control-Allow-Credentials,Access-Control-Allow-Origin,X-Referrer,X-URL,x-stats-uid,x-guid\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 600\r\nx-robots-tag: googlebot:noindex, indexifembedded\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RfCZGE5rEGpTSf1AUFFRYyr6GYkj3Joc497LtUR3g%2Fwjm7GJld3Qlo7%2BVi1yemADqBwKo5C7xJz7lCf15oJShWgbefGBLdDIpaU%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9a76a7fa68f65ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4088,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"54c7e0c8ef53de2ea422c9a7fedd7d33","sha1":"8ee6047a8e2d8abb252d120de3992bc3e0cdf54c","sha256":"dc8f0c85b952e1617081546c5e9b6c0d8edc97a3464446f47b6ecf7cb48d2a26","sha512":"5ab5d0d91495a0477cf5c706520272dbbf70ba79a85743e621649c74e87e0ccfad3267ea43f477887f2c16d6dc78c9378fa6a6fe9a066f9993fe5a95b0023be5","ssdeep":"","tlshash":"9e81a5fb0b9e4f2b0b9517c3da07fd4da5d10c4548c1ff82ec50da8d01788a7a53aa49","first_seen":"2025-12-02T00:20:49.465733Z","last_seen":"2025-12-02T00:20:49.465733Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":31,"dns":3,"connect":1,"send":0,"wait":64,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"fh-wgt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"fh-wgt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ic-nss.flixcdn.com/a/MWYxOGRjNWNhMmY3ZGY4YzdmYTJjMjQzNmIzYzhkOWI/jpeg%2Cs%28w%3A480%2Ch%3A300%29/xc/iE/iEnWwn/frame/original/2.jpg","fqdn":"ic-nss.flixcdn.com","domain":"flixcdn.com","tld":"com"},"ip":{"addr":"185.76.9.4","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=OontXWdG7kOZcKr9WU8KIhiLdZ9DrUwEBPwyYIFNal_NhEt-mDttlRQnwqDBmGvsQJYLHGZqJm0nEw921KfpD47qgwYlm6Xh4z-1wSyu3B0B1s8_gUIDRUi","date":"2025-12-02T00:20:02.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1029385688.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 14:41:59 GMT","end":"Tue, 13 Jan 2026 14:41:58 GMT"},"fingerprint":{"sha1":"05:60:93:EB:D3:CD:8F:F9:A3:BB:E9:74:7C:66:6E:EC:91:A5:46:DC","sha256":"5C:72:8A:A5:67:37:9D:60:F7:D0:78:EF:E6:37:47:8C:8D:FC:66:5B:93:92:FD:45:D2:AF:FE:AA:D0:22:77:ED"}}},"request":{"raw":"GET /a/MWYxOGRjNWNhMmY3ZGY4YzdmYTJjMjQzNmIzYzhkOWI/jpeg%2Cs%28w%3A480%2Ch%3A300%29/xc/iE/iEnWwn/frame/original/2.jpg HTTP/1.1\r\nHost: ic-nss.flixcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40893\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: ic-0\r\ncache-control: public, max-age=1296000\r\nexpires: 1765723248\r\nx-rsic-cached: mem\r\nx-rsic-responder: ic-1\r\nstrict-transport-security: max-age=63072000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-77-nzt: EgwBuUwJAQH3tioDAAwBJRPCHgH3CwAAAA\r\nx-77-nzt-ray: 56376635532a89bab2302e69d8ce9a25\r\nx-77-cache: HIT\r\nx-77-age: 207542\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":40893,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 533x300, components 3","md5":"85303b32b4aae6a01e76383ac3d696f8","sha1":"27549131056b0a67c4c1b4ca2d877f9424e7299b","sha256":"d2696d5959c4f5e685294f87c85d34fef38c6cf9642be18f30e78fc9e8269881","sha512":"10ad4c019f2a7278ea00b37235814ca9f5c129f40625d8a1d65ed7163be71f646cf37adc7b94c30d37127a37c4acbc92761aca84126d4dc97bb73a33e83bae31","ssdeep":"768:6FnLv+HVsdMx5fRFzlUzIRvBuvm+bWIx6g4UVlu0Dt9x4qfI09US:6ZGHrfXhJZIvFSI6ghVl5V4qfr7","tlshash":"ae03e11a27c51a51fc553f33c52322386a9e3932d4b081a7f5cfdc1ab7c1a858e64e9a","first_seen":"2025-12-01T03:40:24.286778Z","last_seen":"2025-12-02T06:30:57.796112Z","times_seen":9,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":143,"dns":46,"connect":7,"send":0,"wait":32,"receive":3,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/hd/fleshiness","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-02T00:19:57.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /hd/fleshiness HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 02 Dec 2025 00:19:57 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nlocation: https://hclips-porn.cfd/\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l%2B2ww9POs%2FxDHUvm99kFyPle0B3vi7QyUI6p2eEozlsZOn12koKD14trvgwSvO4QLJmxKldKMoI7nT%2BmGZW3n%2BWnwbNvjzBRw0CkwCR2Tw%3D%3D\"}]}\r\ncf-ray: 9a76a7dd1d0e8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78044,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":373,"timings":{"blocked":61,"dns":42,"connect":1,"send":0,"wait":251,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/236/441_in.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/236/441_in.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 29329\r\nlast-modified: Fri, 29 Aug 2025 05:55:38 GMT\r\npriority: u=4,i=?0\r\netag: \"68b140da-7291\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 41085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y1l1wBOEqALCKRSmK9AUoksk%2FsgB5IgrgO9rojnpXFnJDRZoxH2OaDIuJtlUCUWe4UYECmK1D1i7qrXYsRMOu866%2FCX1NLuFR%2BgUNN8tdA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e16ebc32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29329,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"4f46c9912ba84eb987479a887b8e9ad9","sha1":"4b909f94216d7c997536907ebcdd54d0d3e4945f","sha256":"b3fa1bc17fc5a98ba13833e0771e216236a878406d703aa59e6f1917a710a159","sha512":"85684c850e283462c1d9d150042cbad4cfdbdf7a9617c1c1eb5395eb67bcaf1150fa8349362f5d21983037d8f9e5c0e5e61a6a835a83a7ad6eedc5747041c154","ssdeep":"768:K5eNiddIVvgGlCVZJ19mohwtaRhn6VmTsL6Jv:K54idM4FfJqoEaX6up","tlshash":"99d2f12aebb59425fc0afc703440f8ae520ddb63cdf95ae0597d2ac069974370957b82","first_seen":"2025-10-05T06:06:00.132986Z","last_seen":"2025-12-02T02:34:07.039874Z","times_seen":6,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":229,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/231/081_barring-videos-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/231/081_barring-videos-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 37307\r\nlast-modified: Fri, 18 Jul 2025 05:24:52 GMT\r\npriority: u=4,i=?0\r\netag: \"6879daa4-91bb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 41085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bq6XbBRfB8wc%2FGQ%2BTp6OsOBxpZPtvotYEzfnDb2wnynjSJVckcUxYI%2B954fnKHAbtEf3xRECRFw7yvW1uOeKz1VRCPvfRESfdZb2%2FvdO8g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e16ebf32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37307,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 25x25, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 400x300, components 3","md5":"2a0ff1081146ea61ca259845ed331702","sha1":"19b330ca6c9ed83ec9fc33e9906b520635c95256","sha256":"09a25f07c1d2ac745952c45415e46694e5139fab5f30c89d4bd22bc14bd6ddbf","sha512":"6963b04e0891f881ff2ec3806cd91e3c25cc8b23d8631205865e2871e8aef728dc91fad5cb76708a16444c98d5f0d311bd0fddb54d3b303a9211bbb752dc0ae5","ssdeep":"768:6EJuuVGpK+7KNX6owBbh5t1Qcp92Tawx2NjkKVkv:65c+7SKpScD2lkNjNg","tlshash":"33f2f1d7372fb19cd766913c0f84aa6799447adaa94e21ca8e4081cf3b4bb1277d00d3","first_seen":"2025-11-29T11:26:28.232103Z","last_seen":"2025-12-02T02:34:06.83231Z","times_seen":5,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":341,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/081_in-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/081_in-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21895\r\nlast-modified: Fri, 29 Aug 2025 06:42:16 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bc8-5587\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 41085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=go6Ut7f2xSg7Y9mxpeqq67mI%2Fj56E6dF2dwvz%2BqEnYS88BLDlZjDLlW%2FQYkhh39WhuTjikUqrFlb5KBzQ9WVWgFIOLjpKQXu0PZHRZweYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1ef0332fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21895,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x300, components 3","md5":"72bc37b45bf52109de6e1cfdd32879cf","sha1":"96586b125fc7f5108d5d694ada170809c7389822","sha256":"c98b8596f9f1e3e640e943922c5a47a4f5484d4ad60f3d826fca5013ca6d5a31","sha512":"fc1d90330a7b5eb3baaea5ce183b8f6568545f4b923939ec529e9bc05c10c5cf7b680d217ce8e8c68f152a1c884919b65f89cd4f787c0a85ab47e290e069ab24","ssdeep":"384:tT95u5YFx3aOtK1whMaNnhLXiNalprg7MZSVWN2bIfam8zB6+o:tT95rFxKOtKCGoSYffadu","tlshash":"c3a2d01750db6615c3bb6a381f25e354fa8d81736d1b6a8d0ac093e1324a75e1e8cdf2","first_seen":"2025-10-19T02:15:13.56709Z","last_seen":"2026-03-27T19:42:57.147549Z","times_seen":23,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/065_masochist-husbxxx-cleans.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/065_masochist-husbxxx-cleans.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21042\r\nlast-modified: Fri, 29 Aug 2025 06:41:48 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bac-5232\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DrX7jy2vuUk82uAc6naX%2FTDfqRskk92G52ck9Z4EruyPyfCnjMOvjK3Og9Bzdn9vdwNuSrNjoFsLAUcfaGVd50NY5R9GIeAqe%2F9MWXuofw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e20f1032fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21042,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"6fe6e7e9f081a79c7283a4a4cbdae532","sha1":"83b1b67a3488b883f5b2f071e900ba68af847bcc","sha256":"1f840198d4a6800159c0a54720e2df9174501b866b3e5ef1bc6b2a0927571fa0","sha512":"ea84870625983cc933209edd60f77bcd491c8fd7d267b604f3f3c826e1a7148d46222fa82533a5fbdb85a246522fd1e2cdb93b71e13d96accc03e28eff4707cb","ssdeep":"384:7viHJoOfBi/jrkl633bOA5L1H43lK3s5u5N5kL6GMYacJC0l3mI5:biHyg8kl2OA5L4lEsk5NuGGUDI","tlshash":"1392e1a2525e3cb06d60b8e0e1d8a3ee3b28ff207b7267869d1d04d0f1b5671e779450","first_seen":"2025-10-31T12:17:26.93418Z","last_seen":"2026-03-27T19:42:57.077942Z","times_seen":20,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":224,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:59.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.wpadmngr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Nov 2025 03:32:41 GMT","end":"Fri, 30 Jan 2026 03:32:40 GMT"},"fingerprint":{"sha1":"E3:9D:D3:89:FB:90:7B:AA:8C:19:20:0E:65:8F:8A:B8:25:1C:19:1C","sha256":"DA:2F:33:FE:DB:D4:DD:3C:4D:80:E7:DE:2D:70:4B:D7:61:B4:0C:64:DA:A2:78:BB:8F:0B:66:29:AA:A3:2F:37"}}},"request":{"raw":"GET /static/adManager.js HTTP/1.1\r\nHost: js.wpadmngr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Thu, 27 Nov 2025 13:21:53 GMT\r\netag: W/\"69285071-23ef9\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 02 Dec 2025 00:24:58 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":147193,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"f53567558bdea644af1ba8782f7bef6f","sha1":"427ef1766f7e2c19847cbde1e10cabd6c73db7b4","sha256":"ce967986ad0d59087854c3e9cfc27814a9b7eca95aee2ce82d9fe9e0929a0ca6","sha512":"3558bc6b343a3bc9de9e552b36619aa00167fbf5f11d25f2b23accdef7e1898e66416edf7f0c478d73abab83dbe03de19e4f0457d26abb5aefe1431f670cff1f","ssdeep":"1536:OpOPpA6P9rHRFts5dWmj6zzKEpKf7JbcacZwJ8jBl8Q8MdnCW9212FoXV0jtQyET:U6FDTts5dWmOzGoKFoaswoRebX","tlshash":"37e33adcb2d2b07407e75099d43f1206b73a1a16b80c9058f6a6e9c17878ddb5237f7a","first_seen":"2025-11-27T13:47:15.836385Z","last_seen":"2025-12-02T14:58:27.680717Z","times_seen":117,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":40,"connect":27,"send":0,"wait":38,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"js.wpadmngr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/native/native.min.js?v=5.1","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"104.21.88.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=zAks3GzF_zZzMDGBaFyAw4kCzdqvlzrYuqSnh4nwBhXL8mf987QbNJq8NcmfGYVt-VAUiy8mSTYdx0hZz1sBDqhG_nUtzvKnwm-SIZ6QxG_Tytk_gUIDRUi","date":"2025-12-02T00:20:02.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 05:59:35 GMT","end":"Sun, 01 Mar 2026 06:57:06 GMT"},"fingerprint":{"sha1":"1B:6D:8E:48:22:E7:FC:C2:4F:06:18:95:F0:8E:39:C2:A6:C8:47:2C","sha256":"DD:CF:71:A7:71:DB:68:1A:18:D5:6C:B8:43:76:78:71:E2:E1:0D:30:1E:09:92:A8:A5:4D:14:57:D3:66:8C:E5"}}},"request":{"raw":"GET /creatives/native/native.min.js?v=5.1 HTTP/1.1\r\nHost: cdn-fc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=zAks3GzF_zZzMDGBaFyAw4kCzdqvlzrYuqSnh4nwBhXL8mf987QbNJq8NcmfGYVt-VAUiy8mSTYdx0hZz1sBDqhG_nUtzvKnwm-SIZ6QxG_Tytk_gUIDRUi\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VBygEFzO9yaB0tF%2BwUKfxHLVwwl3%2B8WqpFRU8dRwEWJu3AUSvLkQELzA5wwx2OP%2B7cotMTlcE3qQC2y9OEkpxR1hXEV6BHcs\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 17 Nov 2025 15:10:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=3600, must-revalidate\r\nserver: cloudflare\r\nage: 352\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\netag: W/\"691b3ad3-cbe\"\r\nvary: accept-encoding\r\ncf-ray: 9a76a7f98b9b56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3262,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3262), with no line terminators","md5":"4048141d0220abc8d43480485d4a8c5e","sha1":"2a5f76d2300a5cbfcb7fb2614ddba567bd7737c3","sha256":"4fecaffe6ddd437921ad07fcf094aac397088ab64c85869fbec5f769583b7a06","sha512":"7e2709bc48d27c61cee1a6de75bbc4ddb35198598bb6e7a49aa1194fa4bb9020d5d25c4884769298fb0bdc16e01010716a5860a77771fdae261cad1ea97ad9cb","ssdeep":"","tlshash":"0361f9c4d2c8d923073532cf4953a675f67c8e06fdba4c50a60b4f8a8e15e469b17fa4","first_seen":"2025-11-07T11:37:41.733538Z","last_seen":"2025-12-18T00:26:58.218815Z","times_seen":314,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"cdn-fc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/b.b.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:00.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 07:32:01 GMT","end":"Sat, 28 Feb 2026 07:32:00 GMT"},"fingerprint":{"sha1":"30:27:D8:5A:59:AD:E2:2E:0E:9D:6A:5B:1B:BF:60:BE:D2:80:8B:DF","sha256":"A9:DE:14:B5:E6:07:9A:21:0C:4B:AC:5D:B3:F1:DB:EB:1F:27:9B:A9:C9:AD:51:72:F0:5B:0D:91:81:C1:D3:6D"}}},"request":{"raw":"GET /sdk/v1/b.b.js HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: cookie_user_id=a3478f5e-53f5-5f37-994f-8bde9a7ba683; bfq=APeIECNCx5YaOWbIkGEDRxcWIsYU3BLjoYgyE2PcsEHjhowYMmDA6NJH\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Mon, 01 Dec 2025 12:09:30 GMT\r\netag: W/\"692d857a-2299\"\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncache-control: max-age=172800\r\nexpires: Thu, 04 Dec 2025 00:20:00 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS5833\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8857,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8777)","md5":"4972df0025f3a0b931a347672899c2b0","sha1":"0911b190d07a9fc3c2926c0f42965f980ee07be1","sha256":"88247a2b2d54b0f29f1a565cfa62990adcf8ea7f3b309893b10d0775cd231974","sha512":"4aa3086ca9db61c2ec96f9d7c8da3f83c576bb849d57591b2fd7fe2fe1c97780c23535e91db8a96e16f0d9357362a83773fa3d465c8146e9871bcdc36f09ee03","ssdeep":"192:paqucGdppOIWtlomlihFk76i69GDgJCS4qN9:paquXdONHSsgz9","tlshash":"8d02d86eb64e703591d910a7027f530d73f61252aa068890f1aadc52387cfdde513ece","first_seen":"2025-12-01T12:56:10.876324Z","last_seen":"2025-12-19T05:56:33.799189Z","times_seen":88,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"track-us.mymetricpath.xyz/banner/nurl?auth=2kyb9y\u0026price=${AUCTION_PRICE}\u0026c=ItTPUkQluylIZ_r5KIyoVUE2jO4IVQrI3H7jFeRxe7S4hfINHY_SGdqMXNzBLWHmHwoPWDdZiaRlz9V9Uqf1W3GkyW1eyyILGU4Nws2nLN_DuD1c8MX77OoPqddfvEmtC5nyugHf3qe6pkP0YVYxyqpy3JFOEvlSurAn5UEvd0qalsH5-t5IB9-eB9hHzrJAcdY_w4-n5yp1rmGnmKS3z-mXRlSt8UcGSsiLWmrZ0zYdHV4IFinpiy-5DdPzYILyhPG4HHDgVbj5idjTO2MQNwEetxHSwTH5fEcV7tZcVpUfb_nUR0Pov1hEpysxw0f13GBxh0kwYMbZ2Z2H3SV4vAferhMxl1-nlo4jm6jh_f7hiVhzirm2A2cIJg0of2Dc_3E9eBl7XgdJEMkRH9zMlxruCQuf-dPlYPf__aOcgYc","fqdn":"track-us.mymetricpath.xyz","domain":"mymetricpath.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rtbrenab.net/get/?go=1\u0026data=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","date":"2025-12-02T00:20:02.343Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /banner/nurl?auth=2kyb9y\u0026price=${AUCTION_PRICE}\u0026c=ItTPUkQluylIZ_r5KIyoVUE2jO4IVQrI3H7jFeRxe7S4hfINHY_SGdqMXNzBLWHmHwoPWDdZiaRlz9V9Uqf1W3GkyW1eyyILGU4Nws2nLN_DuD1c8MX77OoPqddfvEmtC5nyugHf3qe6pkP0YVYxyqpy3JFOEvlSurAn5UEvd0qalsH5-t5IB9-eB9hHzrJAcdY_w4-n5yp1rmGnmKS3z-mXRlSt8UcGSsiLWmrZ0zYdHV4IFinpiy-5DdPzYILyhPG4HHDgVbj5idjTO2MQNwEetxHSwTH5fEcV7tZcVpUfb_nUR0Pov1hEpysxw0f13GBxh0kwYMbZ2Z2H3SV4vAferhMxl1-nlo4jm6jh_f7hiVhzirm2A2cIJg0of2Dc_3E9eBl7XgdJEMkRH9zMlxruCQuf-dPlYPf__aOcgYc HTTP/1.1\r\nHost: track-us.mymetricpath.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":396,"timings":{"blocked":174,"dns":222,"connect":319,"send":0,"wait":0,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preroll.hostave3.net/notifications/zeropixel.png","fqdn":"preroll.hostave3.net","domain":"hostave3.net","tld":"net"},"ip":{"addr":"172.67.145.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rtbrenab.net/get/?go=1\u0026data=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","date":"2025-12-02T00:20:02.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hostave3.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Oct 2025 15:42:06 GMT","end":"Fri, 16 Jan 2026 16:38:31 GMT"},"fingerprint":{"sha1":"9C:B6:7E:A5:66:3E:09:B0:5A:6A:5B:E3:1C:8A:39:86:1E:8C:0E:2E","sha256":"8A:64:70:8D:53:EF:02:B2:64:D4:50:D9:06:4F:0D:99:CB:AA:54:BD:FC:15:6C:44:D4:FE:C7:42:30:F6:95:D1"}}},"request":{"raw":"GET /notifications/zeropixel.png HTTP/1.1\r\nHost: preroll.hostave3.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rtbrenab.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 42\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 11 Sep 2018 08:40:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FM7i2F7NCwU67L9pRgRR80QEOkbs1%2B%2FoI%2B4vj6HKnzkzj4iWy0VGAUpf3r2oyer8vWlDbe5Sowk9WCEWgfOLJ8y1kYV16EUKwSSNw8jDoIWuQZD0\"}]}\r\netag: \"5b977f94-2a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 856105\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nvary: accept-encoding\r\ncf-ray: 9a76a7faad0eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-03T19:31:02.04768Z","times_seen":760557,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.ahmybid.net/a6a28f15-237b-4708-8a9c-f12d4442bf82.jpg","fqdn":"assets.ahmybid.net","domain":"ahmybid.net","tld":"net"},"ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:03.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.ahmybid.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 02:34:06 GMT","end":"Tue, 20 Jan 2026 02:34:05 GMT"},"fingerprint":{"sha1":"8F:7F:00:3C:97:75:C7:07:55:FE:D5:8E:EA:64:4E:E6:3B:D6:AC:6C","sha256":"49:C1:19:E7:6B:AD:AA:FC:DC:2C:D3:0D:4E:EB:70:84:A1:61:FD:CC:08:92:42:ED:D6:E3:CE:72:11:3E:67:9C"}}},"request":{"raw":"GET /a6a28f15-237b-4708-8a9c-f12d4442bf82.jpg HTTP/1.1\r\nHost: assets.ahmybid.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15768\r\nserver: nginx/1.24.0\r\nlast-modified: Fri, 20 Dec 2024 12:31:53 GMT\r\netag: \"676563b9-3d98\"\r\ncache-control: public, max-age=315360000\r\nx-cdn-host-id: ah1742,DS5058\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15768,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x108, components 3","md5":"2e22068d6c028aae1484dcb188b0dbe9","sha1":"06166176ce916ec30e700a8ef14e2a4e0281a165","sha256":"cf28e006bd60694e75878484f862907a9d9c128d2daae08f098ad33aa08ef267","sha512":"45145af081276c9bc141403ac0319efcf202b92768863ae052d164e63c0e090d3b5ac2ede3316109469f7203f0154cec9e77d01ddbff49b38fbd2e1ba9aa805e","ssdeep":"384:HyfTep7svYXcGF5L5wEpTVJp5Peme8sl84fruMH4M:kQXcW5ZVJ7eLTlzrj4M","tlshash":"e062d0504c6205e7cf68bf0ba4d064a23ece2a27d584e966e904f848f1b2deac45ac4d","first_seen":"2025-08-11T01:48:06.622057Z","last_seen":"2025-12-29T02:51:31.481286Z","times_seen":451,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":104,"dns":58,"connect":19,"send":0,"wait":37,"receive":1,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/041_time-be-xxx.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/041_time-be-xxx.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18939\r\nlast-modified: Fri, 29 Aug 2025 06:41:14 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b8a-49fb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BXbVWUH1qAIByVycxuq18wJZc0HHHm8VDaiYRIH6ur4hz5pP9sT6jh7tyQu1m3qq7JhxtYW1k47n1nB1Jwva%2FqXQtmUIa08mB8fvYIG3ew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e27f2c32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18939,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"ea2c46ba5639eb0b5f8818f16fc23e92","sha1":"1aed8c18c45eee3fc7dc97f46cebfece0165f019","sha256":"381cd5d93450f9aec15ea98fe9df623508744e17df4f36c3afcdc2f35c589f5c","sha512":"cfa82b09085086916efef921344216c160cea6d131cb9bcfc8b87629c7adc3f020c9dffa4d67bf87cc07a5f65a43c7ab902195b0d3e4bf01841f35b21d58dc9c","ssdeep":"384:1tUhL9XEhSkKPxdMCd8wV7OBXFShM4gN3D0lorpNGwf:TwL9083dZ7sSm4sD0oRf","tlshash":"eb82d16eb1e583ba97c7c46429156fcefbcf9a1dc6c90b0c52e456e53680563381f40e","first_seen":"2025-10-31T12:17:27.073465Z","last_seen":"2026-03-27T19:42:57.066915Z","times_seen":21,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/includes/ls/ls9.woff2","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:59.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /includes/ls/ls9.woff2 HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/hp.css\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 96752\r\nlast-modified: Mon, 16 Jan 2023 16:57:44 GMT\r\npriority: u=4,i=?0\r\netag: \"63c58208-179f0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219265\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3m0qqvFohFZLeP4PE2s8SQYq9w2%2FETfjLBUadex9pyIlBbNNhL4b66I%2FMIRIPJ8tdKyU8c5EUW5byeOWHZmNhiDy0zaXMBiDxU%2Bkln5bSg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e88fa732fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96752,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 96752, version 1.0","md5":"36fc297902c9a2e857858baa6ac25f2c","sha1":"89d9531c0c70a8751dff83c1917baab1f16a2071","sha256":"10a68e01209d939afa9318ee71601b0a6e10f025d4cd6d98a492d340b73941fb","sha512":"c5711d5027762fbc8d352dfdf64094958348b873671c891e8c5cf701a569c3bad672a380db7fad76692bf79dc9235b37f76b6f42f73698c9f85d2c7a23aa62fd","ssdeep":"1536:H8wZeXMjWqtJeAAHBX6ANib7HTYJv+Nr1ScHQjn6t/k5LBNCMAG35y:H8hXMjWeeVHtA7evKr1Xwelk51N4Gw","tlshash":"1f930257f0921be097c688990e189035cd39fd71397fe9f4e603ae4cc361927e52a4b6","first_seen":"2023-04-05T18:32:05Z","last_seen":"2026-04-03T18:47:46.861086Z","times_seen":10879,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/043_beyond.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/043_beyond.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23819\r\nlast-modified: Fri, 29 Aug 2025 06:41:17 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b8d-5d0b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7y6U%2FOlaR2kHAGyjAZDP%2BpoHPoaWMDilpx0s8lq1VbzI73vY2YUvXBEm4JKD7tGba8ijLtvyb%2FatkaTTd%2B%2Fub2E55kP536%2BNrWI%2FqXUQvg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e26f2a32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23819,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"10320e7a8b872eba734ebf2ac5cadb17","sha1":"9489ad94986f93a73d4543419ad9d60f098546a0","sha256":"578b144393627f47d8bcc80be982ff8025ecdaed9f3d25aee1cfdc686feb2fa6","sha512":"7c3d7771c9465193d4088f55472513f15d1ce11d3c8f40323779a62a3de5d0c66ba5a9b1e7c6f3e144ee23c9344e2bda51f69020e91516023fd4d0a7d1c538fe","ssdeep":"384:EjnRmpT8VUMo2vF+J/KN4Y5i3dw1I5xuLQX6XqBvEUowkOVIs2PEZEH2fkcpMwSF:6R6VHSN4Y52G2DAQX6XSvEp5OKB6pMwC","tlshash":"4fb2f069df8dcc81f027832226fc1fc0f48e17aab37129a4649838f1a04f7e0b796545","first_seen":"2025-10-31T12:17:27.200601Z","last_seen":"2026-03-27T19:42:57.105738Z","times_seen":21,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/034_xxx.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/034_xxx.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 29223\r\nlast-modified: Fri, 29 Aug 2025 06:41:06 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b82-7227\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4PxSC6AiHQ%2FdYhaB2p7%2BfkjURahiKnYLyIWQ5Zfju8So3NKi8dQjEGf0sjJM5xdBuDW0zmdUghDQRk91FhsfSmtuiw1QLgc4YdczwZmKVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e29f3432fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29223,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"b77a655155d6b5762d54e65d5bc9425a","sha1":"e99bd004ef262be6ba5e11e61242236a3b5c7827","sha256":"4d19485c72bc469862aac3a812576a8c4972e69c1f57c84f5fea970a2ad2a859","sha512":"b98f1ea0695549b4a53d75d3bf2e7a6142ba1ebd18d8ff9446d035a72b99ef4ddc60924ecf42041556bb35ce731d64f77ff2d8006fc4a9e699249bc670267bb2","ssdeep":"768:aH/CCJmNZ2mQG1ECpqI2oIJnRGkqdGWVfT0/H4cn3TiM7RZ:aH5JmKfcE8q/hG1RT0/4cjiS","tlshash":"52d2e1318fd2f593d8263231557a9cfd20290dbf0fb51e8d4d6ebde6b1ac6860340526","first_seen":"2025-10-31T12:17:27.034846Z","last_seen":"2026-03-27T19:42:57.107092Z","times_seen":18,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":183,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA11QW07EMAy8ChdoZDt2HvvNN0ggDpBNW6jEtqstWhXJhyfuAkJklMTy+DE2AUmH1AHeYT4QHAA0o8vgmBwK68PjkzLqtl2nflhWV6uyT+yjeoCcWZk4JVaUGGMKKpA0+mYDKSIJBmglGdQrNJB4ZrMcgI+CGkFfnu/3iw1kZTcSaLa1VmrJxlCCDYEsN8qYas6lxGOO4RjLmDCPCDDwQCVbOOhbfZ/Oa3deLrOrY988iCGKKUgckgngRHtH+EVnmR7ZUxPZDujuLuvnXFX/BBrkeyTY+/1nbyD/Myvatz83faCrO5XX9XJ1dTk1l1VwZJSpQm4ru5bLVD6mZd5py9GjEA6Six96qm0f0FdKuYbiQy8Y6QuG46tq0AEAAA==\u0026cb=e2e_692e30b0eb5d03.43893048","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.246","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:01.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 14:35:42 GMT","end":"Sat, 17 Jan 2026 14:35:41 GMT"},"fingerprint":{"sha1":"3E:F6:87:7D:18:68:79:FD:23:76:5D:6C:7B:90:75:64:CC:D7:CA:BB","sha256":"FD:93:B1:1C:F0:69:98:29:DB:E2:76:AD:30:DA:23:6B:BA:BB:04:54:58:11:41:09:09:5B:A4:BC:CB:5A:E3:AF"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA11QW07EMAy8ChdoZDt2HvvNN0ggDpBNW6jEtqstWhXJhyfuAkJklMTy+DE2AUmH1AHeYT4QHAA0o8vgmBwK68PjkzLqtl2nflhWV6uyT+yjeoCcWZk4JVaUGGMKKpA0+mYDKSIJBmglGdQrNJB4ZrMcgI+CGkFfnu/3iw1kZTcSaLa1VmrJxlCCDYEsN8qYas6lxGOO4RjLmDCPCDDwQCVbOOhbfZ/Oa3deLrOrY988iCGKKUgckgngRHtH+EVnmR7ZUxPZDujuLuvnXFX/BBrkeyTY+/1nbyD/Myvatz83faCrO5XX9XJ1dTk1l1VwZJSpQm4ru5bLVD6mZd5py9GjEA6Six96qm0f0FdKuYbiQy8Y6QuG46tq0AEAAA==\u0026cb=e2e_692e30b0eb5d03.43893048 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: __uvt=s%3A32%3A%22b093803177f334c2cc2092c496ee81d7%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 02 Dec 2025 00:20:01 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://hclips-porn.cfd\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/448451/0f1ce12e3d6f65230c6fe4cd38b1427423c2ec5e.mp4","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:01.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/448451/0f1ce12e3d6f65230c6fe4cd38b1427423c2ec5e.mp4 HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Tue, 02 Dec 2025 00:20:01 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 23521\r\nlast-modified: Tue, 21 Nov 2023 20:33:06 GMT\r\netag: \"655d1402-5be1\"\r\nexpires: Wed, 04 Mar 2026 00:28:07 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec02-prg1-1\r\nx-77-nzt: EwwBX63NDQHXTudnAQwBuUwKAQH3SgAAAAwBJRPCNAG3AgAAAA\r\nx-77-nzt-ray: 2a494a15ef3a6de8d6302e699ed19126\r\nx-77-cache: HIT\r\nx-77-age: 23586638\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-23520/23521\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":23521,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"97dff82d98efcdfd29ba0df7d2541d0c","sha1":"0f1ce12e3d6f65230c6fe4cd38b1427423c2ec5e","sha256":"a302ee7a39be5036db2da913b0b9eea754862ac2ae82a5777c76dc804ba78927","sha512":"fdffe8133d300e5555fe447dea3ef55a132294e4cedbbcbf2e42e4e2a84e81add03be0e54e74e010cbdcca59c23885774a11d94d5d97ed690fc258edf1e66834","ssdeep":"384:z/ZnOs3ZGXzfnFK9ajBU2txHr3gSdophPdM98e74C1xpCrMSPoWE169dW:z5738DfFK0VUKwSOhP8V4O3CboWE3","tlshash":"81b2df288a48ff77d418c57b749a132a330473aad4909067e253c89f5e682e57d398fd","first_seen":"2024-01-16T21:48:00Z","last_seen":"2026-04-02T22:26:36.569486Z","times_seen":620,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/038_reachable.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/038_reachable.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24362\r\nlast-modified: Fri, 29 Aug 2025 06:41:10 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b86-5f2a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GxBGUKeJfqGmVpWXWPW5ipZEAlHmtWAv0MMGKQXF7aqcgrRGftG9hNtcIYKUCulzBqwbJv63JfjVK%2FjTBGZgu4FE7Akarq5DQrwEx%2BnOpg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e15eb532fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24362,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"748dd952d960577ed452073690e56ef3","sha1":"88d8ef06b653f9b1b4e6691fa79e419012a9792e","sha256":"0af7741dbadec04b350555d1268694a723b2fc8019c4ded98af68a5876cbed50","sha512":"246a9ed67758fca8afe65ab7b84c22fee58ee9665b5f924dc3320bc4e171094b00b0457a85199307bfb0cae7767f941c4305b794f78a56a2340e04a9511134c7","ssdeep":"384:r8TIQgKhzJ3S3p05pbV5OkuAvBvEiZT6EbklyARGwNv:4TnRhl3SZspRjfvTZDbk4Ac2","tlshash":"4db2e08de36e611c8c5b1250cf26908c7b8a97bbdac6fef44152e3d0d4d9e80d451bb2","first_seen":"2025-10-31T12:17:27.092291Z","last_seen":"2026-03-27T19:42:57.106382Z","times_seen":21,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/019_temper.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:59.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/019_temper.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27791\r\nlast-modified: Fri, 29 Aug 2025 06:35:51 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14a47-6c8f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 41085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k1H4ElfvRwg%2BwVOr8hgESGG8raQ0QGUV%2FSvCu%2FZbpmCeHxjq4pQ3ppTkb4z1trcFzqzeQYWXOpFjOEHGmkpWbucOh2bfVpykdu9rCLIygQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e2ff4532fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27791,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"50bb220144aebd62d6f971cd2a56c6f7","sha1":"e920e76c69c4f040d8e97b15890cc7328439119e","sha256":"4bdc4e61c47d01b9a52d9fa066a49885d31ad020c6e8741a64b239ed388eac32","sha512":"f435dbdd4554efbf5b5a1c97fb44a486925b01f3ea067e1dfd64b51e54eee43021a1f877d813c25dd4784ba6211e0cebf0e4626cc8dbd6f5b862562c1b476c65","ssdeep":"768:qfQg+yXI65Zhlfe44KvQ1zULRsuoOlvz90cCNeCH:qfQhyXI65/s4ESVsuoOlehNeCH","tlshash":"2bc2f198eb3e3874e23d3101386deeae6e4d5e43c54414724b7ba7dc7588248e4b892b","first_seen":"2025-10-31T12:17:26.891196Z","last_seen":"2026-01-10T09:02:32.816101Z","times_seen":10,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":133,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.capndr.com/advertising.js","fqdn":"js.capndr.com","domain":"capndr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:00.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.capndr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Oct 2025 02:32:03 GMT","end":"Sun, 11 Jan 2026 02:32:02 GMT"},"fingerprint":{"sha1":"4F:91:E2:5E:A1:B1:4D:7F:49:01:1E:73:C6:07:EB:0A:BE:44:4C:44","sha256":"7B:0D:8E:03:0E:6E:23:65:30:3D:E8:FC:0C:E7:66:46:E2:5B:7F:FA:FD:D2:FF:61:4C:A4:18:08:24:70:51:6B"}}},"request":{"raw":"GET /advertising.js HTTP/1.1\r\nHost: js.capndr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 14 Jul 2023 08:23:25 GMT\r\netag: \"64b105fd-0\"\r\nexpires: Tue, 02 Dec 2025 00:25:00 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"js.capndr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/448451/8107cc82aa1ad379499aea72ba549b7e5b2e9e47.gif","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:02.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/448451/8107cc82aa1ad379499aea72ba549b7e5b2e9e47.gif HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:01 GMT\r\ncontent-type: image/gif\r\ncontent-length: 193392\r\nlast-modified: Tue, 21 Oct 2025 18:19:17 GMT\r\netag: \"68f7cea5-2f370\"\r\nexpires: Wed, 21 Oct 2026 20:43:54 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec02-prg1-1\r\nx-77-nzt: EwwBX63NDQH37qw1AAwBuUwKDAH365IAAAwBJRPCVwG3TgAAAA\r\nx-77-nzt-ray: 2a494a15ef3a6de8d6302e69a7912338\r\nx-77-cache: HIT\r\nx-77-age: 3517678\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":193392,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 250","md5":"ed460e0ab40e30aa9b90d1a269a8187d","sha1":"8107cc82aa1ad379499aea72ba549b7e5b2e9e47","sha256":"33bab9495a93de15a862e7e189c10977fdd809e93ed9735ea434d5a40313f513","sha512":"53d936990299434249bd24da9fddb43e09d3ca9abb7f082b4b8577df00eb3d26e5772fc42476d373fad4db09c52cf33de8bd8f36994a105c8ce0e0fa47cd9db1","ssdeep":"3072:J0x6MKnWdXE0nQpqhWy/GqegLGt/r3dQ0rWIYuv4q1k+gsp7JCcKvzKJ8Pvugs5x:JVMKnWdXE0Qpry/NPLm3dQ0rWIb4Q1bZ","tlshash":"ff141229ac990989d22ca6391804bed207f30ce2c5531d738f7f665f8b765496f318ba","first_seen":"2025-10-22T16:51:38.724449Z","last_seen":"2026-04-03T16:50:22.521158Z","times_seen":234,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/230/089_chilling-au.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/230/089_chilling-au.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 31642\r\nlast-modified: Fri, 18 Jul 2025 03:54:02 GMT\r\npriority: u=4,i=?0\r\netag: \"6879c55a-7b9a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HOSCGXgI5cZUXAjMZub7T2HDu6EpZIPu9RsprSPaDPgnRZZl0GGr7KWcwvdRPaQi0yLMw0mxuGFPLkHXdL%2F5uogyNkaYl9DKhjBQMKjPhA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e13eae32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31642,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x300, components 3","md5":"e04ee0ca757e033a22b43268e9ef5731","sha1":"52cd071fd247b1287196b3ae150deab8af03a1a8","sha256":"4d52252c93843c6673282be625fdc82125c20bc686108737d32e1928c0d07e23","sha512":"fd03470c195324b63c0522ffc045830a427356ddcd9a313c2fbb043b1a7159a27b477ed6f8906cb802d1255a5bc84c74b3ce8fe202b4642915a189980de11958","ssdeep":"768:pTq4kOjWPrry+1PxELJMRyljXFrhNa9sbXKN1k:pvkcYvyUPgPr/aIb","tlshash":"86e2f1857173c7f6f2d292345ba32b29e4b70794c0fee42d2ab245cb709bc0d499ba11","first_seen":"2025-10-05T06:06:00.126984Z","last_seen":"2025-12-16T05:53:54.174728Z","times_seen":13,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/103_hardcore-arisa.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/103_hardcore-arisa.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21234\r\nlast-modified: Fri, 29 Aug 2025 06:42:53 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bed-52f2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 41085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vVAJmxWMsGNt%2BKnGQJpdbyNnQ%2BdoIebvxDVUHmncwWzw1ghSMa06Ljkk%2Bw4Mrv%2FJBworneX4Oxp3ptZ8A%2B91w64GqTeWfzNYlMSUyb26XA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1aee432fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21234,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"3be180f77b947f062ae0d0f05737d029","sha1":"c10ec5b67aaca03af28c2086057b5704d739a829","sha256":"9a655e0512953ac00fd886bd26c85219d9e38a6685c8993ad5676ede55cdbfab","sha512":"b45b3c01f015f575ec3ed7894d863415314d2736021ac070cac5aed1fcb90eccf4576340c737feb6bb38d5ae4c0cc25891e1dfdd1851b6f908e9669837f51df7","ssdeep":"384:G04tz0nMZgvl193idBb5cRnijxjBToatogYY4m6KBrpywBOI878dM:G04mnMuFab5ctGihtFKhpz/zdM","tlshash":"2f92e1d9e20d34446e44d2ae0e0973ecf696b73768f886d87c9060f69593c21dba16a8","first_seen":"2025-10-19T02:15:18.864894Z","last_seen":"2026-03-27T19:42:57.058538Z","times_seen":24,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/055_yukari.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/055_yukari.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18838\r\nlast-modified: Fri, 29 Aug 2025 06:41:32 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b9c-4996\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R9xfVLML%2F%2BIxk3yfrNg78CMWJ4idZx%2FVBEMVOZvyJ9EF%2BFHay4sfQXrfDldgd1MR%2FGW5KAVd%2Bdma3SO0z%2BBpK52hTe%2FbZFBRs9mlYXFa9g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e23f1f32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18838,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x300, components 3","md5":"c04a2f7bd34d641e952168f689c4bf19","sha1":"325e631e656cf625e5cd8685f4cbab5931f9f017","sha256":"7a726ea2d2c4842852787181e54659371f1903accb1d220b89da622a229faee2","sha512":"b5bc5011e95937ab57d63c7f703690e4df3d87c40f689b36ca4154327eca5a27b5216cb048523ec71d5ae87cd1bea5698a12248fb01499c7fc9193af93bee335","ssdeep":"384:jKieBcLlX21UaNqqRFnc6itVVCpCDhOeOiY3KVCZWo:WxYlm1UmqEicMDYv93WCUo","tlshash":"5e82d0e27b329484e91133464f2b57d0b8eb1b55a71d566026d63cacf02a3deecd072b","first_seen":"2025-10-31T12:17:26.994706Z","last_seen":"2026-03-27T19:42:57.073323Z","times_seen":18,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/051_say.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/051_say.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23338\r\nlast-modified: Fri, 29 Aug 2025 06:41:28 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b98-5b2a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219265\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lz23%2FnkFfSS5Luv4p1GBTjIS%2FjD0qHYwo7StH6hzNuCJXKCO%2B8V0OG7mhK7AUQLRonsXejYYHtmjwhMIHEWtNb8Wwcy0o%2FouNaIduLax9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e24f2232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23338,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"4b5b4a3ec6af24a9d5f54af4c0d58e50","sha1":"9dcbbc5f04aa2dc86c14b409f1ba438aa22061cb","sha256":"cfaae528d3eb102b3c1e2f55f1696b1745be8ae2c98c776d0dd4e746fbfe9e9e","sha512":"2f7552e84c6f8d13030128ef91736ceb8e65a88cf15e011c3611a14a8bb2152af0dfc2305c545ae8b4741386adab1e43dbf1de0de675c5d137e98f885c0fed78","ssdeep":"384:tPAPv/9bDkQPF/6NXDuaoFi8bZ/ZF06njibUHfe31VMVrY2amaLCeL0D+G2Geder:tPA1DgNXiaoAAZO6n+dPMVmLF0Dz29dA","tlshash":"b1a2e173a31980468f22b83d05b3b556fe4b7f3982d6f13d5920d0eda2b85e109e4c6e","first_seen":"2025-10-31T12:17:26.996517Z","last_seen":"2026-03-27T19:42:57.087496Z","times_seen":21,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/029_xxx-video-hottest.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:59.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/029_xxx-video-hottest.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22556\r\nlast-modified: Fri, 29 Aug 2025 06:41:01 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b7d-581c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UNK%2Bj3JdZM1sS5G7P2RDs7NT2yjRZgaHPEP7346ns%2FEQpzB1jDn9G17jfrbp%2B975weNCjYzVYySL5f1oX40LlmrfW6JXc%2BmXTFHK2xhZvA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e2bf3932fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22556,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"de3ef810bf5e94d13b1d45f9a2cda2ac","sha1":"8fbc511684960b255b9c0eddea62647cc1f829ed","sha256":"4de2aba9fd1c07c212385736929d40ee371a253f849b180ea1464fe2f04cbdff","sha512":"aeac456c655ecf9a28d0b3d48c5d924b606e120154e2edb0eb95839b01b164dceeb9266cd9805b4bcf20e394e5dc0f2f837e8fdd1378c514200e48049a8e6a8a","ssdeep":"384:uRjezeKu2jpuSbbcP2nd0Po0yMDGx9lq7ziKu/xM4SChwWctR483gJo:uRUUp+dGo0yMYcI/xKC1cn4O","tlshash":"43a2d015b4d2566bd8ebfdff5656c3922fb2635093f24f9278f386c8c1220442aa3e05","first_seen":"2025-10-31T12:17:27.051141Z","last_seen":"2026-03-23T06:42:57.705913Z","times_seen":16,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=zAks3GzF_zZzMDGBaFyAw4kCzdqvlzrYuqSnh4nwBhXL8mf987QbNJq8NcmfGYVt-VAUiy8mSTYdx0hZz1sBDqhG_nUtzvKnwm-SIZ6QxG_Tytk_gUIDRUi","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"104.21.88.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:01.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 05:59:35 GMT","end":"Sun, 01 Mar 2026 06:57:06 GMT"},"fingerprint":{"sha1":"1B:6D:8E:48:22:E7:FC:C2:4F:06:18:95:F0:8E:39:C2:A6:C8:47:2C","sha256":"DD:CF:71:A7:71:DB:68:1A:18:D5:6C:B8:43:76:78:71:E2:E1:0D:30:1E:09:92:A8:A5:4D:14:57:D3:66:8C:E5"}}},"request":{"raw":"GET /creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=zAks3GzF_zZzMDGBaFyAw4kCzdqvlzrYuqSnh4nwBhXL8mf987QbNJq8NcmfGYVt-VAUiy8mSTYdx0hZz1sBDqhG_nUtzvKnwm-SIZ6QxG_Tytk_gUIDRUi HTTP/1.1\r\nHost: cdn-fc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:01 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 17 Nov 2025 15:10:11 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h4HD5XXH8NxjrOrMO79HIVp7N%2BFLSIJWql9LkXSLwIdi2E7Fws3uDG%2FLStI08UVG7SKZPVF6%2F5B%2Fwqum6ZFzwpW%2BiHQ7oUhe\"}]}\r\ncache-control: public, max-age=3600, must-revalidate\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9a76a7f58b8d5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9831,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"748a80ff3897b844f91a894e52771b7e","sha1":"cb755d71a5cd0bf37bd33efc9c9d050d5f067590","sha256":"aa2078071035658b7bd0fb8360f91ef6df5be7d7b0481de62c1aaa81fe867f67","sha512":"cf82c7786b90a3b7529dc94bee6be9a144bda00f68b7b2bff40b0368f2015912b0d378ff848c3038eaac7ca8b11ecca49beff1a28e7b67da5f89f0f8327ece2c","ssdeep":"192:8uqWH4QquVZ0OLaEwL5U+F8QOQhkmLYIzRGEC+icNcj:K24Qb/0OLa9866mLYApqj","tlshash":"651273a5d7bf1461515361d8afa76394613c9107f602ce89bfae92d40fc9d0881e3bcd","first_seen":"2025-11-18T15:37:38.807039Z","last_seen":"2025-12-04T07:42:59.402995Z","times_seen":132,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"cdn-fc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.60ah.com/b/b_as_n.css?v4","fqdn":"cdn.60ah.com","domain":"60ah.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rtbrenab.net/get/?go=1\u0026data=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","date":"2025-12-02T00:20:02.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.60ah.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 02:32:17 GMT","end":"Tue, 10 Feb 2026 02:32:16 GMT"},"fingerprint":{"sha1":"8C:90:19:3E:3B:52:BA:5A:83:BB:53:5A:21:83:80:EF:19:C2:0B:E0","sha256":"F6:E2:47:9C:35:03:88:26:95:E2:E4:39:DA:2E:E5:71:3B:6F:DB:51:DC:BF:1C:5A:C4:0F:A7:7F:B6:9C:95:E4"}}},"request":{"raw":"GET /b/b_as_n.css?v4 HTTP/1.1\r\nHost: cdn.60ah.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rtbrenab.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:02 GMT\r\ncontent-type: text/css\r\nserver: nginx/1.20.1\r\nlast-modified: Tue, 04 Mar 2025 13:12:58 GMT\r\netag: W/\"67c6fc5a-6d6\"\r\ncache-control: max-age=172800\r\nx-request-id: afc474e974460d801cb443d59b4334c6\r\ncontent-encoding: gzip\r\nexpires: Thu, 04 Dec 2025 00:20:02 GMT\r\nx-cdn-host-id: DS5058\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1750,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4710815dcdb221d8c5193cc0fa3d7d99","sha1":"3e44ee99da6a9b8d4d50d12b3fdb450fb5f20e8b","sha256":"f492ad6b8d8f9b56191233c65e6464b17ca2d2e585a03bfffa00a24bbc8be8fe","sha512":"f3172565b50840be7a37c2dc5d9da6862398fe8a50b07389377320c30743a8db9e10cc9e5dc7d19637b61e67daa17fc296b0f4d9124be37deeac23140653f558","ssdeep":"","tlshash":"813162a49a65a105d037e7f82751071962aed010e303091ebff07229a2dfdad7a25ffc","first_seen":"2025-04-07T07:53:53.259552Z","last_seen":"2026-04-03T17:32:49.3987Z","times_seen":1631,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":128,"dns":53,"connect":19,"send":0,"wait":22,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/048_socking.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/048_socking.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28976\r\nlast-modified: Fri, 29 Aug 2025 06:41:23 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b93-7130\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 41085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DBwyF3NpWQgHvpf0CIbEWqGvro%2BUZ%2FJYNr%2BJl%2FwhDee40UC0a8zLpKKBDtyjR83NAxb1YYxI3gZhWJrekIfEWJwtVbacb5XgGqsoJkPIFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e15eb232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28976,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"cc159ccc8b5a98fb65af9f3d8532c3ed","sha1":"9437aeb4dce818f57145d88ddb4cb570e898d7f8","sha256":"571fccfe38e82d67b1a221b76e049edb67596d892c23c004b017f937d506e3ff","sha512":"d5d6fab2f4b7fb8ee6c1133fee18548c9ed018d72c931bb39475f6abf90d6de181acaba1eba9f58dee6e6a331dcbaa6d783f455b7b0463b2e885909b38c5ea4c","ssdeep":"768:ILEOXqKtMOiBY297t0egtpQmQ2bzbjcJnyHaNwM2Xx/Oas9HUNn:ILPXq0Yf97t0VbA2zjUcdM4x/kHUt","tlshash":"8bd2f1e256c76775ed31063861b33bedbb3a82e058e1d84f74e84ed8d9807c45362c98","first_seen":"2025-10-31T12:17:26.981208Z","last_seen":"2026-03-27T19:42:57.054694Z","times_seen":17,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":348,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/125_--.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/125_--.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21722\r\nlast-modified: Fri, 29 Aug 2025 06:43:19 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14c07-54da\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NItJqZDmU%2F3qdLgVYy6HLtMlvnszz9G5YYmIbcoXZSZjChpGKSzHbj96ERv9q1pInWOBRIk69Psee1EDE%2FCudh4VcDhHHxuPapD2N%2FXD1A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e18ecc32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21722,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x300, components 3","md5":"a50e651f3aca920cb278fc021df7ec04","sha1":"f7066e863b0cd1a19ee320921e9088aeef32479c","sha256":"c8155db2c89a5e6483beaf472c91614862ffb2ebbe6da662b58c492ddfc02f35","sha512":"cc9a1308b9be53cab706da581b3bba85ed619d0e0d704983ba16bdddeb5f7fe76951231f56513fb7ee698b545b0f59aed968e058e36c452ccc2a6729305e5251","ssdeep":"384:eNyOsjnrMJB9m8mNzy0PHwYbQXXkNlrBtQFK9+zXgnLytkAmzEy3R8g58:eNuqBlwZPQYbQHUlDQFK961pmzB758","tlshash":"9da2e1c1eb6e1104804cd923c9118af06af4d59efaa75163a31257c2a22b2f45b9fbc7","first_seen":"2025-10-05T06:05:59.897151Z","last_seen":"2026-03-27T19:42:56.872555Z","times_seen":25,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":272,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/119_ewyryueuieiiojeowj1008-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/119_ewyryueuieiiojeowj1008-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12109\r\nlast-modified: Fri, 29 Aug 2025 06:43:11 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bff-2f4d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3xcd47SyApwED7qJ%2BR0jX7m3gKACs4JBxvmkAdhGwJa%2BOxf2sz3GfCfdoMSsmmrpix2cQh5huiJD2NDd4qotsF7iAujsPJElx8wFb9jKlQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e19ed332fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12109,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"a2de624becea400b82628416a6281aab","sha1":"9d565cd779b21492b4cd5038d8053c5fee54e937","sha256":"a4213d824b9ca9f1d00e4ccb2d5c8c050cef1404b678bf90fed4ef62122c8479","sha512":"12315be639642499ff2a334d2689e0f9b458675831139034eb6a16eac76abfdc50ce556280fc6098707a0b6d90a79a70cc5ff8f0c9f6627f93b89a7da25aed1e","ssdeep":"192:Vw1n5qp5DWWLVqynMNoUu6jTUJxBPVR9cPyqCMi1swJB60Hrw3jJFm8rcXACV31j:C1n5UyaVTMz3TGxBPKnCtsaB6Kk3jPmd","tlshash":"db42bf82cb74f0b1d9fd8d7c34dc93695b3e7e2157a68318a12af4f469727006a23d14","first_seen":"2025-10-05T06:05:59.963747Z","last_seen":"2026-03-27T19:42:57.108539Z","times_seen":26,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/063_asian-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/063_asian-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23673\r\nlast-modified: Fri, 29 Aug 2025 06:41:45 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14ba9-5c79\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=78jcSHhIay3%2BfjGbDmyoYWJ4GX2t3JOYfgveQVi9CKZLtXTLmwjkh9jfFHgEdCqCRzy2xPs2R50Ly6Gi1x%2Bjjp%2B%2BeyHUNvfW77n2OxaqNQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e21f1532fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23673,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"4b75ad43800aef3554517f3b271934a9","sha1":"8ea7e58ad10d86c1cdc52d3a0307efa2eb325c77","sha256":"0e4ac1b7169ee962d0650171a3e7d856b0ec8ed4431417407d7df4dfd0952526","sha512":"a4c30842d9fbd894832e777cf3038c6eff7eaf7dc7c2110aff391f91911d2a790cda6c99a395b9ee168ddf3205cd76756b01b3309dffc142dd20a3a6f8c088f4","ssdeep":"384:M509cwrqwrCTRd585IEtTzzuMZ6lDCzxIo7oI7zbOQNOZHt4A2k4xovro:MfYqwiT585IEJzzuMZ6loSG7xNMN4G4x","tlshash":"efb2e01b0098c56d892e4c7583fa33dfdf097816c8bdf4227c97f6ce25682a0b255d98","first_seen":"2025-10-31T12:17:27.096635Z","last_seen":"2026-03-27T19:42:56.956637Z","times_seen":21,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ntvpforever.com/keywords","fqdn":"ntvpforever.com","domain":"ntvpforever.com","tld":"com"},"ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:01.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 02:00:40 GMT","end":"Sat, 24 Jan 2026 02:00:39 GMT"},"fingerprint":{"sha1":"2B:72:A9:3F:14:00:92:B9:05:AC:BC:3B:22:CB:D9:87:80:23:C8:3D","sha256":"60:5B:BA:7E:5F:7A:B1:E0:55:4D:4C:29:EA:C7:21:68:37:AF:03:5B:A7:3D:15:98:F1:65:96:AB:4A:3E:17:3B"}}},"request":{"raw":"POST /keywords HTTP/1.1\r\nHost: ntvpforever.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 96\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":96,"data":"{\"ad_tags\":\"HCLIPS-PORN%2CHD%2CXXX%2CCLIPS%2CVIDEO%2CTUBE!\",\"page\":\"https%3A//hclips-porn.cfd/\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Tue, 02 Dec 2025 00:20:01 GMT\r\ncontent-type: application/json\r\ncontent-length: 27\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8830c782ba58b177918e0af708332e1a","sha1":"98c5671ae30c35a8202e63126f290f298a6f480d","sha256":"97436775d6bc61cbbdef428903a320962ba45a4e388e1226cb27b5fcb1fb7c18","sha512":"4d253600c9c5bcff54aa3a271dbc37133766da3e3d729d23506c9bd4ffe0f2d830e4dcc125f09837171db2a9f3fabd514eb009eb05a0a7f1e1ec25dbb1f5fb06","ssdeep":"","tlshash":"0980000cb08a0e030c80a00032008a082008a00a800ebcac20e00c088300200008ca8c","first_seen":"2025-08-22T12:13:06.069507Z","last_seen":"2026-03-27T19:42:57.074313Z","times_seen":111,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ic-nss.flixcdn.com/a/NThjNWMzMTI3YWM2OTYxN2FhNjJmZTFiYTZiY2YxZTc/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/yu/yuNd4a/screen/1-eRg.jpg","fqdn":"ic-nss.flixcdn.com","domain":"flixcdn.com","tld":"com"},"ip":{"addr":"185.76.9.4","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=OontXWdG7kOZcKr9WU8KIhiLdZ9DrUwEBPwyYIFNal_NhEt-mDttlRQnwqDBmGvsQJYLHGZqJm0nEw921KfpD47qgwYlm6Xh4z-1wSyu3B0B1s8_gUIDRUi","date":"2025-12-02T00:20:02.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1029385688.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 14:41:59 GMT","end":"Tue, 13 Jan 2026 14:41:58 GMT"},"fingerprint":{"sha1":"05:60:93:EB:D3:CD:8F:F9:A3:BB:E9:74:7C:66:6E:EC:91:A5:46:DC","sha256":"5C:72:8A:A5:67:37:9D:60:F7:D0:78:EF:E6:37:47:8C:8D:FC:66:5B:93:92:FD:45:D2:AF:FE:AA:D0:22:77:ED"}}},"request":{"raw":"GET /a/NThjNWMzMTI3YWM2OTYxN2FhNjJmZTFiYTZiY2YxZTc/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/yu/yuNd4a/screen/1-eRg.jpg HTTP/1.1\r\nHost: ic-nss.flixcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 51340\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: ic-1\r\ncache-control: public, max-age=1296000\r\nexpires: 1765530268\r\nx-rsic-cached: yes\r\nx-rsic-responder: ic-0\r\nstrict-transport-security: max-age=63072000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-77-nzt: EgwBuUwJAQH3gq4FAAwBisclzQH3FG4AAA\r\nx-77-nzt-ray: 56376635532a89bab2302e691214f727\r\nx-77-cache: HIT\r\nx-77-age: 372354\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51340,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 480x300, components 3","md5":"f8e1d1fe49d881fa515f331c66525229","sha1":"c1b3d73c510f8a357ae0bb64ae4f1ac15a98f0e2","sha256":"809b2dc3ad47659382afba7f44aab4a460e58043ed145b90a0eebaa9f7d90af2","sha512":"47b7f129e311ca41b83f0fc3c0c09d952c9ff08655e1f7d2bb82fdd308ab50cb8bc9bb032030082cdf9cb25f3687a8b95015f920bdc4ae7209ca6c2a1cfa5263","ssdeep":"1536:q6eL3iwDXapDkvCH0XV8l/XgUpb2AelXIbLBLA748lj/Fb:qXFapDz0XIXntHk4pA748lR","tlshash":"1033f271034a17d2f5b13aba631f1f4076eed75a218f03fa71e62c46b38626d4e264d2","first_seen":"2025-11-30T10:09:06.772874Z","last_seen":"2025-12-05T13:53:37.750518Z","times_seen":40,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":182,"dns":45,"connect":10,"send":0,"wait":12,"receive":13,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ic-nss.flixcdn.com/a/MzdkYjk1YjVhY2QxNjIzMDg3ODY5MzlhNzk2NjA1NDc/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/0l/0lrZ1z/screen/1-qm1.jpg","fqdn":"ic-nss.flixcdn.com","domain":"flixcdn.com","tld":"com"},"ip":{"addr":"185.76.9.4","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=OontXWdG7kOZcKr9WU8KIhiLdZ9DrUwEBPwyYIFNal_NhEt-mDttlRQnwqDBmGvsQJYLHGZqJm0nEw921KfpD47qgwYlm6Xh4z-1wSyu3B0B1s8_gUIDRUi","date":"2025-12-02T00:20:02.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1029385688.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 14:41:59 GMT","end":"Tue, 13 Jan 2026 14:41:58 GMT"},"fingerprint":{"sha1":"05:60:93:EB:D3:CD:8F:F9:A3:BB:E9:74:7C:66:6E:EC:91:A5:46:DC","sha256":"5C:72:8A:A5:67:37:9D:60:F7:D0:78:EF:E6:37:47:8C:8D:FC:66:5B:93:92:FD:45:D2:AF:FE:AA:D0:22:77:ED"}}},"request":{"raw":"GET /a/MzdkYjk1YjVhY2QxNjIzMDg3ODY5MzlhNzk2NjA1NDc/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/0l/0lrZ1z/screen/1-qm1.jpg HTTP/1.1\r\nHost: ic-nss.flixcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40277\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: ic-0\r\ncache-control: public, max-age=1296000\r\nexpires: 1765480114\r\nx-rsic-cached: mem\r\nx-rsic-responder: ic-0\r\nstrict-transport-security: max-age=63072000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-77-nzt: EgwBuUwJAQH3VdwGAAwBw7WqBAH3GwQAAA\r\nx-77-nzt-ray: 56376635532a89bab2302e69338afb27\r\nx-77-cache: HIT\r\nx-77-age: 449621\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":40277,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 480x300, components 3","md5":"e197744987208261b74c09b0f253b8b4","sha1":"87281ced7a5bf75af9cc14e15dd66821a90d2500","sha256":"b4d05b35d406e5dc75353cda49f250b956f942cff85256f1efc59637796bfc0a","sha512":"a82458f9d976bcc334f07112481423a96da0d45c0e8cbf3339dc99136fc7ba0403fc2153bb41d0199afe077ed5f55e1b942509f04a3e8743b925b9365b54f9b1","ssdeep":"768:W5YP+W1G4vkuMz16DzQFin4Oq24DTujnYlTJlNfuVY+VH58evlWIzhqVWAD:W5N6MOAsn4B//4YlTgmC50IzM5","tlshash":"b303e152170399c0f3e704bd5062cf22ced7cea6a9c0a16d6fcad8525f4ad58af01d1e","first_seen":"2025-11-30T10:09:06.74795Z","last_seen":"2026-03-15T19:56:48.879837Z","times_seen":91,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":181,"dns":28,"connect":14,"send":0,"wait":16,"receive":10,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026dsh=S-12901205%3A1764634802383509\u0026hl=en\u0026ifkv=ARESoU1gpf4Y98V79Sz0EieU26IHmEua0ZZd30OX6Rh5UWn8qEwulOvKyxjywzuECKAfawqPmV_-wA\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:02.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"BD:40:9A:DB:26:FC:C1:FF:4D:85:05:A9:F0:E9:24:BD:05:29:25:7B","sha256":"C7:A3:E4:68:D6:D8:86:E7:C6:E2:D6:E3:1D:DA:60:9A:35:7E:71:9E:F1:91:26:57:47:43:91:7C:CE:BB:07:17"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026dsh=S-12901205%3A1764634802383509\u0026hl=en\u0026ifkv=ARESoU1gpf4Y98V79Sz0EieU26IHmEua0ZZd30OX6Rh5UWn8qEwulOvKyxjywzuECKAfawqPmV_-wA\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 02 Dec 2025 00:20:02 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-coEF2TAmsyaGdZWUazDrFA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/ https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.KEYUHSehrM0.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/118_x3x15ecaa5a35af3c8959.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/118_x3x15ecaa5a35af3c8959.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15871\r\nlast-modified: Fri, 29 Aug 2025 06:43:07 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bfb-3dff\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=25q34%2Bl%2BwhvQEhzze7V6uhiGrJUC6DqVzE2d8DDQj9cnUnxXvVtdhFvpMVYpeBUxcL3aVKAIX69XvNWdPs0aJ1%2FxR9CeZAkL8NAx4N2bNw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e19ed432fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15871,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 640x639, segment length 16, baseline, precision 8, 400x300, components 3","md5":"d0a3979e11f5311307f326467d4eebf4","sha1":"aaa195c01f9775773445ee17444ee288cd7ec3e3","sha256":"d9f7c58c9c7e1e381e5c32f9539407581a69ac581cba9c8e1c8c9a6c9db9e68e","sha512":"ccfa52b80052618eae013b755b6955f7754a3220a2e4c2ed4caf8c4525676e8dedafc2b2fe1ec401128ac7cf09154ebf1b02e23e682fbf3b0019fc3307d0a092","ssdeep":"384:vh6LQxaHQcR4OBAGfxov2STIGoLkQ44ucjx9AyUzBk:560xEQcJBAZhTRoTrnANe","tlshash":"ac62bfa78cee03c38dd299b0989210e4d5415ede81cc2b5fd1c30966aafe66608f65ed","first_seen":"2025-10-05T06:05:59.929289Z","last_seen":"2026-03-27T19:42:56.775588Z","times_seen":26,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":178,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/109_agitate-subsidy-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/109_agitate-subsidy-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 30970\r\nlast-modified: Fri, 29 Aug 2025 06:42:57 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bf1-78fa\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 41085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YxE9JbXI7bVKr%2F8fAxoVps8eZO5dn%2Buvz8p%2B4%2B1XquQFLoQGUcI3M5mrizUwpLobbKWl80cxjVSqPmudKrYwMlOZcewrln%2FeN4yt8vaXEA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1aedd32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30970,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"320966c4abebb970bc7e73765833fc4a","sha1":"6195fa6220e8c30ace11f4101690ca4eec8f5c8f","sha256":"575b886464bfb13ee74dc0c9598db1cefee103439995aa5c0dbce4c80f6e4d09","sha512":"31fd348405f2d3b350d9a7f0e0634bab4de4667f4200ec9aed3628723d99c025e676351ddc56c190399cdc13eaac93e932c91bc73a33f7e4b68bbdf6d5b9c560","ssdeep":"768:aEfn/QtaWblK3aviYxKR/jIGiLdctlS13JhP:aEfn/QtpviYxKFtsAl43JhP","tlshash":"25d2f177587705b061ffdb9dc827f6041109a64b8f5a3b5e1a728ee0e01e8738ea450b","first_seen":"2025-10-19T02:15:20.107409Z","last_seen":"2026-03-27T19:42:57.144867Z","times_seen":22,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":246,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/083_gets-painless.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/083_gets-painless.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22000\r\nlast-modified: Fri, 29 Aug 2025 06:42:20 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bcc-55f0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 41085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1IFNXAloFty0q1jkD3u9soZmHCfd%2FkZ7pw1LvcrawsA1iaD5EDnaUg1YLY0TOL9g%2FSspN2KDsVgsrfNDQsCFBkmWq0moDyOPvomEQKoKkg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1df0032fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22000,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"ad4578ea6d054ce7afdbbbe2ee5533b4","sha1":"1dd2685e6e6d0c461c2bec7d8c68ed25ab32d019","sha256":"3f07bda3dcb036fd3eea5e77434801cc9d2544f9ab0447774912f2303aad5b08","sha512":"366f8df2049481a8141814739c3a98ed6c56f8530b847fd44ddb043a8c94ddaa88629b77c98cdeed43a8041c10bf8958138021e75a9834ef73dc19cca932c32f","ssdeep":"384:eHcTkSq6pqLKUZovyY+gqIXG518HeFa8naQM7TcUROvzhVA:8QkjQq5Zoq0G18Heq7TcUROvM","tlshash":"82a2d1aee4da478cde585525cde98f35e2c1662494a8dc3fc206bcbac6b410d77d42c4","first_seen":"2025-10-05T21:57:54.366108Z","last_seen":"2026-03-23T06:42:57.692323Z","times_seen":23,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/backup.v2.js?spot=bd16f693d3144ae0b0b2ce10c53c7d0a\u0026xu=94551fa65a169fd1\u0026count=5\u0026w=1280\u0026h=1024\u0026keywords=%7B%20hardcore%20%7D%2CHCLIPS-PORN%20%3A%20HD%20XXX%20CLIPS%20VIDEO%20TUBE!\u0026adtype=image\u0026tz=0\u0026callback=callback_t1goQ","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:00.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Nov 2025 07:32:01 GMT","end":"Sat, 28 Feb 2026 07:32:00 GMT"},"fingerprint":{"sha1":"30:27:D8:5A:59:AD:E2:2E:0E:9D:6A:5B:1B:BF:60:BE:D2:80:8B:DF","sha256":"A9:DE:14:B5:E6:07:9A:21:0C:4B:AC:5D:B3:F1:DB:EB:1F:27:9B:A9:C9:AD:51:72:F0:5B:0D:91:81:C1:D3:6D"}}},"request":{"raw":"GET /sdk/v1/backup.v2.js?spot=bd16f693d3144ae0b0b2ce10c53c7d0a\u0026xu=94551fa65a169fd1\u0026count=5\u0026w=1280\u0026h=1024\u0026keywords=%7B%20hardcore%20%7D%2CHCLIPS-PORN%20%3A%20HD%20XXX%20CLIPS%20VIDEO%20TUBE!\u0026adtype=image\u0026tz=0\u0026callback=callback_t1goQ HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: cookie_user_id=a3478f5e-53f5-5f37-994f-8bde9a7ba683; bfq=APeIECNCx5YaOWbIkGEDRxcWIsYU3BLjoYgyE2PcsEHjhowYMmDA6NJH\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Wed, 26 Nov 2025 12:24:38 GMT\r\netag: W/\"6926f186-2592\"\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncache-control: max-age=172800\r\nexpires: Thu, 04 Dec 2025 00:20:00 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS5833\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9618,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9535)","md5":"52ea21ca0d1938b4412569d35b0866aa","sha1":"8d92a0ec410058b8bbf59030fa4a57947c7d871c","sha256":"de3c9bf2d039601a9ab7aea962640dbbfd1a8a2e4e58cfea6c94c4387e1b653f","sha512":"f0e93cce4b079bcbcc8cc0935c343dc5114bbd0a33adfa786c77c4e98ef11af2140c83a11fef8f38bbef8401a3cf5c9b5f5e104eb8baa6892e48af1154d9ba28","ssdeep":"192:pJJ7MVejbROjQ8enkecherKeHZ8eHjeA5euoljnanE/tnhVyc2sRDHPa:pnMVejbROjJenkecherKeH+eHjeA5euh","tlshash":"4012a483c26f201bbc1935846b8b3a45a59011633cb5ccb6c2e3597bd9b0f974673a63","first_seen":"2025-11-27T08:30:31.640472Z","last_seen":"2025-12-02T02:34:07.027976Z","times_seen":7,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1764634770/194237659_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.223.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:01.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1764634770/194237659_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:01 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16322\r\ncf-ray: 9a76a7f28988b4f4-OSL\r\netag: \"d067b5839953928fb9db3854b8c43ad9\"\r\nlast-modified: Tue, 02 Dec 2025 00:18:54 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 5\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16322,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d067b5839953928fb9db3854b8c43ad9","sha1":"91c4af25898ae5df0756db84483c9394f69ad481","sha256":"d7b195ff52ff498a85818df4102609a570755012999a0bcc2141a2c38dfdc1f8","sha512":"516ddf3a568436687db299bffc6120e8d460cf0ed555b412d922728dd344814b4bd4d3f072e79e0dd8d3ec1a1d2a7add00ac385f81414b85e668bb73d5a4b1c1","ssdeep":"384:ZjeNL4ZdBbFVSAFFj+Z81am4YAsrj9+z+PyTJ23nnQd:NAL4ZjFV9zBN4Fsr4sK","tlshash":"bb72d00ab34d0626b5dbb0236d1adbb46420bb3e30d457f6f7c7d6383496a42c51a8b8","first_seen":"2025-12-02T00:20:49.484216Z","last_seen":"2025-12-02T00:20:49.484216Z","times_seen":1,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":3,"dns":2,"connect":1,"send":0,"wait":16,"receive":5,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/092_deference-lorelei.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/092_deference-lorelei.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27646\r\nlast-modified: Fri, 29 Aug 2025 06:42:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bdb-6bfe\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QiVrUOaeppUpQdb%2Fnd3NYzkyeOqoAzrHseNijEzb4j%2FIR9qc7EMSXxDWtP6ZqowABIv78Dp2sMPoUgknJ6F7W8DO9kNzPg3O2rCKx3QPeQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1cef332fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27646,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"330603c0c5f333adc68b0d161957c8e7","sha1":"97ea93dcbdd6b8ae2a74880e55e446749ac31fcf","sha256":"d5c986916c452e03be9f1d90ef1a8c078ffa02fc1e85816c01b93a20eed5d0fa","sha512":"1aa7fdea7c902941d5e87c144620f528ffed0b8b51c9b969ad77b8da68031df49050f5e3d1dccb7e4a8706b3bc534315e3b9c04f6ac8c067b298cdc212079254","ssdeep":"768:CY3WbJe7b8BiVu5ohOzExWZUtCGIIS+UQyeaD:C3A7AYVkYWoO0y1","tlshash":"d4c2f0f4be1b76d7df3dc1e358c58db469d29241fd8621609ac720f39780a24d6f2066","first_seen":"2025-10-19T02:15:19.567431Z","last_seen":"2026-03-27T19:42:57.144253Z","times_seen":24,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":280,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/087_distance-xxx-far.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/087_distance-xxx-far.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23196\r\nlast-modified: Fri, 29 Aug 2025 06:42:27 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bd3-5a9c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w1OOJCMUK1SLvDw1GZUpodx6Ee8x5OeIRjKF6Px9WTsT7ft3Z2gWUU%2BWB9XxTY4bj3XE%2BPANhtZ8iMVZmBSbDYOUontDTNrPra2rKQdeJg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1defd32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23196,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"bbc2966669b5a4110d77ddcd220523b5","sha1":"c0123529d82b824b0baa272832562838db1b7ed3","sha256":"eead7d6e28fa8050bfa6ad8a09745fa981c7fc08633a6ae436b1b0d954d1ecfc","sha512":"8b450c039d8c3b53044e311a393f74529fa9ecca035aa1221b4bbf8ca27356608e366df689e457928dd7f1f6edc23c36dddf5a4bc103f4e80cd9487466061e52","ssdeep":"384:yiBDOcGOT0rDwJk/DGH1WvgyzLnFcg05HsZTILQ4BD1vcAK3/mo6rFLG:dKgiwRkYMLv0JsZTIE4BKlvmHS","tlshash":"7fa2e0e7d3a93f26d4d313e83b9e4db288c020e56294e6691ed5f1cc20713993931a1f","first_seen":"2025-10-19T02:15:14.704695Z","last_seen":"2026-03-27T19:42:57.123389Z","times_seen":24,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":207,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tsyndicate.com/iframes2/fc768f97a2f74ef6a818a54f5de471ce.html?keywords=HCLIPS-PORN%20%3A%20HD%20XXX%20CLIPS%20VIDEO%20TUBE!\u0026extid=%7Bextid%7D\u0026adb=0\u0026clientjs=1\u0026w=1280\u0026h=1024\u0026tz=0","fqdn":"tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"78.46.88.185","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:00.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 21:10:04 GMT","end":"Tue, 10 Feb 2026 21:10:03 GMT"},"fingerprint":{"sha1":"BB:2C:CE:C9:92:0E:A9:18:50:BD:8C:7E:7D:B2:E6:CC:72:54:29:18","sha256":"3B:E3:8E:A4:C5:EC:08:3B:96:2B:B0:16:ED:56:3F:0A:CD:55:81:4A:8F:FC:97:83:57:FC:6E:F9:FD:F4:43:83"}}},"request":{"raw":"GET /iframes2/fc768f97a2f74ef6a818a54f5de471ce.html?keywords=HCLIPS-PORN%20%3A%20HD%20XXX%20CLIPS%20VIDEO%20TUBE!\u0026extid=%7Bextid%7D\u0026adb=0\u0026clientjs=1\u0026w=1280\u0026h=1024\u0026tz=0 HTTP/1.1\r\nHost: tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 02 Dec 2025 00:20:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: https://hclips-porn.cfd\r\naccess-control-allow-methods: POST, GET, HEAD\r\naccess-control-allow-headers: Accept, X-Requested-With, X-Forwarded-For, X-Real-IP, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Legacy, Content-Type,Authorization, Nav-Ua-He-Mobile, Nav-Ua-He-Platform, Nav-Ua-He-Brands, Nav-Ua-He-Platformversion, Nav-Ua-He-Model, Nav-Ua-He-Architecture, Nav-Ua-He-Bitness, Nav-Ua-He-Fullversionlist, Nav-Ua-He-Uafullversion, Nav-Ua-He-Wow64\r\naccess-control-allow-credentials: true\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding, *\r\nset-cookie: cookie_user_id=a3478f5e-53f5-5f37-994f-8bde9a7ba683; expires=Tue, 02 Jun 2026 00:20:00 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None\nbfq=APeIECNCx5YaOHLkkIGDRhcWIsYU3BLjoYgyE2PcsEHjhowYMmDA6NJH; expires=Wed, 03 Dec 2025 00:20:00 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, no-transform\r\nx-robots-tag: none, noindex, nofollow\r\nreport-to: { \"url\": \"https://pxl.tsyndicate.com/api/v1/heavy-ad/report\", \"max_age\": 86401 }\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\npermissions-policy: ch-ua-model=(self \"https://tsyndicate.com\"), ch-ua-platform-version=(self)\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"TrafficStars","description":"TrafficStars is a self-served ad network and ad exchange that operates mainly in adult-related verticals.","website":"https://trafficstars.com","common_platform_enumeration":"","icon":"TrafficStars.png","categories":["Advertising"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12307,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (7224)","md5":"681cfef1b9da50997498ac5f2d37cded","sha1":"13bb0550833815b9fca0485f33a449cfcff91075","sha256":"5ee7c028bb9fcc6cb43f124a6868c5de906a2b0d5a71cc143c3839df1ff6a97f","sha512":"0de58865f5b1db8ad1f1c6f4a6dee56aeb86e2870a0b0eb7280834e48342dbf555f20e95f271c8cbc146b89087859647e5c55060cef39ea9fa71e3882239d7db","ssdeep":"384:kXbKCtHVLTsFPYkNmzuGlQDkNmzuGVkNmzuGrkNmzuGzDg:kXbKCHLQFPYkNmpmDkNmpVkNmprkNmpg","tlshash":"1f426d6338011832290da899f9c047487744c5b56807c13ed6e47d6edb8aaec9b6bbec","first_seen":"2025-12-02T00:20:49.486073Z","last_seen":"2025-12-02T00:20:49.486073Z","times_seen":1,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":83,"dns":1,"connect":29,"send":0,"wait":51,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f93c382250.1f0355218f.com/in/multy","fqdn":"f93c382250.1f0355218f.com","domain":"1f0355218f.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:02.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1f0355218f.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 14:04:17 GMT","end":"Thu, 26 Feb 2026 14:04:16 GMT"},"fingerprint":{"sha1":"91:AD:7C:21:B5:6B:FF:3E:E7:14:52:3B:D9:19:76:C7:36:D9:6F:CA","sha256":"D1:F9:1F:D4:16:D5:AB:B7:FE:AC:D9:81:A9:14:2F:D3:AA:65:2D:E9:EC:90:49:7A:82:0C:38:82:9C:BC:84:F0"}}},"request":{"raw":"OPTIONS /in/multy HTTP/1.1\r\nHost: f93c382250.1f0355218f.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://hclips-porn.cfd/\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.24.0\r\ndate: Tue, 02 Dec 2025 00:20:02 GMT\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":39,"connect":26,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"f93c382250.1f0355218f.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ads-us.mymetricpath.xyz/creatives/ep6grk1w8qdxq54yj3nvx52z/1759761876467_W0gOGUOZfHKb.gif","fqdn":"ads-us.mymetricpath.xyz","domain":"mymetricpath.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rtbrenab.net/get/?go=1\u0026data=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","date":"2025-12-02T00:20:02.262Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /creatives/ep6grk1w8qdxq54yj3nvx52z/1759761876467_W0gOGUOZfHKb.gif HTTP/1.1\r\nHost: ads-us.mymetricpath.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rtbrenab.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":476,"timings":{"blocked":254,"dns":222,"connect":323,"send":0,"wait":0,"receive":0,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ic-nss.flixcdn.com/a/NThjNWMzMTI3YWM2OTYxN2FhNjJmZTFiYTZiY2YxZTc/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/yu/yuNd4a/screen/1-eRg.jpg","fqdn":"ic-nss.flixcdn.com","domain":"flixcdn.com","tld":"com"},"ip":{"addr":"185.76.9.4","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=zAks3GzF_zZzMDGBaFyAw4kCzdqvlzrYuqSnh4nwBhXL8mf987QbNJq8NcmfGYVt-VAUiy8mSTYdx0hZz1sBDqhG_nUtzvKnwm-SIZ6QxG_Tytk_gUIDRUi","date":"2025-12-02T00:20:02.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1029385688.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 14:41:59 GMT","end":"Tue, 13 Jan 2026 14:41:58 GMT"},"fingerprint":{"sha1":"05:60:93:EB:D3:CD:8F:F9:A3:BB:E9:74:7C:66:6E:EC:91:A5:46:DC","sha256":"5C:72:8A:A5:67:37:9D:60:F7:D0:78:EF:E6:37:47:8C:8D:FC:66:5B:93:92:FD:45:D2:AF:FE:AA:D0:22:77:ED"}}},"request":{"raw":"GET /a/NThjNWMzMTI3YWM2OTYxN2FhNjJmZTFiYTZiY2YxZTc/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/yu/yuNd4a/screen/1-eRg.jpg HTTP/1.1\r\nHost: ic-nss.flixcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 51340\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: ic-1\r\ncache-control: public, max-age=1296000\r\nexpires: 1765530268\r\nx-rsic-cached: yes\r\nx-rsic-responder: ic-0\r\nstrict-transport-security: max-age=63072000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-77-nzt: EgwBuUwJAQH3gq4FAAwBisclzQH3FG4AAA\r\nx-77-nzt-ray: 56376635532a89bab2302e696026b725\r\nx-77-cache: HIT\r\nx-77-age: 372354\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":51340,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 480x300, components 3","md5":"f8e1d1fe49d881fa515f331c66525229","sha1":"c1b3d73c510f8a357ae0bb64ae4f1ac15a98f0e2","sha256":"809b2dc3ad47659382afba7f44aab4a460e58043ed145b90a0eebaa9f7d90af2","sha512":"47b7f129e311ca41b83f0fc3c0c09d952c9ff08655e1f7d2bb82fdd308ab50cb8bc9bb032030082cdf9cb25f3687a8b95015f920bdc4ae7209ca6c2a1cfa5263","ssdeep":"1536:q6eL3iwDXapDkvCH0XV8l/XgUpb2AelXIbLBLA748lj/Fb:qXFapDz0XIXntHk4pA748lR","tlshash":"1033f271034a17d2f5b13aba631f1f4076eed75a218f03fa71e62c46b38626d4e264d2","first_seen":"2025-11-30T10:09:06.772874Z","last_seen":"2025-12-05T13:53:37.750518Z","times_seen":40,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":125,"dns":0,"connect":0,"send":0,"wait":35,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pointcontinentrtb.com/v1/track/impression?data=eyJhbGciOiJIUzI1NiJ9.eyJhbCI6ImVuLVVTIiwiYXQiOjE3NjQ2MzQ4MDIxNjQsImJ2IjoiMTM0LjAuMCIsImNyIjowLCJjcnMiOjAsImNyc2VnIjoidW5rbm93biIsImNzIjoiVzNzaWJDSTZNQ3dpZENJNkltNXZibVVpTENKa0lqb3dmVjA9IiwiY3RwIjpmYWxzZSwiY3UiOiJpcCt1YSIsImRwIjoiZGlyZWN0IiwiZHQiOjE3NjQ3MjEyMDIxNjQsImVjcGEiOjAsImVyIjoiNjEyOTY4NTQyODA3NDI0NTc1NCIsImVzIjoiMTc5MTAiLCJpIjoiNzMxNDMzNTg4OjE4NjoxMzk4NjYxNTY3NDYyNTQ5MzkyODo4MzMxMjoyMTk5OTY6NTE2OTE1MjUxNzcxNjU1ODI4MToxOTUxMDo6IiwiaWNzIjowLCJpcCI6IjkxLjkwLjQyLjE1NCIsImlwdjYiOiI6OiIsImp0aSI6IjRiMjg3MjcxLWQ5ZTMtNGJmYi1iYjQyLTk5YzE3NjQxNTg1YyIsInAiOjAuMDAwMDUyLCJwciI6ZmFsc2UsInJwIjowLjAwMDA1MiwicyI6ZmFsc2UsInNkIjotMSwic3AiOiJ7fSIsInQiOiJpbnBhZ2VfYWR1bHRfaHFfdjI6Y3BjIiwidHAiOjAuMDAxMDkwODgxNTEyNTQ3Mzk0NiwidHJpZCI6InRjYi1kc3AtaHotOSIsInUiOiJodHRwczovL2Fzc2V0cy5haG15YmlkLm5ldC9hNmEyOGYxNS0yMzdiLTQ3MDgtOGE5Yy1mMTJkNDQ0MmJmODIuanBnIiwidWEiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0OyBydjoxMzQuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMzQuMCIsInVoIjoiODNkMjRlMmIyZGQ3OGZjNGNhYjk5MWM2YzE2N2E1NDUiLCJ1aSI6IjdiNmRhYTU2LTQxZjQtNTYyMC1iZTNjLTc4NmU4NGRiMDI5OSIsInVyIjoiMTg2OmlucGFnZV9hZHVsdF9ocV92Mjo3MzE0MzM1ODg6dHJ1ZToiLCJ2IjoiIiwidmYiOiIifQ.NAIdWULTrXYJVqFyf24XZ-GndFaZ6wpLrnUROf0gwUA\u0026sp=5.2e-05","fqdn":"pointcontinentrtb.com","domain":"pointcontinentrtb.com","tld":"com"},"ip":{"addr":"148.251.39.247","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:03.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pointcontinentrtb.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 02:36:56 GMT","end":"Tue, 13 Jan 2026 02:36:55 GMT"},"fingerprint":{"sha1":"10:3C:6C:45:89:88:DF:E7:81:55:79:A9:7C:DC:2F:83:4A:46:54:F3","sha256":"40:9B:6D:FB:42:41:0E:7F:8E:6C:AD:17:0E:A1:BD:A6:42:50:01:8C:9B:DA:8A:6E:7E:D6:3F:B0:21:97:20:0C"}}},"request":{"raw":"GET /v1/track/impression?data=eyJhbGciOiJIUzI1NiJ9.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.NAIdWULTrXYJVqFyf24XZ-GndFaZ6wpLrnUROf0gwUA\u0026sp=5.2e-05 HTTP/1.1\r\nHost: pointcontinentrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx/1.24.0\r\nDate: Tue, 02 Dec 2025 00:20:03 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nVary: Origin\r\nLocation: https://assets.ahmybid.net/a6a28f15-237b-4708-8a9c-f12d4442bf82.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15768,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":63,"dns":4,"connect":24,"send":0,"wait":25,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/054_dinner.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/054_dinner.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20136\r\nlast-modified: Fri, 29 Aug 2025 06:41:31 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b9b-4ea8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WZUgUjDWhx%2F9cuXdH9Am%2BQwivDzAF8t%2BhIz%2BwpvE9OxJ6lGoRitD%2FWLaCTE7u0XrydnAxNcF9X2g%2BodNg2Tr6jZJQOue3fv9FuZwfJW%2Fag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e24f2032fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20136,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"4561c1ed0d4ba0bb405c302c7ee1c8b2","sha1":"22462714c5c30558e27b9c06ab7eabf0bc752c35","sha256":"147b46241e8fe8454a01a787cf0a4efe9d3fa518eafd756c197e2c7d40845c9e","sha512":"8b779f2814ee8b53ea20ce35d7cd00ba103922007e05caf060afcaeb2246caeaa99fd33c4ea9b2adf0eb91885b7d9a38cf6dbc811eff46e82b0ade2793c34bbc","ssdeep":"384:7T1E20EijXl7WmagssqvEvNTDHP/eZmJHW+N/+vw1f7aI8Yd+odk:v1EaijYmagsGN3HPWAJfNWSJlbk","tlshash":"b792e1d846021453cb290af191e9ca0d99692e45db3ddeeeb46127df31fd3c920b86c8","first_seen":"2025-10-31T12:17:27.197425Z","last_seen":"2026-03-27T19:42:57.143441Z","times_seen":20,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":175,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/035_yui.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/035_yui.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17413\r\nlast-modified: Fri, 29 Aug 2025 06:41:07 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b83-4405\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FmNrEWzNYoZDr5P4L27PPdZ%2FkFOWbE1fFVRMKnasWrgeUs7AUq46bMNJk0olSpW%2FaohOCHJ9J4ddnfS11mLpGHL0kjoD5hdHvtXUmylM0Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e28f3232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17413,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"49e7e032e16169c6bc2b61ad7592ada4","sha1":"a1f94845697b73de2bf71c96cfc7fe1778b0109d","sha256":"2bcfe0396bfc51c69a16fe176240276ecbb09b679520a64fe62f06f153d9b727","sha512":"6a4cdce27eadf9b2a04cf1cc83a05c46e980c537e743556eb070f2e140204b9a00b7e1dd2ea15545e85a4167ae5d309a0ae6ad0d8f088b62dd8cd91c36f31cd9","ssdeep":"384:aWPHsJL4NUtyCoDGtnQde1gT4rjrGIwXJwMcdelY7tArDDcaB:aWPHSICgGade1trGI6lQQcO","tlshash":"1c72c011d913c09eec1740ba422b965afbe8f59a3057916cc24a0ccda2caf4a5b6dd70","first_seen":"2025-10-31T12:17:26.95379Z","last_seen":"2026-03-27T19:42:57.040772Z","times_seen":18,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":187,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.hpyjmp.com/api/models/ts?userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026tag=girls%2Fblondes\u0026sourceId=CDN_campaign\u0026p1=dynnative","fqdn":"go.hpyjmp.com","domain":"hpyjmp.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:00.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.hpyjmp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Nov 2025 22:29:43 GMT","end":"Mon, 09 Feb 2026 22:29:42 GMT"},"fingerprint":{"sha1":"FA:75:62:4F:B4:83:62:D2:DD:21:72:38:A3:60:CB:2E:DA:1F:E3:F0","sha256":"F5:33:C1:AA:61:1C:C8:48:96:5C:58:36:81:E3:91:58:D0:3B:1D:A4:17:3F:70:CF:EC:F2:66:18:3E:8F:6E:40"}}},"request":{"raw":"GET /api/models/ts?userId=ed4e3449202a44afa8131507a9d12a1c962321860e4bfcc2aa1b33a18897b60e\u0026tag=girls%2Fblondes\u0026sourceId=CDN_campaign\u0026p1=dynnative HTTP/1.1\r\nHost: go.hpyjmp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:00 GMT\r\ncontent-type: application/json\r\ncf-ray: 9a76a7f12f5b0daa-OSL\r\naccess-control-allow-origin: https://hclips-porn.cfd\r\naccess-control-allow-credentials: true\r\nvary: Origin, Accept-Encoding\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1105,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"57e4959fbd859ee6be784840ac207b1b","sha1":"ea61d996ebb7c8d5148e6adb6a569c812d9c1af2","sha256":"7b26f889effc793b8984d52b2d20732c5ed814f887cb53c72c3d18b25cc34a79","sha512":"e2f28fd3000030639475cb742dd5682107c2a002e623409271c9efca53e8acb54b5a121b3dbbac8d5168d60a7181eab08cb618ed21f8023ed1b0cc1d10fb16ea","ssdeep":"","tlshash":"a11100962544cc5e2d10aa8459cb5107e165323b709074ea97c4ee3194fccae321ef87","first_seen":"2025-12-02T00:20:49.487909Z","last_seen":"2025-12-02T00:20:49.487909Z","times_seen":1,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":35,"dns":9,"connect":1,"send":0,"wait":49,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ic-nss.flixcdn.com/a/NWRlODU3ODE5ZmQ1ZDZlZjQzYTQyOWVlYzRjYTUwN2U/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/YU/YU3phE/screen/1-HDF.jpg","fqdn":"ic-nss.flixcdn.com","domain":"flixcdn.com","tld":"com"},"ip":{"addr":"185.76.9.4","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=zAks3GzF_zZzMDGBaFyAw4kCzdqvlzrYuqSnh4nwBhXL8mf987QbNJq8NcmfGYVt-VAUiy8mSTYdx0hZz1sBDqhG_nUtzvKnwm-SIZ6QxG_Tytk_gUIDRUi","date":"2025-12-02T00:20:02.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1029385688.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 14:41:59 GMT","end":"Tue, 13 Jan 2026 14:41:58 GMT"},"fingerprint":{"sha1":"05:60:93:EB:D3:CD:8F:F9:A3:BB:E9:74:7C:66:6E:EC:91:A5:46:DC","sha256":"5C:72:8A:A5:67:37:9D:60:F7:D0:78:EF:E6:37:47:8C:8D:FC:66:5B:93:92:FD:45:D2:AF:FE:AA:D0:22:77:ED"}}},"request":{"raw":"GET /a/NWRlODU3ODE5ZmQ1ZDZlZjQzYTQyOWVlYzRjYTUwN2U/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/YU/YU3phE/screen/1-HDF.jpg HTTP/1.1\r\nHost: ic-nss.flixcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 39747\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: ic-0\r\ncache-control: public, max-age=1296000\r\nexpires: 1765205445\r\nx-rsic-cached: yes\r\nx-rsic-responder: ic-0\r\nstrict-transport-security: max-age=63072000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-77-nzt: EgwBuUwJAQH3LxcKAAwBT3/Y5gH3PvoAAA\r\nx-77-nzt-ray: 56376635532a89bab2302e69b2123328\r\nx-77-cache: HIT\r\nx-77-age: 661295\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39747,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 536x300, components 3","md5":"238a3981af457af4d86a7f4a912a70d4","sha1":"37f35705c0e3c1e40bfc9ae5a77ee9b3a6c10b4d","sha256":"17ca21974ec9ca2d39b7f211b42acfd335c775c04de514cca44455f96c2e7596","sha512":"f2e9bc58d7de12a86d368ab4f381f3b2bd6d0d69829b39d7ea689cbcc2a293727932c0484de14e810ee688f7ce3e69cbcbce01003a99eed74d7ec8ebd4c442b4","ssdeep":"768:rnVA9XFahvCF5NcR60Bq33DntXXSkMfqc+Rq3zZrltbBwoBsJo:rVGFWvOLCcnt1fc++T3wTG","tlshash":"f003f253a142cfd0ff6b2fb5619cdf2ab2efb80618ed9937bbc505185a24f609818111","first_seen":"2025-11-26T18:17:59.81602Z","last_seen":"2026-02-20T20:09:48.996401Z","times_seen":27,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":174,"dns":42,"connect":14,"send":0,"wait":13,"receive":11,"ssl":126},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ic-nss.flixcdn.com/a/MWYxOGRjNWNhMmY3ZGY4YzdmYTJjMjQzNmIzYzhkOWI/jpeg%2Cs%28w%3A480%2Ch%3A300%29/xc/iE/iEnWwn/frame/original/2.jpg","fqdn":"ic-nss.flixcdn.com","domain":"flixcdn.com","tld":"com"},"ip":{"addr":"185.76.9.4","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=zAks3GzF_zZzMDGBaFyAw4kCzdqvlzrYuqSnh4nwBhXL8mf987QbNJq8NcmfGYVt-VAUiy8mSTYdx0hZz1sBDqhG_nUtzvKnwm-SIZ6QxG_Tytk_gUIDRUi","date":"2025-12-02T00:20:02.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1029385688.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 14:41:59 GMT","end":"Tue, 13 Jan 2026 14:41:58 GMT"},"fingerprint":{"sha1":"05:60:93:EB:D3:CD:8F:F9:A3:BB:E9:74:7C:66:6E:EC:91:A5:46:DC","sha256":"5C:72:8A:A5:67:37:9D:60:F7:D0:78:EF:E6:37:47:8C:8D:FC:66:5B:93:92:FD:45:D2:AF:FE:AA:D0:22:77:ED"}}},"request":{"raw":"GET /a/MWYxOGRjNWNhMmY3ZGY4YzdmYTJjMjQzNmIzYzhkOWI/jpeg%2Cs%28w%3A480%2Ch%3A300%29/xc/iE/iEnWwn/frame/original/2.jpg HTTP/1.1\r\nHost: ic-nss.flixcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40893\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: ic-0\r\ncache-control: public, max-age=1296000\r\nexpires: 1765723248\r\nx-rsic-cached: mem\r\nx-rsic-responder: ic-1\r\nstrict-transport-security: max-age=63072000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-77-nzt: EgwBuUwJAQH3tioDAAwBJRPCHgH3CwAAAA\r\nx-77-nzt-ray: 56376635532a89bab2302e6939127328\r\nx-77-cache: HIT\r\nx-77-age: 207542\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":40893,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 533x300, components 3","md5":"85303b32b4aae6a01e76383ac3d696f8","sha1":"27549131056b0a67c4c1b4ca2d877f9424e7299b","sha256":"d2696d5959c4f5e685294f87c85d34fef38c6cf9642be18f30e78fc9e8269881","sha512":"10ad4c019f2a7278ea00b37235814ca9f5c129f40625d8a1d65ed7163be71f646cf37adc7b94c30d37127a37c4acbc92761aca84126d4dc97bb73a33e83bae31","ssdeep":"768:6FnLv+HVsdMx5fRFzlUzIRvBuvm+bWIx6g4UVlu0Dt9x4qfI09US:6ZGHrfXhJZIvFSI6ghVl5V4qfr7","tlshash":"ae03e11a27c51a51fc553f33c52322386a9e3932d4b081a7f5cfdc1ab7c1a858e64e9a","first_seen":"2025-12-01T03:40:24.286778Z","last_seen":"2025-12-02T06:30:57.796112Z","times_seen":9,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":175,"dns":43,"connect":14,"send":0,"wait":12,"receive":9,"ssl":127},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/069_hardcore-colouring-tachibana.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/069_hardcore-colouring-tachibana.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22149\r\nlast-modified: Fri, 29 Aug 2025 06:41:57 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bb5-5685\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BjaU4rDNiBlAYfF9EKS8zAS4uNHN1lC7fUPBNUReMU60OJNCHMG1Wx%2Fd1%2FpqoiwTL%2FX9fj%2FLUOle%2FlVmpS7KI8iD84GcpK335pQooRpqrQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e15eb432fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22149,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"ceb5411f0c800be4b5480583ad0ad25a","sha1":"f060819d9f1f215b2d1bd93d3f5d8567fb6344eb","sha256":"ce62e0aea2540ea6fe52c396266c04b42b2ffe71c03ac730b42bf92f432294d1","sha512":"4e672eb7cb0494f0e034afcb5a4918cb121c00d9c56605c113801900acd75def8970a1325022bb6f405d4bcdd652cf0781aa4cd818b018c01dfbdcd15278f4b9","ssdeep":"384:Lx+CM/CYi18MsYJ8RH7ym4Te45OLocf5qUyZkASjR7+x+Rodc:VC/ChTJ8N7ym4RqTqjcjR7+x+RB","tlshash":"f1a2d080f96be56df11b3a3626aac33b03d3555314a969f80ab436ce517c4128fb193a","first_seen":"2025-10-19T03:23:58.722402Z","last_seen":"2026-03-27T19:42:57.069392Z","times_seen":23,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":268,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/024_left-side.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:59.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/024_left-side.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24527\r\nlast-modified: Fri, 29 Aug 2025 06:40:57 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14b79-5fcf\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ePoOGaP0tQNrD8QrZFu9Rfcm02GXyZVJGAhMx6KokezMfnpLevPDGa%2Fu%2B%2FKxLNJq1oy7NNJP7oIyDiK4xn%2BwErINAtIdQCc5%2FCHSEjKL%2BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e2df4032fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24527,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x300, components 3","md5":"1e650d31cd056b05c3f48be580b7a7bd","sha1":"fd7cf82ac8d36c42e5cf7f1716d1ef440303afa2","sha256":"b62d5a7312618847aee3cb6900c697d9ac7629ee858b8d94e936ee64c16121cc","sha512":"58ebd1f81dcae7a84f239e16ac302aa83e96ef4444430d9bf77f1bf0b06f875c5a0fa4e8f73fd883110df86245c245e97304cd951a2bdb46dc77623f9d8135d5","ssdeep":"384:YFJ0aghP+1lC5Lb3GREI3vqZHXHNdchNzX4Yn0tC6Eso+sXZPrFrcB5QVluo4wA+:YFJ05h+wXtRlfchNzX9n0cso+MtFrcBC","tlshash":"51b2e147c6b93282406594b9ec2d37df8a26ecb911a530c11d4972cc0e7dfb54723fa8","first_seen":"2025-10-31T12:17:27.066352Z","last_seen":"2026-01-10T09:02:32.695779Z","times_seen":11,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":156,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/079_gravure.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/079_gravure.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21713\r\nlast-modified: Fri, 29 Aug 2025 06:42:13 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bc5-54d1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m5jyBQbsBXYhNG0xb3XrigqYuv8Y1Tcj7s57vxzE7dpa0AmaopFU4jD9ZR8i%2F7w%2FiO330jAqi8u4RBXDKgNPo48ZPeQ1oJMTjnz4nPkVzg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e16eba32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21713,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x300, components 3","md5":"bacec8c0a3e4c311492ee40f7abaf040","sha1":"333b0b4493ad255e7809b298370f42aef6ef1b5d","sha256":"39be549ef43377d8b52e714c0b576d054fe9df72f950617a68151ebda2031b5c","sha512":"a1f0462d114d15bcf5792b62a2e2c82e7a0be8160f82db8ba3ca14f7a6be1417b202d2f8c65b5e3772dec1b66982b8ab3d7318852c7503454f3a2560b7cf8afe","ssdeep":"384:imd1Hkl2IFeL3fYB9sqkaGIJrm9ecAJwxU0zIyJ/PRd+Uc297HsXB:bd1E7u3gfhGIJSsJwxDIG/D+6G","tlshash":"46a2e0220753a04e750fd7bd88b0d17950f9100f97a60fd1eec4cd98389aa8b993e5b3","first_seen":"2025-10-19T02:15:13.935997Z","last_seen":"2026-03-27T19:42:57.150528Z","times_seen":23,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":204,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/121_gives-blowjob-id.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/121_gives-blowjob-id.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20319\r\nlast-modified: Fri, 29 Aug 2025 06:43:13 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14c01-4f5f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 41085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZWsAHECLeOpEgEfWBe1RnZziVyZC5wgB%2BtRAosoblb%2Bzh%2BkgVpkjgU0u%2FKImJTFQkx4ldXtfOp6imyoxu09L5Ea8rdfsJqEGL6nVux4HQQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e19ed132fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20319,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"056539eceea4f737de08654f063fddb9","sha1":"24ad8c817478d6edd47d57f7f724c90884aa856d","sha256":"b84e1e4d36dff57c733390a2463c25f5e88610d7ad4d7a282ccef02e0567c4c2","sha512":"340f80c72f1c755417c02caaa38b511bd0630c109bf74468365509d8972de73561334972a7ba54e8905523d6b79ac0ec676366110389d1ae294e526f2baeccf6","ssdeep":"384:TkPREYQAKanlzKkk/vFnmIh6yHl0YaVlWa1HkkFtJ/DquzkX9+w+Fo:TkGYnHlzKkSvFh6CLaF9kk3Jbquzq9L","tlshash":"5592d0717b127c2e94f4357a7b47830622ab7ad960d19a09783cfdd41fe849f8b8c902","first_seen":"2025-10-05T06:06:00.147444Z","last_seen":"2026-03-27T19:42:57.035159Z","times_seen":26,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":239,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/101_sad-alfresco-creampie.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/101_sad-alfresco-creampie.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 29223\r\nlast-modified: Fri, 29 Aug 2025 06:42:51 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14beb-7227\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YVGhCrQpzCvUFGZ3AH60fOA3GUK5BiJBgVGTQedgVqgGa4IvuFRJYgT8OpkLgzdYklz3k%2BGtnq%2BZ%2FHDpitilXtsOkgykD8LWTL4tQiltvA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1bee632fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29223,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"0d064caa8eb20c60cddcb7191a081f9a","sha1":"e6d9acda1bf370a7af89d3cf93869815fce274aa","sha256":"827e5aaafcd9200e4e6bc65143b7ab2031759c341790e4004513a532b6a183a3","sha512":"e0f03c0a34cc6c204526ea0583b7e5c37f0e41d133d5854cfb76e1beb950b0275ae43ba18020b8a33ecd1cd8301c7715daa14b5c57cc2a0cd2f293ef34316d07","ssdeep":"768:50wITGYemWkBLhf5MjjrdmeXTOn+D7mGuVk/4fW7:5VITGxmLBVBMxBT2Um3SUW7","tlshash":"f6d2f16e75cd89024c1c4439575b8a69b952ffec3b1a022120fc66c95965bf80e1b3cb","first_seen":"2025-10-19T02:15:16.084184Z","last_seen":"2026-03-27T19:42:57.149019Z","times_seen":24,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":297,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/094_restore-persuade.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/094_restore-persuade.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 34742\r\nlast-modified: Fri, 29 Aug 2025 06:42:40 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14be0-87b6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 41085\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i1e20ZJCXNLN%2BD4HdJibEYhCBC5HH%2BiBQmdZ1DyEl%2FBKXL8p8Yq5FCupcqVV%2Ffp7cVyRTaoAAMXk47NkfVL91E9j3P4zqiyKbRvb%2BL2RyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1bef032fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34742,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"32698882c3aee36ebce40b5c2c9b42cd","sha1":"644f2b1fa1143332ae253aa45cf47031a0901431","sha256":"3890a9b2dcfaea0e02d2a9306305c8e3408a21b372b950ac6e1146857a05cc64","sha512":"c6d26800b3c8210d8d1728f1a8577baadf43078b3aa1dd80fd06a1465661ec2e657f2f5b255975c61ffc3b996e7afd6a37a5837300de3cd652c4c204dea1b715","ssdeep":"768:IUejOx0jvhluZ1phVeuyx0+Xi1D9EXBxHjm6bFaljE5bx4e:IUe80jv67vyVHjm6b4ljE5bx4e","tlshash":"b6f2f138f0679a88bfc9efb3eb19b60f93142890db485345631421d7e99a67b1831ddc","first_seen":"2025-10-19T02:15:18.438504Z","last_seen":"2026-03-27T19:42:57.014612Z","times_seen":24,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":267,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/quicksand/v37/6xKtdSZaM9iE8KbpRA_hK1QN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:59.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/quicksand/v37/6xKtdSZaM9iE8KbpRA_hK1QN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28244\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 25 Nov 2025 20:28:02 GMT\r\nexpires: Wed, 25 Nov 2026 20:28:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 532317\r\nlast-modified: Wed, 27 Aug 2025 19:19:09 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28244,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28244, version 1.0","md5":"9d503278216c2225184a236c64e0924b","sha1":"0c24c621374506ce70403a7473b47acd86bbf919","sha256":"2add7d60b1cd2ab84c9967e23d5ec08eb3fc9635c46855b17d59404dec6b410e","sha512":"fa1aca723eb40b6026aa1d21b36ce2573e4164516c9a0b55ff830a434c3954833a06b1df76236b1d682107df1bd3d263ed19cba854c1a6795566a7091749696d","ssdeep":"768:/6zZ6KBVHUlHvwCa0z1sCvODsIBMTKmJ3GG5x4:yzdKvwtszvdNjz4","tlshash":"3cc2e083d14afb33d0afb77adc52d022e9756bccec7e587a97a900398895c1b0644285","first_seen":"2025-09-02T18:36:17.739185Z","last_seen":"2026-04-03T19:33:43.563224Z","times_seen":7390,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":133,"dns":4,"connect":20,"send":0,"wait":28,"receive":11,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-fc.com/creatives/native/native.min.js?v=5.1","fqdn":"cdn-fc.com","domain":"cdn-fc.com","tld":"com"},"ip":{"addr":"104.21.88.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026keywords=HCLIPS-PORN+%3A+HD+XXX+CLIPS+VIDEO+TUBE%21\u0026preview_mode=hover\u0026s1=LTZJZIwxquwYSMCxJZeHJwSKTmYJe30DIrnjrAco-1wPa1glfV2aqrq6TaBL7ptNNn4Moj_KZZGYDoXDoobmDooQuTciRoNPBFiENsHGCPBJyO4_gUIDRUi","date":"2025-12-02T00:20:02.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 05:59:35 GMT","end":"Sun, 01 Mar 2026 06:57:06 GMT"},"fingerprint":{"sha1":"1B:6D:8E:48:22:E7:FC:C2:4F:06:18:95:F0:8E:39:C2:A6:C8:47:2C","sha256":"DD:CF:71:A7:71:DB:68:1A:18:D5:6C:B8:43:76:78:71:E2:E1:0D:30:1E:09:92:A8:A5:4D:14:57:D3:66:8C:E5"}}},"request":{"raw":"GET /creatives/native/native.min.js?v=5.1 HTTP/1.1\r\nHost: cdn-fc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026keywords=HCLIPS-PORN+%3A+HD+XXX+CLIPS+VIDEO+TUBE%21\u0026preview_mode=hover\u0026s1=LTZJZIwxquwYSMCxJZeHJwSKTmYJe30DIrnjrAco-1wPa1glfV2aqrq6TaBL7ptNNn4Moj_KZZGYDoXDoobmDooQuTciRoNPBFiENsHGCPBJyO4_gUIDRUi\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QR18hZF2lUV5zTKSd9c383onM7JydQ6bN1qQu3C1U77tE6E3rD42W8h%2Fc1teLpHCuJ3gbi9xo6IgQP58on2uMHfHxN%2FkcrfR\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 17 Nov 2025 15:10:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=3600, must-revalidate\r\nserver: cloudflare\r\nage: 352\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\netag: W/\"691b3ad3-cbe\"\r\nvary: accept-encoding\r\ncf-ray: 9a76a7f98b9a56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3262,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3262), with no line terminators","md5":"4048141d0220abc8d43480485d4a8c5e","sha1":"2a5f76d2300a5cbfcb7fb2614ddba567bd7737c3","sha256":"4fecaffe6ddd437921ad07fcf094aac397088ab64c85869fbec5f769583b7a06","sha512":"7e2709bc48d27c61cee1a6de75bbc4ddb35198598bb6e7a49aa1194fa4bb9020d5d25c4884769298fb0bdc16e01010716a5860a77771fdae261cad1ea97ad9cb","ssdeep":"","tlshash":"0361f9c4d2c8d923073532cf4953a675f67c8e06fdba4c50a60b4f8a8e15e469b17fa4","first_seen":"2025-11-07T11:37:41.733538Z","last_seen":"2025-12-18T00:26:58.218815Z","times_seen":314,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"cdn-fc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/105_milf-dazzles-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/105_milf-dazzles-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21843\r\nlast-modified: Fri, 29 Aug 2025 06:42:54 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bee-5553\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CEPsocGVPfAJYUeKEswAcf6zbO9JRMc3Oq7nKpaAbwwe14g0pvXish52HMJwKLggxXO2ntQoUFBPVAhTjN3PPS59xwNDKfMVZ0cHNAHJZg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1aee032fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21843,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"1882e95a71e5e97905a40682f21a9993","sha1":"b581daa6ec164cc5594cba71bc8f00ba2d9865a8","sha256":"29c84d293869ede26069a288cf8e508a3b2a99acfdde8eacfc485e10e9b58dc4","sha512":"95a8d01297a9300a865fefacf8c68bdb63f9ddc6c480c3af3c1787a5d10e5ebc085ce2deb9ffdc0790b6065d06bbb8469274859eb59dec03f81c21da6b038563","ssdeep":"384:BKKzs5/KHcS59LKEYbxVPqahVLRfD4gULLGnQJjaIzycxqDVZJ8hyR3cGz:BK1/Ind4xhB31D4pGQJj4c2LJ8hyR3cM","tlshash":"1fa2d0504354324afc68a2f38c7a7fe46489ba40874a37bce4d660c921cf7f7d579989","first_seen":"2025-10-05T21:57:54.505687Z","last_seen":"2026-03-27T19:42:57.007306Z","times_seen":25,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/095_round.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/095_round.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15026\r\nlast-modified: Fri, 29 Aug 2025 06:42:42 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14be2-3ab2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D0C20SBePk2N8GGLgjzWu0kob80D8mFbu9DBzVGMg5BF9vr7kTUQ42BBwOUKTz%2BMkAmIvMBNn1Atgr3Ix8sssNhecL9xeIdcznD3gQHYGA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1beef32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15026,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"2fdaa76dcafef068b1f25b3dc06d96a4","sha1":"94c73181f99992a35c1951efc963b9614c62ff86","sha256":"5c8ad1ea59bfab3869d9dfd1ff7efcba64b15d56dbceb3baca39e7c72c151e72","sha512":"2391b7da810383bafdfc8511036cf287062dee3919f8950b53087709de8b38d3af30db160d7a718b1e61ed4f059dbf1e0cdfbdec3eb221e269df75efaa017748","ssdeep":"384:QJxVOtGBFU1Wa6kUepBKUIsS9A1Xr8ECi1/OLn/dUhrvQYQ8i1r98VX:ExVp4VWepBKFK1boUKn1UJxQ58VX","tlshash":"7c62d041bf28345f7d930c72e9f247011659e0a4afb88f82976431cafdcbb256e85c60","first_seen":"2025-10-19T02:15:18.689021Z","last_seen":"2026-03-27T19:42:57.07643Z","times_seen":24,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":195,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/includes/ls/lr4.woff2","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:59.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /includes/ls/lr4.woff2 HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/hp.css\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 12900\r\nlast-modified: Mon, 16 Jan 2023 16:57:44 GMT\r\npriority: u=4,i=?0\r\netag: \"63c58208-3264\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219265\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2qN71sQHtmebbydXpf8oxkbmF4%2BZA46%2BcETC7qW9BvxFFEcz%2BJcsLcscVW82wkEPRNW%2BY4sqBYSzVkP%2BJKpIUWBqGAslUKY2g9KfVjpqvA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e87fa632fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12900,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12900, version 1.0","md5":"88d9d9416c58bde56378dc4439e3a144","sha1":"bebed8d7033a4df35bebba69f1fc261a78a4ee22","sha256":"51ca2c00a3e30945e52227147fed9e296dde03af3c4d7589e8e95ca5740037db","sha512":"906884d6b687dd0b583872578a107fc7264e4198b3218545c01dd2185a397015b7226e0c96ae3dea6294abf7599052d3d271b6bb8461e972c5e49149f28b95f6","ssdeep":"384:cQ/ZCDaw2Q49jW8QIkW5SepdRZS3KUWSQoppk6CMRYtPP:l/BwzojW8lB5SenCKUtDC3tPP","tlshash":"fe42e1629963cb089c9d5b38b0ee5d401792703dfd9d5bec022bfe52cd4e09e4b1a076","first_seen":"2023-04-05T18:32:05Z","last_seen":"2026-04-03T11:14:46.606979Z","times_seen":4348,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/128_x1xf250e5b1f3879ae159-.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/128_x1xf250e5b1f3879ae159-.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 29433\r\nlast-modified: Fri, 29 Aug 2025 06:43:22 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14c0a-72f9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BFrxy3gRnfTBO1cVrUjdWIMF0wBuviRUvP8cmTYq8m3ZQTQ1MUE0NzZDVADKQoJi67eiiwjh88D3ujEKb1%2BwfoYeg4uuW7hLeRgSkeVRxg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e18eca32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29433,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 640x639, segment length 16, baseline, precision 8, 400x300, components 3","md5":"cbc79e1f09e0484b8d93b4100dc77e23","sha1":"34a997deb9b35fcb62d10cfc9df97364664887b8","sha256":"0cf72dbfcbd720723578a0a0d30ae895bc738cd5c395de3ef6c4c2fbc7a627ca","sha512":"8925ce8d0ccdf9a3255a458763d788fea3423f7302c8fa86cf65699c6348df2fd69378fc3092f3cfdfe978b95b129a5835e0f03549f5560a4baa49a0bb5cc57b","ssdeep":"768:CxkVtd1T/0vjuhLF2MruvzE/h5ff+EmYpxWuS7I:CYtdR0bkF5ruvzmvpxWdk","tlshash":"a5d2f24460feb5cfdd631f4d02894b2cee052eb1d656a124d7617beb2d247a1f3580e8","first_seen":"2025-10-05T06:06:00.007099Z","last_seen":"2026-03-27T19:42:56.785205Z","times_seen":26,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":167,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/448451/19e50e0fb4d0a3ab37cd6c417b424fa12312b487.webp","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:01.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/448451/19e50e0fb4d0a3ab37cd6c417b424fa12312b487.webp HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:01 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10080\r\nlast-modified: Tue, 09 Aug 2022 11:10:25 GMT\r\netag: \"62f240a1-2760\"\r\nexpires: Thu, 25 Dec 2025 08:56:50 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec02-prg1-1\r\nx-77-nzt: EwwBX63NDQH3SWfCAQwBuUwKAQH3NgAAAAwBJRPCNAG3YAAAAA\r\nx-77-nzt-ray: 2a494a15ef3a6de8d6302e69efce0522\r\nx-77-cache: HIT\r\nx-77-age: 29517641\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":10080,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0e06150789b63a1b3481343fc88e3cd4","sha1":"19e50e0fb4d0a3ab37cd6c417b424fa12312b487","sha256":"c55ca475e359fc82ba20e32e5868eb81e446bc0a41dde3aba44e1e14ef2d2b20","sha512":"475e5da0518877efdfa158c047654a8e60ea7f7a06aee509b96b266eec0f411ae4ff10a5e60b48beb5147b8d0c9ec4d08e0d6bd0656363890068401e607470a9","ssdeep":"192:3Cmatrk5m0LrFPoduKlSB/x1aU51siKLo5QgdtRbQ76JoMPFx7uolJT7eGkwm:ctrkA0LuSB/x8cJA7UNPBJAX","tlshash":"2722b015c3cbbe7d204b35285ab580b7bdd7001bb96dcba28d9b34d774304a50dc76a9","first_seen":"2023-04-13T22:41:38Z","last_seen":"2026-03-31T15:56:18.129517Z","times_seen":931,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":20,"connect":4,"send":0,"wait":6,"receive":1,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y1.afcdn.net/library/438437/43f99b37a8cbbc57b0a0ffa78347674039b1410e.gif","fqdn":"s3t3d2y1.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:02.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 08:07:09 GMT","end":"Sun, 15 Feb 2026 08:07:08 GMT"},"fingerprint":{"sha1":"D3:C9:14:6D:49:05:D6:87:28:B7:79:C6:11:35:DB:EF:46:6C:F0:3A","sha256":"1E:5D:69:3F:A3:FD:B0:61:24:60:5A:03:3F:0B:14:DF:B9:58:C1:4E:35:95:E5:A2:84:FA:5F:50:B4:D0:CA:C7"}}},"request":{"raw":"GET /library/438437/43f99b37a8cbbc57b0a0ffa78347674039b1410e.gif HTTP/1.1\r\nHost: s3t3d2y1.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:01 GMT\r\ncontent-type: image/gif\r\ncontent-length: 219790\r\nlast-modified: Mon, 11 Mar 2024 16:08:46 GMT\r\netag: \"65ef2c8e-35a8e\"\r\nexpires: Mon, 13 Oct 2025 04:10:17 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec01-prg1-1\r\nx-77-nzt: EwwBX63NDQH3AJdBAAwBuUwKAQH3E6EaAAwBJRPCMQG3+eg/AA\r\nx-77-nzt-ray: 2a494a15ef3a6de8d6302e699cf15a37\r\nx-77-cache: HIT\r\nx-77-age: 4298496\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":219790,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 250","md5":"7c32710b6ff5e1b5c69566ba7bfb09a3","sha1":"43f99b37a8cbbc57b0a0ffa78347674039b1410e","sha256":"fb1bb444377b3038c81c2042e8783dbfb11f6a46214d9f166c122cfc551bde47","sha512":"6bca4c4d0773133ba84119d0205b481010c01cb792ee6d9cfdd89f5dd6ad9622ac6e9db6096f5455e6fb63cb3de54d99fcaab314b22b240952a6213d13c55ee1","ssdeep":"6144:8TQJtdrDPYGhoIx2rqNudyFl54LWxbPPLsNC:88tdrxGIx2WUAeWxbLsQ","tlshash":"a52423633fdae821815ca4fea947307474a3c694f1a4e2461b5dec926bc37212ee25d3","first_seen":"2024-12-18T07:11:10.031573Z","last_seen":"2026-04-02T11:11:20.622616Z","times_seen":53,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"s3t3d2y1.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.optvz.com/cimp.php?data=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--\u0026cb=e2e_692e30b1bf0041.27147575","fqdn":"s.optvz.com","domain":"optvz.com","tld":"com"},"ip":{"addr":"95.211.229.245","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rtbrenab.net/get/?go=1\u0026data=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","date":"2025-12-02T00:20:02.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optvz.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Oct 2025 14:38:19 GMT","end":"Sat, 17 Jan 2026 14:38:18 GMT"},"fingerprint":{"sha1":"03:92:4A:F8:CB:9D:C5:5A:07:64:2E:05:86:65:2E:21:7C:4F:B1:53","sha256":"9D:9E:8A:D2:C8:AF:D1:8D:F6:09:E2:F6:FA:BE:BC:76:2B:60:7F:8A:D9:32:46:A0:63:DC:33:DD:3E:35:E5:39"}}},"request":{"raw":"GET /cimp.php?data=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--\u0026cb=e2e_692e30b1bf0041.27147575 HTTP/1.1\r\nHost: s.optvz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rtbrenab.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Tue, 02 Dec 2025 00:20:02 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%223bf87b9945fd98ab32672780f1a0059c%22%3B%7D; expires=Thu, 02 Dec 2027 00:20:02 GMT; path=; domain=.optvz.com; Secure; SameSite=none\r\nLocation: https://s3t3d2y1.afcdn.net/library/623611/8e4d551c37e0849d99b9d795e0f0ab99925f04b1.jpg\r\nX-Robots-Tag: noindex, follow\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22570,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":132,"dns":33,"connect":27,"send":0,"wait":28,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hclips-porn.cfd/jpegs/237/085_to.jpg","fqdn":"hclips-porn.cfd","domain":"hclips-porn.cfd","tld":"cfd"},"ip":{"addr":"104.21.66.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:19:58.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hclips-porn.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Oct 2025 02:41:39 GMT","end":"Sun, 18 Jan 2026 01:10:40 GMT"},"fingerprint":{"sha1":"4E:42:D1:98:0E:6A:F6:E7:33:82:00:11:2E:BF:30:51:A1:3A:44:C6","sha256":"96:84:C5:51:F1:08:76:CA:31:FA:D0:0F:A0:44:AD:F5:C1:B7:7B:AF:14:61:38:2E:A2:BB:F6:EB:D3:14:01:65"}}},"request":{"raw":"GET /jpegs/237/085_to.jpg HTTP/1.1\r\nHost: hclips-porn.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nCookie: 090e621d3974b5ef07e55ea947a6ccbf=noref; 74cb3a1086270c57e87a73565fee0b80=noref; 79843f2a6fcb30d4ec1b9d14fb87b13c=1764634797; 6cad29f337c0737293ec3c3ada398eb4=%2F; c1fbee398ec90caf6f208bb55a474685=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Dec 2025 00:19:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19364\r\nlast-modified: Fri, 29 Aug 2025 06:42:23 GMT\r\npriority: u=4,i=?0\r\netag: \"68b14bcf-4ba4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 219264\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YWjRlvwWJNzeznY6g1ejol%2BtSJoVI59P054SiOhXCJ8aps1nwBg0iB6sKY8N42%2F4KIdZVkteLiheQfPhQGNDNytyFr%2FQOzsKJBll2M%2BroQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a76a7e1deff32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19364,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc59.37.100\", baseline, precision 8, 400x300, components 3","md5":"2ce65ae99f4bd99fb815dd987c6535d3","sha1":"95aa1bcf3db7f9ad5800651e9a91a0d3d7cb2d40","sha256":"f2bd985495def91c994d039ef43f418a6a3ec55f1f3f50e55058fb64744d9338","sha512":"91120aa47e8b98a582c68a0d4f6c921c758b2d6bfd5eb82b3fa611874bf325c0370e6ea9ecfe4a0b42dd5a93e49663d50febfe734415c6b872dbd8f68ee85779","ssdeep":"384:vjzfMPId/aJ23aJf/wMObI/dwAnxhkrlxeRIjEnylJV:vPGsp3aJnmIuURIjEnyvV","tlshash":"c592d010c1fe6d4637a506958c26c420af0dcfefba01d2a8237c62d3b4a56be47571ad","first_seen":"2025-10-19T02:15:20.576707Z","last_seen":"2026-03-22T17:36:45.320563Z","times_seen":21,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":193,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ntvpforever.com/keywords","fqdn":"ntvpforever.com","domain":"ntvpforever.com","tld":"com"},"ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:01.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 02:00:40 GMT","end":"Sat, 24 Jan 2026 02:00:39 GMT"},"fingerprint":{"sha1":"2B:72:A9:3F:14:00:92:B9:05:AC:BC:3B:22:CB:D9:87:80:23:C8:3D","sha256":"60:5B:BA:7E:5F:7A:B1:E0:55:4D:4C:29:EA:C7:21:68:37:AF:03:5B:A7:3D:15:98:F1:65:96:AB:4A:3E:17:3B"}}},"request":{"raw":"OPTIONS /keywords HTTP/1.1\r\nHost: ntvpforever.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://hclips-porn.cfd/\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.24.0\r\ndate: Tue, 02 Dec 2025 00:20:01 GMT\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":67,"dns":4,"connect":49,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f93c382250.1f0355218f.com/in/multy","fqdn":"f93c382250.1f0355218f.com","domain":"1f0355218f.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hclips-porn.cfd/","date":"2025-12-02T00:20:02.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1f0355218f.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 14:04:17 GMT","end":"Thu, 26 Feb 2026 14:04:16 GMT"},"fingerprint":{"sha1":"91:AD:7C:21:B5:6B:FF:3E:E7:14:52:3B:D9:19:76:C7:36:D9:6F:CA","sha256":"D1:F9:1F:D4:16:D5:AB:B7:FE:AC:D9:81:A9:14:2F:D3:AA:65:2D:E9:EC:90:49:7A:82:0C:38:82:9C:BC:84:F0"}}},"request":{"raw":"POST /in/multy HTTP/1.1\r\nHost: f93c382250.1f0355218f.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 2071\r\nOrigin: https://hclips-porn.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hclips-porn.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2071,"data":"{\"imp\":[{\"ext\":{\"utm1\":\"\",\"utm2\":\"\",\"utm4\":\"\",\"refdomain\":\"\",\"labels\":\"\",\"tcid\":0,\"site\":\"native-push\",\"screen_resolution\":\"1280x1024\",\"ve\":\"\",\"mo\":\"\",\"format\":\"default-view-b_r-body\",\"idzone\":0,\"testab\":0,\"timezone_olson\":\"UTC\",\"blocked_verticals\":\"34\",\"after_video\":0,\"tu\":1,\"mm\":0,\"skins\":null,\"st\":0.02,\"spot_id\":1433588,\"timezone\":0,\"subid\":\"485853577\",\"wl\":1,\"event_id\":\"6da971e5-e6e4-485e-80f4-4e2ae98f6a15\",\"sid\":85749476,\"created_at\":\"2025-12-02\",\"ver\":\"8.243.5\",\"is_native\":1,\"device_theme\":\"light\",\"ad_tags\":\"HCLIPS-PORN%2CHD%2CXXX%2CCLIPS%2CVIDEO%2CTUBE!\",\"user_keywords\":\"\",\"v2_track\":0,\"default_keywords\":\"\",\"tag_ab\":\"a\",\"suggestive\":0,\"v2\":0,\"features\":\"\",\"yfriendly_always\":false,\"is_iframe\":false,\"approved_mainstream\":0,\"default\":1},\"pext\":{\"ab\":0},\"metrics\":{\"topics\":[],\"prev_step_diff\":1271}}],\"site\":{\"id\":\"1433588\",\"cat\":[\"IAB25-3\"],\"page\":\"https%3A//hclips-porn.cfd/\",\"is_publisher\":true,\"ct\":0,\"ctid\":1,\"script_type\":\"general\",\"auc_domain_type\":\"hash\"},\"ext\":{\"dt\":1764634801526},\"user\":{\"fp\":0,\"fp_str\":\"\",\"ua_data\":null,\"events\":[],\"interest_ids\":[],\"click_status\":\"unknown\",\"keywords_history\":{\"keywords\":[{\"keyword\":\"Adult\",\"counter\":1},{\"keyword\":\"HD\",\"counter\":1}],\"pages_count\":1},\"is_webview\":false,\"is_inapp\":false,\"telegram\":{\"user_id\":0,\"username\":\"\",\"is_premium\":false,\"color_scheme\":\"\",\"wallet_address\":\"\",\"wallet_balance\":\"\"},\"social_network\":\"\",\"audiences_ids\":[]},\"device\":{\"w\":1280,\"h\":1024},\"fp_params\":{\"plugins\":[\"PDF Viewer\",\"Chrome PDF Viewer\",\"Chromium PDF Viewer\",\"Microsoft Edge PDF Viewer\",\"WebKit built-in PDF\"],\"languages\":[\"en-US\",\"en\"],\"fonts\":[\"Bitstream Vera Sans Mono\",\"Century\"],\"fontPreferences\":{\"default\":173.11666870117188,\"apple\":173.11666870117188,\"serif\":173.11666870117188,\"sans\":162.01666259765625,\"mono\":122.68333435058594,\"min\":10.800003051757812,\"system\":162.01666259765625},\"platform\":\"Win32\",\"colorDepth\":24,\"deviceMemory\":0,\"hardwareConcurrency\":48,\"indexedDB\":true,\"sessionStorage\":true,\"localStorage\":true,\"cookiesEnabled\":true,\"colorGamut\":\"srgb\"},\"cached_mislead_offer\":{\"track_click_url\":\"\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Tue, 02 Dec 2025 00:20:02 GMT\r\ncontent-type: application/json\r\ncontent-length: 6776\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64977,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"72625e63f6240c1955445cae880de042","sha1":"ca2e9d1be081fb10c2c7141550957db36459c955","sha256":"b6c6e58fee4274670b946e15b926efe72dbdde6df1eaec7b21979ddc9b50687a","sha512":"e82467aa01923c7f935b19b57ed257907662d28caf3fb38ba10b43c9cd926a77b999127b87485b48a8ab282c5e3e1c123c5ec2e60bc12e79e90f9ea99c36fa13","ssdeep":"1536:iBFnNBnN5FnN3FnNhFnN5b5lFnN6FnN3dSxbn0a:iBNDtlb5l+Yxbn0a","tlshash":"9c537d4b184f3e2658d2a486721777b036c4d71bbfd404f8a6f0875ad8553bf21aae8c","first_seen":"2025-12-02T00:20:49.495441Z","last_seen":"2025-12-02T00:20:49.495441Z","times_seen":1,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":571,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"f93c382250.1f0355218f.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ic-nss.flixcdn.com/a/MzdkYjk1YjVhY2QxNjIzMDg3ODY5MzlhNzk2NjA1NDc/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/0l/0lrZ1z/screen/1-qm1.jpg","fqdn":"ic-nss.flixcdn.com","domain":"flixcdn.com","tld":"com"},"ip":{"addr":"185.76.9.4","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn-fc.com/creatives/universal/native/?size=300x250\u0026utm_campaign=ai.mxY\u0026utm_content=suggested_widget\u0026preview_mode=hover\u0026s1=zAks3GzF_zZzMDGBaFyAw4kCzdqvlzrYuqSnh4nwBhXL8mf987QbNJq8NcmfGYVt-VAUiy8mSTYdx0hZz1sBDqhG_nUtzvKnwm-SIZ6QxG_Tytk_gUIDRUi","date":"2025-12-02T00:20:02.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1029385688.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 14:41:59 GMT","end":"Tue, 13 Jan 2026 14:41:58 GMT"},"fingerprint":{"sha1":"05:60:93:EB:D3:CD:8F:F9:A3:BB:E9:74:7C:66:6E:EC:91:A5:46:DC","sha256":"5C:72:8A:A5:67:37:9D:60:F7:D0:78:EF:E6:37:47:8C:8D:FC:66:5B:93:92:FD:45:D2:AF:FE:AA:D0:22:77:ED"}}},"request":{"raw":"GET /a/MzdkYjk1YjVhY2QxNjIzMDg3ODY5MzlhNzk2NjA1NDc/jpeg%2Cs%28w%3A480%2Ch%3A300%29/video/0l/0lrZ1z/screen/1-qm1.jpg HTTP/1.1\r\nHost: ic-nss.flixcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-fc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 00:20:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40277\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-credentials: false\r\naccess-control-max-age: 86400\r\nx-rsic-processor: ic-0\r\ncache-control: public, max-age=1296000\r\nexpires: 1765480114\r\nx-rsic-cached: mem\r\nx-rsic-responder: ic-0\r\nstrict-transport-security: max-age=63072000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-77-nzt: EgwBuUwJAQH3VdwGAAwBw7WqBAH3GwQAAA\r\nx-77-nzt-ray: 56376635532a89bab2302e69d939b925\r\nx-77-cache: HIT\r\nx-77-age: 449621\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40277,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 480x300, components 3","md5":"e197744987208261b74c09b0f253b8b4","sha1":"87281ced7a5bf75af9cc14e15dd66821a90d2500","sha256":"b4d05b35d406e5dc75353cda49f250b956f942cff85256f1efc59637796bfc0a","sha512":"a82458f9d976bcc334f07112481423a96da0d45c0e8cbf3339dc99136fc7ba0403fc2153bb41d0199afe077ed5f55e1b942509f04a3e8743b925b9365b54f9b1","ssdeep":"768:W5YP+W1G4vkuMz16DzQFin4Oq24DTujnYlTJlNfuVY+VH58evlWIzhqVWAD:W5N6MOAsn4B//4YlTgmC50IzM5","tlshash":"b303e152170399c0f3e704bd5062cf22ced7cea6a9c0a16d6fcad8525f4ad58af01d1e","first_seen":"2025-11-30T10:09:06.74795Z","last_seen":"2026-03-15T19:56:48.879837Z","times_seen":91,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":124,"dns":0,"connect":0,"send":0,"wait":35,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}