{"report_id":"36250a9b-bd15-49a5-9a2b-b455ccac78df","version":6,"status":"done","tags":[],"date":"2025-12-29T09:43:11Z","url":{"schema":"http","addr":"29449430-35518-845.tentedienat.com/iiJOC4QzPQ3mZtczvQOYbhxKk9RR5tmHZvtfX8ifEJ8VPJidyXov5Rj3acdKsi0YIc19Qz0","fqdn":"29449430-35518-845.tentedienat.com","domain":"tentedienat.com","tld":"com"},"ip":{"addr":"88.208.22.2","port":0,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","fqdn":"creative.eiscprts.com","domain":"eiscprts.com","tld":"com"},"title":"Universal widget","dom":{"size":59188,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (59188), with no line terminators","md5":"06ed017667cd670e4cdaff3a44d5672f","sha1":"9ebeb79b52632290787a4d9a9199640f905dff93","sha256":"092caa80d77d4a479dd46b4f051b64fdb6594a280b7b4a2a2187cd31a436acee","sha512":"a901de8027ed51947d48803f9ab1cc4af089882bcc76a93093779836eaa821fbb2213fbda7746438da9aade19c60b78299006995a2b098239059de3964b4e49f","ssdeep":"768:XSLIogtGciEDVqnbUwBJ/MsNlDKxy7SJ7rJipuwol1W2+W:6IogtGciERqnZ4","tlshash":"7f435f34d140183b161b4998f628b7c87297c69efe531920f6fc93e0a7ded83e8645b9","dom_hash":"domhasha441b2bcc3c9c0ce2b4d98063e600b26","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"29449430-35518-845.tentedienat.com/iiJOC4QzPQ3mZtczvQOYbhxKk9RR5tmHZvtfX8ifEJ8VPJidyXov5Rj3acdKsi0YIc19Qz0","fqdn":"29449430-35518-845.tentedienat.com","domain":"tentedienat.com","tld":"com"},"ip":{"addr":"88.208.22.2","port":0,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-02T09:43:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-29","alert":"Sinkholed","trigger":"creative.eiscprts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-29","alert":"Sinkholed","trigger":"fapchatvip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-29","alert":"Sinkholed","trigger":"29449430-35518-845.tentedienat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"creative.eiscprts.com","ip":{"addr":"104.21.28.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-13","domain_rank":1937448,"first_seen":"2025-06-21T17:52:07.213812Z","last_seen":"2025-12-25T18:35:55.996907Z","alert_count":6,"request_count":6,"received_data":1170473,"sent_data":4076,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"go.eiscprts.com","ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-13","domain_rank":947429,"first_seen":"2025-06-21T17:52:07.212213Z","last_seen":"2025-12-25T18:35:56.061533Z","alert_count":0,"request_count":5,"received_data":47163,"sent_data":3792,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-28T22:17:10.032556Z","alert_count":0,"request_count":1,"received_data":6065,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fapchatvip.com","ip":{"addr":"194.1.140.1","port":443,"asn":0,"as":"","country":"Slovakia","country_code":"SK"},"domain_registered":"2025-04-23","domain_rank":44916,"first_seen":"2025-07-24T09:14:17.646084Z","last_seen":"2025-12-25T05:34:00.746656Z","alert_count":1,"request_count":1,"received_data":474,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"29449430-35518-845.tentedienat.com","ip":{"addr":"88.208.22.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-11-18","domain_rank":0,"first_seen":"2025-12-29T09:43:12.166522Z","last_seen":"2025-12-29T09:43:12.166522Z","alert_count":1,"request_count":1,"received_data":357,"sent_data":574,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img.doppiocdn.com","ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-02-16","domain_rank":38793,"first_seen":"2025-02-10T15:14:32Z","last_seen":"2025-12-23T05:52:04.112091Z","alert_count":0,"request_count":25,"received_data":308451,"sent_data":11621,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-28T22:14:05.525046Z","alert_count":0,"request_count":1,"received_data":21307,"sent_data":536,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","fqdn":"creative.eiscprts.com","domain":"eiscprts.com","tld":"com"},"ip":{"addr":"104.21.28.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-05-21T17:03:02.747356Z","times_seen":156174,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.eiscprts.com/static/9f1b11af/s/widgets/v4/Universal/saretarget.e25d7729d6aa0892d869.js","fqdn":"creative.eiscprts.com","domain":"eiscprts.com","tld":"com"},"ip":{"addr":"104.21.28.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf4ad79a8f3c33c2af6b13887462fe86","sha1":"3d5199f982b77c11890d592ec514c4f34fb22972","sha256":"7fb884cbab995a9e2f5d488a8877f4bf181e8187fbd58920a3ab6f7c5b6d35d0","sha512":"64d4cfc895aae39855ddee03881c28b1d0e337c25a3f12846d1829bf2229c244fa0141ac0cc48e4b9875be5bdc5a1672d31c30d68074fd0d5820ca05d7f76866","ssdeep":"48:cpa4pQU/JleBTxjOcJd1knP3+NXkpkiJv84SMWZZZq4Pau051eSgvveUO0PYqu9x:Ma+QoJl6IwhtMSFw4PbfvDbgtsbEXX","tlshash":"9aa1778870d3f5e6079f50a0403f630bf27e4e65249da052e752ead17974eee8073e4a","size":4930,"data":"","first_seen":"2025-12-16T11:41:32.988917Z","last_seen":"2026-01-14T19:22:56.501825Z","times_seen":179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.eiscprts.com/static/9f1b11af/s/widgets/v4/Universal/main.5befde5ae3738abf2a27.js","fqdn":"creative.eiscprts.com","domain":"eiscprts.com","tld":"com"},"ip":{"addr":"104.21.28.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f8f4194dcf9380a0977dcecd9a492f1a","sha1":"9fd78620949952ece7e4de1dbe36dd9a0779d22c","sha256":"1347c8fa61a2d81912b492aa1113e5fce04bf709eea3733ab6f660dd50f65ccb","sha512":"afb1965a5934e2e1aca37dfd846d58976cb97d85bceae487adad5bbbd1cbd85feb14564cce4d8d01696e8a68c82ebdaf593fa599227a8349b3a1667ceec4c17f","ssdeep":"6144:QmtHmW9oO1EmZQHSBre0gnwRwfJZRXdudhmpkAnuXZiE9h2q/ZqgDp6lbD78OrJr:tRe0Y+AWZTdXYrntI0tPqX2vqhjR56","tlshash":"e23539897756b47646c79146e03f0203f235695a201a905cb3aeecec656ceceb237b37","size":1144388,"data":"","first_seen":"2025-12-18T20:41:30.028887Z","last_seen":"2026-01-07T05:58:17.094488Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767000570/229313433_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:47.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767000570/229313433_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.eiscprts.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 09:42:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7250\r\ncf-ray: 9b585975cd050731-OSL\r\netag: \"c3272536e7353160706907e4c87d9390\"\r\nlast-modified: Mon, 29 Dec 2025 09:28:45 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 782\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7250,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c3272536e7353160706907e4c87d9390","sha1":"f760acea61d8d995b6f092a6762f7fa32faf0895","sha256":"8cf546182355e4df36877e3f3433d37959e9474d0be00e4aaf2c29ae5bb5f6d0","sha512":"82928386ba72e4ead8da88f20e041a9c8bb4aca81729879eae243c47580adaa0d6ac3703fddcc885b8e170b81f01edb63097599a26a63a34abbed1115c4ea85e","ssdeep":"192:jYOcLgfPXmhfTHweJybbx3X2fFVyrQ8c0wLe:jRGhvy3hGdtAl","tlshash":"d1e1ae0a096158fc25b203ae97c59b5ab10089d3d0342951cf61e1dd1a938e9ffa9be9","first_seen":"2025-12-29T09:43:15.406474Z","last_seen":"2025-12-29T09:43:15.406474Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:48.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/arimo/v35/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://creative.eiscprts.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 27 Dec 2025 10:55:37 GMT\r\nexpires: Sun, 27 Dec 2026 10:55:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 168431\r\nlast-modified: Mon, 08 Sep 2025 18:07:14 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20472, version 1.0","md5":"ff7c31ab8498bb2f3201ff222390a037","sha1":"6bb23ed30c097b0a73569f9b79241911f7db6b54","sha256":"cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e","sha512":"2ecc363dfabe45651e438ecdbfd2d9b5a3d698adce305dd8332851721eeec6c9e83c18ec7740c7a2f12fcfe4b91b53b3b9e85a1bdf28d3a59621aed3cd2c5180","ssdeep":"384:fL2B0ekvyfyLlOkxB+a5dAvB+VkzjDYDsescc2AAx9JYrYs4j:fL2B0ekvyfyLck6a5OMmzjDYtsckaC0","tlshash":"8d92d11e32b7918bf3c4eb7f6cd36964d914a0f38fac05127844d2a8169880553b9cfe","first_seen":"2025-06-04T02:20:52.221924Z","last_seen":"2026-05-21T12:03:55.91894Z","times_seen":7877,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":141,"dns":1,"connect":20,"send":0,"wait":21,"receive":7,"ssl":119},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.eiscprts.com/static/9f1b11af/s/widgets/v4/Universal/saretarget.e25d7729d6aa0892d869.js","fqdn":"creative.eiscprts.com","domain":"eiscprts.com","tld":"com"},"ip":{"addr":"104.21.28.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:47.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eiscprts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 09:30:00 GMT","end":"Fri, 06 Mar 2026 10:28:28 GMT"},"fingerprint":{"sha1":"03:16:A6:FE:83:C5:A6:1D:E4:A1:08:02:17:A1:58:73:3E:17:C3:CD","sha256":"B0:03:BC:45:32:F9:20:89:5A:44:09:E9:58:5F:3D:2E:E1:F5:EA:EC:1A:61:DD:13:A1:46:B5:92:2E:A0:1B:AE"}}},"request":{"raw":"GET /static/9f1b11af/s/widgets/v4/Universal/saretarget.e25d7729d6aa0892d869.js HTTP/1.1\r\nHost: creative.eiscprts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 09:42:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"saretarget.e25d7729d6aa0892d869.js\"\r\nlast-modified: Thu, 18 Dec 2025 14:27:14 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q7wDJ70F4bqAN9umvXVP8D0qfoVrHPtECp2hDqW6%2B8SPouXfc9yyF0MqdbLI0RKT0hRPZYeldg6CwubJYw5LIulgkklVj9ofvtrjjNTosxOgxSnXNg%3D%3D\"}]}\r\nage: 52\r\ncf-cache-status: HIT\r\netag: W/\"bf4ad79a8f3c33c2af6b13887462fe86\"\r\ncontent-encoding: br\r\ncf-ray: 9b585971ffafa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4930,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4930), with no line terminators","md5":"bf4ad79a8f3c33c2af6b13887462fe86","sha1":"3d5199f982b77c11890d592ec514c4f34fb22972","sha256":"7fb884cbab995a9e2f5d488a8877f4bf181e8187fbd58920a3ab6f7c5b6d35d0","sha512":"64d4cfc895aae39855ddee03881c28b1d0e337c25a3f12846d1829bf2229c244fa0141ac0cc48e4b9875be5bdc5a1672d31c30d68074fd0d5820ca05d7f76866","ssdeep":"48:cpa4pQU/JleBTxjOcJd1knP3+NXkpkiJv84SMWZZZq4Pau051eSgvveUO0PYqu9x:Ma+QoJl6IwhtMSFw4PbfvDbgtsbEXX","tlshash":"9aa1778870d3f5e6079f50a0403f630bf27e4e65249da052e752ead17974eee8073e4a","first_seen":"2025-12-16T11:41:32.988917Z","last_seen":"2026-01-14T19:22:56.501825Z","times_seen":179,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-29","alert":"Sinkholed","trigger":"creative.eiscprts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go.eiscprts.com/api/models?landing=WidgetV4Universal\u0026tag=girls\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_99\u0026seenAbTest=0\u0026seenDomain=0\u0026seenLanding=0\u0026limit=25","fqdn":"go.eiscprts.com","domain":"eiscprts.com","tld":"com"},"ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:47.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.eiscprts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 14:45:26 GMT","end":"Mon, 09 Feb 2026 15:45:16 GMT"},"fingerprint":{"sha1":"43:67:8E:5F:6D:0A:5F:A8:98:F4:FF:58:86:72:01:0D:AE:A4:95:5D","sha256":"0C:3B:61:10:5C:73:A6:CA:FA:02:07:F1:74:31:54:E2:0A:6A:48:B8:3D:B3:04:45:D1:A3:F5:01:64:31:9E:09"}}},"request":{"raw":"GET /api/models?landing=WidgetV4Universal\u0026tag=girls\u0026sortBy=paidUsers\u0026stripcashR=0\u0026forceClient=1\u0026modelPromotion=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_99\u0026seenAbTest=0\u0026seenDomain=0\u0026seenLanding=0\u0026limit=25 HTTP/1.1\r\nHost: go.eiscprts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.eiscprts.com/\r\nOrigin: https://creative.eiscprts.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 29 Dec 2025 09:42:47 GMT\r\ncontent-type: application/json\r\ncf-ray: 9b5859749eed783d-OSL\r\naccess-control-allow-origin: https://creative.eiscprts.com\r\naccess-control-allow-credentials: true\r\nvary: Origin, Accept-Encoding\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 29 Dec 2025 09:42:47 GMT\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36747,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"21d3f8a1c459cd23a6203862edcbca35","sha1":"fba1f505eaa7c42b68fe29f87bf91203447593ca","sha256":"139f4c21b7b01409a876f086f6d1d7cd04df6e55b3e6e148010a7a60e52f3248","sha512":"fe5653bbfa35a65a6bae623273336110c92e3820526115663886c26f89f6260ba4356eeeea38eabc49aba3b374aae30502862e17315a4f8807d7ebba790af1d6","ssdeep":"768:2p9Atgvw+1tuVJAth6HvbtI3LkxWfotmd7t6T8mjtiZ1gtG9prER2KXtHaZkt2N4:2p9Ggvw+nuVJGh6HvbtI3LkxWfOmd7tu","tlshash":"c7f212fb92cc0d7b0f0612ccc98e750cd8971e27b6c9b394969c4e5b45f6dda221ca62","first_seen":"2025-12-29T09:43:15.412855Z","last_seen":"2025-12-29T09:43:15.412855Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767001290/28629164_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:47.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767001290/28629164_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.eiscprts.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 09:42:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16134\r\ncf-ray: 9b585975cd190731-OSL\r\netag: \"c5ff7f1ffd1bb1bd165f313921a09f44\"\r\nlast-modified: Mon, 29 Dec 2025 09:41:48 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 22\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16134,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c5ff7f1ffd1bb1bd165f313921a09f44","sha1":"4938dd5524846ac80b32686626da41aba77e3ad6","sha256":"7c200632a542822361594405edbbac529f9785a02afbee6a0136898855cd4115","sha512":"5029a725f9573ad4a59bd593974c86ad2f7f6368ec78491df5930a9f3affca365627d6b1bc74c7468ac9005c1cd8f1cd41655255851487d3b11d41122244491b","ssdeep":"384:43yH3xkDp0Y37bUSxkI58lWcLT8nnvnago0:lKDSq1xkh98n/HJ","tlshash":"e972d1560a2b5a84b1d00d45d0b229d7ae8e3bed48a561658b97feff0d83152f3b8a40","first_seen":"2025-12-29T09:43:15.415705Z","last_seen":"2025-12-29T09:43:15.415705Z","times_seen":1,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":81,"dns":4,"connect":5,"send":0,"wait":10,"receive":1,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767000420/211446558_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:47.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767000420/211446558_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.eiscprts.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 09:42:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9224\r\ncf-ray: 9b5859759cc30731-OSL\r\netag: \"ea5991620ef0e92ded329cf9a81f8754\"\r\nlast-modified: Mon, 29 Dec 2025 09:26:51 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 915\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9224,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ea5991620ef0e92ded329cf9a81f8754","sha1":"3004ca53b4232808762daa081969550883140a52","sha256":"d3a1a7f5403b99facb7683d67c2998e725f9ad8bb7352575b28dca5fb7c44692","sha512":"14eb5246a048e942ff1f7eda8fa4b3d252ea17f2033a9577559f141228024713212677f63edb47d10748900a62019ba7b6a7e5df13a312554d1376ff8e37aacd","ssdeep":"192:l2LOE1Ocfx/Xa5NlPm4VD6tWGB3SgmYEnCbPPiMpeqWgoVc/voJ1bbUO1LESal8D:l4zxxvMm4VetWGB3S1YEnKVW2XMUO1LN","tlshash":"b412bf8225d33babd6bd1be05868dc7f36f4215d0694299bb1a8ce9b1505c3a0dbc0e1","first_seen":"2025-12-29T09:43:15.418516Z","last_seen":"2025-12-29T09:43:15.418516Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767000510/168018588_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:47.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767000510/168018588_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.eiscprts.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 09:42:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15170\r\ncf-ray: 9b5859759cc40731-OSL\r\netag: \"b76558b2870cc8e1dd3feb4132ee1594\"\r\nlast-modified: Mon, 29 Dec 2025 09:27:45 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 750\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15170,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b76558b2870cc8e1dd3feb4132ee1594","sha1":"86fc66cbd581fd921c99c29c8ea6c93e6e5b9701","sha256":"2ce72bcdd262c8f222dabc8994965dc5f1930a0d8de71bdd8b914a217903bf39","sha512":"4624799c5d7bbd3537d253fc43ade950d5d36b5b47399b69aea7f1c5a710ca63ce5d2b758d36cd8f95a98882857dd41c5903d4efd2ca2c75487862377801c061","ssdeep":"384:/IK53v915Z8HlQ74FXtD7sTMQayXIaBBxgYJ7PwSnhVmAk:wKtF1sr9D7sZaSxgY1PPhVmZ","tlshash":"9362d0afb307be2e0343b0c1995b2aefedbb129409c962c78f6a85dd544069087f7549","first_seen":"2025-12-29T09:43:15.421064Z","last_seen":"2025-12-29T09:43:15.421064Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","fqdn":"creative.eiscprts.com","domain":"eiscprts.com","tld":"com"},"ip":{"addr":"104.21.28.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-29T09:42:47.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eiscprts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 09:30:00 GMT","end":"Fri, 06 Mar 2026 10:28:28 GMT"},"fingerprint":{"sha1":"03:16:A6:FE:83:C5:A6:1D:E4:A1:08:02:17:A1:58:73:3E:17:C3:CD","sha256":"B0:03:BC:45:32:F9:20:89:5A:44:09:E9:58:5F:3D:2E:E1:F5:EA:EC:1A:61:DD:13:A1:46:B5:92:2E:A0:1B:AE"}}},"request":{"raw":"GET /widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908 HTTP/1.1\r\nHost: creative.eiscprts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 09:42:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 18 Dec 2025 09:24:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RJ88dtaj6gAgbAxTqLWjqBePcTVGtbiuOILKsqmNmmwMyZ3jlT2euiHCPhMUukr7czTe7DY0ZRhPbszFAuVp9wmEhUD0umqbN4olYOQXd5KfjK8dGQ%3D%3D\"}]}\r\nexpires: Mon, 29 Dec 2025 09:42:50 GMT\r\ncache-control: max-age=300\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\nvary: accept-encoding\r\nage: 296\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9b5859713e1da0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1427), with no line terminators","md5":"fafad20fcee02c93bbdc34eb74767947","sha1":"165199b69b374a4504e98e2bd965f7f227f2f15e","sha256":"ddb00192c74634981df224211f952e5292b7bf893c1401d7f027c18fb5e74789","sha512":"6c8d057a2c9133b37d0d3afc19e04fcd17febdd6b5e34a4b31c4c4e1553c74910c34bbd3a32e6ebc3d231b2cc4ca1035cc73d287c3ab380077e46f28bb67600c","ssdeep":"","tlshash":"b82190a1d944c44d95b0d2777e503239e44f7a0fe661bbd4ac2108dbec68f8a41a594b","first_seen":"2025-12-18T20:41:29.974737Z","last_seen":"2026-01-07T05:58:17.086451Z","times_seen":111,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":17,"dns":4,"connect":1,"send":0,"wait":5,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-29","alert":"Sinkholed","trigger":"creative.eiscprts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767000840/181160356_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:47.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767000840/181160356_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.eiscprts.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 09:42:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16908\r\ncf-ray: 9b5859759cbf0731-OSL\r\netag: \"d057360f4afcad53c519bea681dda3f8\"\r\nlast-modified: Mon, 29 Dec 2025 09:34:05 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 515\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16908,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d057360f4afcad53c519bea681dda3f8","sha1":"52973d7a4ea4ca3551d687d675530c8f1f706ca7","sha256":"2dce62e5efa59fbd1c7f347b6f97e058f787bc6e63d5174c5230bc8c7f3a7039","sha512":"a2d49030b20306a49feda5606bcf9a3f1233e05b9abe75f04dd79003b7fa56337bb308933cedeaa784fecd1adad098bb78ba92b529a3adc79c7ab6e92ce0eaa0","ssdeep":"384:lnngLsDJxQrz2VIqkqZEuHSMnc1eb0KzzCNHyjmy0IAhm1dA:lnngaxQmIqDGuGUPzCtI0IiydA","tlshash":"9572e112e610a71eaa933c43ed6419339437d87b0bfdf2172dc9303ac2ec5587a5b859","first_seen":"2025-12-29T09:43:15.424805Z","last_seen":"2025-12-29T09:43:15.424805Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.eiscprts.com/static/9f1b11af/s/widgets/v4/Universal/main.08c73e02f94880c59e04.css","fqdn":"creative.eiscprts.com","domain":"eiscprts.com","tld":"com"},"ip":{"addr":"104.21.28.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:47.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eiscprts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 09:30:00 GMT","end":"Fri, 06 Mar 2026 10:28:28 GMT"},"fingerprint":{"sha1":"03:16:A6:FE:83:C5:A6:1D:E4:A1:08:02:17:A1:58:73:3E:17:C3:CD","sha256":"B0:03:BC:45:32:F9:20:89:5A:44:09:E9:58:5F:3D:2E:E1:F5:EA:EC:1A:61:DD:13:A1:46:B5:92:2E:A0:1B:AE"}}},"request":{"raw":"GET /static/9f1b11af/s/widgets/v4/Universal/main.08c73e02f94880c59e04.css HTTP/1.1\r\nHost: creative.eiscprts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 09:42:47 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"main.08c73e02f94880c59e04.css\"\r\nlast-modified: Thu, 18 Dec 2025 14:27:14 GMT\r\nx-cache-status: MISS\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M7MZbJaGxPby%2BQwDGmTUo7LbEdJ67OzPgW%2BU%2Fk6O7s6lGxhIDrqhI33M9p%2FBBgwcuwTau%2Bk08IyJk4CXgJsXALDIFb8XR8JWaTuJbqQK6jV%2Fyx%2BdWw%3D%3D\"}]}\r\nage: 3518\r\ncf-cache-status: HIT\r\netag: W/\"a013df18b8ec642a9e3c5116d21a07cc\"\r\ncontent-encoding: br\r\ncf-ray: 9b585971ef9ca0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14479,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14479), with no line terminators","md5":"a013df18b8ec642a9e3c5116d21a07cc","sha1":"75349fa0bc53f9169757e177fe797566206fc6fd","sha256":"7913e25512556190693e9b05715fc2b8f789b133edd059a8e9ffee0f6762a9fe","sha512":"965e04cf38067c7db9365f9d6d6e1de518e1f8cfd2e46e1b4abc7cff108c8efa4666c9bb910b3ab8d0eb8baa869032b43335100aa69f63756855f2551bafaa5c","ssdeep":"192:LXDldVstnXOVXqeXS3N1baTIHnACGE6+FBuHVAjV98sL+Yz:DDkOERHnACQ+FgHVAjVGu7","tlshash":"2a52b73356612608f41bcd2167a527dba268c41be11327fced927a35cbcb4870fb618e","first_seen":"2025-12-18T20:41:29.999394Z","last_seen":"2026-01-07T05:58:17.080737Z","times_seen":112,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-29","alert":"Sinkholed","trigger":"creative.eiscprts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative.eiscprts.com/favicon.ico","fqdn":"creative.eiscprts.com","domain":"eiscprts.com","tld":"com"},"ip":{"addr":"104.21.28.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:47.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eiscprts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 09:30:00 GMT","end":"Fri, 06 Mar 2026 10:28:28 GMT"},"fingerprint":{"sha1":"03:16:A6:FE:83:C5:A6:1D:E4:A1:08:02:17:A1:58:73:3E:17:C3:CD","sha256":"B0:03:BC:45:32:F9:20:89:5A:44:09:E9:58:5F:3D:2E:E1:F5:EA:EC:1A:61:DD:13:A1:46:B5:92:2E:A0:1B:AE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: creative.eiscprts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Mon, 29 Dec 2025 09:42:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZX8tyKpOTsWSmeYhIIqzS8WfBTN1EgrfKj4FXMjdDmGqsTX%2BYTUpFCUUuEOvqlgodxNPMHWtG0rqP1F0mJ9ZyeXUZq40PWznxjHGc1vNPJTduvqN%2Fg%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9b5859745c83a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-05-21T17:07:04.901033Z","times_seen":513914,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-29","alert":"Sinkholed","trigger":"creative.eiscprts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767000420/156819639_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:47.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767000420/156819639_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.eiscprts.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 09:42:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11310\r\ncf-ray: 9b585975cd170731-OSL\r\netag: \"921bf08a9f02c482cbc4f1cf9ba21c50\"\r\nlast-modified: Mon, 29 Dec 2025 09:26:26 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 926\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11310,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"921bf08a9f02c482cbc4f1cf9ba21c50","sha1":"fb9be0c2996cc2320a53910893bb05dc85104a81","sha256":"8322c8c409324e06ba373bc216a5ebd43cd3cf4554999e19171d21a652c864bd","sha512":"29e65cce50eaa66fdf9486269746dae69726731ee3e1284cb66f114159471559d22e4cb4878dbf66225aed39e07159003838d5ca9713f1c0ae775c697602d7f3","ssdeep":"192:pdYvNNdgaBPGSjLjhBQ/e1JtwXw/zzb19+EC7u1CDvcWT+W/egFp1BjBa3PP+qIx:8TaaBB3hdNH37C7u1CDvL9/5j43Ix","tlshash":"a132d0b4778dc01fe93831c6562b6ab80b4b081af0fc55c4b048cbad235b306a6b13e8","first_seen":"2025-12-29T09:43:15.429325Z","last_seen":"2025-12-29T09:43:15.429325Z","times_seen":1,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":78,"dns":1,"connect":5,"send":0,"wait":7,"receive":1,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767000420/229441038_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:47.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767000420/229441038_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.eiscprts.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 09:42:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7960\r\ncf-ray: 9b585975cd1d0731-OSL\r\netag: \"8aab50e286dd2437763118eb80d416e9\"\r\nlast-modified: Mon, 29 Dec 2025 09:26:51 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 914\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7960,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8aab50e286dd2437763118eb80d416e9","sha1":"66d22ee2a25a9362bb3c913a726464cad88c3a6e","sha256":"98ef19614caa2f7b7d8c85e34f621de5489685dbd3d39cbd57679287c6f854a4","sha512":"0876d32c4ed81971e7b1eabc8b24a0f860d9afd2319b77c0d8d7952b707857cb5de007a72577ce7959864f25babe742a5d4a03957e2afc29c01114869d317145","ssdeep":"192:aw4zA5pwMBLHKOyMySyvU24KFlhx6LabcOVS6He1Rm:lNbw2KOyMylU25+abhn+Xm","tlshash":"12f1ae90339c8cfd194fc2041807fc961d88f94a19ba7e8b64d6a68d1b7a2f84f55a12","first_seen":"2025-12-29T09:43:15.431406Z","last_seen":"2025-12-29T09:43:15.431406Z","times_seen":1,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":75,"dns":21,"connect":1,"send":0,"wait":10,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767001050/200900667_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:47.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767001050/200900667_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.eiscprts.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 09:42:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13068\r\ncf-ray: 9b5859759cb90731-OSL\r\netag: \"93d4f56183448c78aefdf9a6b58ef6f4\"\r\nlast-modified: Mon, 29 Dec 2025 09:36:40 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 315\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13068,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"93d4f56183448c78aefdf9a6b58ef6f4","sha1":"8aae1a7803b427438c0e04fed43b238cb051bd11","sha256":"25ae4c25250d2e787e53e420b057f0ca709c1ae37636b1132aa6621f425859de","sha512":"f77de7a821c74031e4b1fde9bf8cfe8d91055dbcd24f9681923a7031238c3a217eb51bae9ad3c75255e0323b75cf2cf27edd43a84338f171df0910bffd4246fa","ssdeep":"384:7m+c8vuBq/Y5S7nmfecJ9UqbV4d8oKOuBOTXwq:tPu4YknEUqbmdBKOuBObN","tlshash":"7e42e102b79f98107ce50c624dddee5a3308c9b9d6061377f0add9bdeb80664c343aa5","first_seen":"2025-12-29T09:43:15.433576Z","last_seen":"2025-12-29T09:43:15.433576Z","times_seen":1,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767000960/103723538_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:47.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767000960/103723538_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.eiscprts.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 09:42:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13674\r\ncf-ray: 9b585975bcf20731-OSL\r\netag: \"59b6da01b80578433abff7de576b9949\"\r\nlast-modified: Mon, 29 Dec 2025 09:35:10 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 125\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13674,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"59b6da01b80578433abff7de576b9949","sha1":"6095902a6163a552f4af717dd8a3b755b9ea046b","sha256":"57a6fd5181f1c8078a0a1d191618572a823d8c856f55ff485e5a90079758a91d","sha512":"35b9a7df597abe7cf6eec1781dacb2c5fe42528555027d6b3de8ae7f7a13fcfc3f0d2d4936265c4a596cd2e5b1244ae1f0b4c9ca1aaec80d23658ba72ebdbab1","ssdeep":"384:BH9fyUaJmoAOrT7W/0xTJ5SoEum/ty85VBxqXHK4:xVyUaAoVT7W/0x95SoEj/w8uXq4","tlshash":"ac52c0cfd823ef70cf9c9961864da7357f18fa22a70ab2d09531193d8464286a97d70b","first_seen":"2025-12-29T09:43:15.435697Z","last_seen":"2025-12-29T09:43:15.435697Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767001050/169302831_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:47.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767001050/169302831_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.eiscprts.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 09:42:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6930\r\ncf-ray: 9b585975cd150731-OSL\r\netag: \"70f8d55b578accc4c0476f32693208ca\"\r\nlast-modified: Mon, 29 Dec 2025 09:37:21 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 315\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6930,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"70f8d55b578accc4c0476f32693208ca","sha1":"2f7ebc06307114110b5a5e88e6a9547552e99873","sha256":"b22a9bfe89790851576aaec3be877b0e6adb0d79d557f167c30c2dc88f0009d2","sha512":"36a12ac5bf877aecf29138ae551449dd21cf30625f5a7fe84523d038f10f93915353c57af5a3521d53057bf8f36c303e02abd742c8c88a28e028ce4486aaddd6","ssdeep":"192:cOxy+n71WaJF1hFFICPioKxhXzNhpTsd9TmhW4SrG7:VHUanVFuhw9TmhQs","tlshash":"fee18ec273776d27552c21dfa99d960d1522c949b4c0a10b842f4eb6a94f883fe4ba3b","first_seen":"2025-12-29T09:43:15.437669Z","last_seen":"2025-12-29T09:43:15.437669Z","times_seen":1,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.eiscprts.com/static/9f1b11af/s/widgets/v4/Universal/main.5befde5ae3738abf2a27.js","fqdn":"creative.eiscprts.com","domain":"eiscprts.com","tld":"com"},"ip":{"addr":"104.21.28.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:47.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eiscprts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 09:30:00 GMT","end":"Fri, 06 Mar 2026 10:28:28 GMT"},"fingerprint":{"sha1":"03:16:A6:FE:83:C5:A6:1D:E4:A1:08:02:17:A1:58:73:3E:17:C3:CD","sha256":"B0:03:BC:45:32:F9:20:89:5A:44:09:E9:58:5F:3D:2E:E1:F5:EA:EC:1A:61:DD:13:A1:46:B5:92:2E:A0:1B:AE"}}},"request":{"raw":"GET /static/9f1b11af/s/widgets/v4/Universal/main.5befde5ae3738abf2a27.js HTTP/1.1\r\nHost: creative.eiscprts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 09:42:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"main.5befde5ae3738abf2a27.js\"\r\nlast-modified: Thu, 18 Dec 2025 14:26:38 GMT\r\nx-cache-status: HIT\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MflJ83xL%2BNcOq%2BHA%2FN7PfC6kWRvxKbdBYAvYwFuoEaEPi1lZcqrQimj310BEJnG3B0MNir%2BjPwRhlyc0qtodwYj1SybqMvow5yktq3c%2FLciyWBqnjw%3D%3D\"}]}\r\nage: 3518\r\ncf-cache-status: HIT\r\netag: W/\"f8f4194dcf9380a0977dcecd9a492f1a\"\r\ncontent-encoding: br\r\ncf-ray: 9b585971ef9fa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1144388,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6ef50aef5fb67528d05739389996a8a4","sha1":"6eba8fc2d64c7bd289084c9ba9214d5dfc281dff","sha256":"f1d7533eab0bc500b7fd53ada9ec46de877ce2b6e80055723c5419ae5894b5a5","sha512":"6993d826f4094295f2439f96ae18209f691a8a77c56b4bcede927eda1316a7b0583be6f4765b91fbf9280623e15f233343fafd6499491442e0c96e44f11b14ff","ssdeep":"6144:QmtHmW9oO1EmZQHSBre0gnwRwfJZRXdudhmpkAnuXZiE9h2q/ZqgDp6lbD78OrJt:tRe0Y+AWZTdXYrntI0tPqX2vqhjc","tlshash":"832539897756b47646c69146e03f0203f235699a201a905cb3deecec665ceceb237b37","first_seen":"2025-12-18T20:41:30.024366Z","last_seen":"2026-01-07T05:58:17.082909Z","times_seen":111,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-29","alert":"Sinkholed","trigger":"creative.eiscprts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go.eiscprts.com/app/domain-checker/get-check","fqdn":"go.eiscprts.com","domain":"eiscprts.com","tld":"com"},"ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:47.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.eiscprts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 14:45:26 GMT","end":"Mon, 09 Feb 2026 15:45:16 GMT"},"fingerprint":{"sha1":"43:67:8E:5F:6D:0A:5F:A8:98:F4:FF:58:86:72:01:0D:AE:A4:95:5D","sha256":"0C:3B:61:10:5C:73:A6:CA:FA:02:07:F1:74:31:54:E2:0A:6A:48:B8:3D:B3:04:45:D1:A3:F5:01:64:31:9E:09"}}},"request":{"raw":"POST /app/domain-checker/get-check HTTP/1.1\r\nHost: go.eiscprts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.eiscprts.com/\r\nOrigin: https://creative.eiscprts.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 29 Dec 2025 09:42:47 GMT\r\ncontent-type: application/json\r\ncf-ray: 9b5859751811783d-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-origin: https://creative.eiscprts.com\r\naccess-control-expose-headers: *\r\nvary: Origin, accept-encoding\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":197,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"90af28b0f5bfbcb13adbdac9d7ef531c","sha1":"a02aa65c74ee367482a7854cc07d587dedbf84ec","sha256":"24ab13c0a499895ba98a8013c98207c3d350dd38b08ced95c165396f0da696c4","sha512":"f60c8ec73d22c591c76db74f54c7de33e67fb5807faa5dffca5206a2d0795098f02684d7c8cb8ea10c37db6bcfee97c95371e35aaadeab5c4b69262572a4c420","ssdeep":"","tlshash":"cbd0221b410cb213c0c4c2c03e3f5585180428a15e018cf18ecc20acc0dc2300c33a20","first_seen":"2025-12-29T09:43:15.440436Z","last_seen":"2025-12-29T09:43:15.440436Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767000780/211197380_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:47.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767000780/211197380_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.eiscprts.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 09:42:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10544\r\ncf-ray: 9b5859759cb50731-OSL\r\netag: \"35137f813a6a2ada3f5e209142f39b32\"\r\nlast-modified: Mon, 29 Dec 2025 09:32:19 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 587\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10544,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"35137f813a6a2ada3f5e209142f39b32","sha1":"210f30069bac74b2112f303944756204f2e5d3c8","sha256":"6c3d4362d1733ca5e5e506d595006322cf509a2a2f94294d9c8da452fed98b24","sha512":"876056687a6c58cf6b25207763fc7a812240eff1d15716c556cdd5bb313d13aaba0dde5386a7938429485b8774fe7296b9af356aa9de05bb24ef5f3cd281686a","ssdeep":"192:M1BIB2RFgB5G23Ehmsz2ynlYU4XgZNt5euQW5QkWYahXqg1:M1ydEhmQ2QlFHZ3Aa5tWLl","tlshash":"5222af402d011800c1022bc37a6f32e8d5e4766d78cdc68d51b7eaf2635a62b16abceb","first_seen":"2025-12-29T09:43:15.44204Z","last_seen":"2025-12-29T09:43:15.44204Z","times_seen":1,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":51,"dns":2,"connect":1,"send":0,"wait":11,"receive":1,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767001050/177103760_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:47.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767001050/177103760_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.eiscprts.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 09:42:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20116\r\ncf-ray: 9b5859759cbc0731-OSL\r\netag: \"2973137fefcac0c43e3f181949e611e9\"\r\nlast-modified: Mon, 29 Dec 2025 09:36:36 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 305\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20116,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2973137fefcac0c43e3f181949e611e9","sha1":"45f61d9724bc84fb8e6b6cec3568bac213c968b4","sha256":"e8d3b33613dca1d92f9ccf9a9e1b4cb721a0cd2f39e1b3f3ea61ddf686e1ea56","sha512":"b7b2436bf697ae6f862635f22b46c2cf9769b4da7ee569a3c5d98318838c8b5443149aa8ddc6027a57681bc3dbb445444a31191ae8134f9ddef67ce6c033146d","ssdeep":"384:jbFfv3XsjmQE7DG8by1FLtJWycDtp41hn+L9QbQ78HZjV2hWtrg4eNuY:jbFfUjmQE/J4J+DtyfbQo5jV2hIE4eT","tlshash":"d592d1f0449f5cec450898d8ad7b12fca465ae9e71c398f3406f296f607e90d255af88","first_seen":"2025-12-29T09:43:15.443713Z","last_seen":"2025-12-29T09:43:15.443713Z","times_seen":1,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767000960/181107336_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:47.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767000960/181107336_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.eiscprts.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 09:42:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6566\r\ncf-ray: 9b5859759cbe0731-OSL\r\netag: \"c00a71fb22cc1f6a68fc73bacdfc9b26\"\r\nlast-modified: Mon, 29 Dec 2025 09:35:07 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 371\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6566,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c00a71fb22cc1f6a68fc73bacdfc9b26","sha1":"6330a84c4fa79ea7b7f8d475e974665a480ce651","sha256":"07c51d1b0cc7d1d8bec4c3d544de67241c53cb038f68bff7217ab15933584f33","sha512":"9955e828fdc58387de1ed336d2f4d3d8a7498ef0fee76c7064c469943bb2246a6e8770d39a54c33f65327cff6757006c420edac565bacdc87bde3dc6f517fb9d","ssdeep":"96:Ak6wXe3qOlEGYTQ6Rc8CsSpXvzJ1Yfr3vtBO2Ji+kLMMd0joiAQc2LTFC6vZ:AkRe886Ws6vN1Yf7O8kLRsoZGZx","tlshash":"2fd18e1862f03d8ee42b94b08fd3503650a2357ce2e32edc9da79552b5775833a3e898","first_seen":"2025-12-29T09:43:15.445321Z","last_seen":"2025-12-29T09:43:15.445321Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767000990/178738836_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:47.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767000990/178738836_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.eiscprts.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 09:42:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6638\r\ncf-ray: 9b5859759cc00731-OSL\r\netag: \"025314bc68892616404a1b03045d62a1\"\r\nlast-modified: Mon, 29 Dec 2025 09:35:49 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 338\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6638,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"025314bc68892616404a1b03045d62a1","sha1":"d7bc906d9c8b86eecc2fa1f0f07cb1338cd8eaf7","sha256":"431fb4af1eea069852a879eebb21a57fec73f9259fee805b663f84c362008bec","sha512":"b2a603d93f38b4f71493c62be013ffedfbf7942423cf06f544b0ea9e990d8b5801c1ddafbfa33e2415252a1eef5a8b67adcc2799f869b40c94bab181a38738c6","ssdeep":"96:OH0JlbY1IERODDiPJBuWbxlA85fRyfvqpDbPQPP3OW+BE/HEtuOKnVdWTgQdCb5J:O4lFEbS0xlA85fRbpvOPOnoktFKF75J","tlshash":"7ad18edf5b8f424d7b64cb08121865380a59b441685fd30bfb08857b2fdca93d3999c3","first_seen":"2025-12-29T09:43:15.44731Z","last_seen":"2025-12-29T09:43:15.44731Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Arimo:ital,wght@0,400..700;1,400..700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:47.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"43:D3:3F:93:6C:4F:F7:67:58:9D:D5:48:20:4C:74:A2:69:DB:13:9F","sha256":"8C:DB:D2:85:E1:AB:12:7B:1D:5A:65:A7:EC:22:67:6F:B3:A6:65:01:28:29:FA:D2:3B:01:8D:10:7E:4D:09:52"}}},"request":{"raw":"GET /css2?family=Arimo:ital,wght@0,400..700;1,400..700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.eiscprts.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 29 Dec 2025 09:42:47 GMT\r\ndate: Mon, 29 Dec 2025 09:42:47 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5379,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"56351891ce8fb221bb3590d9841cf0c0","sha1":"29b8c5a1216c54bb8832edcceed2beca6090b98e","sha256":"3515c7b2de099d47b9488f1d37b842c001ec454a998dd51861065b34868cfe8f","sha512":"6953ed577894d470eaa0f379f887b0a02951a8e258c3a929453eccae8ef4e2987028bd664a555fc986a446ec1940db809217f1f018ddad8cc1525398fd55c637","ssdeep":"96:CYgFasyYgFarFZfYgFatYgFafLYgFao3YgFalYgFaZJc+uDYgFaXNTOFaYyOFaWh:XHsnHEHKHf0HoIHCHZVHzYIW62OBSdvz","tlshash":"90b199a1001bd480db870cc277cfbd3aae4e61597445d0baaffe48dcac96c629394b1d","first_seen":"2025-09-09T07:58:30.235801Z","last_seen":"2026-05-18T21:19:02.50619Z","times_seen":4089,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":118,"dns":1,"connect":15,"send":0,"wait":35,"receive":0,"ssl":108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767000420/135098637_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:47.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767000420/135098637_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.eiscprts.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 09:42:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13588\r\ncf-ray: 9b5859759cba0731-OSL\r\netag: \"7ccadcfccae83f91fd4acb1d613352cc\"\r\nlast-modified: Mon, 29 Dec 2025 09:26:54 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 927\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13588,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7ccadcfccae83f91fd4acb1d613352cc","sha1":"bc499a25de13dd9c7f4752058fc59df6a134e5e8","sha256":"067a6764194725688297f6fbc8df5ec483cf7586b60dc906716d30d7a458654c","sha512":"608c151b1c9785dbb07a7ff6b11bb318c3ec2897cbda776b77e791c34dd039ef9c4612e57022625a74bbf5ec1d3010d07b9aeedd8099a13a3b53d7ea2e209f25","ssdeep":"192://BkVTJgoOSFR6gx/QcWyy0bfFWFhQgIXZVDnN/GV+A+J4TOeCay6yBsaMwyvq:qSxS39jy6/gIXZVDnN/GVtj5y6yBsayy","tlshash":"2652b0f69ec494044ed41d0099d2b979b90ef1be93e6679f60ce61becbb5770c14510c","first_seen":"2025-12-29T09:43:15.450099Z","last_seen":"2025-12-29T09:43:15.450099Z","times_seen":1,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767001200/137667820_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:47.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767001200/137667820_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.eiscprts.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 09:42:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9296\r\ncf-ray: 9b5859759cc10731-OSL\r\netag: \"7e43170fdc8dc7d13ec9c0004485a0cc\"\r\nlast-modified: Mon, 29 Dec 2025 09:40:06 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 147\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9296,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7e43170fdc8dc7d13ec9c0004485a0cc","sha1":"eb731177bd180d79ddceb958ccaa86ef5fafa392","sha256":"2995d669a339a01101fb289886e148ad3195bc2669681aeaf53906190a8f67fb","sha512":"0da5a7fba0bcb8c63295d47cd98a94ebd93029f14010dfd2a29f2f549fabd7f8803ad6d10bf43c2d3fec6f6ca8c0143147b277c25354cc41c45cc1f5d8a04f80","ssdeep":"192:mE4hJDRKtJxVSagQASDBh2er3X/7zaegA7+8TgekRYy6:mE4dKxVcQAC/SdAS+geby6","tlshash":"f8129fc37235d9175f2c9a68af58b4819e372c492d64e02568f00f4adb13876bf5a24f","first_seen":"2025-12-29T09:43:15.451717Z","last_seen":"2025-12-29T09:43:15.451717Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767001110/229707911_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:47.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767001110/229707911_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.eiscprts.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 09:42:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6862\r\ncf-ray: 9b5859759cc70731-OSL\r\netag: \"07f5339229660ab960e5546c24a99e6b\"\r\nlast-modified: Mon, 29 Dec 2025 09:38:05 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 176\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6862,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"07f5339229660ab960e5546c24a99e6b","sha1":"9701a96bad97403fb4e93c2044bf96d4c794ffa9","sha256":"14b394b16ea9956c9831b2e0b493d5c2ef216c618b8ae34d23043ab1ee5976fa","sha512":"e6e96df719a727a8a08ca2ab154859c18ba57639cb3555579abe47976087762c79166b19d0dbd680b3d6954f8317877b94ee1c76646015042bdb8a50d335fbec","ssdeep":"192:Kv+abbht/8nEE1sFLZ83+60MukHNrQEXABm4G+UlA4Ag:KXkEEeFLO3+2Am4olA4j","tlshash":"38e18d9ed5e7a7a4f468ee26853f9732c84b47e5dc02546f801f22e0b29c413594c4ab","first_seen":"2025-12-29T09:43:15.453289Z","last_seen":"2025-12-29T09:43:15.453289Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767001200/93684531_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:47.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767001200/93684531_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.eiscprts.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 09:42:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16290\r\ncf-ray: 9b585975bce70731-OSL\r\netag: \"8c973d18faa26108d59cda3f5843046b\"\r\nlast-modified: Mon, 29 Dec 2025 09:39:56 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 94\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16290,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8c973d18faa26108d59cda3f5843046b","sha1":"146ec869baf995e763e93480b70e8ccbc4055b82","sha256":"f68a3433920bb9c6b4bd41fd5c5cd93596ed26853b9ed269eaa2917ce6ca5eb5","sha512":"9c7ae3034ef008b9dd31ea2657e85e5bd6e6c8be734eca26d300c09a2731a292a10e3e31cf756390232043b0e068e46d3473596948a1995bd79daaf205846e8b","ssdeep":"384:uVusz7AmV/xaEMew+Cbv3hF2nB8He9Wtuz+FK3:uVusz7AmV/0E5w+Cbv3hF2B8He8E3","tlshash":"5f72b0ae0e60057b6117b0265b828bd292f274dd9c306935c08d87b51a1fffb5f7a922","first_seen":"2025-12-29T09:43:15.454643Z","last_seen":"2025-12-29T09:43:15.454643Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767000780/75379151_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:47.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767000780/75379151_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.eiscprts.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 09:42:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6364\r\ncf-ray: 9b585975cd130731-OSL\r\netag: \"04a47c9e43b0692fc3513c9257becbd2\"\r\nlast-modified: Mon, 29 Dec 2025 09:32:21 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 411\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6364,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"04a47c9e43b0692fc3513c9257becbd2","sha1":"bbe25c538afbec86c2f1ca4d9f240974cd61ed40","sha256":"86bd11d4bff6493694fbfaf70e99a805afa68c6d699fd382f25661291743d49c","sha512":"efb75308e6ba5b4e3d1550c00241210bd245f7f0cf534c837e1bc75fb1932c4fb2f4177f204832f2e05f25ea6879800ebcbf081f17b6b59aa0295309d05a0073","ssdeep":"192:d3vhXyZ6HosiQOAjPae237Zc+dF/MRmwlq9E:dvhXysHPi1C8VZjERblqC","tlshash":"20d19ebeb0584da0da5a381aa045e6ecf51eae3f6b1dc1d26d8e526c11e7d43040a3f4","first_seen":"2025-12-29T09:43:15.456455Z","last_seen":"2025-12-29T09:43:15.456455Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.eiscprts.com/abc.gif?sourceId=%7BpublisherId%7D\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908\u0026thumbSizeKey=big\u0026language=en\u0026thumbFit=cover\u0026quality=original\u0026stripcashR=0\u0026thumbType=SChatBest\u0026kbLimit=25000\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026modelsCount=0\u0026segment=hls-oldAPI\u0026landing=WidgetV4Universal\u0026referrer\u0026i=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_99\u0026seenAbTest=0\u0026seenDomain=0\u0026seenLanding=0\u0026filtersMatch=0\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A439%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A137%2C%22duration%22%3A36%2C%22transferSize%22%3A2766%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A137%2C%22duration%22%3A55%2C%22transferSize%22%3A266051%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A137%2C%22duration%22%3A30%2C%22transferSize%22%3A5330%7D%5D\u0026mh=-1768329567","fqdn":"go.eiscprts.com","domain":"eiscprts.com","tld":"com"},"ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:47.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.eiscprts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 14:45:26 GMT","end":"Mon, 09 Feb 2026 15:45:16 GMT"},"fingerprint":{"sha1":"43:67:8E:5F:6D:0A:5F:A8:98:F4:FF:58:86:72:01:0D:AE:A4:95:5D","sha256":"0C:3B:61:10:5C:73:A6:CA:FA:02:07:F1:74:31:54:E2:0A:6A:48:B8:3D:B3:04:45:D1:A3:F5:01:64:31:9E:09"}}},"request":{"raw":"GET /abc.gif?sourceId=%7BpublisherId%7D\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908\u0026thumbSizeKey=big\u0026language=en\u0026thumbFit=cover\u0026quality=original\u0026stripcashR=0\u0026thumbType=SChatBest\u0026kbLimit=25000\u0026modelsInWatchHistoryCount=-1\u0026modelsInFavoritesCount=-1\u0026modelsCount=0\u0026segment=hls-oldAPI\u0026landing=WidgetV4Universal\u0026referrer\u0026i=0\u0026abTest=widgetv4universal_aaa1812\u0026abTestVariant=widgetv4universal_aaa1812_default_99\u0026seenAbTest=0\u0026seenDomain=0\u0026seenLanding=0\u0026filtersMatch=0\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A439%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A137%2C%22duration%22%3A36%2C%22transferSize%22%3A2766%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A137%2C%22duration%22%3A55%2C%22transferSize%22%3A266051%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A137%2C%22duration%22%3A30%2C%22transferSize%22%3A5330%7D%5D\u0026mh=-1768329567 HTTP/1.1\r\nHost: go.eiscprts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.eiscprts.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 29 Dec 2025 09:42:47 GMT\r\ncontent-type: image/gif\r\ncontent-length: 103\r\ncf-ray: 9b5859748eba783d-OSL\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-21T17:23:37.112312Z","times_seen":15507115,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767000960/125061376_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:47.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767000960/125061376_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.eiscprts.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 09:42:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24340\r\ncf-ray: 9b585975dd260731-OSL\r\netag: \"e9a4c3e07a655498eb82c4a22c6c3263\"\r\nlast-modified: Mon, 29 Dec 2025 09:35:33 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 402\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24340,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e9a4c3e07a655498eb82c4a22c6c3263","sha1":"f2454ff3d7c8610b203b343f9d976b24f268595d","sha256":"94ebdbdc527859daa93c2f490f138b74ce67b5815541fb0c7043644948c07116","sha512":"6b2cad30bafe060c4fcf64da80cc79c7829c3c88e09f24b4f9b1fbfc4251e1fccdccc18d2b60b1c24edbd49474b1719e7282657a22d758397483826b4dedd492","ssdeep":"384:JrrocSF8ncBNJPy60V3hMvuE47rJaRFrLjEn2duXwj1KYO/gggM71m+AZIGHY:J/olJP8V3mvsB0FrPEnVoKr/OM7HIt4","tlshash":"72b2e1cf56d455bf102608ab4547e7270a54a89df37706ac4330a87c8ecfe25baad0cd","first_seen":"2025-12-29T09:43:15.458379Z","last_seen":"2025-12-29T09:43:15.458379Z","times_seen":1,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":71,"dns":5,"connect":11,"send":0,"wait":9,"receive":1,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767001290/71249389_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:47.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767001290/71249389_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.eiscprts.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 09:42:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14868\r\ncf-ray: 9b5859759cc60731-OSL\r\netag: \"d7e1cd1d0e704e96c8d9357aac35afba\"\r\nlast-modified: Mon, 29 Dec 2025 09:40:28 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 63\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14868,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d7e1cd1d0e704e96c8d9357aac35afba","sha1":"dc8b4f308e06d878328c9b89a0c36562889a09e4","sha256":"1b74b625fbdddab32a4f8dec4ecc93752a5b3ced88603bf5c8880e492175a44d","sha512":"b36e9a38d0d327c26ceb9acc7e39ab8dfb96784d6d5605bed8f45f1f0d3dd10f0ed3982a5549618a932deed3e171acc03b89e5c643cccfb55bbe3dc7f0be9e96","ssdeep":"384:1qGy0RtT8+RxxOmypULAbzLhJpvaYw/C8e9rtn1u/2LUQBwjj:1h9CmyaoCYV8etbu/2AQBwjj","tlshash":"0862d0f4920bb540eebce7ebe1e81f2fd67391961d5b48418251f55ea1778ce0a23091","first_seen":"2025-12-29T09:43:15.459571Z","last_seen":"2025-12-29T09:43:15.459571Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":25,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767000420/139610007_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:47.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767000420/139610007_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.eiscprts.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 09:42:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13192\r\ncf-ray: 9b585975ccf60731-OSL\r\netag: \"6672e19c37a46b72fa31afff830d13c0\"\r\nlast-modified: Mon, 29 Dec 2025 09:26:09 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 946\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13192,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6672e19c37a46b72fa31afff830d13c0","sha1":"a770ae2d200fbe90f7a318741688835a5bba0597","sha256":"08eb1c977873e7615fea6e26ac17720ceb320edcbe628775715cf29b623ca76f","sha512":"0633cadf6d6305b59ff912d34ebbf588537ca26741c79b045f76000936e51f79cc7c3c47adfe221a68040c7a0e1d6ae8e047f3d44b7cc127c24d3c26764bda0e","ssdeep":"384:CBM2dpcwycg+ndBGH2nfAHDFBjgt31P4Gpj:mF/g+ndBMHDrj6f","tlshash":"4b42c0708e2cedd8c6303b68a4329fdd2da235f8432b639aca226ddb115590508b87d8","first_seen":"2025-12-29T09:43:15.460758Z","last_seen":"2025-12-29T09:43:15.460758Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767001230/150383684_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:47.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767001230/150383684_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.eiscprts.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 09:42:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17662\r\ncf-ray: 9b585975cd090731-OSL\r\netag: \"0b99f4cf5b7a38ac0e32270d99413e6c\"\r\nlast-modified: Mon, 29 Dec 2025 09:40:17 GMT\r\nx-proxy-cache-orig: HIT\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncf-cache-status: HIT\r\nage: 57\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17662,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0b99f4cf5b7a38ac0e32270d99413e6c","sha1":"7b7a06fa04da5ef463cc850c6bf1cd84ca11a697","sha256":"a9bdf5df0dd49be401004578ae4bb45e64f0082ace65fb0c76077700249ce7a7","sha512":"6b7c3b9c845bba02f9ba899497c559d32b97976c53aaafac8eb0c95ed58240a3d9fa7b4c1c3ffee8fddab0c7f73991a80ee1fcff397f42f7ba38617109855dc6","ssdeep":"384:56EFs53eLoz8gGzpgMEkR3+v8jynlb+Q0A9qUE1120pezvo2:5LCuMAgs623m8jylb+Q0A9qN2ESo2","tlshash":"0482d104a7f537758073b8a6c6b02e00a3968f3d9974de129164d05d3dd99b33afbc15","first_seen":"2025-12-29T09:43:15.461736Z","last_seen":"2025-12-29T09:43:15.461736Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fapchatvip.com/checkUrl","fqdn":"fapchatvip.com","domain":"fapchatvip.com","tld":"com"},"ip":{"addr":"194.1.140.1","port":443,"asn":0,"as":"","country":"Slovakia","country_code":"SK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:48.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fapchatvip.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Dec 2025 12:48:14 GMT","end":"Tue, 24 Mar 2026 12:48:13 GMT"},"fingerprint":{"sha1":"A7:E8:EB:53:CE:1E:B7:ED:AE:C5:01:78:73:CE:B4:28:F9:AC:54:75","sha256":"0A:8C:BF:4D:D3:AD:87:AF:97:62:21:A1:96:49:1D:C3:56:CB:FC:E4:35:91:14:81:64:B1:18:44:D5:10:A4:B7"}}},"request":{"raw":"GET /checkUrl HTTP/1.1\r\nHost: fapchatvip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.eiscprts.com/\r\nOrigin: https://creative.eiscprts.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\naccess-control-allow-origin: https://creative.eiscprts.com\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json\r\ndate: Mon, 29 Dec 2025 09:42:48 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvia: 1.1 Caddy\r\ncontent-length: 15\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7fb97eb7c8636552ad068f6d56b5ea34","sha1":"b69679936779fb02503bc0fe1374a737cc762ecb","sha256":"e78008828abaa93c4462e326ef384dcda1443352a0f24bdeedada6a6fdbfd1d5","sha512":"b9a8b6626fe32bc433f46e6726523b51029398d691b76006c2ae7c0aea25e2296dd35587c6e45bb94363de8e30b66667015aa1542d75e0db4eaf3edfe3680d04","ssdeep":"","tlshash":"bc60003c00000003c0c033003f03030000000030cf0000c000c0000000c00000000003","first_seen":"2023-07-14T21:39:19Z","last_seen":"2026-05-20T19:58:08.549484Z","times_seen":8150,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":86,"dns":3,"connect":19,"send":0,"wait":18,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-29","alert":"Sinkholed","trigger":"fapchatvip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go.eiscprts.com/app/domain-checker/check-result","fqdn":"go.eiscprts.com","domain":"eiscprts.com","tld":"com"},"ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:48.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.eiscprts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 14:45:26 GMT","end":"Mon, 09 Feb 2026 15:45:16 GMT"},"fingerprint":{"sha1":"43:67:8E:5F:6D:0A:5F:A8:98:F4:FF:58:86:72:01:0D:AE:A4:95:5D","sha256":"0C:3B:61:10:5C:73:A6:CA:FA:02:07:F1:74:31:54:E2:0A:6A:48:B8:3D:B3:04:45:D1:A3:F5:01:64:31:9E:09"}}},"request":{"raw":"POST /app/domain-checker/check-result HTTP/1.1\r\nHost: go.eiscprts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.eiscprts.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 240\r\nOrigin: https://creative.eiscprts.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":240,"data":"{\"checkId\":97,\"result\":\"success\",\"currentDomain\":\"go.eiscprts.com\",\"requestSignature\":\"1767001367-81676f8164e229e44f684ae7181e29ff\",\"configLoadTimeMs\":70,\"checkPerformTimeMs\":338,\"resultResponse\":\"{\\\"it\\\":\\\"works\\\"}\",\"resultStatusCode\":200}"}},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Mon, 29 Dec 2025 09:42:48 GMT\r\ncf-ray: 9b5859797b67783d-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-origin: https://creative.eiscprts.com\r\naccess-control-expose-headers: *\r\nvary: Origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-21T17:23:37.112312Z","times_seen":15507115,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"29449430-35518-845.tentedienat.com/iiJOC4QzPQ3mZtczvQOYbhxKk9RR5tmHZvtfX8ifEJ8VPJidyXov5Rj3acdKsi0YIc19Qz0","fqdn":"29449430-35518-845.tentedienat.com","domain":"tentedienat.com","tld":"com"},"ip":{"addr":"88.208.22.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-29T09:42:46.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.tentedienat.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 11:07:41 GMT","end":"Mon, 16 Feb 2026 11:07:40 GMT"},"fingerprint":{"sha1":"C0:34:8D:90:56:E8:69:1C:EB:51:13:B3:2E:58:03:E9:3C:86:4D:DF","sha256":"32:DE:33:5F:B5:1C:42:17:AB:B7:1F:BF:9B:2E:46:E5:BD:BC:36:41:F5:18:11:6E:13:3B:AE:70:60:D2:52:57"}}},"request":{"raw":"GET /iiJOC4QzPQ3mZtczvQOYbhxKk9RR5tmHZvtfX8ifEJ8VPJidyXov5Rj3acdKsi0YIc19Qz0 HTTP/1.1\r\nHost: 29449430-35518-845.tentedienat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":357,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (357), with no line terminators","md5":"73a832c8b9e0460e69c550cd637e0b2b","sha1":"bf8ffc90ae11582d9f730ce45a8d3940dc79dca1","sha256":"14c6deb55c464c6dfbf8ffd4db4426152b1918155e80a3054c7d20b6c0fb85e6","sha512":"76b1383fa9183d1fb8b3c5fb122196c0f00005fd371d982d9aab630d9d3d38a7d2642b90f4f5fc890d2fb9f9a42e79042862fa76272fb754e80abc0457490f91","ssdeep":"","tlshash":"dce0c0da12619c0be43756b1bc6273049701ed1beb100490f5a0648e84e6d26c443aac","first_seen":"2025-09-26T14:42:39.160685Z","last_seen":"2026-03-29T22:47:16.730163Z","times_seen":370,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":53,"dns":0,"connect":17,"send":0,"wait":25,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-29","alert":"Sinkholed","trigger":"29449430-35518-845.tentedienat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative.eiscprts.com/static/9f1b11af/s/widgets/v4/Universal/lang/en.json","fqdn":"creative.eiscprts.com","domain":"eiscprts.com","tld":"com"},"ip":{"addr":"104.21.28.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:47.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eiscprts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 09:30:00 GMT","end":"Fri, 06 Mar 2026 10:28:28 GMT"},"fingerprint":{"sha1":"03:16:A6:FE:83:C5:A6:1D:E4:A1:08:02:17:A1:58:73:3E:17:C3:CD","sha256":"B0:03:BC:45:32:F9:20:89:5A:44:09:E9:58:5F:3D:2E:E1:F5:EA:EC:1A:61:DD:13:A1:46:B5:92:2E:A0:1B:AE"}}},"request":{"raw":"GET /static/9f1b11af/s/widgets/v4/Universal/lang/en.json HTTP/1.1\r\nHost: creative.eiscprts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 09:42:47 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"en.json\"\r\nlast-modified: Thu, 18 Dec 2025 14:27:14 GMT\r\nx-cache-status: MISS\r\ncache-control: public, max-age=3600, immutable\r\nvary: Origin, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PMg%2FHZo1fhG7RrBUC9gwu6zkAvZxJ%2FwNspt8bsgEzK8grO%2FqQ3iKduQmOXFgakuhOn6iU%2BndjN1jXuu8JBXSxslK2EiGf2aXxOGPcqEzda5Xca2tvQ%3D%3D\"}]}\r\nage: 1584\r\ncf-cache-status: HIT\r\netag: W/\"69a54638b649d7ce4748bd42c4b6dade\"\r\ncontent-encoding: br\r\ncf-ray: 9b5859739afea0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"69a54638b649d7ce4748bd42c4b6dade","sha1":"a2dfe9f8791952fbc5cc44d4757b031a6cee1731","sha256":"0c25fbbff92c994866041b57d519aa22aa84d55b6b31bcf681dd5b74668cb750","sha512":"1e98b8977577f6daca587310456d38ab870571a0bec392072f38287d274465b3ebc867e6eefe5efd7653c7c0d2a23dabe7636a94c0cfda52321a84fd68d868e3","ssdeep":"","tlshash":"1ac08c09220b0f0389c83c23a223352a0b422bbaeb033730c262c3012c8c1b734e33cc","first_seen":"2023-04-07T07:09:28Z","last_seen":"2026-05-20T19:58:08.520726Z","times_seen":3887,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-29","alert":"Sinkholed","trigger":"creative.eiscprts.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go.eiscprts.com/config?url=https%3A%2F%2Fcreative.eiscprts.com%2Fwidgets%2Fv4%2FUniversal%3Fautoplay%3DonHover%26thumbsMargin%3D2%26hideTitleOnSmallSpots%3D0%26memberId%3D%7Bclickid%7D%26sourceId%3D%7BpublisherId%7D%26tag%3Dgirls%26userId%3Db2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","fqdn":"go.eiscprts.com","domain":"eiscprts.com","tld":"com"},"ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:47.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.eiscprts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 14:45:26 GMT","end":"Mon, 09 Feb 2026 15:45:16 GMT"},"fingerprint":{"sha1":"43:67:8E:5F:6D:0A:5F:A8:98:F4:FF:58:86:72:01:0D:AE:A4:95:5D","sha256":"0C:3B:61:10:5C:73:A6:CA:FA:02:07:F1:74:31:54:E2:0A:6A:48:B8:3D:B3:04:45:D1:A3:F5:01:64:31:9E:09"}}},"request":{"raw":"GET /config?url=https%3A%2F%2Fcreative.eiscprts.com%2Fwidgets%2Fv4%2FUniversal%3Fautoplay%3DonHover%26thumbsMargin%3D2%26hideTitleOnSmallSpots%3D0%26memberId%3D%7Bclickid%7D%26sourceId%3D%7BpublisherId%7D%26tag%3Dgirls%26userId%3Db2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908 HTTP/1.1\r\nHost: go.eiscprts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.eiscprts.com/\r\nOrigin: https://creative.eiscprts.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 09:42:47 GMT\r\ncontent-type: application/json\r\ncf-ray: 9b585973cae956ca-OSL\r\naccess-control-allow-origin: https://creative.eiscprts.com\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7476,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6b5c974fb21db4d0fd9d7b0f5a7a1ffc","sha1":"a5e9116d73360ca0b9f0b5959f4efe83ccf0b0cb","sha256":"6390aedab0f0c2139b0c31b34c72ac40080b713de407f50a9cd6e8bce5efc691","sha512":"550350483bfcc8f14ef046cbfc4fa285324e81fb51e56d77336956ac83d5bbbcd55d6a9e8c1ea01350fe151b8ca76fc4ac3c5f95ea9e47ca082379b9f2c4a1e2","ssdeep":"192:wDytvt47mEQkUH/lnQoUw4Hh8nyayqh13/7VlloqJIwm13Y6yQ13/7VlloqJIw1:VtMNQkS/VQw+lg5eH","tlshash":"04f131ef821d68fb06844d5ebe1eb8c46a5c44bb4e8149ebec5c8834525c3b112bb74d","first_seen":"2025-12-29T09:43:15.464892Z","last_seen":"2025-12-29T09:43:15.464892Z","times_seen":1,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":24,"dns":4,"connect":1,"send":0,"wait":37,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767001200/222404103_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:47.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767001200/222404103_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.eiscprts.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 09:42:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7030\r\ncf-ray: 9b585975dd250731-OSL\r\netag: \"b201ea746a660c6f86b0fa28c6ecb52a\"\r\nlast-modified: Mon, 29 Dec 2025 09:39:06 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 159\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7030,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b201ea746a660c6f86b0fa28c6ecb52a","sha1":"6f8cc260ea50a7dd7f4d7db75e6eab2633ef23f1","sha256":"f0661b72aed9b8914bc4300a491312ac782b27b33d2afbfff4f75a04c7a2a78d","sha512":"835c3eeafeac98b157c4a8b06a706a2de50431846db18451edfcce67afcb1a54ee71cda6c78a6e4e8ed074b457ba82403340b60a8f94ab20b6ef9aca035d1f9d","ssdeep":"192:Z75siPl43dK4rjNUZwtVqvp0b2zFyyEOKR+He8a7y:Zu043dnN+E2o/9+/","tlshash":"53e1aeb7dbbfd7d980d22d40f07919326044bbde8c2be452973805d2ae763023ac5493","first_seen":"2025-12-29T09:43:15.46615Z","last_seen":"2025-12-29T09:43:15.46615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":75,"dns":4,"connect":2,"send":0,"wait":11,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.doppiocdn.com/thumbs/1767001050/225225984_webp","fqdn":"img.doppiocdn.com","domain":"doppiocdn.com","tld":"com"},"ip":{"addr":"104.17.222.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.eiscprts.com/widgets/v4/Universal?autoplay=onHover\u0026thumbsMargin=2\u0026hideTitleOnSmallSpots=0\u0026memberId={clickid}\u0026sourceId={publisherId}\u0026tag=girls\u0026userId=b2442130d858d641e32788b3e1481664e7a354a0f9ac9bdcd865538efd799908","date":"2025-12-29T09:42:47.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"doppiocdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 15:12:47 GMT","end":"Fri, 27 Feb 2026 16:12:34 GMT"},"fingerprint":{"sha1":"BC:86:8F:82:CD:42:34:7D:89:69:39:1A:9E:26:D9:55:D1:EE:00:B5","sha256":"26:94:0F:9D:11:5C:EA:16:E2:C9:47:AC:FF:6C:03:D5:69:9E:D0:6F:44:03:64:A1:EA:BF:2E:7B:2E:1E:69:83"}}},"request":{"raw":"GET /thumbs/1767001050/225225984_webp HTTP/1.1\r\nHost: img.doppiocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.eiscprts.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 09:42:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4682\r\ncf-ray: 9b5859759cb80731-OSL\r\netag: \"e82cbb83dcf260a84817e10d24d95ba9\"\r\nlast-modified: Mon, 29 Dec 2025 09:36:36 GMT\r\nx-proxy-cache-orig: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=1800, s-maxage=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nage: 305\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4682,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e82cbb83dcf260a84817e10d24d95ba9","sha1":"06e7c15b7686550a577dd95c34c2d0c0db233203","sha256":"bd04d1194ba7e755b6561c3f021b402ef2bb73cd502664deb08162cc85e0e1c0","sha512":"385315e9dfaca5c1417297284a26b353e4eb77f6f33d8327d800456a28967c7860935a3f12748574836883126652d7eec8ed134f2bd2776efcb9d3accc0f3bcf","ssdeep":"96:sWIafwFFN5TQ+cLOtlIPoMqHcVPrYiwREXUS8LsSoZg0uOoPWhi4tvH:sLaoxQ+cRovHOjYiUEXUpnoNuOoPMxf","tlshash":"09a18cc2d507eaf9d39d00834e52d61273003053349ccf57018fa8b9a8cfd96b82883a","first_seen":"2025-12-29T09:43:15.467443Z","last_seen":"2025-12-29T09:43:15.467443Z","times_seen":1,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}