{"report_id":"36b507e2-4549-49ae-a63b-1b633d921ed3","version":6,"status":"done","tags":[],"date":"2024-12-26T23:03:46Z","url":{"schema":"http","addr":"poop.skin/e/5m4670oun9xb","fqdn":"poop.skin","domain":"poop.skin","tld":"skin"},"ip":{"addr":"172.67.168.206","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"poo.phd/e/5m4670oun9xb","fqdn":"poo.phd","domain":"poo.phd","tld":"phd"},"title":"ngewe pulang sekolah - .mp4 - PoopHD - PoopHD"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"","expires_at":"2027-03-06T23:03:46Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fp.metricswpsh.com","ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-10-29","domain_rank":0,"first_seen":"2022-04-22T11:20:32Z","last_seen":"2024-12-25T22:51:12.860093Z","alert_count":0,"request_count":2,"received_data":699,"sent_data":1000,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":1294,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2024-12-25T01:59:27.57372Z","alert_count":0,"request_count":1,"received_data":38785,"sent_data":478,"comment":"","tags":null,"fingerprints":null},{"fqdn":"nereserv.com","ip":{"addr":"168.119.25.102","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2020-12-21","domain_rank":40015,"first_seen":"2020-12-21T11:07:56Z","last_seen":"2024-12-20T22:58:51.982078Z","alert_count":0,"request_count":4,"received_data":1280,"sent_data":2223,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mp4skin.com","ip":{"addr":"172.67.154.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2023-05-01","domain_rank":0,"first_seen":"2023-05-11T13:44:52Z","last_seen":"2024-12-15T15:27:34.926069Z","alert_count":0,"request_count":3,"received_data":187461,"sent_data":1606,"comment":"","tags":null,"fingerprints":null},{"fqdn":"683bf625f2.6e6ab61908.com","ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2024-11-26","domain_rank":0,"first_seen":"2024-12-26T10:49:36.789388Z","last_seen":"2024-12-26T10:49:36.789388Z","alert_count":7,"request_count":7,"received_data":7105,"sent_data":14127,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ab56a2a85e.572a8a28b5.com","ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-11-26","domain_rank":0,"first_seen":"2024-12-26T14:17:58.48299Z","last_seen":"2024-12-26T14:17:58.48299Z","alert_count":0,"request_count":1,"received_data":343,"sent_data":815,"comment":"","tags":null,"fingerprints":null},{"fqdn":"dx4.poopstream.co","ip":{"addr":"104.21.58.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-03-14","domain_rank":0,"first_seen":"2024-10-22T01:36:32.86572Z","last_seen":"2024-12-22T18:44:21.608686Z","alert_count":0,"request_count":1,"received_data":12562,"sent_data":418,"comment":"","tags":null,"fingerprints":null},{"fqdn":"poo.phd","ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-12-02","domain_rank":0,"first_seen":"2024-12-21T07:31:51.027135Z","last_seen":"2024-12-21T07:31:51.027135Z","alert_count":0,"request_count":3,"received_data":13008,"sent_data":1511,"comment":"","tags":null,"fingerprints":null},{"fqdn":"s3t3d2y8.afcdn.net","ip":{"addr":"95.173.205.15","port":443,"asn":49025,"as":"PRO-ZETA a.s.","country":"Czechia","country_code":"CZ"},"domain_registered":"2022-06-27","domain_rank":0,"first_seen":"2022-08-08T22:22:56Z","last_seen":"2024-12-26T12:42:38.016608Z","alert_count":0,"request_count":2,"received_data":52998,"sent_data":890,"comment":"","tags":null,"fingerprints":null},{"fqdn":"s.optvz.com","ip":{"addr":"95.211.229.245","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2020-03-25","domain_rank":0,"first_seen":"2024-10-14T14:12:37Z","last_seen":"2024-12-25T07:12:35.242381Z","alert_count":0,"request_count":1,"received_data":474,"sent_data":1170,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":235,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2024-12-25T01:47:55.733185Z","alert_count":0,"request_count":1,"received_data":28974,"sent_data":457,"comment":"","tags":null,"fingerprints":null},{"fqdn":"metrolagu.cam","ip":{"addr":"172.67.147.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2023-03-24","domain_rank":0,"first_seen":"2023-08-23T10:17:15Z","last_seen":"2024-12-22T22:47:35.270295Z","alert_count":0,"request_count":4,"received_data":63931,"sent_data":2053,"comment":"","tags":null,"fingerprints":null},{"fqdn":"my.rtmark.net","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"domain_registered":"2014-10-29","domain_rank":9054,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2024-12-25T10:11:28.974166Z","alert_count":0,"request_count":1,"received_data":1368,"sent_data":457,"comment":"","tags":null,"fingerprints":null},{"fqdn":"meenetiy.com","ip":{"addr":"139.45.197.119","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2023-01-04","domain_rank":0,"first_seen":"2023-01-04T09:41:02Z","last_seen":"2024-12-15T15:27:35.199898Z","alert_count":3,"request_count":3,"received_data":39040,"sent_data":2777,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.bookmsg.com","ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2020-09-15","domain_rank":47495,"first_seen":"2020-11-24T14:56:32Z","last_seen":"2024-12-20T19:47:53.565179Z","alert_count":0,"request_count":6,"received_data":6741,"sent_data":2791,"comment":"","tags":null,"fingerprints":null},{"fqdn":"be1c6e25e9.ca6d30883b.com","ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-11-26","domain_rank":0,"first_seen":"2024-12-26T10:56:48Z","last_seen":"2024-12-26T16:37:56.15746Z","alert_count":6,"request_count":6,"received_data":1531301,"sent_data":2651,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pagead2.googlesyndication.com","ip":{"addr":"216.58.211.2","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2003-01-21","domain_rank":101,"first_seen":"2012-05-21T07:15:40Z","last_seen":"2024-12-25T12:09:45.735379Z","alert_count":0,"request_count":1,"received_data":160074,"sent_data":455,"comment":"","tags":null,"fingerprints":null},{"fqdn":"storage.multstorage.com","ip":{"addr":"104.21.30.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-09-22","domain_rank":0,"first_seen":"2023-09-22T12:56:00Z","last_seen":"2024-12-20T15:40:45.976978Z","alert_count":0,"request_count":1,"received_data":1793,"sent_data":517,"comment":"","tags":null,"fingerprints":null},{"fqdn":"accounts.google.com","ip":{"addr":"173.194.220.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":81,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2024-12-25T03:33:15.31226Z","alert_count":0,"request_count":3,"received_data":19477,"sent_data":1746,"comment":"","tags":null,"fingerprints":null},{"fqdn":"poop.skin","ip":{"addr":"172.67.168.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2024-12-19","domain_rank":0,"first_seen":"2024-09-24T18:48:02Z","last_seen":"2024-12-20T13:05:15Z","alert_count":0,"request_count":1,"received_data":801,"sent_data":478,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ax4.poopstream.co","ip":{"addr":"172.67.200.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2024-03-14","domain_rank":0,"first_seen":"2024-10-22T01:36:32.875339Z","last_seen":"2024-12-22T18:44:21.606954Z","alert_count":0,"request_count":3,"received_data":6824,"sent_data":1290,"comment":"","tags":null,"fingerprints":null},{"fqdn":"enrtx.com","ip":{"addr":"94.130.197.239","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2024-10-07","domain_rank":0,"first_seen":"2024-11-04T09:19:58Z","last_seen":"2024-12-22T00:00:57.628646Z","alert_count":0,"request_count":1,"received_data":4039,"sent_data":464,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":75,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2024-12-25T01:48:42.147372Z","alert_count":0,"request_count":1,"received_data":110864,"sent_data":414,"comment":"","tags":null,"fingerprints":null},{"fqdn":"uk.pivotsforints.com","ip":{"addr":"23.109.170.127","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-10-19","domain_rank":0,"first_seen":"2024-11-07T04:12:11.603922Z","last_seen":"2024-12-22T22:47:35.270146Z","alert_count":1,"request_count":1,"received_data":1469,"sent_data":410,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-26","alert":"Sinkholed","trigger":"6e6ab61908.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-26","alert":"Sinkholed","trigger":"6e6ab61908.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-26","alert":"Sinkholed","trigger":"meenetiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-26","alert":"Sinkholed","trigger":"meenetiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-26","alert":"Sinkholed","trigger":"6e6ab61908.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-26","alert":"Sinkholed","trigger":"6e6ab61908.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-26","alert":"Sinkholed","trigger":"6e6ab61908.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-26","alert":"Sinkholed","trigger":"6e6ab61908.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-26","alert":"Sinkholed","trigger":"6e6ab61908.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-26","alert":"Sinkholed","trigger":"pivotsforints.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-26","alert":"Sinkholed","trigger":"ca6d30883b.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-26","alert":"Sinkholed","trigger":"ca6d30883b.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-26","alert":"Sinkholed","trigger":"ca6d30883b.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-26","alert":"Sinkholed","trigger":"meenetiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-26","alert":"Sinkholed","trigger":"ca6d30883b.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-26","alert":"Sinkholed","trigger":"ca6d30883b.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-26","alert":"Sinkholed","trigger":"ca6d30883b.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"metrolagu.cam/watch?v=vve-1aKPqmI","fqdn":"metrolagu.cam","domain":"metrolagu.cam","tld":"cam"},"ip":{"addr":"172.67.147.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poo.phd/e/5m4670oun9xb","fqdn":"poo.phd","domain":"poo.phd","tld":"phd"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"70149db652fefb495786f7aecfb1b149","sha1":"efbfbb45f6914b002e4ead9df4bd8f25809e85e5","sha256":"55462b5132a11d5e994ba5a27782a320b384a824df43f80f75599ff5d2553c19","sha512":"ee3745015258cae1bc8efbb40e6b76e0cff2ac491ffc71cf67d262f41c46fe97e3e389792c263b0abde3b0fef2f20814c3e5135ab34e53a8345d4ccfe7d59668","ssdeep":"","tlshash":"e731025b7ed102e607da13673c2f3586e5a5ec5d38e05105901679fa7d18420c4f6b78","size":1656,"data":"","first_seen":"2024-12-26T23:03:50.51641Z","last_seen":"2024-12-26T23:03:51.812071Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"be1c6e25e9.ca6d30883b.com/a9d6a07d87f62b3487809a95a3b11612.js","fqdn":"be1c6e25e9.ca6d30883b.com","domain":"ca6d30883b.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e876483aeeb7452330722923d2757b1","sha1":"625974b69dd0310fb965bcf9da2027816afed4cd","sha256":"0a04d64415ae748465a3b3a51b0cdbd59162eacbdde93433381a73f00c5c1970","sha512":"2952539b8951c206dff21c4d771a33bf53fc257fb5c83aa67136284eb075d02e27a2751147d49cc6ed0f43edc998848dba7c306164b198783932e84f57ff7294","ssdeep":"12288:mkCz69xMy6+/RxvaZ3SEHgi5Kh99dF95SuIiVG+u16X0cP98y2onkZJ50sU/bvbx:7CzsGgEKh9jVN7X0qn7Ee","tlshash":"87c438222291113db07fc4c6aa662b8e336df207e9134f14f9af6ba583d7d54f625384","size":552723,"data":"","first_seen":"2024-12-26T13:32:54.333232Z","last_seen":"2024-12-28T09:22:56.304982Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"be1c6e25e9.ca6d30883b.com/bfc14d10224fb4e562d5d9a7e4e020b6.js","fqdn":"be1c6e25e9.ca6d30883b.com","domain":"ca6d30883b.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"de644f1c86b24df53fd021f17f75ac2e","sha1":"045c83a53bd32d3b059371255bf7b254f5a9233e","sha256":"e2169889c4ed69b44773f6b1bba57b4b49c2b62a7690d4ce66a192809fc90332","sha512":"8dbe2029be439eee844d3bf7b1d750d9aacc3e0e07831b15a461779477c896ff0d01ec1747a834c9e7e5dee24f77be4b47a4bed0d6b75edb11c160dee835d4c8","ssdeep":"768:ubI/LHTKRDldVAgWyNBOb2qcKTUCVSmaXyJ2M7c4fySGJgoZNZWMtupzSPCOPYvk:NLeNQKBObwCS3yJ7734HEO86","tlshash":"fda318cdf3c1b13442f7a5a9942f180ab33e2919f845442cb565dad138bd88f9217fba","size":107378,"data":"","first_seen":"2024-12-11T21:09:02.385312Z","last_seen":"2025-01-10T15:41:53.238488Z","times_seen":315,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poo.phd/e/5m4670oun9xb","fqdn":"poo.phd","domain":"poo.phd","tld":"phd"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"eeed368413469275e3ee01f81d506e3b","sha1":"f0b2023738dda3d9f81f01101ffddc539dd5c919","sha256":"4f96b2f1bc98f9dce38413ca59d5fe7c0f994b467965421be18e634d5dfaab9e","sha512":"5d45e1b9ddc293a2a5cf80789d813f91065c721c6e0926fd2ef12c8cb31017cfda2742fc2de0b00aeb16f929963a6325bc764920f77c04b1f8216f343cfcc073","ssdeep":"96:HWJnGHjVvxkh0NhBaJzOHp+G1EbCQiQZAJ1tTBn0yXS+tpTQxA:2oDhxf9H9eWQVAhB08TH","tlshash":"22d1f1f6b9bb334d979371ea2d161141500098a903adbc98fa64f2d5fcb4cfe192b350","size":6404,"data":"","first_seen":"2023-10-24T06:38:45Z","last_seen":"2026-06-16T04:51:57.120845Z","times_seen":873,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-RRBBHD087X","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"485f4963500f8425697ee130434deb9b","sha1":"b14d37a845cd06eadef41666c1614c04d5671d01","sha256":"abf5af8a1b809fb5ae37443357d67b15e7bbc1073443a51c299ac3a4917e575d","sha512":"334fb09e83d6cdb52607b5d084c8f65709b537ee1f1441d9cc7ad6a2ba3dcdba564800abb752cbb8a2e8040c222b0e1143699106ca5b1f29d2ceabf9832305ce","ssdeep":"6144:W43hYnsmQ8pIZ1HcRCrKkEZMf3/vrfNJuT+bseo:/3hm9pI7Hc8bDbo","tlshash":"146429deb3c774265296e478507f028ba57b28a2b40cc8d5f189cce42d74a9a4277f7c","size":330813,"data":"","first_seen":"2024-12-26T23:03:50.467321Z","last_seen":"2024-12-26T23:03:51.760986Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uk.pivotsforints.com/ryXb2oiPSKP/64343","fqdn":"uk.pivotsforints.com","domain":"pivotsforints.com","tld":"com"},"ip":{"addr":"23.109.170.127","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"c710000000000000000000000000000030000000000000000000000000000000000000","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"be1c6e25e9.ca6d30883b.com/a8514643546b53750c252df18c531ac2.js","fqdn":"be1c6e25e9.ca6d30883b.com","domain":"ca6d30883b.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"19c6f6233262cf16d5b6e475f3d8a44c","sha1":"f172778db5959e847ce5d378947c56fe75f6df56","sha256":"78c30b418896961856ee26e09ac3990b9e790852ad1333a0d30e8ede9f771a6f","sha512":"5ac8b487779e6058f7e7be81bcb0d7b984d8734b176f2f0a0be14ad0283ee2894cc35b5f73d21d7028d92416c05bc318c20e53ff638223cf81f3c7e7c7703799","ssdeep":"1536:CiXvaCdnW4+hfjc4NJbW5n7YsJZQLJnaO2XCkMB6rWOk9+cdbX8H9yUO:1+ljZbM7YgZmn+z00S","tlshash":"09c31addb3d7b07443e75064a43f1206b73a1a16784c8414f7a6e9c0b87cd9a9227f7a","size":122015,"data":"","first_seen":"2024-12-05T15:05:36.737962Z","last_seen":"2025-01-22T09:19:27.931305Z","times_seen":1163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.multstorage.com/log/count.html","fqdn":"storage.multstorage.com","domain":"multstorage.com","tld":"com"},"ip":{"addr":"104.21.30.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f697a0f2411e463adbc1211493fe5a6","sha1":"93c154152bda427938543b8efbd8d3b594abbac7","sha256":"08a5735f5232b651af89f552e8d0fb7b21d6605fba48f335318699d80d12703e","sha512":"4dc32d6712d024f1a2f8b2dd33749a075f13f69a2f7af664c3b5d61e31a74e81eeee3b8e1cd6f893fe0a324adef1772e340df95e338de0e47afe5c0d19e9fd10","ssdeep":"","tlshash":"b001640ef6406c6c886188be396a3d2228b1a015547a6da17425e9827b808ee8163bc2","size":718,"data":"","first_seen":"2023-09-18T17:19:52Z","last_seen":"2025-03-01T23:33:09.846843Z","times_seen":12563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-06-19T22:04:57.951996Z","times_seen":337418,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"be1c6e25e9.ca6d30883b.com/9e4d69f4cab39bd4cbbba618df9906f9.js","fqdn":"be1c6e25e9.ca6d30883b.com","domain":"ca6d30883b.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f529b5850e51a490ce655d327097ec3","sha1":"5691a7da072bc4cb55031a2d7e2c71d4bc054d6a","sha256":"5d3ff6b489dcee7f67046a49b5d4c15af90e1e1f717bf59cce9e318c627f29b9","sha512":"e22fd59658129ddb4204bb88242452a4a0de38d9465bb2503be947ded607365b0a8d5c26c3f7f94420c78c38ac5a71dfa1252728be7c9bb16ded9a139084cd0c","ssdeep":"1536:eO4lqELn1iLHPazoEdJQvMrX9GOdcT2Ep8SLjX3lvSiWIsQlkD7jGg+pGzmZX0+k:sdLYKUek6F0jFXlUjGmmZwq12","tlshash":"e5144bc5b681343407a3a27b906f060ab33c29057626446cf5f6ded629bad8e6373f71","size":190522,"data":"","first_seen":"2024-12-26T13:32:54.337892Z","last_seen":"2024-12-28T09:22:56.327045Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meenetiy.com/5/6678850","fqdn":"meenetiy.com","domain":"meenetiy.com","tld":"com"},"ip":{"addr":"139.45.197.119","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6a41cca03f16b8f46b994a54e52d9c9","sha1":"c611eb60be2ab7e06402d00c729bfd04921c7268","sha256":"6d3076a5d9e4482c24ac7da13e93c5d58ec24198f467ce2081f7031a7c50cdee","sha512":"4d0b1ca21cb3e82cafe5f518f47648989ea3d6a140b4eca300c30e1cc29c683834be6d887000f1ed8a7dca71250a83d07886c84b46e5e436b1f4cb26e5edd9b2","ssdeep":"1536:rcLD0tMEvxkEwvw19mKenMRx6xW3ythkK0LEbjlWPE+O1:4LD0dvxpLeng6x9thOLE/lWPEb1","tlshash":"91730a95b6f2b9a646de402048bf4d1d47fad850110fcb74d17a9df2366082893bbef8","size":76151,"data":"","first_seen":"2024-12-26T23:03:50.527847Z","last_seen":"2024-12-26T23:03:50.527847Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"be20a405939351d4f305b2bce3fcb964","sha1":"dd74de554599bc44aac0b4731c30dfa068541275","sha256":"e4756cd027c0aa2c58ccb01bfbcd026587d2036cd7f07545d8c42fdb466406f9","sha512":"64d77c04be56e2f59c4d775e98630848c7e8236e2da2b316e9aa0ccd32bcd11f76b0728502acb1d304fc0a510007423869906bd31d743bc0febd1178045a1954","ssdeep":"","tlshash":"4dc01280f6641bb120ba14c63b075d01e1d615954eb430e2520c585df7424cb9785261","size":170,"data":"","first_seen":"2024-12-26T23:03:50.52914Z","last_seen":"2024-12-26T23:03:50.52914Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-06-20T01:44:02.256587Z","times_seen":252904,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poo.phd/e/5m4670oun9xb","fqdn":"poo.phd","domain":"poo.phd","tld":"phd"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"22c708960fa4273b7d8305d4f16f8a04","sha1":"ad35d9708e91a80970874efcf312ddf28557b89f","sha256":"9ba73aeeb78e328dfd69962014fe1ea785cb4c9c4895706011869d3745f770b5","sha512":"075eb89c8c76068f5764cf2ef38334348a4d2d6cd7ce4778e16488ede7d011f9c93b6bbc46344fb149b4623fb4f92045bf4597cb75c2b2b72920f2dcf2ad95bd","ssdeep":"","tlshash":"17f0a0fff9bb25f40a37b134af9e5348b43300072001dd027e6d49c92fa4e002865ad9","size":478,"data":"","first_seen":"2024-09-27T02:34:35Z","last_seen":"2025-06-12T21:51:24.294263Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poo.phd/e/5m4670oun9xb","fqdn":"poo.phd","domain":"poo.phd","tld":"phd"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"73a6ebf3b00f83c3c9f8bc653869cfc5","sha1":"924d36f61b7cb12b229ecb1b64691eb49439480c","sha256":"b651edc3f5e0ab0949d63f224d575452108d29873cad2dd54cb59fa15566bd9f","sha512":"464fa009e0e93f64e30fec74cd2657aece0416e2c03637891962a0fd042cc5db71e895bdafecd71c47c6cb288834bfcae0a3ce50ebb43045b616615115bf381a","ssdeep":"","tlshash":"03c02b8c310a0cb481f72700cb3fb600f003321494d06931494e63084e30f07d754814","size":153,"data":"","first_seen":"2024-02-17T06:52:43Z","last_seen":"2025-03-08T17:15:26.529133Z","times_seen":192,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"poop.skin/e/5m4670oun9xb","fqdn":"poop.skin","domain":"poop.skin","tld":"skin"},"ip":{"addr":"172.67.168.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-12-26T23:03:19.559Z","timestamp":1735254199559,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poop.skin","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Dec 2024 13:27:36 GMT","end":"Wed, 19 Mar 2025 14:26:15 GMT"},"fingerprint":{"sha1":"70:A7:75:6A:91:83:AA:50:3C:01:71:D5:FF:40:19:AC:74:BB:AC:B6","sha256":"CA:E2:3A:BF:45:F0:63:3B:8A:DD:64:FE:6E:18:F0:8C:1B:82:DA:A7:09:19:0C:66:F9:C8:DA:07:C8:60:78:6D"}}},"request":{"raw":"GET /e/5m4670oun9xb HTTP/1.1\r\nHost: poop.skin\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Thu, 26 Dec 2024 23:03:19 GMT\r\ncontent-type: text/html\r\ncontent-length: 167\r\nlocation: https://poo.phd/e/5m4670oun9xb\r\ncache-control: max-age=3600\r\nexpires: Fri, 27 Dec 2024 00:03:19 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Lj1NmAmZJ2v5fhtpZF2lhzv3u1TtZvbV5%2BjpafiD9J3N6L23kIM6sFhM6WrDA4NRKbI%2BNkJHckzu7XMZNpxkGei8P11rWzBa1324azoz5TAULuw05E1EQY%2FLO0Y%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8f84b41b6f580b31-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":167,"size_decoded":167,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"0104c301c5e02bd6148b8703d19b3a73","sha1":"7436e0b4b1f8c222c38069890b75fa2baf9ca620","sha256":"446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f","sha512":"84427b656a6234a651a6d8285c103645b861a18a6c5af4abb5cb4f3beb5a4f0df4a74603a0896c7608790fbb886dc40508e92d5709f44dca05dd46c8316d15bf","ssdeep":"","tlshash":"c4c08cad6b523c98b8a73b3960c3a1a0e2ec803022d9042202b04a07f0cb1e78ec23d1","first_seen":"2023-04-05T06:32:17Z","last_seen":"2026-06-13T22:25:52.376655Z","times_seen":190495,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":26,"dns":1,"connect":3,"send":0,"wait":25,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-RRBBHD087X","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:20.562Z","timestamp":1735254200562,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Dec 2024 08:35:56 GMT","end":"Mon, 24 Feb 2025 08:35:55 GMT"},"fingerprint":{"sha1":"FA:A6:D6:5C:A6:DC:BE:D1:9A:34:42:70:3B:66:13:21:40:A4:C9:E4","sha256":"41:36:66:15:B5:C4:D0:C2:E0:1D:F2:84:7E:02:FF:F9:57:8F:90:DC:69:BE:A7:1F:AF:08:5A:BB:3D:81:3E:DB"}}},"request":{"raw":"GET /gtag/js?id=G-RRBBHD087X HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poo.phd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 26 Dec 2024 23:03:20 GMT\r\nexpires: Thu, 26 Dec 2024 23:03:20 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting\r\nreport-to: {\"group\":\"coop_reporting\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 109869\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":109869,"size_decoded":330813,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5945)","md5":"485f4963500f8425697ee130434deb9b","sha1":"b14d37a845cd06eadef41666c1614c04d5671d01","sha256":"abf5af8a1b809fb5ae37443357d67b15e7bbc1073443a51c299ac3a4917e575d","sha512":"334fb09e83d6cdb52607b5d084c8f65709b537ee1f1441d9cc7ad6a2ba3dcdba564800abb752cbb8a2e8040c222b0e1143699106ca5b1f29d2ceabf9832305ce","ssdeep":"6144:W43hYnsmQ8pIZ1HcRCrKkEZMf3/vrfNJuT+bseo:/3hm9pI7Hc8bDbo","tlshash":"146429deb3c774265296e478507f028ba57b28a2b40cc8d5f189cce42d74a9a4277f7c","first_seen":"2024-12-26T23:03:50.467321Z","last_seen":"2024-12-26T23:03:51.760986Z","times_seen":2,"resource_available":true,"data":null}},"time_used":345,"timings":{"blocked":121,"dns":0,"connect":21,"send":0,"wait":43,"receive":51,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dx4.poopstream.co/X3XKLRGk9.jpg","fqdn":"dx4.poopstream.co","domain":"poopstream.co","tld":"co"},"ip":{"addr":"104.21.58.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metrolagu.cam/watch?v=vve-1aKPqmI","date":"2024-12-26T23:03:23.267Z","timestamp":1735254203267,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dx4.poopstream.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Dec 2024 08:02:41 GMT","end":"Wed, 19 Mar 2025 09:02:38 GMT"},"fingerprint":{"sha1":"C4:6A:D4:A0:31:31:CD:0A:11:F1:11:D3:8B:8A:CC:C5:1B:9F:28:FC","sha256":"F6:81:5F:24:29:E2:DE:C9:89:13:A1:49:6B:50:BF:53:74:CF:6D:49:78:B0:20:07:32:2C:AA:A5:47:63:61:B3"}}},"request":{"raw":"GET /X3XKLRGk9.jpg HTTP/1.1\r\nHost: dx4.poopstream.co\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poo.phd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Dec 2024 23:03:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11618\r\netag: \"ed31ccaf8b692d99403889ee453cbe46\"\r\nlast-modified: Sun, 15 Dec 2024 07:53:36 GMT\r\nvary: Accept-Encoding\r\ncache-control: max-age=1200\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=6l8wOix0cdTVaEKKP0%2BoIU8Ey9qAt0ajHUmmbWf3Q6%2FyyWqSjb8p%2F0mX4iqCCa%2BtVBpUUSviBLPL3bqtjbbjLG9eu%2BD0wg4lthv8jBpcdxhBjx3VJakdgYBTZU3UQWnFQMiqqQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f84b421ed87b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=5867\u0026min_rtt=443\u0026rtt_var=10801\u0026sent=8\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3197\u0026recv_bytes=1073\u0026delivery_rate=7463917\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7529a7bf6812a090\u0026ts=340\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11618,"size_decoded":11618,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc58.134.100\", baseline, precision 8, 240x427, components 3","md5":"ed31ccaf8b692d99403889ee453cbe46","sha1":"f355831e8840de33ff5bd1cc4492504745b92789","sha256":"c2c5ee2d342788e2999ad4d3f7e34393e8e21b6ebf1b97f01c6582e5dbaa09c8","sha512":"d00705084c7b0573223bf4d80b13b595ab935378fd82bc701df06470bbad711638d5099dd7d1854e57f2b6a5752d7f8b7bc64d120e5b73110cd322360a2f1e44","ssdeep":"192:Pvk3uGISrk/01HTHV6BK9UoJRltmuLVDRVsAdDvupWDxIKjftJxICFkXK8Dzx+15:Pv+lE/wH+KjHltTdbsA5vup+xveYk/xa","tlshash":"fa32bf1f9b7e07c2cd4030bd11b76074144293483be6988fe472889de99fafa92b948c","first_seen":"2024-12-26T23:03:50.469443Z","last_seen":"2024-12-26T23:03:51.762926Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ax4.poopstream.co/favicon-16x16.png","fqdn":"ax4.poopstream.co","domain":"poopstream.co","tld":"co"},"ip":{"addr":"172.67.200.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:21.067Z","timestamp":1735254201067,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ax4.poopstream.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Dec 2024 09:08:50 GMT","end":"Wed, 19 Mar 2025 10:08:49 GMT"},"fingerprint":{"sha1":"2A:3B:7A:45:B3:66:2B:58:D6:9D:CD:11:2C:75:63:01:6D:0A:29:47","sha256":"B6:B0:CB:0B:D7:EE:02:F3:E3:FE:70:B5:BF:4A:0B:B1:08:79:C3:8C:E8:1F:32:C8:A0:FE:E1:D3:5F:96:1A:9F"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: ax4.poopstream.co\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poo.phd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Dec 2024 23:03:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 612\r\netag: \"ac008ea155d4beee1e93247d7434c77d\"\r\nlast-modified: Thu, 14 Mar 2024 17:13:01 GMT\r\nvary: Accept-Encoding\r\ncache-control: max-age=1200\r\ncf-cache-status: HIT\r\nage: 3983\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2gLyXPYdOkQAcm9resufNzBKOsxUaaZs%2F9GbSXj1xsZJLN%2BLiRp%2F3BTvFlxD9lDV8Z8Pop8h2Ey9Cvm4EsmdndDGSR9SmbI0Y%2FvMx9av2LvTg%2BnGFelTpGscHuE5acYpOxVzAQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f84b424a85ab4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1815\u0026min_rtt=472\u0026rtt_var=2669\u0026sent=10\u0026recv=13\u0026lost=0\u0026retrans=0\u0026sent_bytes=4263\u0026recv_bytes=1228\u0026delivery_rate=6776911\u0026cwnd=256\u0026unsent_bytes=0\u0026cid=e30092a82e8a51a0\u0026ts=463\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":612,"size_decoded":612,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"ac008ea155d4beee1e93247d7434c77d","sha1":"f8ea94e94e0cc310202a517a9c445c3d70af564e","sha256":"283e092dad794fdd9212249389fb2acb6d6846f332413ab2af7bbcced9a4957e","sha512":"e4436be8b8cf2586a7437e4e1e3d20c40f117bd8584651c100a98bb086db4151de54ab93d33d7942204c4c3187ceb4eb69023d924c062f97d42f2e8bd0774feb","ssdeep":"","tlshash":"aef002d3a075df39d485561631852384c738465703c31a1db97cf4491c3cb955d6429b","first_seen":"2023-12-17T14:37:56Z","last_seen":"2025-03-09T19:22:55.114809Z","times_seen":288,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ax4.poopstream.co/apple-touch-icon.png","fqdn":"ax4.poopstream.co","domain":"poopstream.co","tld":"co"},"ip":{"addr":"172.67.200.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:21.066Z","timestamp":1735254201066,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ax4.poopstream.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Dec 2024 09:08:50 GMT","end":"Wed, 19 Mar 2025 10:08:49 GMT"},"fingerprint":{"sha1":"2A:3B:7A:45:B3:66:2B:58:D6:9D:CD:11:2C:75:63:01:6D:0A:29:47","sha256":"B6:B0:CB:0B:D7:EE:02:F3:E3:FE:70:B5:BF:4A:0B:B1:08:79:C3:8C:E8:1F:32:C8:A0:FE:E1:D3:5F:96:1A:9F"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: ax4.poopstream.co\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poo.phd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Dec 2024 23:03:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 2766\r\netag: \"e4acc3f05da8195dfa02a437c8b2dba2\"\r\nlast-modified: Thu, 14 Mar 2024 17:13:01 GMT\r\nvary: Accept-Encoding\r\ncache-control: max-age=1200\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3vtyWc%2BL0kXJ34cw4AdD9S289wPtyyuKnp9uvK4QYcoqFUUVFxJrg5WvNvgFf8TaIt2b%2BWC9lkvqre%2Bj9HxQXGCjIqRLl3yXVpVtZzoFrPe4NRveQgFx5k%2BSBNtYclPi5RIf5w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f84b424a859b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1844\u0026min_rtt=472\u0026rtt_var=2058\u0026sent=13\u0026recv=14\u0026lost=0\u0026retrans=0\u0026sent_bytes=5461\u0026recv_bytes=1228\u0026delivery_rate=6776911\u0026cwnd=256\u0026unsent_bytes=0\u0026cid=e30092a82e8a51a0\u0026ts=788\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2766,"size_decoded":2766,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"e4acc3f05da8195dfa02a437c8b2dba2","sha1":"f23df2ed14e5d52417b155ccd11187f3250861dc","sha256":"8b520e4032a17a3fb0410c6e4c7da29f182ca06861aa2d64db1969927e2db0d4","sha512":"07b5f62e03a184290622f60831992ccbe4fafe41e55d6ba2b2d04074fe02fe228358e5ebde35034053bb1f4c9ee1f5d09082f8ed98f5130a6e8f869817e88a85","ssdeep":"","tlshash":"b7512bdff4e8c0db9dd5314d24cf03108754864693c61879ac49cd292d2e5f69d42d9e","first_seen":"2023-12-17T14:37:56Z","last_seen":"2025-02-05T02:31:13.693893Z","times_seen":255,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poo.phd/cdn-cgi/rum?","fqdn":"poo.phd","domain":"poo.phd","tld":"phd"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:21.394Z","timestamp":1735254201394,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poo.phd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Dec 2024 16:48:14 GMT","end":"Thu, 20 Mar 2025 17:48:11 GMT"},"fingerprint":{"sha1":"D6:36:DE:79:30:4A:6D:68:F7:8B:44:4B:F5:6B:48:0A:0F:05:B9:C0","sha256":"BB:68:FC:5B:96:D6:FF:5B:90:40:5B:B7:1B:D1:B8:0D:1C:8F:78:AD:49:60:CD:C4:FB:13:14:4A:71:3E:68:49"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: poo.phd\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1275\r\nOrigin: https://poo.phd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poo.phd/e/5m4670oun9xb\r\nCookie: _ga_RRBBHD087X=GS1.1.1735254200.1.0.1735254200.0.0.0; _ga=GA1.1.2065267447.1735254201\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Thu, 26 Dec 2024 23:03:21 GMT\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://poo.phd\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: cloudflare\r\ncf-ray: 8f84b426b99d56cc-OSL\r\nx-frame-options: DENY\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.multstorage.com/log/count.html","fqdn":"storage.multstorage.com","domain":"multstorage.com","tld":"com"},"ip":{"addr":"104.21.30.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:21.449Z","timestamp":1735254201449,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"multstorage.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Nov 2024 05:42:46 GMT","end":"Thu, 06 Feb 2025 05:42:45 GMT"},"fingerprint":{"sha1":"96:2B:62:41:7C:56:AE:E2:BF:91:30:F3:03:0A:B7:E6:EC:70:67:7B","sha256":"CF:4E:03:B5:2E:40:57:6D:84:9F:9A:15:24:AE:38:E4:95:94:DC:26:4A:3F:C6:4E:50:FB:54:68:C7:F5:72:28"}}},"request":{"raw":"GET /log/count.html HTTP/1.1\r\nHost: storage.multstorage.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poo.phd/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Dec 2024 23:03:21 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 18 Sep 2023 14:39:06 GMT\r\nvary: Accept-Encoding\r\nx-request-id: c4a8521bf3e4ff8991b634bc97bee5cc\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=m6SFuCXLnKRu%2F0XeyPrLoJRKVY%2FvWOPvGHzaa1z8PrsU6%2Bs5IZgxbJplq5KV6XssMI%2F2MAjvKrhaN6OdxLUUd0ItIKMxX0fmTaTWjQEAzrUTmF07s%2FfsRxRunX%2BBhSEMgpctCPUbpXFFnA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f84b4274b4c7127-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=542\u0026min_rtt=502\u0026rtt_var=109\u0026sent=7\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3282\u0026recv_bytes=1281\u0026delivery_rate=7180165\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=e88241a144ff76c1\u0026ts=62\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":894,"size_decoded":882,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (700)","md5":"b728ca9cd183d1b7c3f72116b19b22a3","sha1":"c1fd73f6b02cf00b8bc60b09cc99495e8494b739","sha256":"8a7b1ca4bbf273b32ea865d4785a1944d1b2b133678d9b5fe7ee0406f6fd64b2","sha512":"ce52c8caa65b221d0e8a26b7bfe60d20ac628bc8c4d479c72f904fefd587b87a136d24b32c17e6a87082338e606249463a3c6d8d03e28c50ea81e1c1a408cf48","ssdeep":"","tlshash":"c0119c4eb5002c5c4410826a38aa3e2575a56068802fad6064a6f9c23fd0dcec2d3fc2","first_seen":"2023-09-18T17:42:36Z","last_seen":"2025-11-06T10:55:58.203354Z","times_seen":11635,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":35,"dns":11,"connect":1,"send":0,"wait":47,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=114039","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:21.464Z","timestamp":1735254201464,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 Nov 2024 10:40:28 GMT","end":"Wed, 05 Feb 2025 10:40:27 GMT"},"fingerprint":{"sha1":"EE:9A:59:DB:A9:CD:73:0A:9C:87:AC:9F:FE:A1:90:AA:A1:7E:F8:D4","sha256":"38:8A:84:E0:B0:8B:94:D9:5E:47:4A:A9:D9:A0:73:E7:94:7A:ED:DD:BA:82:A1:00:34:B4:4D:7C:8C:84:A3:1D"}}},"request":{"raw":"OPTIONS /fp?tag_id=114039 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://poo.phd/\r\nOrigin: https://poo.phd\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.20.1\r\nDate: Thu, 26 Dec 2024 23:03:21 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nAccess-Control-Allow-Origin: https://poo.phd\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":108,"dns":1,"connect":24,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=114039","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:21.464Z","timestamp":1735254201464,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 Nov 2024 10:40:28 GMT","end":"Wed, 05 Feb 2025 10:40:27 GMT"},"fingerprint":{"sha1":"EE:9A:59:DB:A9:CD:73:0A:9C:87:AC:9F:FE:A1:90:AA:A1:7E:F8:D4","sha256":"38:8A:84:E0:B0:8B:94:D9:5E:47:4A:A9:D9:A0:73:E7:94:7A:ED:DD:BA:82:A1:00:34:B4:4D:7C:8C:84:A3:1D"}}},"request":{"raw":"POST /fp?tag_id=114039 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 1948\r\nOrigin: https://poo.phd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poo.phd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 500 Internal Server Error\r\nServer: nginx/1.20.1\r\nDate: Thu, 26 Dec 2024 23:03:21 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 36\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://poo.phd\r\nVary: Origin\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":null,"data":{"size":36,"size_decoded":36,"mime_type":"text/plain","magic":"JSON text data","md5":"0849660b654e3a313882a44c0e7dc08a","sha1":"b1493d6ce204eb99837d9b33849d1458093a6e6d","sha256":"6e73b83ae8fcdaf81421a4236c9f817a9e4ea0fa931bf696f72872b266bd83e6","sha512":"a2405a2f44e82cc439d5848c5b719e2e48ebc31f7659f2a7d319994dfb2563443a16bf237b03ff5b2f4af4ec4cc04b6e28d7b2b525df9bde73ea433b01639167","ssdeep":"","tlshash":"a680043303051df713150411340010441f0044c754d1f041414c550713c5445d515304","first_seen":"2023-05-06T07:25:56Z","last_seen":"2026-05-31T16:11:32.72637Z","times_seen":5587,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":108,"dns":1,"connect":24,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:20.564Z","timestamp":1735254200564,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 Nov 2024 08:16:38 GMT","end":"Thu, 30 Jan 2025 08:16:37 GMT"},"fingerprint":{"sha1":"A3:1D:4E:72:41:6A:D8:04:03:98:90:E7:8B:07:8D:A6:88:FE:B6:A3","sha256":"FD:25:12:AF:69:70:3D:0C:C4:CC:48:E3:52:46:61:59:36:AD:30:CA:C3:27:54:B4:C0:93:8B:31:DA:EA:7D:6B"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://poo.phd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poo.phd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Dec 2024 23:03:20 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8f84b42199f81bfa-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38391,"size_decoded":38391,"mime_type":"text/javascript; charset=UTF-8","magic":"gzip compressed data, from Unix","md5":"590c095d501364c2bcd3ed9f23327a88","sha1":"2f7a529d0e64c3197a56e6b4521eefd1d748e826","sha256":"209d88b8c8ed954646fe2285b84c6783b7fe8108a594068fe1c328016adba036","sha512":"784134993a885bfc6e6986d34f7a814859fe3f43cba38430efb5caabc5198d9a131148f84c22e20fc434e29040509e0ff8e546a5afca22beafadb5647b83eb7a","ssdeep":"768:7xmvd3CjmbpRBpu9d6/SA9bWDlemsWEGSpeBK5/TEylarW6QdqUKR:7xmvdoQRM6FpWDs/GAeoybB3UKR","tlshash":"5e03f10b89b3164340d45e299ce8feca8e6582159cf7f672161d9ed9e229fcd440ca54","first_seen":"2024-12-26T23:03:50.477755Z","last_seen":"2024-12-26T23:03:50.477755Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":13,"dns":1,"connect":1,"send":0,"wait":12,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nereserv.com/in/dip?site=native-push\u0026wl=1\u0026event_id=f19e4fe8-44e2-4648-b5e3-85c51e2e8608\u0026subid=357529620\u0026sid=2189038158\u0026spot_id=418774\u0026created_at=2024-12-26\u0026timezone=0\u0026ver=8.202.1\u0026is_native=1","fqdn":"nereserv.com","domain":"nereserv.com","tld":"com"},"ip":{"addr":"168.119.25.102","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:21.900Z","timestamp":1735254201900,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 Nov 2024 10:40:28 GMT","end":"Wed, 05 Feb 2025 10:40:27 GMT"},"fingerprint":{"sha1":"EE:9A:59:DB:A9:CD:73:0A:9C:87:AC:9F:FE:A1:90:AA:A1:7E:F8:D4","sha256":"38:8A:84:E0:B0:8B:94:D9:5E:47:4A:A9:D9:A0:73:E7:94:7A:ED:DD:BA:82:A1:00:34:B4:4D:7C:8C:84:A3:1D"}}},"request":{"raw":"GET /in/dip?site=native-push\u0026wl=1\u0026event_id=f19e4fe8-44e2-4648-b5e3-85c51e2e8608\u0026subid=357529620\u0026sid=2189038158\u0026spot_id=418774\u0026created_at=2024-12-26\u0026timezone=0\u0026ver=8.202.1\u0026is_native=1 HTTP/1.1\r\nHost: nereserv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://poo.phd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poo.phd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Thu, 26 Dec 2024 23:03:21 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":67,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mp4skin.com/embed.css","fqdn":"mp4skin.com","domain":"mp4skin.com","tld":"com"},"ip":{"addr":"172.67.154.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mp4skin.com/watch?V=qqqRuFM3thI","date":"2024-12-26T23:03:21.861Z","timestamp":1735254201861,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mp4skin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Dec 2024 09:59:40 GMT","end":"Sat, 22 Mar 2025 10:54:20 GMT"},"fingerprint":{"sha1":"D8:8E:3D:C3:C6:C0:99:9D:EB:BD:C7:C8:A3:E1:6A:CE:80:58:75:7D","sha256":"BD:1F:3A:F0:4D:79:5E:1D:7D:9E:5C:F0:3D:DD:5D:3E:7F:72:FD:81:61:32:CF:5F:F8:4C:F9:94:C9:3A:19:AE"}}},"request":{"raw":"GET /embed.css HTTP/1.1\r\nHost: mp4skin.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mp4skin.com/watch?V=qqqRuFM3thI\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Dec 2024 23:03:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Nov 2023 14:03:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"655cb8cc-446\"\r\nexpires: Fri, 27 Dec 2024 02:01:55 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 32486\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ObaFfBCkTZhSK6eoMH8XsPcgJls55yrclUNPC%2B58l8bDbrHofR9kg9gyo3eyzjI%2FP7aHDeArtjBfaGs3LTQF9gVWst%2BcIbfeQFBWCPLZUXOiZ4Sc%2BWSLXiwflJehfA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f84b4298e43569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=5561\u0026min_rtt=2373\u0026rtt_var=3055\u0026sent=15\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=5147\u0026recv_bytes=1635\u0026delivery_rate=2439\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=11e2551b012f8ff4\u0026ts=723\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":741,"size_decoded":741,"mime_type":"text/css","magic":"gzip compressed data, from Unix","md5":"d134971dea0547419a6d7c8f4e524cfa","sha1":"da027b59e5c55551b86cfdd11e59a7716f6389ab","sha256":"24379b3cacd2836b352b7238522548ae58c112730cec5ccf31fe26f195655913","sha512":"f6c0e105630de22052d1d4ec98760a61d470167e28e33aa0d7ea997d7ab611391114a6c4ee70b3d91798d2357b49586d32aa1f9808006b19a8d4d0e4041df6d8","ssdeep":"","tlshash":"5301659f67a421f64a34f2257b64dd033a0a44f013104d500809c5f16c02f68afd4def","first_seen":"2024-12-26T23:03:50.479888Z","last_seen":"2024-12-26T23:03:50.479888Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nereserv.com/in/dip?site=native-push\u0026wl=1\u0026event_id=4b64e877-7e81-473e-a988-ed2a7b65c62e\u0026subid=388464194\u0026sid=949871452\u0026spot_id=418776\u0026created_at=2024-12-26\u0026timezone=0\u0026ver=8.202.1\u0026is_native=1","fqdn":"nereserv.com","domain":"nereserv.com","tld":"com"},"ip":{"addr":"168.119.25.102","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:21.879Z","timestamp":1735254201879,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 Nov 2024 10:40:28 GMT","end":"Wed, 05 Feb 2025 10:40:27 GMT"},"fingerprint":{"sha1":"EE:9A:59:DB:A9:CD:73:0A:9C:87:AC:9F:FE:A1:90:AA:A1:7E:F8:D4","sha256":"38:8A:84:E0:B0:8B:94:D9:5E:47:4A:A9:D9:A0:73:E7:94:7A:ED:DD:BA:82:A1:00:34:B4:4D:7C:8C:84:A3:1D"}}},"request":{"raw":"GET /in/dip?site=native-push\u0026wl=1\u0026event_id=4b64e877-7e81-473e-a988-ed2a7b65c62e\u0026subid=388464194\u0026sid=949871452\u0026spot_id=418776\u0026created_at=2024-12-26\u0026timezone=0\u0026ver=8.202.1\u0026is_native=1 HTTP/1.1\r\nHost: nereserv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://poo.phd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poo.phd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Thu, 26 Dec 2024 23:03:22 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":111,"dns":0,"connect":25,"send":0,"wait":26,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nereserv.com/in/dip?event_id=0585e834-10de-4a1c-8836-abeaab7c2b1e\u0026subid=500843478\u0026spot_id=503362\u0026created_at=2024-12-26\u0026timezone=0\u0026ver=1.158.2","fqdn":"nereserv.com","domain":"nereserv.com","tld":"com"},"ip":{"addr":"168.119.25.102","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:21.892Z","timestamp":1735254201892,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 Nov 2024 10:40:28 GMT","end":"Wed, 05 Feb 2025 10:40:27 GMT"},"fingerprint":{"sha1":"EE:9A:59:DB:A9:CD:73:0A:9C:87:AC:9F:FE:A1:90:AA:A1:7E:F8:D4","sha256":"38:8A:84:E0:B0:8B:94:D9:5E:47:4A:A9:D9:A0:73:E7:94:7A:ED:DD:BA:82:A1:00:34:B4:4D:7C:8C:84:A3:1D"}}},"request":{"raw":"GET /in/dip?event_id=0585e834-10de-4a1c-8836-abeaab7c2b1e\u0026subid=500843478\u0026spot_id=503362\u0026created_at=2024-12-26\u0026timezone=0\u0026ver=1.158.2 HTTP/1.1\r\nHost: nereserv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://poo.phd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poo.phd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Thu, 26 Dec 2024 23:03:22 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":109,"dns":4,"connect":29,"send":0,"wait":27,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"683bf625f2.6e6ab61908.com/in/multy","fqdn":"683bf625f2.6e6ab61908.com","domain":"6e6ab61908.com","tld":"com"},"ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:22.111Z","timestamp":1735254202111,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6e6ab61908.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Dec 2024 14:03:26 GMT","end":"Sat, 22 Mar 2025 14:03:25 GMT"},"fingerprint":{"sha1":"95:2D:CE:2B:C1:DB:C5:A4:DA:34:1D:FF:1B:79:47:E1:78:4F:C8:86","sha256":"F0:D5:D1:13:5E:34:1A:9C:97:59:28:C6:69:1E:E9:C4:97:7F:6C:55:EA:8C:97:2E:02:E4:1B:40:04:2A:BF:5A"}}},"request":{"raw":"OPTIONS /in/multy HTTP/1.1\r\nHost: 683bf625f2.6e6ab61908.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://poo.phd/\r\nOrigin: https://poo.phd\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.24.0\r\ndate: Thu, 26 Dec 2024 23:03:22 GMT\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":400,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-26","alert":"Sinkholed","trigger":"6e6ab61908.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"683bf625f2.6e6ab61908.com/in/multy","fqdn":"683bf625f2.6e6ab61908.com","domain":"6e6ab61908.com","tld":"com"},"ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:22.111Z","timestamp":1735254202111,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6e6ab61908.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Dec 2024 14:03:26 GMT","end":"Sat, 22 Mar 2025 14:03:25 GMT"},"fingerprint":{"sha1":"95:2D:CE:2B:C1:DB:C5:A4:DA:34:1D:FF:1B:79:47:E1:78:4F:C8:86","sha256":"F0:D5:D1:13:5E:34:1A:9C:97:59:28:C6:69:1E:E9:C4:97:7F:6C:55:EA:8C:97:2E:02:E4:1B:40:04:2A:BF:5A"}}},"request":{"raw":"OPTIONS /in/multy HTTP/1.1\r\nHost: 683bf625f2.6e6ab61908.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://poo.phd/\r\nOrigin: https://poo.phd\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.24.0\r\ndate: Thu, 26 Dec 2024 23:03:22 GMT\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":400,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-26","alert":"Sinkholed","trigger":"6e6ab61908.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ab56a2a85e.572a8a28b5.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxNjM0ODc0MDAzNzk0Mjg3MDAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIzLjEzNi4wIiwidGFnX2lkIjoxMTQwMzksInNjcmVlbl9yZXNvbHV0aW9uIjoiMTI4MHgxMDI0IiwiYWRibG9jayI6MCwidGltZXpvbmVfb2xzb24iOiJVVEMiLCJ1dG1fc291cmNlIjoiIiwidXRtX21lZGl1bSI6IiIsInV0bV9jYW1wYWlnbiI6IiIsInV0bV9jb250ZW50IjoiIiwibW0iOjAsImluaXRfc3RhcnRfbGF0ZW5jeSI6MC4yNiwiaXNfdjIiOjAsImlzX3YyX2VtcHR5IjowfQ==","fqdn":"ab56a2a85e.572a8a28b5.com","domain":"572a8a28b5.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:21.454Z","timestamp":1735254201454,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ab56a2a85e.572a8a28b5.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Dec 2024 02:47:59 GMT","end":"Sun, 23 Mar 2025 02:47:58 GMT"},"fingerprint":{"sha1":"C7:94:2D:1D:8C:61:E0:F0:33:60:6D:2F:F5:96:C5:DA:B5:38:0E:A7","sha256":"1B:9E:3B:FF:60:5A:3B:21:28:37:BA:92:65:5C:29:D8:13:AE:3F:A5:08:86:32:5C:6A:3F:EB:79:2A:F0:2E:05"}}},"request":{"raw":"GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxNjM0ODc0MDAzNzk0Mjg3MDAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIzLjEzNi4wIiwidGFnX2lkIjoxMTQwMzksInNjcmVlbl9yZXNvbHV0aW9uIjoiMTI4MHgxMDI0IiwiYWRibG9jayI6MCwidGltZXpvbmVfb2xzb24iOiJVVEMiLCJ1dG1fc291cmNlIjoiIiwidXRtX21lZGl1bSI6IiIsInV0bV9jYW1wYWlnbiI6IiIsInV0bV9jb250ZW50IjoiIiwibW0iOjAsImluaXRfc3RhcnRfbGF0ZW5jeSI6MC4yNiwiaXNfdjIiOjAsImlzX3YyX2VtcHR5IjowfQ== HTTP/1.1\r\nHost: ab56a2a85e.572a8a28b5.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://poo.phd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poo.phd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Dec 2024 23:03:22 GMT\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nx-cdn-host-id: ds8137\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":1003,"timings":{"blocked":405,"dns":78,"connect":99,"send":0,"wait":204,"receive":0,"ssl":211},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meenetiy.com/5/6678850","fqdn":"meenetiy.com","domain":"meenetiy.com","tld":"com"},"ip":{"addr":"139.45.197.119","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mp4skin.com/watch?V=qqqRuFM3thI","date":"2024-12-26T23:03:21.863Z","timestamp":1735254201863,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meenetiy.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Dec 2024 05:12:15 GMT","end":"Mon, 24 Mar 2025 05:12:14 GMT"},"fingerprint":{"sha1":"94:A2:14:A5:42:BA:42:10:29:6D:F7:11:0E:F4:7A:A7:67:A9:6D:BA","sha256":"82:5C:94:A3:42:1D:7F:B2:23:2C:83:AB:89:77:0F:98:41:EC:EA:5F:A1:CA:06:6D:D5:5F:CB:BB:98:96:56:53"}}},"request":{"raw":"GET /5/6678850 HTTP/1.1\r\nHost: meenetiy.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mp4skin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 26 Dec 2024 23:03:21 GMT\r\ncontent-type: application/javascript\r\nx-trace-id: 0c74e280dc16ab977629470ca6111548\r\nlink: \u003chttps://my.rtmark.net\u003e; rel=\"preconnect dns-prefetch\"\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\nset-cookie: OAID=00813e94674843eee24e13ac04ad9abe; expires=Fri, 26 Dec 2025 23:03:21 GMT; path=/; secure; SameSite=None\noaidts=1735254201; expires=Fri, 26 Dec 2025 23:03:21 GMT; path=/; secure; SameSite=None\nsyncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT\r\npragma: no-cache, no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35582,"size_decoded":106246,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2d2d11101b3d6e129ddeaaff71a81a21","sha1":"26495ad0f2810cfebd8c31b47d6377ecb7a5f327","sha256":"bfbb9ba0dceca8c635274527fe94c2f5cba1b2b791910ef64de6a0d9c763b629","sha512":"e6963da1899272dd5b6859f2de33a314f3c80918899d6f871f56e1ae2d3621da8c439ea28cd08070ee466ce01875d1b74fc094d3d598986419e6ff2e72d55b2f","ssdeep":"1536:rcLD0tMEvxkEwvw19mKenMRx6xW3ythkK0LEbjlWPE+O0zpI8LF+8NzR2ean:4LD0dvxpLeng6x9thOLE/lWPEbb62ean","tlshash":"93a34a9275f2b99645de402044bf4c2d1bf9d911064f8ab4d27a9df623a042863bfefc","first_seen":"2024-12-26T23:03:50.481714Z","last_seen":"2024-12-26T23:03:50.481714Z","times_seen":1,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":106,"dns":18,"connect":26,"send":0,"wait":57,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-26","alert":"Sinkholed","trigger":"meenetiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mp4skin.com/embud/6278396e756f303736346d35","fqdn":"mp4skin.com","domain":"mp4skin.com","tld":"com"},"ip":{"addr":"172.67.154.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:20.572Z","timestamp":1735254200572,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mp4skin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Dec 2024 09:59:40 GMT","end":"Sat, 22 Mar 2025 10:54:20 GMT"},"fingerprint":{"sha1":"D8:8E:3D:C3:C6:C0:99:9D:EB:BD:C7:C8:A3:E1:6A:CE:80:58:75:7D","sha256":"BD:1F:3A:F0:4D:79:5E:1D:7D:9E:5C:F0:3D:DD:5D:3E:7F:72:FD:81:61:32:CF:5F:F8:4C:F9:94:C9:3A:19:AE"}}},"request":{"raw":"GET /embud/6278396e756f303736346d35 HTTP/1.1\r\nHost: mp4skin.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poo.phd/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Dec 2024 23:03:21 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=pYzdftxOG2MlkTNTjXHDMUoRTviT7kFWoLZH4PHRHgK8HHXvBKR71CAtW4ZvGYAF9fsM8yfdP5nzSLn1Hc8FPc3z1OgTlCC6QiuSbwn%2BvEy0SSpaFQcaQ%2FWRYtWKmA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f84b421ed82b529-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=670\u0026min_rtt=510\u0026rtt_var=316\u0026sent=8\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3272\u0026recv_bytes=1273\u0026delivery_rate=6950400\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=e22cea757f5b71c3\u0026ts=537\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":183489,"size_decoded":243,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"0cad5e41e5c01fddc6c7114023a0a6fb","sha1":"f4a2ef7699ccaa1930b428cedae0aed673108116","sha256":"a7c7cfb89534f367a6ec12b91880faaec9155a789555e6c690d51e42ff67476f","sha512":"466d374afe177d9fdb06a1f4df1f97cc7e727f4e70c244e9f864bdc83b85bb1a0dc5a77d014cf70bff79382cdd9b4cbefed35500627ea25f6246a871d8f0b2a8","ssdeep":"","tlshash":"73d0a751a4614c700411c93a2dc3d2500e2b16b70581a4883a8ed0255f52cc6635b6da","first_seen":"2024-12-26T23:03:50.483664Z","last_seen":"2024-12-26T23:03:50.483664Z","times_seen":1,"resource_available":false,"data":null}},"time_used":619,"timings":{"blocked":54,"dns":25,"connect":1,"send":0,"wait":506,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meenetiy.com/?rb=TGt8drTBxJJgGLylFuOvXn_QtTbqq-9FYT3mwbU9EXQcL0T5joYmSP0RLFd9hLWHLjOxeF7Ms41JlKDCRO2-EnLi7i914pQZLxvD1IlwSaL9LntU-emf4L_Ivh2xF10iSKTyo1TCJMk8gRck3jPWdqZ2zssuUn8IeLey9xmDi-m_0XL9Bt8v9CRAAAd3OxDAFSNc_F2TxeP04r7DdnHQm0odjELu2JkeKg2KkFm-j4nGJg7rzk8mCneXyGPaXmyjxY071yl2vkVnOHuD\u0026request_ab2=0\u0026zoneid=6678850\u0026js_build=iclick-v1.1028.0\u0026jsp=1\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026wih=-1\u0026wiw=-1\u0026ww=-1\u0026wh=-1\u0026sah=1024\u0026wx=0\u0026wy=0\u0026cw=0\u0026wfc=2\u0026pl=https%3A%2F%2Fmp4skin.com%2Fwatch%3FV%3DqqqRuFM3thI\u0026drf=https%3A%2F%2Fmp4skin.com%2Fembud%2F6278396e756f303736346d35\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=1\u0026nw=1\u0026tb=false\u0026btz=UTC\u0026bto=0\u0026tt=1\u0026wgl=\u0026js_build=iclick-v1.1028.0\u0026navlng=en-US\u0026vsbl=true\u0026pnt=0\u0026pnrc=0\u0026bs=885867d9-b370-4673-a6b9-66f9b5a699b7\u0026wasm=1\u0026userId=00813e94674843eee24e13ac04ad9abe\u0026m=link","fqdn":"meenetiy.com","domain":"meenetiy.com","tld":"com"},"ip":{"addr":"139.45.197.119","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mp4skin.com/watch?V=qqqRuFM3thI","date":"2024-12-26T23:03:22.285Z","timestamp":1735254202285,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meenetiy.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Dec 2024 05:12:15 GMT","end":"Mon, 24 Mar 2025 05:12:14 GMT"},"fingerprint":{"sha1":"94:A2:14:A5:42:BA:42:10:29:6D:F7:11:0E:F4:7A:A7:67:A9:6D:BA","sha256":"82:5C:94:A3:42:1D:7F:B2:23:2C:83:AB:89:77:0F:98:41:EC:EA:5F:A1:CA:06:6D:D5:5F:CB:BB:98:96:56:53"}}},"request":{"raw":"GET /?rb=TGt8drTBxJJgGLylFuOvXn_QtTbqq-9FYT3mwbU9EXQcL0T5joYmSP0RLFd9hLWHLjOxeF7Ms41JlKDCRO2-EnLi7i914pQZLxvD1IlwSaL9LntU-emf4L_Ivh2xF10iSKTyo1TCJMk8gRck3jPWdqZ2zssuUn8IeLey9xmDi-m_0XL9Bt8v9CRAAAd3OxDAFSNc_F2TxeP04r7DdnHQm0odjELu2JkeKg2KkFm-j4nGJg7rzk8mCneXyGPaXmyjxY071yl2vkVnOHuD\u0026request_ab2=0\u0026zoneid=6678850\u0026js_build=iclick-v1.1028.0\u0026jsp=1\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026wih=-1\u0026wiw=-1\u0026ww=-1\u0026wh=-1\u0026sah=1024\u0026wx=0\u0026wy=0\u0026cw=0\u0026wfc=2\u0026pl=https%3A%2F%2Fmp4skin.com%2Fwatch%3FV%3DqqqRuFM3thI\u0026drf=https%3A%2F%2Fmp4skin.com%2Fembud%2F6278396e756f303736346d35\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=1\u0026nw=1\u0026tb=false\u0026btz=UTC\u0026bto=0\u0026tt=1\u0026wgl=\u0026js_build=iclick-v1.1028.0\u0026navlng=en-US\u0026vsbl=true\u0026pnt=0\u0026pnrc=0\u0026bs=885867d9-b370-4673-a6b9-66f9b5a699b7\u0026wasm=1\u0026userId=00813e94674843eee24e13ac04ad9abe\u0026m=link HTTP/1.1\r\nHost: meenetiy.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mp4skin.com/\r\nOrigin: https://mp4skin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=00813e94674843eee24e13ac04ad9abe; oaidts=1735254201\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 202 Accepted\r\nserver: nginx\r\ndate: Thu, 26 Dec 2024 23:03:22 GMT\r\ncontent-length: 0\r\nx-trace-id: ed94e5554e6c5c37d7ceb737e874652b\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://mp4skin.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ntiming-allow-origin: *\r\nset-cookie: OAID=00813e94674843eee24e13ac04ad9abe; expires=Fri, 26 Dec 2025 23:03:22 GMT; path=/; secure; SameSite=None\noaidts=1735254202; expires=Fri, 26 Dec 2025 23:03:22 GMT; path=/; secure; SameSite=None\nsyncedCookie=true; expires=Thu, 02 Jan 2025 23:03:22 GMT; path=/; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-26","alert":"Sinkholed","trigger":"meenetiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"683bf625f2.6e6ab61908.com/in/show/?tag_ab=b\u0026site_id=31418774\u0026adblock=0\u0026testab=1\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=mq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=0\u0026conditions=all,dch_ip,tz_offset\u0026ssp=3964\u0026page=https%3A%2F%2Fpoo.phd%2Fe%2F5m4670oun9xb\u0026refdom=poo.phd\u0026auction_time=1735254202\u0026subid=357529620\u0026sid=2189038158\u0026tcid=0\u0026ver=8.202.1\u0026ver_c=\u0026spot_id=418774\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2024-12-26\u0026iabcat=IAB25-3\u0026keywords=\u0026user_fp=15935199871133172074\u0026score=37.778654605738474\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D357529620%26spot_id%3D418774%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fpoo.phd%252Fe%252F5m4670oun9xb%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=\u0026crid=\u0026crtid=b0681ff5c1739e7f8bdbb8527f77d810\u0026url=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D357529620%26spot_id%3D418774%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fpoo.phd%252Fe%252F5m4670oun9xb%26idzone%3D0%26sid%3D1886\u0026icons=Q1hysDt0SP10XHVFASjGdodrFGrqF01f2WqwNY_NSmFBjEdc4Pq1HS4FOXDUdrE-p4DBP7_TkI2kt7tFj3532orJZ5YiBtixBOsyoBm4nuT-dZqRxTrpK9g7oP6D-HehqKmkDUtf7Sn0I6QYFfM0tOucg10T2TY7tsFRt7mXMa4vfFkKYg\u0026ext_cid=0\u0026px_id=418774\u0026min_cpm=0.0045017923115978145\u0026out_id=1\u0026campaign_type=pop-default\u0026aid=0\u0026cid=2957\u0026uniq=\u0026mid=2342540283984470596\u0026skin_id=71\u0026vertical_id=0\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.0011060903786874047\u0026cpm=0\u0026verify_hash=9e9bf4ac2e6d6d57a1a4a4fff85ed182\u0026is_native=4\u0026real_bid=0.0001490666824414707\u0026original_bid_usd=0.000606702\u0026original_bid=0.000606702\u0026show_type=0\u0026exp=0\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=108,0,114,27,150,20,4\u0026need_redirect_show=0\u0026applied_features=main-skins-settings,prod\u0026show_count=1\u0026expiration_timestamp=0\u0026image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_083be47dfc3e28c9a68305b76181a5033bc45790.webp\u0026site=native-push-adult\u0026price=0.000606702\u0026hostname=auc-inpage-hz-10-b\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=\u0026pop_cpc=0.000000606702\u0026ext_campaign_id_str=\u0026is_webview=0\u0026client_price=0\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=\u0026is_in_app=0\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=gamblingBlueMessage-view-t_r-body\u0026mlf=1\u0026mlc=1\u0026st=0.02\u0026cpa=e6c53bd6-2e9f-440b-9613-66b1681dc943\u0026prev_step_diff=507","fqdn":"683bf625f2.6e6ab61908.com","domain":"6e6ab61908.com","tld":"com"},"ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:22.412Z","timestamp":1735254202412,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6e6ab61908.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Dec 2024 14:03:26 GMT","end":"Sat, 22 Mar 2025 14:03:25 GMT"},"fingerprint":{"sha1":"95:2D:CE:2B:C1:DB:C5:A4:DA:34:1D:FF:1B:79:47:E1:78:4F:C8:86","sha256":"F0:D5:D1:13:5E:34:1A:9C:97:59:28:C6:69:1E:E9:C4:97:7F:6C:55:EA:8C:97:2E:02:E4:1B:40:04:2A:BF:5A"}}},"request":{"raw":"GET /in/show/?tag_ab=b\u0026site_id=31418774\u0026adblock=0\u0026testab=1\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=mq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=0\u0026conditions=all,dch_ip,tz_offset\u0026ssp=3964\u0026page=https%3A%2F%2Fpoo.phd%2Fe%2F5m4670oun9xb\u0026refdom=poo.phd\u0026auction_time=1735254202\u0026subid=357529620\u0026sid=2189038158\u0026tcid=0\u0026ver=8.202.1\u0026ver_c=\u0026spot_id=418774\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2024-12-26\u0026iabcat=IAB25-3\u0026keywords=\u0026user_fp=15935199871133172074\u0026score=37.778654605738474\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D357529620%26spot_id%3D418774%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fpoo.phd%252Fe%252F5m4670oun9xb%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=\u0026crid=\u0026crtid=b0681ff5c1739e7f8bdbb8527f77d810\u0026url=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D357529620%26spot_id%3D418774%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fpoo.phd%252Fe%252F5m4670oun9xb%26idzone%3D0%26sid%3D1886\u0026icons=Q1hysDt0SP10XHVFASjGdodrFGrqF01f2WqwNY_NSmFBjEdc4Pq1HS4FOXDUdrE-p4DBP7_TkI2kt7tFj3532orJZ5YiBtixBOsyoBm4nuT-dZqRxTrpK9g7oP6D-HehqKmkDUtf7Sn0I6QYFfM0tOucg10T2TY7tsFRt7mXMa4vfFkKYg\u0026ext_cid=0\u0026px_id=418774\u0026min_cpm=0.0045017923115978145\u0026out_id=1\u0026campaign_type=pop-default\u0026aid=0\u0026cid=2957\u0026uniq=\u0026mid=2342540283984470596\u0026skin_id=71\u0026vertical_id=0\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.0011060903786874047\u0026cpm=0\u0026verify_hash=9e9bf4ac2e6d6d57a1a4a4fff85ed182\u0026is_native=4\u0026real_bid=0.0001490666824414707\u0026original_bid_usd=0.000606702\u0026original_bid=0.000606702\u0026show_type=0\u0026exp=0\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=108,0,114,27,150,20,4\u0026need_redirect_show=0\u0026applied_features=main-skins-settings,prod\u0026show_count=1\u0026expiration_timestamp=0\u0026image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_083be47dfc3e28c9a68305b76181a5033bc45790.webp\u0026site=native-push-adult\u0026price=0.000606702\u0026hostname=auc-inpage-hz-10-b\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=\u0026pop_cpc=0.000000606702\u0026ext_campaign_id_str=\u0026is_webview=0\u0026client_price=0\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=\u0026is_in_app=0\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=gamblingBlueMessage-view-t_r-body\u0026mlf=1\u0026mlc=1\u0026st=0.02\u0026cpa=e6c53bd6-2e9f-440b-9613-66b1681dc943\u0026prev_step_diff=507 HTTP/1.1\r\nHost: 683bf625f2.6e6ab61908.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poo.phd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Thu, 26 Dec 2024 23:03:22 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-26","alert":"Sinkholed","trigger":"6e6ab61908.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"683bf625f2.6e6ab61908.com/in/show/?tag_ab=b\u0026site_id=31418774\u0026adblock=0\u0026testab=1\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=mq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=0\u0026conditions=all,dch_ip,tz_offset\u0026ssp=3964\u0026page=https%3A%2F%2Fpoo.phd%2Fe%2F5m4670oun9xb\u0026refdom=poo.phd\u0026auction_time=1735254202\u0026subid=357529620\u0026sid=2189038158\u0026tcid=0\u0026ver=8.202.1\u0026ver_c=\u0026spot_id=418774\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2024-12-26\u0026iabcat=IAB25-3\u0026keywords=\u0026user_fp=15935199871133172074\u0026score=37.778654605738474\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D357529620%26spot_id%3D418774%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fpoo.phd%252Fe%252F5m4670oun9xb%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=\u0026crid=\u0026crtid=b0681ff5c1739e7f8bdbb8527f77d810\u0026url=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D357529620%26spot_id%3D418774%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fpoo.phd%252Fe%252F5m4670oun9xb%26idzone%3D0%26sid%3D1886\u0026icons=7VPSCyTlJij_0HJ33RRgHWycIBy6CdW8xAmQW3BmcIg_Dg6ATQMS2RyPCuEoAaCHLVk_XjkRP110BCuUGd1dpaa474Mo0Zv5BiLZTu7xSyD3LO59UXLk_ySYsAEPgaARhpn4j_Xy-neUaFuxD1nnfHwJUp87MdgzxibsU3e30dbO3FIsDQ\u0026ext_cid=0\u0026px_id=418774\u0026min_cpm=0.018481931625144776\u0026out_id=0\u0026campaign_type=pop-default\u0026aid=0\u0026cid=2957\u0026uniq=\u0026mid=2342540283984470596\u0026skin_id=71\u0026vertical_id=0\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.00454101063202434\u0026cpm=0\u0026verify_hash=b3821adce1b4a408ccbc7727471c0e64\u0026is_native=4\u0026real_bid=0.0001490666824414707\u0026original_bid_usd=0.000606702\u0026original_bid=0.000606702\u0026show_type=0\u0026exp=0\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=114,27,150,20,108,4,0\u0026need_redirect_show=0\u0026applied_features=prod,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=0\u0026image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_083be47dfc3e28c9a68305b76181a5033bc45790.webp\u0026site=native-push-adult\u0026price=0.000606702\u0026hostname=auc-inpage-hz-10-b\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=\u0026pop_cpc=0.000000606702\u0026ext_campaign_id_str=\u0026is_webview=0\u0026client_price=0\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=\u0026is_in_app=0\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=gamblingBlueMessage-view-t_r-body\u0026mlf=1\u0026st=0.02\u0026cpa=6fcd5887-6690-4e14-9840-c094a33b18b5\u0026prev_step_diff=507","fqdn":"683bf625f2.6e6ab61908.com","domain":"6e6ab61908.com","tld":"com"},"ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:22.420Z","timestamp":1735254202420,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6e6ab61908.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Dec 2024 14:03:26 GMT","end":"Sat, 22 Mar 2025 14:03:25 GMT"},"fingerprint":{"sha1":"95:2D:CE:2B:C1:DB:C5:A4:DA:34:1D:FF:1B:79:47:E1:78:4F:C8:86","sha256":"F0:D5:D1:13:5E:34:1A:9C:97:59:28:C6:69:1E:E9:C4:97:7F:6C:55:EA:8C:97:2E:02:E4:1B:40:04:2A:BF:5A"}}},"request":{"raw":"GET /in/show/?tag_ab=b\u0026site_id=31418774\u0026adblock=0\u0026testab=1\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=mq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=0\u0026conditions=all,dch_ip,tz_offset\u0026ssp=3964\u0026page=https%3A%2F%2Fpoo.phd%2Fe%2F5m4670oun9xb\u0026refdom=poo.phd\u0026auction_time=1735254202\u0026subid=357529620\u0026sid=2189038158\u0026tcid=0\u0026ver=8.202.1\u0026ver_c=\u0026spot_id=418774\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2024-12-26\u0026iabcat=IAB25-3\u0026keywords=\u0026user_fp=15935199871133172074\u0026score=37.778654605738474\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D357529620%26spot_id%3D418774%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fpoo.phd%252Fe%252F5m4670oun9xb%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=\u0026crid=\u0026crtid=b0681ff5c1739e7f8bdbb8527f77d810\u0026url=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D357529620%26spot_id%3D418774%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fpoo.phd%252Fe%252F5m4670oun9xb%26idzone%3D0%26sid%3D1886\u0026icons=7VPSCyTlJij_0HJ33RRgHWycIBy6CdW8xAmQW3BmcIg_Dg6ATQMS2RyPCuEoAaCHLVk_XjkRP110BCuUGd1dpaa474Mo0Zv5BiLZTu7xSyD3LO59UXLk_ySYsAEPgaARhpn4j_Xy-neUaFuxD1nnfHwJUp87MdgzxibsU3e30dbO3FIsDQ\u0026ext_cid=0\u0026px_id=418774\u0026min_cpm=0.018481931625144776\u0026out_id=0\u0026campaign_type=pop-default\u0026aid=0\u0026cid=2957\u0026uniq=\u0026mid=2342540283984470596\u0026skin_id=71\u0026vertical_id=0\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.00454101063202434\u0026cpm=0\u0026verify_hash=b3821adce1b4a408ccbc7727471c0e64\u0026is_native=4\u0026real_bid=0.0001490666824414707\u0026original_bid_usd=0.000606702\u0026original_bid=0.000606702\u0026show_type=0\u0026exp=0\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=114,27,150,20,108,4,0\u0026need_redirect_show=0\u0026applied_features=prod,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=0\u0026image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_083be47dfc3e28c9a68305b76181a5033bc45790.webp\u0026site=native-push-adult\u0026price=0.000606702\u0026hostname=auc-inpage-hz-10-b\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=\u0026pop_cpc=0.000000606702\u0026ext_campaign_id_str=\u0026is_webview=0\u0026client_price=0\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=\u0026is_in_app=0\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=gamblingBlueMessage-view-t_r-body\u0026mlf=1\u0026st=0.02\u0026cpa=6fcd5887-6690-4e14-9840-c094a33b18b5\u0026prev_step_diff=507 HTTP/1.1\r\nHost: 683bf625f2.6e6ab61908.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poo.phd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Thu, 26 Dec 2024 23:03:22 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-26","alert":"Sinkholed","trigger":"6e6ab61908.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"683bf625f2.6e6ab61908.com/in/multy","fqdn":"683bf625f2.6e6ab61908.com","domain":"6e6ab61908.com","tld":"com"},"ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:22.111Z","timestamp":1735254202111,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6e6ab61908.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Dec 2024 14:03:26 GMT","end":"Sat, 22 Mar 2025 14:03:25 GMT"},"fingerprint":{"sha1":"95:2D:CE:2B:C1:DB:C5:A4:DA:34:1D:FF:1B:79:47:E1:78:4F:C8:86","sha256":"F0:D5:D1:13:5E:34:1A:9C:97:59:28:C6:69:1E:E9:C4:97:7F:6C:55:EA:8C:97:2E:02:E4:1B:40:04:2A:BF:5A"}}},"request":{"raw":"POST /in/multy HTTP/1.1\r\nHost: 683bf625f2.6e6ab61908.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 1738\r\nOrigin: https://poo.phd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poo.phd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Thu, 26 Dec 2024 23:03:22 GMT\r\ncontent-type: application/json\r\ncontent-length: 4828\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4828,"size_decoded":38665,"mime_type":"application/json","magic":"JSON text data","md5":"156ee5162bc34c18b658ea4eb315dfa1","sha1":"a23ddf9673d1f75a6a852adb174731e9211f3d11","sha256":"2d83b678980e174c37d03ea8cd1b69453285aadb0a1c3450d73784ccb69336a3","sha512":"3275460281790afe1af8215d54ecf5ec35a074471267d4b8fad52b862ca91b5e7f9be38fb7c455e414606fdef54a2c77645e5ed327b34183b1992120737b1b34","ssdeep":"384:pXrR0R7RhRzRiLRt/I/N3LN3Lz3L23LE3Lxu3L1:pXlk1/diFtQF3Z3f3y3Q3lu3h","tlshash":"9e037eb22287be229de2d245e20ebe1035d157470ec30aca9a77c5bd85b636913dfc4d","first_seen":"2024-12-26T23:03:50.485767Z","last_seen":"2024-12-26T23:03:50.485767Z","times_seen":1,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":400,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-26","alert":"Sinkholed","trigger":"6e6ab61908.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.220.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:22.372Z","timestamp":1735254202372,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Dec 2024 08:37:47 GMT","end":"Mon, 24 Feb 2025 08:37:46 GMT"},"fingerprint":{"sha1":"69:38:7E:29:3C:FF:37:1E:96:50:B5:FA:A1:F2:98:30:3B:BE:E6:8D","sha256":"91:18:48:91:98:D4:58:F4:F0:B8:F7:28:C9:9B:6A:C9:5D:88:4C:E4:02:31:17:20:CF:69:10:A4:89:14:32:CD"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:zXF6qL0sCEtO3ac2-DEKCvu0jHFamw:jHvYjObuQDKMwRaT; Expires=Sat, 26-Dec-2026 23:03:22 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Thu, 26 Dec 2024 23:03:22 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026ifkv=AeZLP98oJrEPl7vuSP135yE_yUtu-V27rufa_JFTnNQYySWd-BpuyW-hxxmirPhSPXoQRaq_TjNobg\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-opener-policy: unsafe-none\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-G7zBcBTpPtGEZUsliF2sqQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-resource-policy: cross-origin\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":333,"timings":{"blocked":153,"dns":0,"connect":17,"send":0,"wait":27,"receive":0,"ssl":133},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bookmsg.com/creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790_icon.webp","fqdn":"static.bookmsg.com","domain":"bookmsg.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:22.512Z","timestamp":1735254202512,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.bookmsg.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Dec 2024 03:02:39 GMT","end":"Sat, 01 Mar 2025 03:02:38 GMT"},"fingerprint":{"sha1":"6B:98:BE:D7:28:05:BB:C1:1E:1B:28:3A:0F:F9:79:86:2D:94:63:BF","sha256":"77:81:A9:08:F5:82:61:B8:36:C1:CB:55:8C:84:E0:C6:92:51:F2:8E:DE:63:78:22:0F:DD:A1:B9:90:51:2F:25"}}},"request":{"raw":"GET /creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790_icon.webp HTTP/1.1\r\nHost: static.bookmsg.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poo.phd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Dec 2024 23:03:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 486\r\nserver: nginx/1.24.0\r\nlast-modified: Fri, 31 May 2024 10:56:43 GMT\r\netag: \"6659aceb-1e6\"\r\nexpires: Fri, 26 Dec 2025 23:03:22 GMT\r\ncache-control: max-age=31536000\r\nx-proxy-cache: HIT\r\nx-cdn-host-id: ds5058\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":486,"size_decoded":486,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ceeb4e8840c24621c0e0352b42b38a5b","sha1":"03cbceb0134a39267014595938705e2916580644","sha256":"50cb77ae9715629235f102dd53a68559df1b64416f71179dbb4aa942725790b3","sha512":"80d4128488580567597ba5eb65dbff2dd4a8efc625c64cac6a027a1bb5c229545206669f04a50a252b54f471bee4fdc892e6bfe8347a50dd216bba67bd671a03","ssdeep":"","tlshash":"9bf00544191cd36c2a3c607afd74eb74a4074aa459226017cce447b08956811e856c1c","first_seen":"2024-02-20T18:30:33Z","last_seen":"2026-06-14T03:54:50.425237Z","times_seen":11498,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":39,"dns":1,"connect":19,"send":0,"wait":20,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bookmsg.com/creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790_icon.webp","fqdn":"static.bookmsg.com","domain":"bookmsg.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:22.512Z","timestamp":1735254202512,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.bookmsg.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Dec 2024 03:02:39 GMT","end":"Sat, 01 Mar 2025 03:02:38 GMT"},"fingerprint":{"sha1":"6B:98:BE:D7:28:05:BB:C1:1E:1B:28:3A:0F:F9:79:86:2D:94:63:BF","sha256":"77:81:A9:08:F5:82:61:B8:36:C1:CB:55:8C:84:E0:C6:92:51:F2:8E:DE:63:78:22:0F:DD:A1:B9:90:51:2F:25"}}},"request":{"raw":"GET /creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790_icon.webp HTTP/1.1\r\nHost: static.bookmsg.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poo.phd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Dec 2024 23:03:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 486\r\nserver: nginx/1.24.0\r\nlast-modified: Fri, 31 May 2024 10:56:43 GMT\r\netag: \"6659aceb-1e6\"\r\nexpires: Fri, 26 Dec 2025 23:03:22 GMT\r\ncache-control: max-age=31536000\r\nx-proxy-cache: HIT\r\nx-cdn-host-id: ds5058\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":486,"size_decoded":486,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ceeb4e8840c24621c0e0352b42b38a5b","sha1":"03cbceb0134a39267014595938705e2916580644","sha256":"50cb77ae9715629235f102dd53a68559df1b64416f71179dbb4aa942725790b3","sha512":"80d4128488580567597ba5eb65dbff2dd4a8efc625c64cac6a027a1bb5c229545206669f04a50a252b54f471bee4fdc892e6bfe8347a50dd216bba67bd671a03","ssdeep":"","tlshash":"9bf00544191cd36c2a3c607afd74eb74a4074aa459226017cce447b08956811e856c1c","first_seen":"2024-02-20T18:30:33Z","last_seen":"2026-06-14T03:54:50.425237Z","times_seen":11498,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":39,"dns":1,"connect":19,"send":0,"wait":20,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bookmsg.com/creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790.webp","fqdn":"static.bookmsg.com","domain":"bookmsg.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:22.407Z","timestamp":1735254202407,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.bookmsg.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Dec 2024 03:02:39 GMT","end":"Sat, 01 Mar 2025 03:02:38 GMT"},"fingerprint":{"sha1":"6B:98:BE:D7:28:05:BB:C1:1E:1B:28:3A:0F:F9:79:86:2D:94:63:BF","sha256":"77:81:A9:08:F5:82:61:B8:36:C1:CB:55:8C:84:E0:C6:92:51:F2:8E:DE:63:78:22:0F:DD:A1:B9:90:51:2F:25"}}},"request":{"raw":"GET /creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790.webp HTTP/1.1\r\nHost: static.bookmsg.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poo.phd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Dec 2024 23:03:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1066\r\nserver: nginx/1.24.0\r\nlast-modified: Fri, 31 May 2024 10:56:43 GMT\r\netag: \"6659aceb-42a\"\r\nexpires: Fri, 26 Dec 2025 23:03:22 GMT\r\ncache-control: max-age=31536000\r\nx-proxy-cache: HIT\r\nx-cdn-host-id: ds5058\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1066,"size_decoded":1066,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x240, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2a11e13b2bd67bb9a6cb347d7c73df13","sha1":"b85460a33f9b229f42c08a6a94ae433a4d5c32ab","sha256":"1d0d6b5176d6a48b3042a107f929bbfcefd4a057273ac488bbb7f7affd909b56","sha512":"059dd018bbf13a669d73f07442288f165bc6b305afb0df955773a0efb7454b8204095196231179fab4cb625e189c7c735fe41dc5b67fb8666d584214277186e6","ssdeep":"","tlshash":"7511b56be46c4dfede41f0408dd80256f8324a5c8aaeaf39058bc7da4f584143a6f01a","first_seen":"2024-02-20T18:30:33Z","last_seen":"2026-06-14T03:54:50.399055Z","times_seen":11483,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":137,"dns":7,"connect":24,"send":0,"wait":20,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bookmsg.com/creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790.webp","fqdn":"static.bookmsg.com","domain":"bookmsg.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:22.407Z","timestamp":1735254202407,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.bookmsg.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Dec 2024 03:02:39 GMT","end":"Sat, 01 Mar 2025 03:02:38 GMT"},"fingerprint":{"sha1":"6B:98:BE:D7:28:05:BB:C1:1E:1B:28:3A:0F:F9:79:86:2D:94:63:BF","sha256":"77:81:A9:08:F5:82:61:B8:36:C1:CB:55:8C:84:E0:C6:92:51:F2:8E:DE:63:78:22:0F:DD:A1:B9:90:51:2F:25"}}},"request":{"raw":"GET /creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790.webp HTTP/1.1\r\nHost: static.bookmsg.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poo.phd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Dec 2024 23:03:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1066\r\nserver: nginx/1.24.0\r\nlast-modified: Fri, 31 May 2024 10:56:43 GMT\r\netag: \"6659aceb-42a\"\r\nexpires: Fri, 26 Dec 2025 23:03:22 GMT\r\ncache-control: max-age=31536000\r\nx-proxy-cache: HIT\r\nx-cdn-host-id: ds5058\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1066,"size_decoded":1066,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x240, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2a11e13b2bd67bb9a6cb347d7c73df13","sha1":"b85460a33f9b229f42c08a6a94ae433a4d5c32ab","sha256":"1d0d6b5176d6a48b3042a107f929bbfcefd4a057273ac488bbb7f7affd909b56","sha512":"059dd018bbf13a669d73f07442288f165bc6b305afb0df955773a0efb7454b8204095196231179fab4cb625e189c7c735fe41dc5b67fb8666d584214277186e6","ssdeep":"","tlshash":"7511b56be46c4dfede41f0408dd80256f8324a5c8aaeaf39058bc7da4f584143a6f01a","first_seen":"2024-02-20T18:30:33Z","last_seen":"2026-06-14T03:54:50.399055Z","times_seen":11483,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":137,"dns":7,"connect":24,"send":0,"wait":20,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"683bf625f2.6e6ab61908.com/in/show/?tag_ab=b\u0026site_id=31418776\u0026adblock=0\u0026testab=1\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=shq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=0\u0026conditions=all,dch_ip,tz_offset\u0026ssp=3964\u0026page=https%3A%2F%2Fpoo.phd%2Fe%2F5m4670oun9xb\u0026refdom=poo.phd\u0026auction_time=1735254202\u0026subid=388464194\u0026sid=949871452\u0026tcid=0\u0026ver=8.202.1\u0026ver_c=\u0026spot_id=418776\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2024-12-26\u0026iabcat=IAB25-3\u0026keywords=\u0026user_fp=15935199871133172074\u0026score=38.03003192707105\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D388464194%26spot_id%3D418776%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fpoo.phd%252Fe%252F5m4670oun9xb%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=\u0026crid=\u0026crtid=b0681ff5c1739e7f8bdbb8527f77d810\u0026url=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D388464194%26spot_id%3D418776%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fpoo.phd%252Fe%252F5m4670oun9xb%26idzone%3D0%26sid%3D1886\u0026icons=kvYG3VqAcewx12OfqOvAhUG2f7jOwhnBoNP3LIuz2hcKmW-eaHEvtoYi5K8BrKKh59-57-v4j0mDJyXfy9l9MuYZBW7WRt66rO-9gUZq2CIBw3CD1qIyjSUqrBj7YLqKiQL6f8Pg4xPeJzC0fm90EEVomY3BYwGtwO_dssC_OXOGwD-tyw\u0026ext_cid=0\u0026px_id=418776\u0026min_cpm=0.02436327725138179\u0026out_id=1\u0026campaign_type=pop-default\u0026aid=0\u0026cid=2957\u0026uniq=\u0026mid=4747963503605939686\u0026skin_id=2\u0026vertical_id=0\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.005986057262486751\u0026cpm=0\u0026verify_hash=4325981f010221beb6d4280c10718056\u0026is_native=4\u0026real_bid=0.000150122455348847\u0026original_bid_usd=0.000610999\u0026original_bid=0.000610999\u0026show_type=0\u0026exp=0\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=150,4,108,0,114,20,27\u0026need_redirect_show=0\u0026applied_features=main-skins-settings,prod\u0026show_count=1\u0026expiration_timestamp=0\u0026image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_083be47dfc3e28c9a68305b76181a5033bc45790.webp\u0026site=native-push-adult\u0026price=0.000610999\u0026hostname=auc-inpage-hz-7-a\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=\u0026pop_cpc=0.0000006109989999999999\u0026ext_campaign_id_str=\u0026is_webview=0\u0026client_price=0\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=\u0026is_in_app=0\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=default-view-b_l-body\u0026mlf=1\u0026mlc=1\u0026st=0.02\u0026cpa=6aa0e619-620c-4c67-96df-3f9cb06c9b7d\u0026prev_step_diff=665","fqdn":"683bf625f2.6e6ab61908.com","domain":"6e6ab61908.com","tld":"com"},"ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:22.550Z","timestamp":1735254202550,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6e6ab61908.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Dec 2024 14:03:26 GMT","end":"Sat, 22 Mar 2025 14:03:25 GMT"},"fingerprint":{"sha1":"95:2D:CE:2B:C1:DB:C5:A4:DA:34:1D:FF:1B:79:47:E1:78:4F:C8:86","sha256":"F0:D5:D1:13:5E:34:1A:9C:97:59:28:C6:69:1E:E9:C4:97:7F:6C:55:EA:8C:97:2E:02:E4:1B:40:04:2A:BF:5A"}}},"request":{"raw":"GET /in/show/?tag_ab=b\u0026site_id=31418776\u0026adblock=0\u0026testab=1\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=shq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=0\u0026conditions=all,dch_ip,tz_offset\u0026ssp=3964\u0026page=https%3A%2F%2Fpoo.phd%2Fe%2F5m4670oun9xb\u0026refdom=poo.phd\u0026auction_time=1735254202\u0026subid=388464194\u0026sid=949871452\u0026tcid=0\u0026ver=8.202.1\u0026ver_c=\u0026spot_id=418776\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2024-12-26\u0026iabcat=IAB25-3\u0026keywords=\u0026user_fp=15935199871133172074\u0026score=38.03003192707105\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D388464194%26spot_id%3D418776%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fpoo.phd%252Fe%252F5m4670oun9xb%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=\u0026crid=\u0026crtid=b0681ff5c1739e7f8bdbb8527f77d810\u0026url=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D388464194%26spot_id%3D418776%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fpoo.phd%252Fe%252F5m4670oun9xb%26idzone%3D0%26sid%3D1886\u0026icons=kvYG3VqAcewx12OfqOvAhUG2f7jOwhnBoNP3LIuz2hcKmW-eaHEvtoYi5K8BrKKh59-57-v4j0mDJyXfy9l9MuYZBW7WRt66rO-9gUZq2CIBw3CD1qIyjSUqrBj7YLqKiQL6f8Pg4xPeJzC0fm90EEVomY3BYwGtwO_dssC_OXOGwD-tyw\u0026ext_cid=0\u0026px_id=418776\u0026min_cpm=0.02436327725138179\u0026out_id=1\u0026campaign_type=pop-default\u0026aid=0\u0026cid=2957\u0026uniq=\u0026mid=4747963503605939686\u0026skin_id=2\u0026vertical_id=0\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.005986057262486751\u0026cpm=0\u0026verify_hash=4325981f010221beb6d4280c10718056\u0026is_native=4\u0026real_bid=0.000150122455348847\u0026original_bid_usd=0.000610999\u0026original_bid=0.000610999\u0026show_type=0\u0026exp=0\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=150,4,108,0,114,20,27\u0026need_redirect_show=0\u0026applied_features=main-skins-settings,prod\u0026show_count=1\u0026expiration_timestamp=0\u0026image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_083be47dfc3e28c9a68305b76181a5033bc45790.webp\u0026site=native-push-adult\u0026price=0.000610999\u0026hostname=auc-inpage-hz-7-a\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=\u0026pop_cpc=0.0000006109989999999999\u0026ext_campaign_id_str=\u0026is_webview=0\u0026client_price=0\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=\u0026is_in_app=0\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=default-view-b_l-body\u0026mlf=1\u0026mlc=1\u0026st=0.02\u0026cpa=6aa0e619-620c-4c67-96df-3f9cb06c9b7d\u0026prev_step_diff=665 HTTP/1.1\r\nHost: 683bf625f2.6e6ab61908.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poo.phd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Thu, 26 Dec 2024 23:03:22 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-26","alert":"Sinkholed","trigger":"6e6ab61908.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"683bf625f2.6e6ab61908.com/in/show/?tag_ab=b\u0026site_id=31418776\u0026adblock=0\u0026testab=1\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=shq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=0\u0026conditions=all,dch_ip,tz_offset\u0026ssp=3964\u0026page=https%3A%2F%2Fpoo.phd%2Fe%2F5m4670oun9xb\u0026refdom=poo.phd\u0026auction_time=1735254202\u0026subid=388464194\u0026sid=949871452\u0026tcid=0\u0026ver=8.202.1\u0026ver_c=\u0026spot_id=418776\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2024-12-26\u0026iabcat=IAB25-3\u0026keywords=\u0026user_fp=15935199871133172074\u0026score=38.03003192707105\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D388464194%26spot_id%3D418776%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fpoo.phd%252Fe%252F5m4670oun9xb%26idzone%3D0%26sid%3D1886\u0026is_cpm=1\u0026resp_type=\u0026crid=623611_91332056\u0026crtid=9961f9e3e56cff28a9381fe334325f58\u0026url=https%3A%2F%2Fs.optvz.com%2Fclick.php%3Fd%3DH4sIAAAAAAAAA02Q22rDMAyGX6U3uZyxDj5dDkZvBivsDWwnIaaHhDbbOtDDz8lCN36Dvl.yhBAFMMF60QplmOfp1tBzg_v6YntT8zX2fcnDx2VWeTyv2ftTW65PbeVTuRwb2sfSNvQCOmj2Dhq0lzVBlcp5WkqVvrY4bPEGFayIMwzeOSvgyKBh1Cjn71RaVUYJoIJWjAoMV0OE2lgxbL1HFqO9CIOQgBFdJVAlgUNdgw0KGmKWvuuyCz5HMH3qkcAGhkQmeWxttLr2aJnGUU1Du47Rsqt2V.1O1uIiAiZkfBCLVEYtW30RPsivfSJ1S1yyv.7t8P7v95.IHwjbmOucVHcf86nk43J5.QQnh1dxlDjnrk9dDBq65Hy9XuyD92BjyvQDL3Hp3M8BAAA-\u0026icons=5uXuO3Gt8s0FX70O172EcoO4astqgaQoDsJb5X4nnBvUmsmQhqrmvUmSuWv3c4hpNDjJFE5YAt4TMEGwXVdmtv0LWB68_eNPHrhai0g28oElygzMtxX9V3MJwe2_K5Esld568eNXeq4kZyZtEOv3vMyjC-OXDWtUwCtLikkPCcZeaadIvNGwGsnw4ph_b1E-gfryG6pQpTPtJzf44K11_ahYPZG8P9r1JqgQg-9I7vZ9TlUTS1_Anyj-IcMUoZuOLgAjfbh3lEl4ir5Lmx-eshCgK2UmOonHfjY1oA2XNiN3VXpcWGMNXMQQqrau1VHnDxnLpCi-dG2k6-dPJnctqvdBAQcfW4xr5IJZREjj6F7Jg0DgSy0sXeN-uj6cSg2P5tchhBGHrNz_uGXUNIqkDH2DzZFBhHpDKtOjLLVuh9TBEym-XMcAUOu4-8pDRA3VQ4W3ulemDG8BxpAs9Yafmf9ZNq4OuQPuXgjIPeLMAgig_-iBRR97CVae2Ao7v6zZwSIyASCx7eqGIjcf-5m9O9BO-_AcyqcTdQgYdWMx4nWBf-mNdPXDJt3IojkWtp8GLJIPGBjt-QICvLkHfU-BPDA8cN4J81L2Mbk9wW4LJQ5z1B2hsHO-pxeWimb-RYaZnx15NEzulQipbq_an380Xzi671-xsADi6olxsArX0FW9NBAbqalaMs9ONYr1PV1FGkSq9bxKsiQ8ikYQ-0li2pKSILOs9t6x2CWxL0_8obXxG6RbvhoEGmCb21Glp809SFEbp5_ra8vFAf--Dkqvf2Yc4T4VMuydTrwJabKnWHZKqTHz1lM1pSfNRV3ezZqJsBW5JOiXtGgfKqbLzaPfjWxc3cSRyhx5fVWrt_T7hUMKGnm40DmwbhJgoZ0PCHpqhRU3JgmzvOoDqhoZmuCvjMYYYMRjtTRMuDtJfZJ9L_T0ZOY0SiTlBtXwMiSasHzetbViA1xicLhUYR71xjD8T2Gwz-upJBPjDfJADwVH8Xcobyo87iqQLjTg0YXw4q6UTGxM7iISUqyQrvafmY5SEzo_bpeN3bvRofYZgX2vNTy0Wuk9_JgvAu8jh4AyTVeQJhKP7ZgtlKb4MuQARNy_K1pLFOXH0EyCUBwBrpfK521kiDX3shWkwj3E\u0026ext_cid=3915968\u0026px_id=75418776\u0026min_cpm=0.00028696799017305537\u0026out_id=0\u0026campaign_type=shq\u0026aid=120\u0026cid=19408\u0026uniq=7ac0506d747c368270884125ad38d51737b0b218630c1a240a0f27679d2f8a6f\u0026mid=4747963503605939686\u0026skin_id=2\u0026vertical_id=4\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.001496250003576285\u0026cpm=0.0015\u0026verify_hash=6510ecc275d0a996a7050179bb38e937\u0026is_native=1\u0026real_bid=0.001496250003576285\u0026original_bid_usd=0.0015\u0026original_bid=0.0015\u0026show_type=0\u0026exp=120\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=90,98,70,4,69\u0026need_redirect_show=0\u0026applied_features=prod,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=1735340602\u0026image_url=https%3A%2F%2Fs3t3d2y8.afcdn.net%2Flibrary%2F623611%2Fc7d2d5d099f922e99df1bc2a94e6aaa062057dcb.jpg\u0026site=native-push-adult\u0026price=0\u0026hostname=auc-inpage-hz-7-a\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=\u0026pop_cpc=0\u0026ext_campaign_id_str=3915968\u0026is_webview=0\u0026client_price=0\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=\u0026is_in_app=0\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=default-view-b_l-body\u0026st=0.02\u0026cpa=4e4272cb-dd78-48e2-a874-358a2aedcb52\u0026prev_step_diff=664","fqdn":"683bf625f2.6e6ab61908.com","domain":"6e6ab61908.com","tld":"com"},"ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:22.557Z","timestamp":1735254202557,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6e6ab61908.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Dec 2024 14:03:26 GMT","end":"Sat, 22 Mar 2025 14:03:25 GMT"},"fingerprint":{"sha1":"95:2D:CE:2B:C1:DB:C5:A4:DA:34:1D:FF:1B:79:47:E1:78:4F:C8:86","sha256":"F0:D5:D1:13:5E:34:1A:9C:97:59:28:C6:69:1E:E9:C4:97:7F:6C:55:EA:8C:97:2E:02:E4:1B:40:04:2A:BF:5A"}}},"request":{"raw":"GET /in/show/?tag_ab=b\u0026site_id=31418776\u0026adblock=0\u0026testab=1\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=shq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=0\u0026conditions=all,dch_ip,tz_offset\u0026ssp=3964\u0026page=https%3A%2F%2Fpoo.phd%2Fe%2F5m4670oun9xb\u0026refdom=poo.phd\u0026auction_time=1735254202\u0026subid=388464194\u0026sid=949871452\u0026tcid=0\u0026ver=8.202.1\u0026ver_c=\u0026spot_id=418776\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2024-12-26\u0026iabcat=IAB25-3\u0026keywords=\u0026user_fp=15935199871133172074\u0026score=38.03003192707105\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D388464194%26spot_id%3D418776%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fpoo.phd%252Fe%252F5m4670oun9xb%26idzone%3D0%26sid%3D1886\u0026is_cpm=1\u0026resp_type=\u0026crid=623611_91332056\u0026crtid=9961f9e3e56cff28a9381fe334325f58\u0026url=https%3A%2F%2Fs.optvz.com%2Fclick.php%3Fd%3DH4sIAAAAAAAAA02Q22rDMAyGX6U3uZyxDj5dDkZvBivsDWwnIaaHhDbbOtDDz8lCN36Dvl.yhBAFMMF60QplmOfp1tBzg_v6YntT8zX2fcnDx2VWeTyv2ftTW65PbeVTuRwb2sfSNvQCOmj2Dhq0lzVBlcp5WkqVvrY4bPEGFayIMwzeOSvgyKBh1Cjn71RaVUYJoIJWjAoMV0OE2lgxbL1HFqO9CIOQgBFdJVAlgUNdgw0KGmKWvuuyCz5HMH3qkcAGhkQmeWxttLr2aJnGUU1Du47Rsqt2V.1O1uIiAiZkfBCLVEYtW30RPsivfSJ1S1yyv.7t8P7v95.IHwjbmOucVHcf86nk43J5.QQnh1dxlDjnrk9dDBq65Hy9XuyD92BjyvQDL3Hp3M8BAAA-\u0026icons=5uXuO3Gt8s0FX70O172EcoO4astqgaQoDsJb5X4nnBvUmsmQhqrmvUmSuWv3c4hpNDjJFE5YAt4TMEGwXVdmtv0LWB68_eNPHrhai0g28oElygzMtxX9V3MJwe2_K5Esld568eNXeq4kZyZtEOv3vMyjC-OXDWtUwCtLikkPCcZeaadIvNGwGsnw4ph_b1E-gfryG6pQpTPtJzf44K11_ahYPZG8P9r1JqgQg-9I7vZ9TlUTS1_Anyj-IcMUoZuOLgAjfbh3lEl4ir5Lmx-eshCgK2UmOonHfjY1oA2XNiN3VXpcWGMNXMQQqrau1VHnDxnLpCi-dG2k6-dPJnctqvdBAQcfW4xr5IJZREjj6F7Jg0DgSy0sXeN-uj6cSg2P5tchhBGHrNz_uGXUNIqkDH2DzZFBhHpDKtOjLLVuh9TBEym-XMcAUOu4-8pDRA3VQ4W3ulemDG8BxpAs9Yafmf9ZNq4OuQPuXgjIPeLMAgig_-iBRR97CVae2Ao7v6zZwSIyASCx7eqGIjcf-5m9O9BO-_AcyqcTdQgYdWMx4nWBf-mNdPXDJt3IojkWtp8GLJIPGBjt-QICvLkHfU-BPDA8cN4J81L2Mbk9wW4LJQ5z1B2hsHO-pxeWimb-RYaZnx15NEzulQipbq_an380Xzi671-xsADi6olxsArX0FW9NBAbqalaMs9ONYr1PV1FGkSq9bxKsiQ8ikYQ-0li2pKSILOs9t6x2CWxL0_8obXxG6RbvhoEGmCb21Glp809SFEbp5_ra8vFAf--Dkqvf2Yc4T4VMuydTrwJabKnWHZKqTHz1lM1pSfNRV3ezZqJsBW5JOiXtGgfKqbLzaPfjWxc3cSRyhx5fVWrt_T7hUMKGnm40DmwbhJgoZ0PCHpqhRU3JgmzvOoDqhoZmuCvjMYYYMRjtTRMuDtJfZJ9L_T0ZOY0SiTlBtXwMiSasHzetbViA1xicLhUYR71xjD8T2Gwz-upJBPjDfJADwVH8Xcobyo87iqQLjTg0YXw4q6UTGxM7iISUqyQrvafmY5SEzo_bpeN3bvRofYZgX2vNTy0Wuk9_JgvAu8jh4AyTVeQJhKP7ZgtlKb4MuQARNy_K1pLFOXH0EyCUBwBrpfK521kiDX3shWkwj3E\u0026ext_cid=3915968\u0026px_id=75418776\u0026min_cpm=0.00028696799017305537\u0026out_id=0\u0026campaign_type=shq\u0026aid=120\u0026cid=19408\u0026uniq=7ac0506d747c368270884125ad38d51737b0b218630c1a240a0f27679d2f8a6f\u0026mid=4747963503605939686\u0026skin_id=2\u0026vertical_id=4\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.001496250003576285\u0026cpm=0.0015\u0026verify_hash=6510ecc275d0a996a7050179bb38e937\u0026is_native=1\u0026real_bid=0.001496250003576285\u0026original_bid_usd=0.0015\u0026original_bid=0.0015\u0026show_type=0\u0026exp=120\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=90,98,70,4,69\u0026need_redirect_show=0\u0026applied_features=prod,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=1735340602\u0026image_url=https%3A%2F%2Fs3t3d2y8.afcdn.net%2Flibrary%2F623611%2Fc7d2d5d099f922e99df1bc2a94e6aaa062057dcb.jpg\u0026site=native-push-adult\u0026price=0\u0026hostname=auc-inpage-hz-7-a\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=\u0026pop_cpc=0\u0026ext_campaign_id_str=3915968\u0026is_webview=0\u0026client_price=0\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=\u0026is_in_app=0\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=default-view-b_l-body\u0026st=0.02\u0026cpa=4e4272cb-dd78-48e2-a874-358a2aedcb52\u0026prev_step_diff=664 HTTP/1.1\r\nHost: 683bf625f2.6e6ab61908.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poo.phd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Thu, 26 Dec 2024 23:03:22 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-26","alert":"Sinkholed","trigger":"6e6ab61908.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bookmsg.com/creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790_icon.webp","fqdn":"static.bookmsg.com","domain":"bookmsg.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:22.512Z","timestamp":1735254202512,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.bookmsg.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Dec 2024 03:02:39 GMT","end":"Sat, 01 Mar 2025 03:02:38 GMT"},"fingerprint":{"sha1":"6B:98:BE:D7:28:05:BB:C1:1E:1B:28:3A:0F:F9:79:86:2D:94:63:BF","sha256":"77:81:A9:08:F5:82:61:B8:36:C1:CB:55:8C:84:E0:C6:92:51:F2:8E:DE:63:78:22:0F:DD:A1:B9:90:51:2F:25"}}},"request":{"raw":"GET /creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790_icon.webp HTTP/1.1\r\nHost: static.bookmsg.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Dec 2024 23:03:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 486\r\nserver: nginx/1.24.0\r\nlast-modified: Fri, 31 May 2024 10:56:43 GMT\r\netag: \"6659aceb-1e6\"\r\nexpires: Fri, 26 Dec 2025 23:03:22 GMT\r\ncache-control: max-age=31536000\r\nx-proxy-cache: HIT\r\nx-cdn-host-id: ds5058\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":486,"size_decoded":486,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ceeb4e8840c24621c0e0352b42b38a5b","sha1":"03cbceb0134a39267014595938705e2916580644","sha256":"50cb77ae9715629235f102dd53a68559df1b64416f71179dbb4aa942725790b3","sha512":"80d4128488580567597ba5eb65dbff2dd4a8efc625c64cac6a027a1bb5c229545206669f04a50a252b54f471bee4fdc892e6bfe8347a50dd216bba67bd671a03","ssdeep":"","tlshash":"9bf00544191cd36c2a3c607afd74eb74a4074aa459226017cce447b08956811e856c1c","first_seen":"2024-02-20T18:30:33Z","last_seen":"2026-06-14T03:54:50.425237Z","times_seen":11498,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":39,"dns":1,"connect":19,"send":0,"wait":20,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bookmsg.com/creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790.webp","fqdn":"static.bookmsg.com","domain":"bookmsg.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:22.407Z","timestamp":1735254202407,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.bookmsg.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Dec 2024 03:02:39 GMT","end":"Sat, 01 Mar 2025 03:02:38 GMT"},"fingerprint":{"sha1":"6B:98:BE:D7:28:05:BB:C1:1E:1B:28:3A:0F:F9:79:86:2D:94:63:BF","sha256":"77:81:A9:08:F5:82:61:B8:36:C1:CB:55:8C:84:E0:C6:92:51:F2:8E:DE:63:78:22:0F:DD:A1:B9:90:51:2F:25"}}},"request":{"raw":"GET /creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790.webp HTTP/1.1\r\nHost: static.bookmsg.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Dec 2024 23:03:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1066\r\nserver: nginx/1.24.0\r\nlast-modified: Fri, 31 May 2024 10:56:43 GMT\r\netag: \"6659aceb-42a\"\r\nexpires: Fri, 26 Dec 2025 23:03:22 GMT\r\ncache-control: max-age=31536000\r\nx-proxy-cache: HIT\r\nx-cdn-host-id: ds5058\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1066,"size_decoded":1066,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x240, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2a11e13b2bd67bb9a6cb347d7c73df13","sha1":"b85460a33f9b229f42c08a6a94ae433a4d5c32ab","sha256":"1d0d6b5176d6a48b3042a107f929bbfcefd4a057273ac488bbb7f7affd909b56","sha512":"059dd018bbf13a669d73f07442288f165bc6b305afb0df955773a0efb7454b8204095196231179fab4cb625e189c7c735fe41dc5b67fb8666d584214277186e6","ssdeep":"","tlshash":"7511b56be46c4dfede41f0408dd80256f8324a5c8aaeaf39058bc7da4f584143a6f01a","first_seen":"2024-02-20T18:30:33Z","last_seen":"2026-06-14T03:54:50.399055Z","times_seen":11483,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":137,"dns":7,"connect":24,"send":0,"wait":20,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y8.afcdn.net/library/623611/c7d2d5d099f922e99df1bc2a94e6aaa062057dcb.jpg","fqdn":"s3t3d2y8.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":49025,"as":"PRO-ZETA a.s.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:22.788Z","timestamp":1735254202788,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Dec 2024 13:21:22 GMT","end":"Sun, 23 Mar 2025 13:21:21 GMT"},"fingerprint":{"sha1":"89:E4:C0:25:63:2C:85:6C:4C:12:FE:2E:C3:BE:F0:23:B4:E0:9A:45","sha256":"6D:AA:68:39:95:A8:CB:69:68:2F:71:C2:CF:6F:16:71:00:BC:61:19:66:05:60:3F:3F:74:B7:84:F3:FA:92:40"}}},"request":{"raw":"GET /library/623611/c7d2d5d099f922e99df1bc2a94e6aaa062057dcb.jpg HTTP/1.1\r\nHost: s3t3d2y8.afcdn.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Dec 2024 23:03:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25802\r\nlast-modified: Mon, 09 Aug 2021 11:06:04 GMT\r\netag: \"61110c1c-64ca\"\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version\r\nexpires: Tue, 14 Jan 2025 12:02:04 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-77-nzt: EwwBX63NDQH3UaIIAAwBuUwKAQH38QEAAAwBnJIhJwG3vB3AAQ\r\nx-77-nzt-ray: 2a494a153660d35edfe06d67cb18d629\r\nx-77-cache: HIT\r\nx-77-age: 565841\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25802,"size_decoded":25802,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 300x300, components 3","md5":"401907dbfd7c961559df157f0b7cc0c1","sha1":"c7d2d5d099f922e99df1bc2a94e6aaa062057dcb","sha256":"d28b97cde9ff196441a9074e8c36eb8ea37b85221de8a7fef0491c2cf5eeb96b","sha512":"4e32db959b6d8bb76070464727d6243e249e0039dfed4e558a40769c607a82702d0b4338ae170036fd8ed4dc4773c2c3ddcce1ebfad06bed26a9d3d33ffe6305","ssdeep":"768:+vIrWOegx8wl37ZN1MSUR/52sd5OV5vCo:+vIbqwFtNbiszPvZ","tlshash":"a5c2d0699ab361e07cc9cd47a182dc0587f5ca86bd5bd6ddb2ff014b7f5ea02840c486","first_seen":"2024-02-12T19:42:11Z","last_seen":"2026-06-10T04:58:33.264181Z","times_seen":77,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":2,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.optvz.com/cimp.php?data=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-","fqdn":"s.optvz.com","domain":"optvz.com","tld":"com"},"ip":{"addr":"95.211.229.245","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:22.717Z","timestamp":1735254202717,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optvz.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Nov 2024 09:44:51 GMT","end":"Tue, 11 Feb 2025 09:44:50 GMT"},"fingerprint":{"sha1":"AE:FE:57:B3:E6:6F:49:8B:16:9E:53:74:D7:67:95:2B:C6:06:CB:A3","sha256":"61:71:E6:CB:D8:AC:1E:C5:AC:06:57:C9:9F:C6:BA:FE:4C:02:C3:E2:EC:71:C5:05:9F:C2:6A:5F:8A:3F:BC:40"}}},"request":{"raw":"GET /cimp.php?data=TVRjek5USTFOREl3TW53M01UZGtaV1l3TVRVNVl6Y3laalU1T1RJMFlXSXlNR0ZtT0dReU1ETTVZdy0tfC9saWJyYXJ5LzYyMzYxMS9jN2QyZDVkMDk5ZjkyMmU5OWRmMWJjMmE5NGU2YWFhMDYyMDU3ZGNiLmpwZ3xodHRwc3w5MS45MC40Mi4xNTR8Tk9SfDQxfG15YmlkLmlvfDYyMzYxMXw1OTk5MTh8MTAxMTYzNnw1NDY4ODI0fDUwOHwzOTE1OTY4fDkxMzMyMDU2fDE1fDN8MHwwfDI1MzQ0fDc1NDE4Nzc2fDAuMnw3NXxVU0R8VVNEfDF8MXwzNHx8MXxOT1J8fDIwfDJ8MXx8OTQ5ODcxNDUyfGZlZWM3OThjYTE1ZmJmMjMxNjk0MWIzNWI4MmQ2YTYwfDF8MHxwb28ucGhkfDB8MHwwfDAuMDF8MXwwfGV4Y2hhbmdlX25hdGl2ZV9hZHwwfDB8MzE0MzI0MnwtMXwwfDMxNDMyNDR8fHwxfDE0NDB8fDB8MHwwfDB8MHwwfDF8MHx8OHwxfE1vemlsbGEvNS4wIChYMTE7IExpbnV4IHg4Nl82NDsgcnY6OTYuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC85Ni4wfHwyNHwyMnwwfDF8MHx8fDB8MHwwfDB8MHwwfDB8MHwwfDB8OXwwfDB8MHwwfDF8MnwwfHJ0Yi5leG9jbGljay5jb218T0t8YTEwNzUwNmUwNDc4NWE3NDVlMzYyMTk4ODFhMGUyMzM- HTTP/1.1\r\nHost: s.optvz.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Thu, 26 Dec 2024 23:03:22 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22676de0baa992c9.051369922469843627%22%3B%7D; expires=Sat, 26 Dec 2026 23:03:22 GMT; path=; domain=.optvz.com; Secure; SameSite=none\r\nLocation: https://s3t3d2y8.afcdn.net/library/623611/c7d2d5d099f922e99df1bc2a94e6aaa062057dcb.jpg\r\nX-Robots-Tag: noindex, follow\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":1,"connect":21,"send":0,"wait":26,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y8.afcdn.net/library/623611/c7d2d5d099f922e99df1bc2a94e6aaa062057dcb.jpg","fqdn":"s3t3d2y8.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":49025,"as":"PRO-ZETA a.s.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:22.788Z","timestamp":1735254202788,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Dec 2024 13:21:22 GMT","end":"Sun, 23 Mar 2025 13:21:21 GMT"},"fingerprint":{"sha1":"89:E4:C0:25:63:2C:85:6C:4C:12:FE:2E:C3:BE:F0:23:B4:E0:9A:45","sha256":"6D:AA:68:39:95:A8:CB:69:68:2F:71:C2:CF:6F:16:71:00:BC:61:19:66:05:60:3F:3F:74:B7:84:F3:FA:92:40"}}},"request":{"raw":"GET /library/623611/c7d2d5d099f922e99df1bc2a94e6aaa062057dcb.jpg HTTP/1.1\r\nHost: s3t3d2y8.afcdn.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Dec 2024 23:03:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25802\r\nlast-modified: Mon, 09 Aug 2021 11:06:04 GMT\r\netag: \"61110c1c-64ca\"\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version\r\nexpires: Tue, 14 Jan 2025 12:02:04 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-77-nzt: EwwBX63NDQH3UaIIAAwBuUwKAQH38QEAAAwBnJIhJwG3vB3AAQ\r\nx-77-nzt-ray: 2a494a153660d35edfe06d678ee1f32e\r\nx-77-cache: HIT\r\nx-77-age: 565841\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25802,"size_decoded":25802,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 300x300, components 3","md5":"401907dbfd7c961559df157f0b7cc0c1","sha1":"c7d2d5d099f922e99df1bc2a94e6aaa062057dcb","sha256":"d28b97cde9ff196441a9074e8c36eb8ea37b85221de8a7fef0491c2cf5eeb96b","sha512":"4e32db959b6d8bb76070464727d6243e249e0039dfed4e558a40769c607a82702d0b4338ae170036fd8ed4dc4773c2c3ddcce1ebfad06bed26a9d3d33ffe6305","ssdeep":"768:+vIrWOegx8wl37ZN1MSUR/52sd5OV5vCo:+vIbqwFtNbiszPvZ","tlshash":"a5c2d0699ab361e07cc9cd47a182dc0587f5ca86bd5bd6ddb2ff014b7f5ea02840c486","first_seen":"2024-02-12T19:42:11Z","last_seen":"2026-06-10T04:58:33.264181Z","times_seen":77,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":2,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026ifkv=AeZLP98oJrEPl7vuSP135yE_yUtu-V27rufa_JFTnNQYySWd-BpuyW-hxxmirPhSPXoQRaq_TjNobg","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.220.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:22.783Z","timestamp":1735254202783,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Dec 2024 08:35:57 GMT","end":"Mon, 24 Feb 2025 08:35:56 GMT"},"fingerprint":{"sha1":"36:7C:F6:D0:DA:DB:45:E1:80:A6:76:D2:C1:A5:38:1A:0B:8D:99:4E","sha256":"40:AB:21:9A:BB:F5:00:8D:F6:A5:A2:54:EF:1D:E8:4C:20:25:E0:E2:67:0F:76:D0:50:EA:E3:9D:5A:7C:DF:78"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026ifkv=AeZLP98oJrEPl7vuSP135yE_yUtu-V27rufa_JFTnNQYySWd-BpuyW-hxxmirPhSPXoQRaq_TjNobg HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:yOViwZtICM0_rwKExNsYDVEk72sxfg:hkNDy4Apa_Wc0K7Y;Path=/;Expires=Sat, 26-Dec-2026 23:03:22 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Thu, 26 Dec 2024 23:03:22 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=AeZLP99L1NuX7hjkYOzozHdSF-E2MtJxyuD0ERs4DeXhTl7ZyyDxqfh_OCH7Kvy-myd1PAAEoTEjyQ\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S-1675458210%3A1735254202794696\u0026ddm=1\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-9K5YXP9UEJ9lT1NU5zSCvQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 423\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":423,"size_decoded":559,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (393)","md5":"7cd0680e96bda9d7b9a5a6912a2ac028","sha1":"ddc917296347cad86704b73816f5b56059f7ad5a","sha256":"67e0fc6a83801e3bf31372bd8881769467bf922036964933c2057f5555484915","sha512":"682a64ea83dd7f926f86275b06c46433df8cfde71901045fe4abe50e9ab4e8f861be76a99bdfc1366765ac6536746102f8131a78203c2f499ccfa8a3618421a6","ssdeep":"","tlshash":"70f020ef088e08e9a0b73cf6a428f0dc942024693ecfb5bc61f95b4146d892b11562f2","first_seen":"2024-12-26T23:03:50.492237Z","last_seen":"2024-12-26T23:03:50.492237Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nereserv.com/in/dip?event_id=0585e834-10de-4a1c-8836-abeaab7c2b1e\u0026subid=500843478\u0026spot_id=503362\u0026created_at=2024-12-26\u0026timezone=0\u0026ver=1.158.2","fqdn":"nereserv.com","domain":"nereserv.com","tld":"com"},"ip":{"addr":"168.119.25.102","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:21.892Z","timestamp":1735254201892,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 Nov 2024 10:40:28 GMT","end":"Wed, 05 Feb 2025 10:40:27 GMT"},"fingerprint":{"sha1":"EE:9A:59:DB:A9:CD:73:0A:9C:87:AC:9F:FE:A1:90:AA:A1:7E:F8:D4","sha256":"38:8A:84:E0:B0:8B:94:D9:5E:47:4A:A9:D9:A0:73:E7:94:7A:ED:DD:BA:82:A1:00:34:B4:4D:7C:8C:84:A3:1D"}}},"request":{"raw":"GET /in/dip?event_id=0585e834-10de-4a1c-8836-abeaab7c2b1e\u0026subid=500843478\u0026spot_id=503362\u0026created_at=2024-12-26\u0026timezone=0\u0026ver=1.158.2 HTTP/1.1\r\nHost: nereserv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://poo.phd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poo.phd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Thu, 26 Dec 2024 23:03:23 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":109,"dns":4,"connect":29,"send":0,"wait":27,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=AeZLP99L1NuX7hjkYOzozHdSF-E2MtJxyuD0ERs4DeXhTl7ZyyDxqfh_OCH7Kvy-myd1PAAEoTEjyQ\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S-1675458210%3A1735254202794696\u0026ddm=1","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.220.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:22.879Z","timestamp":1735254202879,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Dec 2024 08:35:57 GMT","end":"Mon, 24 Feb 2025 08:35:56 GMT"},"fingerprint":{"sha1":"36:7C:F6:D0:DA:DB:45:E1:80:A6:76:D2:C1:A5:38:1A:0B:8D:99:4E","sha256":"40:AB:21:9A:BB:F5:00:8D:F6:A5:A2:54:EF:1D:E8:4C:20:25:E0:E2:67:0F:76:D0:50:EA:E3:9D:5A:7C:DF:78"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=AeZLP99L1NuX7hjkYOzozHdSF-E2MtJxyuD0ERs4DeXhTl7ZyyDxqfh_OCH7Kvy-myd1PAAEoTEjyQ\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S-1675458210%3A1735254202794696\u0026ddm=1 HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Thu, 26 Dec 2024 23:03:22 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-security-policy: script-src 'nonce-tk2FAKCoLU1fe4lyrOnUOg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.google.com/recaptcha/api.js https://translate.google.com/translate_a/element.js https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.google.com/tools/feedback/help_api.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.1PNB2j8wR4U.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":12434,"size_decoded":12434,"mime_type":"text/html; charset=utf-8","magic":"gzip compressed data, max compression","md5":"0466bfab5d00e5e31fbc56dc3bb96a26","sha1":"1e4f7f679837c201dec85125214aa05c6d7d6cab","sha256":"9c194d91949b2945f7d27ce11d79d3ad6e266dc9aa92484e2763d72382d10d99","sha512":"28a1a0bf1fa570cf080d774888cd73445fad1e79d0195386b98b984cde5b7ec04b678a90b5ff102b017646ef646bd9b8b4b181693cebb88d56f05f68427d1886","ssdeep":"384:Clv+lE/wH+KjHltTdbsA5vup+xveYk/x+68OLpi:ClpVKjFXbsAUcmYmXpi","tlshash":"1142b00f8b7e0bc2c94130bd10b7a0641442938837e29c8fe4728899ea5f5f692b94dd","first_seen":"2024-12-26T23:03:50.494275Z","last_seen":"2024-12-26T23:03:50.494275Z","times_seen":1,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metrolagu.cam/watch?v=vve-1aKPqmI","date":"2024-12-26T23:03:23.262Z","timestamp":1735254203262,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Nov 2024 07:25:18 GMT","end":"Mon, 24 Feb 2025 07:25:17 GMT"},"fingerprint":{"sha1":"64:3F:50:40:E0:BD:89:CB:A9:C8:BE:E5:74:F6:9E:D6:2E:1A:32:02","sha256":"E2:FD:99:E5:FF:2E:79:8A:23:2B:44:C0:93:30:22:99:44:F9:88:0A:8C:26:58:B1:13:F4:D5:05:08:36:E0:2F"}}},"request":{"raw":"GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://metrolagu.cam\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metrolagu.cam/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Dec 2024 23:03:23 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27958\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb09ed3-15d84\"\r\nlast-modified: Mon, 04 May 2020 23:01:39 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 594982\r\nexpires: Tue, 16 Dec 2025 23:03:23 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=njQ2X1CSI600GcPXeTzAKjBZdos0hgIy6W0z5WmrbnSfJVN7lk%2BO67YSjCbmZQo9F1%2BCi2X50ZoqQ%2B4tjkgtoifuHqwlmR1AOKo10YjbDyzmbvi6yCyAk1ezZMdlo7WrV4O4VtnB\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\ncf-ray: 8f84b4328b0fb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27958,"size_decoded":89476,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-06-20T01:44:02.256587Z","times_seen":252904,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":27,"dns":1,"connect":1,"send":0,"wait":24,"receive":2,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uk.pivotsforints.com/ryXb2oiPSKP/64343","fqdn":"uk.pivotsforints.com","domain":"pivotsforints.com","tld":"com"},"ip":{"addr":"23.109.170.127","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metrolagu.cam/watch?v=vve-1aKPqmI","date":"2024-12-26T23:03:23.261Z","timestamp":1735254203261,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"uk.pivotsforints.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Dec 2024 06:08:28 GMT","end":"Mon, 24 Mar 2025 06:08:27 GMT"},"fingerprint":{"sha1":"6E:77:CC:13:94:33:A4:40:26:03:41:D7:70:DD:8B:3D:1B:A4:A1:8D","sha256":"8B:B5:60:2A:57:E7:72:4F:6C:FC:4F:44:A5:83:31:4A:50:FE:62:11:F5:0E:30:2D:7B:2E:2E:64:67:82:1A:E2"}}},"request":{"raw":"GET /ryXb2oiPSKP/64343 HTTP/1.1\r\nHost: uk.pivotsforints.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metrolagu.cam/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 26 Dec 2024 23:03:23 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nAccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://metrolagu.cam\r\nAccess-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\nAccess-Control-Max-Age: 600\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nSet-Cookie: GL_UI4=eJw9jUtug0AQRPljJ4akJQ7gIxgUjL3MJivfAQ0zDZ4Ypq1mjJ3bZxIp2dUrPVV5nhcUL%2BAvyRrCm6hhe1R9s5dYojyUVVW%2BHSrZ151o%2BlJVTVnvYK3n1opuRBvBap4E29YuEWwGNMhatpIUZvDqrL%2FmYuhuIog7FkZlEE%2FOGDNIO6b7jFyEEBkxIaQfmrGnhzPEJzEEx72L2rjo7yCguQjzJ4hP2twe%2BSbx8jzx4Pk6CtsTT61WDuOBhULw32ElhcWB%2BAtShfPF0hWARtX%2B%2B7%2Bf8fizBonCRUuHZM%2FI38wATrY%3D; expires=Fri, 27-Dec-2024 23:03:23 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJwViE0KgzAUBvMeJVAqhY96AE%2BQamsXbmuXRReewGopgZBIEvtz%2B%2BpiBmaEEJwmYD0hqQpV5ao8qeJSgl7gpgUPFrJx%2FtP%2FQB6cn8HeYtcG47LazTYuf8BmbZDG%2Fmr0N%2BucmaN2NoAXtnX%2FMM%2FjrbuDJkng6FaHMRWgtzz8AV7hHdE%3D; expires=Fri, 27-Dec-2024 23:03:23 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=1\r\nX-Content-Type-Options: nosniff\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20,"size_decoded":20,"mime_type":"application/javascript; charset=utf-8","magic":"gzip compressed data, from Unix","md5":"7029066c27ac6f5ef18d660d5741979a","sha1":"46c6643f07aa7f6bfe7118de926b86defc5087c4","sha256":"59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2","sha512":"7e8e93f4a89ce7fae011403e14a1d53544c6e6f6b6010d61129dc27937806d2b03802610d7999eab33a4c36b0f9e001d9d76001b8354087634c1aa9c740c536f","ssdeep":"","tlshash":"de70000000c03c30cc00003000000000000c30000000c00300000c3000030c000c003c","first_seen":"2023-04-09T15:32:38Z","last_seen":"2025-03-02T06:10:10.559841Z","times_seen":229342,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":140,"dns":84,"connect":17,"send":0,"wait":23,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-26","alert":"Sinkholed","trigger":"pivotsforints.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metrolagu.cam/play.svg","fqdn":"metrolagu.cam","domain":"metrolagu.cam","tld":"cam"},"ip":{"addr":"172.67.147.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metrolagu.cam/watch?v=vve-1aKPqmI","date":"2024-12-26T23:03:23.400Z","timestamp":1735254203400,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metrolagu.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Dec 2024 16:54:35 GMT","end":"Thu, 06 Mar 2025 16:54:34 GMT"},"fingerprint":{"sha1":"87:2E:BA:C2:E3:F4:34:E9:D2:45:40:BD:CB:5D:20:18:B4:E8:2A:9F","sha256":"4C:AA:F7:E7:D6:17:F5:CE:73:10:D5:9B:6A:46:C3:2F:E9:AA:6B:8B:E8:83:60:9F:F0:F7:B3:CF:B3:D0:A8:21"}}},"request":{"raw":"GET /play.svg HTTP/1.1\r\nHost: metrolagu.cam\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metrolagu.cam/embed.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Dec 2024 23:03:23 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 21 Sep 2023 10:51:20 GMT\r\netag: W/\"650c2028-279\"\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 2392\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=fBgVb5gtbhsPv%2FtSbKAewVJwwPUSS0K4DwjEOeGCq1ixeBpSnA8bbHRsFjq9U2U0D4FZOZrChk%2Fw4zagvapKM6IoUBu0uTe%2BtC3R2Cb%2FG7PVfzp0mWRacKa%2Ft6xc7vUS\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8f84b4333ca45695-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3696\u0026min_rtt=1807\u0026rtt_var=1745\u0026sent=18\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=8047\u0026recv_bytes=1858\u0026delivery_rate=32815\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=f611683d09ee8552\u0026ts=970\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":53595,"size_decoded":633,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"85f08506e5a64050719e7e18a26cd9c4","sha1":"cda07433539f1346406e7dde1a92ea6346d593d7","sha256":"b6280b025f54d1e117f8515da139cc3d7c64955a5342fd81498431578336dd08","sha512":"e417f614919a5b92b54fb558365980d44479d2aeed0ae217c8c77a16a408fc5bd9e6b65263a3e97a86eabd673e9b1e24e997bdb343b5715e11058aa4d983505a","ssdeep":"","tlshash":"b9f07d25ea4018ef4c0fcbd5175df624316b79ded1e80b9a638a48e171a5ee8744d243","first_seen":"2023-10-24T06:38:45Z","last_seen":"2025-07-18T17:08:42.343556Z","times_seen":243,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"enrtx.com/get/","fqdn":"enrtx.com","domain":"enrtx.com","tld":"com"},"ip":{"addr":"94.130.197.239","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:23.247Z","timestamp":1735254203247,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"puwpush.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Oct 2024 10:28:34 GMT","end":"Tue, 28 Jan 2025 10:28:33 GMT"},"fingerprint":{"sha1":"61:BC:31:65:90:EA:DD:3B:91:05:29:93:84:00:89:BB:11:CB:81:2F","sha256":"A8:02:14:04:EA:D2:01:87:4E:5B:FA:34:D9:58:AC:B1:90:10:4B:D9:0E:13:6A:1F:7A:C8:FA:9B:52:6B:1D:0C"}}},"request":{"raw":"POST /get/ HTTP/1.1\r\nHost: enrtx.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poo.phd/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1072\r\nOrigin: https://poo.phd\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.16.0\r\ndate: Thu, 26 Dec 2024 23:03:23 GMT\r\ncontent-type: application/json\r\ncontent-length: 3684\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3684,"size_decoded":3684,"mime_type":"application/json","magic":"JSON text data","md5":"07d79e37729a97e2bd61cc7109348941","sha1":"9ce7722950078b59c67c67e29fd12a28a9284857","sha256":"38d181738f90d5c015c8ac54d58fb5e4252c031c2cd990a37fda1b9a4733bbd6","sha512":"1576622e285119c687cb3d4fa0141479303cc77a524808aad4f3c35d6710ff54c873aab633bb7c3ad56e892c874339a74e16b701455c6c3560af9bb61fbb2c22","ssdeep":"","tlshash":"f971c6863867fd7104e5c1012152da5c27d9eb825bceaeaaffb1c77691a0335018fe6c","first_seen":"2024-12-26T23:03:50.500237Z","last_seen":"2024-12-26T23:03:50.500237Z","times_seen":1,"resource_available":false,"data":null}},"time_used":817,"timings":{"blocked":91,"dns":3,"connect":27,"send":0,"wait":630,"receive":1,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poo.phd/cdn-cgi/rum?","fqdn":"poo.phd","domain":"poo.phd","tld":"phd"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:21.394Z","timestamp":1735254201394,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poo.phd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Dec 2024 16:48:14 GMT","end":"Thu, 20 Mar 2025 17:48:11 GMT"},"fingerprint":{"sha1":"D6:36:DE:79:30:4A:6D:68:F7:8B:44:4B:F5:6B:48:0A:0F:05:B9:C0","sha256":"BB:68:FC:5B:96:D6:FF:5B:90:40:5B:B7:1B:D1:B8:0D:1C:8F:78:AD:49:60:CD:C4:FB:13:14:4A:71:3E:68:49"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: poo.phd\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 787\r\nOrigin: https://poo.phd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poo.phd/e/5m4670oun9xb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Thu, 26 Dec 2024 23:03:44 GMT\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://poo.phd\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: cloudflare\r\ncf-ray: 8f84b4b65adf56cc-OSL\r\nx-frame-options: DENY\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metrolagu.cam/jembud/6278396e756f303736346d35","fqdn":"metrolagu.cam","domain":"metrolagu.cam","tld":"cam"},"ip":{"addr":"172.67.147.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://mp4skin.com/watch?V=qqqRuFM3thI","date":"2024-12-26T23:03:21.850Z","timestamp":1735254201850,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metrolagu.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Dec 2024 16:54:35 GMT","end":"Thu, 06 Mar 2025 16:54:34 GMT"},"fingerprint":{"sha1":"87:2E:BA:C2:E3:F4:34:E9:D2:45:40:BD:CB:5D:20:18:B4:E8:2A:9F","sha256":"4C:AA:F7:E7:D6:17:F5:CE:73:10:D5:9B:6A:46:C3:2F:E9:AA:6B:8B:E8:83:60:9F:F0:F7:B3:CF:B3:D0:A8:21"}}},"request":{"raw":"GET /jembud/6278396e756f303736346d35 HTTP/1.1\r\nHost: metrolagu.cam\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mp4skin.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Dec 2024 23:03:22 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=yYVhpDRiV19x1dmi0xZ5VkDlVZT8HWO8uL05kup%2FykmqFTCOuIi44WLj35sQgRnmS%2F2BCGxPsyBlUQ8eJ7n69qWQNrJFmmLIoh90uWTddBQBjNFhJosI0FNmIblIgzy%2B\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f84b429d8b30b45-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1067\u0026min_rtt=472\u0026rtt_var=1198\u0026sent=7\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3204\u0026recv_bytes=1154\u0026delivery_rate=7133004\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=3bbde669d52f2979\u0026ts=527\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":244,"size_decoded":244,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with no line terminators","md5":"f3ea3167d0f1d81770d8b6b3c954c5dd","sha1":"cc6a477b6a6f82f567b654f1a10375017c63ad20","sha256":"cb5817b6e2bcb37bce378a4a22d425c476ed4d5eddce3250f0a7e600c80ba88f","sha512":"eadbee52e68cb26d6991bae2bff61c43ba8c9b22c18d8447ab01d7b0636ee0d1341ae70f0c646a06200d3e14207e2f1dccc1907609657eb2abcb41a5fab473a1","ssdeep":"","tlshash":"95d0975c38f0807000215da82bffa7bc0e0672ab0001398832ce0028d728de88d36bc4","first_seen":"2024-12-26T23:03:50.502055Z","last_seen":"2024-12-26T23:03:50.502055Z","times_seen":1,"resource_available":false,"data":null}},"time_used":647,"timings":{"blocked":45,"dns":36,"connect":1,"send":0,"wait":540,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metrolagu.cam/watch?v=vve-1aKPqmI","fqdn":"metrolagu.cam","domain":"metrolagu.cam","tld":"cam"},"ip":{"addr":"172.67.147.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://mp4skin.com/watch?V=qqqRuFM3thI","date":"2024-12-26T23:03:22.780Z","timestamp":1735254202780,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metrolagu.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Dec 2024 16:54:35 GMT","end":"Thu, 06 Mar 2025 16:54:34 GMT"},"fingerprint":{"sha1":"87:2E:BA:C2:E3:F4:34:E9:D2:45:40:BD:CB:5D:20:18:B4:E8:2A:9F","sha256":"4C:AA:F7:E7:D6:17:F5:CE:73:10:D5:9B:6A:46:C3:2F:E9:AA:6B:8B:E8:83:60:9F:F0:F7:B3:CF:B3:D0:A8:21"}}},"request":{"raw":"POST /watch?v=vve-1aKPqmI HTTP/1.1\r\nHost: metrolagu.cam\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 29\r\nOrigin: https://metrolagu.cam\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metrolagu.cam/jembud/6278396e756f303736346d35\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Dec 2024 23:03:23 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BXt9BYckO68ZM1w4Uwd6QDR1wsvEu7QGpP23m1KdLIfyfsK8sf%2FxmHqCXvO%2F0Y0JRhNs8dwdfkYCoqyIs3T%2FWiQHrHXY41XKpquGHS4IylwjmhJhOx1zrAvNjcZqXzWU\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f84b42f589d5695-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3669\u0026min_rtt=3124\u0026rtt_var=1561\u0026sent=12\u0026recv=6\u0026lost=0\u0026retrans=0\u0026sent_bytes=4067\u0026recv_bytes=1222\u0026delivery_rate=188495\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=f611683d09ee8552\u0026ts=582\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5476,"size_decoded":5476,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5622), with no line terminators","md5":"d1b0680843bcd57047a6587482157abe","sha1":"07ee9fc946bd1db93a8112bbe854f52fedf079db","sha256":"0c736fcb2ba4fea79457f12d21bd8d56662519e59a228ce7f484941fe70a9471","sha512":"28afba756b2c24eb42ad2faea96bd056876e8273a69c082af3c83b8e1adfa57cad6277c2758202569117b9200f0fd53361974f66046bea03e56f46c9027ccd03","ssdeep":"96:muvJzCVOiLY++ZEJ2LWG7mppf4F2h7sWr+moCItxRbezjTse2/:fmVOiLZ5ALW2upNls8+4IF0w/","tlshash":"49c1851b3d4055b0134b9fb73b7664caf562398d6901c508b48cf894bfa8f54da43e74","first_seen":"2024-12-26T23:03:50.504241Z","last_seen":"2024-12-26T23:03:50.504241Z","times_seen":1,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"be1c6e25e9.ca6d30883b.com/a8514643546b53750c252df18c531ac2.js","fqdn":"be1c6e25e9.ca6d30883b.com","domain":"ca6d30883b.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:20.629Z","timestamp":1735254200629,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"be1c6e25e9.ca6d30883b.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Dec 2024 02:15:00 GMT","end":"Sun, 23 Mar 2025 02:14:59 GMT"},"fingerprint":{"sha1":"F1:3B:3F:E0:9B:7B:44:B3:01:BC:63:4D:73:F9:46:DB:81:3A:4E:9E","sha256":"7D:B9:AC:5B:2C:11:16:32:CD:13:AE:E0:42:91:63:EB:49:32:B5:5A:28:E5:E8:33:46:23:B4:0F:01:55:B3:23"}}},"request":{"raw":"GET /a8514643546b53750c252df18c531ac2.js HTTP/1.1\r\nHost: be1c6e25e9.ca6d30883b.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://poo.phd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poo.phd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Dec 2024 23:03:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Thu, 05 Dec 2024 14:47:03 GMT\r\netag: W/\"6751bce7-1dc9f\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 26 Dec 2024 23:08:20 GMT\r\ncache-control: max-age=300\r\nx-proxy-cache: HIT\r\nx-cdn-host-id: ds8137\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":122015,"size_decoded":122015,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":632,"timings":{"blocked":265,"dns":50,"connect":101,"send":0,"wait":101,"receive":0,"ssl":113},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-26","alert":"Sinkholed","trigger":"ca6d30883b.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be1c6e25e9.ca6d30883b.com/e467a7c7bf230cd596e05c71a25fb676/114039?version_name=b\u0026domain=poo.phd","fqdn":"be1c6e25e9.ca6d30883b.com","domain":"ca6d30883b.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:21.192Z","timestamp":1735254201192,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"be1c6e25e9.ca6d30883b.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Dec 2024 02:15:00 GMT","end":"Sun, 23 Mar 2025 02:14:59 GMT"},"fingerprint":{"sha1":"F1:3B:3F:E0:9B:7B:44:B3:01:BC:63:4D:73:F9:46:DB:81:3A:4E:9E","sha256":"7D:B9:AC:5B:2C:11:16:32:CD:13:AE:E0:42:91:63:EB:49:32:B5:5A:28:E5:E8:33:46:23:B4:0F:01:55:B3:23"}}},"request":{"raw":"GET /e467a7c7bf230cd596e05c71a25fb676/114039?version_name=b\u0026domain=poo.phd HTTP/1.1\r\nHost: be1c6e25e9.ca6d30883b.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://poo.phd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poo.phd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Dec 2024 23:03:21 GMT\r\ncontent-type: application/json\r\nserver: nginx/1.18.0\r\ncache-control: max-age=300\r\nexpires: Thu, 26 Dec 2024 23:08:21 GMT\r\nx-proxy-cache: HIT\r\nx-cdn-host-id: ds8137\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3729,"size_decoded":3729,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with very long lines (4203), with no line terminators","md5":"9c78a2a2da4a06f6a5326dbc3dbc3d27","sha1":"2f09c257423df591b7e0710c293132d90dd1d5f3","sha256":"b2fd64dbb8dc8443161748fad15638e7071e8c96e64a78311ea09d210c453dd4","sha512":"90f5e39c0311c706087fc17ba10e526336efe8c62ac8f87288af95174033992dae83e78426c63a5e4de4f1cc241dbc5303fbf9ebd947482ee1ab289e3793ab2c","ssdeep":"96:dlAi5N5WNctKSN/INLnzEXIozfl0ESN/INL0EXIozfBWLzFdBksDPIfnm7y:dlAarMcpN/INLozON/INkozBUFdBJDPu","tlshash":"e981e0e8a428d813c0905e6f27bd7f36558d20ee28c63c8aa5e94d5d02f54719b2f90f","first_seen":"2024-12-22T00:01:03.276612Z","last_seen":"2025-01-26T05:54:35.010838Z","times_seen":8,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-26","alert":"Sinkholed","trigger":"ca6d30883b.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be1c6e25e9.ca6d30883b.com/a9d6a07d87f62b3487809a95a3b11612.js","fqdn":"be1c6e25e9.ca6d30883b.com","domain":"ca6d30883b.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:21.877Z","timestamp":1735254201877,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"be1c6e25e9.ca6d30883b.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Dec 2024 02:15:00 GMT","end":"Sun, 23 Mar 2025 02:14:59 GMT"},"fingerprint":{"sha1":"F1:3B:3F:E0:9B:7B:44:B3:01:BC:63:4D:73:F9:46:DB:81:3A:4E:9E","sha256":"7D:B9:AC:5B:2C:11:16:32:CD:13:AE:E0:42:91:63:EB:49:32:B5:5A:28:E5:E8:33:46:23:B4:0F:01:55:B3:23"}}},"request":{"raw":"GET /a9d6a07d87f62b3487809a95a3b11612.js HTTP/1.1\r\nHost: be1c6e25e9.ca6d30883b.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poo.phd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Dec 2024 23:03:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Thu, 26 Dec 2024 12:39:46 GMT\r\netag: W/\"676d4e92-86f13\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 26 Dec 2024 23:08:21 GMT\r\ncache-control: max-age=300\r\nx-proxy-cache: HIT\r\nx-cdn-host-id: ds8137\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":552723,"size_decoded":552723,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-26","alert":"Sinkholed","trigger":"ca6d30883b.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meenetiy.com/wrr?z=6678850\u0026p_rid=885867d9-b370-4673-a6b9-66f9b5a699b7\u0026rb=TGt8drTBxJJgGLylFuOvXn_QtTbqq-9FYT3mwbU9EXQcL0T5joYmSP0RLFd9hLWHLjOxeF7Ms41JlKDCRO2-EnLi7i914pQZLxvD1IlwSaL9LntU-emf4L_Ivh2xF10iSKTyo1TCJMk8gRck3jPWdqZ2zssuUn8IeLey9xmDi-m_0XL9Bt8v9CRAAAd3OxDAFSNc_F2TxeP04r7DdnHQm0odjELu2JkeKg2KkFm-j4nGJg7rzk8mCneXyGPaXmyjxY071yl2vkVnOHuD\u0026jsp=1\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026wih=-1\u0026wiw=-1\u0026ww=-1\u0026wh=-1\u0026sah=1024\u0026wx=0\u0026wy=0\u0026cw=0\u0026wfc=2\u0026pl=https%3A%2F%2Fmp4skin.com%2Fwatch%3FV%3DqqqRuFM3thI\u0026drf=https%3A%2F%2Fmp4skin.com%2Fembud%2F6278396e756f303736346d35\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=1\u0026nw=1\u0026tb=false\u0026btz=UTC\u0026bto=0\u0026tt=1\u0026wgl=\u0026js_build=iclick-v1.1028.0\u0026navlng=en-US\u0026vsbl=true\u0026pnt=0\u0026pnrc=0\u0026wasm=1\u0026dmn=meenetiy.com\u0026userId=00813e94674843eee24e13ac04ad9abe","fqdn":"meenetiy.com","domain":"meenetiy.com","tld":"com"},"ip":{"addr":"139.45.197.119","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mp4skin.com/watch?V=qqqRuFM3thI","date":"2024-12-26T23:03:22.284Z","timestamp":1735254202284,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meenetiy.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Dec 2024 05:12:15 GMT","end":"Mon, 24 Mar 2025 05:12:14 GMT"},"fingerprint":{"sha1":"94:A2:14:A5:42:BA:42:10:29:6D:F7:11:0E:F4:7A:A7:67:A9:6D:BA","sha256":"82:5C:94:A3:42:1D:7F:B2:23:2C:83:AB:89:77:0F:98:41:EC:EA:5F:A1:CA:06:6D:D5:5F:CB:BB:98:96:56:53"}}},"request":{"raw":"GET /wrr?z=6678850\u0026p_rid=885867d9-b370-4673-a6b9-66f9b5a699b7\u0026rb=TGt8drTBxJJgGLylFuOvXn_QtTbqq-9FYT3mwbU9EXQcL0T5joYmSP0RLFd9hLWHLjOxeF7Ms41JlKDCRO2-EnLi7i914pQZLxvD1IlwSaL9LntU-emf4L_Ivh2xF10iSKTyo1TCJMk8gRck3jPWdqZ2zssuUn8IeLey9xmDi-m_0XL9Bt8v9CRAAAd3OxDAFSNc_F2TxeP04r7DdnHQm0odjELu2JkeKg2KkFm-j4nGJg7rzk8mCneXyGPaXmyjxY071yl2vkVnOHuD\u0026jsp=1\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026wih=-1\u0026wiw=-1\u0026ww=-1\u0026wh=-1\u0026sah=1024\u0026wx=0\u0026wy=0\u0026cw=0\u0026wfc=2\u0026pl=https%3A%2F%2Fmp4skin.com%2Fwatch%3FV%3DqqqRuFM3thI\u0026drf=https%3A%2F%2Fmp4skin.com%2Fembud%2F6278396e756f303736346d35\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=1\u0026nw=1\u0026tb=false\u0026btz=UTC\u0026bto=0\u0026tt=1\u0026wgl=\u0026js_build=iclick-v1.1028.0\u0026navlng=en-US\u0026vsbl=true\u0026pnt=0\u0026pnrc=0\u0026wasm=1\u0026dmn=meenetiy.com\u0026userId=00813e94674843eee24e13ac04ad9abe HTTP/1.1\r\nHost: meenetiy.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mp4skin.com/\r\nOrigin: https://mp4skin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 26 Dec 2024 23:03:22 GMT\r\ncontent-type: text/plain\r\ncontent-length: 2\r\nx-trace-id: a5a451a4e03a6c5a8105ada010e4c2ac\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://mp4skin.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nset-cookie: OAID=00813e94674843eee24e13ac04ad9abe; expires=Fri, 26 Dec 2025 23:03:22 GMT; path=/; secure; SameSite=None\noaidts=1735254202; expires=Fri, 26 Dec 2025 23:03:22 GMT; path=/; secure; SameSite=None\nsyncedCookie=true; expires=Thu, 02 Jan 2025 23:03:22 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":2,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-06-20T01:50:51.983439Z","times_seen":427525,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":87,"dns":0,"connect":26,"send":0,"wait":28,"receive":35,"ssl":58},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-26","alert":"Sinkholed","trigger":"meenetiy.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metrolagu.cam/embed.css","fqdn":"metrolagu.cam","domain":"metrolagu.cam","tld":"cam"},"ip":{"addr":"172.67.147.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://metrolagu.cam/watch?v=vve-1aKPqmI","date":"2024-12-26T23:03:23.266Z","timestamp":1735254203266,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metrolagu.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Dec 2024 16:54:35 GMT","end":"Thu, 06 Mar 2025 16:54:34 GMT"},"fingerprint":{"sha1":"87:2E:BA:C2:E3:F4:34:E9:D2:45:40:BD:CB:5D:20:18:B4:E8:2A:9F","sha256":"4C:AA:F7:E7:D6:17:F5:CE:73:10:D5:9B:6A:46:C3:2F:E9:AA:6B:8B:E8:83:60:9F:F0:F7:B3:CF:B3:D0:A8:21"}}},"request":{"raw":"GET /embed.css HTTP/1.1\r\nHost: metrolagu.cam\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metrolagu.cam/watch?v=vve-1aKPqmI\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Dec 2024 23:03:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 Sep 2023 15:07:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"651596cf-446\"\r\nexpires: Fri, 27 Dec 2024 09:21:03 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 6140\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xW3BUw4lo%2BevzQ6jJ%2FXdGSGBRF%2ByFkM0CLrImzxm%2B7Q3abscgP%2FifkxIDRmO35e7NJO5iVQjQDbe4xwpoAI7F0uHnoMJgDUjzy9IOvVAnUKuIF73M08P7mJySYcBjlfh\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f84b4326be95695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3437\u0026min_rtt=1807\u0026rtt_var=1636\u0026sent=16\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=6902\u0026recv_bytes=1542\u0026delivery_rate=4988\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=f611683d09ee8552\u0026ts=831\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1094,"size_decoded":1094,"mime_type":"text/css","magic":"ASCII text, with very long lines (1145), with no line terminators","md5":"69c7d11151f7c8da1183e16ec826fd58","sha1":"e20f5a01a0e67b7e5a8966ef0e36894ffa1e7ecf","sha256":"360cdfd896a7ee8339aa947d0ea0457e3463ec025f989ef2e683c1ea4719d7d1","sha512":"84d3a2c8a154a6b1a343c5eda12cefa49ba654d41f4f0d21bd042a8e8c993c8d207f7bcf8b7c17b2b7112af136769bb8b720bb4dc9c9c786d043780e6cd1dcb9","ssdeep":"","tlshash":"29210015ae8229fd7427cfa84bf20321663cb001e6310a2d77afbae3535f09480736e5","first_seen":"2023-10-24T06:38:45Z","last_seen":"2025-04-05T15:44:44.211518Z","times_seen":242,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mp4skin.com/watch?V=qqqRuFM3thI","fqdn":"mp4skin.com","domain":"mp4skin.com","tld":"com"},"ip":{"addr":"172.67.154.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:21.319Z","timestamp":1735254201319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mp4skin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Dec 2024 09:59:40 GMT","end":"Sat, 22 Mar 2025 10:54:20 GMT"},"fingerprint":{"sha1":"D8:8E:3D:C3:C6:C0:99:9D:EB:BD:C7:C8:A3:E1:6A:CE:80:58:75:7D","sha256":"BD:1F:3A:F0:4D:79:5E:1D:7D:9E:5C:F0:3D:DD:5D:3E:7F:72:FD:81:61:32:CF:5F:F8:4C:F9:94:C9:3A:19:AE"}}},"request":{"raw":"POST /watch?V=qqqRuFM3thI HTTP/1.1\r\nHost: mp4skin.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 29\r\nOrigin: https://mp4skin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mp4skin.com/embud/6278396e756f303736346d35\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Dec 2024 23:03:21 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=6d3J1udM0snFoJ5OYE2VP6tgeCNjGZGsXy6T4FCFvjHSpV8oZUVKriw4vzo7GF1PewcnVyawKLRFTK5O4jMCyxwwQDd7%2FFeDIsAd3XA9pO0PQbw0%2BsHqYrZajkCtEA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f84b4263983569c-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=5829\u0026min_rtt=2373\u0026rtt_var=3358\u0026sent=12\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=4090\u0026recv_bytes=1318\u0026delivery_rate=250284\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=11e2551b012f8ff4\u0026ts=440\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":635,"size_decoded":635,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (674), with no line terminators","md5":"0c5228d1a215a54c96128e83aec78ceb","sha1":"633193f15c1d208fffd77f9c813813b391b20a11","sha256":"03b81a87d1cf55a834ddda42c73c8827b9abee2ecd7cd7885e9b7dc0a782723f","sha512":"5bcf5988c17702a399c291da4cf1e487f2df23ca3736ef772dbb8285a15f436497c09ea476194149a4a295f8a644b17c23fea1ad144b1300401e0bdf077396ab","ssdeep":"","tlshash":"8301e12b6ce0c5700515098f27f0d63d3e2af5c88440d40671cc8d681354f986ca3618","first_seen":"2024-12-26T23:03:50.509161Z","last_seen":"2024-12-26T23:03:51.80102Z","times_seen":2,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"be1c6e25e9.ca6d30883b.com/9e4d69f4cab39bd4cbbba618df9906f9.js","fqdn":"be1c6e25e9.ca6d30883b.com","domain":"ca6d30883b.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:21.471Z","timestamp":1735254201471,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"be1c6e25e9.ca6d30883b.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Dec 2024 02:15:00 GMT","end":"Sun, 23 Mar 2025 02:14:59 GMT"},"fingerprint":{"sha1":"F1:3B:3F:E0:9B:7B:44:B3:01:BC:63:4D:73:F9:46:DB:81:3A:4E:9E","sha256":"7D:B9:AC:5B:2C:11:16:32:CD:13:AE:E0:42:91:63:EB:49:32:B5:5A:28:E5:E8:33:46:23:B4:0F:01:55:B3:23"}}},"request":{"raw":"GET /9e4d69f4cab39bd4cbbba618df9906f9.js HTTP/1.1\r\nHost: be1c6e25e9.ca6d30883b.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poo.phd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Dec 2024 23:03:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Thu, 26 Dec 2024 12:39:50 GMT\r\netag: W/\"676d4e96-2e83a\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 26 Dec 2024 23:08:21 GMT\r\ncache-control: max-age=300\r\nx-proxy-cache: HIT\r\nx-cdn-host-id: ds8137\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":190522,"size_decoded":190522,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-26","alert":"Sinkholed","trigger":"ca6d30883b.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be1c6e25e9.ca6d30883b.com/bfc14d10224fb4e562d5d9a7e4e020b6.js","fqdn":"be1c6e25e9.ca6d30883b.com","domain":"ca6d30883b.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:21.474Z","timestamp":1735254201474,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"be1c6e25e9.ca6d30883b.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Dec 2024 02:15:00 GMT","end":"Sun, 23 Mar 2025 02:14:59 GMT"},"fingerprint":{"sha1":"F1:3B:3F:E0:9B:7B:44:B3:01:BC:63:4D:73:F9:46:DB:81:3A:4E:9E","sha256":"7D:B9:AC:5B:2C:11:16:32:CD:13:AE:E0:42:91:63:EB:49:32:B5:5A:28:E5:E8:33:46:23:B4:0F:01:55:B3:23"}}},"request":{"raw":"GET /bfc14d10224fb4e562d5d9a7e4e020b6.js HTTP/1.1\r\nHost: be1c6e25e9.ca6d30883b.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poo.phd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Dec 2024 23:03:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Wed, 11 Dec 2024 14:14:15 GMT\r\netag: W/\"67599e37-1a372\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 26 Dec 2024 23:08:21 GMT\r\ncache-control: max-age=300\r\nx-proxy-cache: HIT\r\nx-cdn-host-id: ds8137\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":107378,"size_decoded":107378,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-26","alert":"Sinkholed","trigger":"ca6d30883b.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be1c6e25e9.ca6d30883b.com/a9d6a07d87f62b3487809a95a3b11612.js","fqdn":"be1c6e25e9.ca6d30883b.com","domain":"ca6d30883b.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:21.881Z","timestamp":1735254201881,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"be1c6e25e9.ca6d30883b.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Dec 2024 02:15:00 GMT","end":"Sun, 23 Mar 2025 02:14:59 GMT"},"fingerprint":{"sha1":"F1:3B:3F:E0:9B:7B:44:B3:01:BC:63:4D:73:F9:46:DB:81:3A:4E:9E","sha256":"7D:B9:AC:5B:2C:11:16:32:CD:13:AE:E0:42:91:63:EB:49:32:B5:5A:28:E5:E8:33:46:23:B4:0F:01:55:B3:23"}}},"request":{"raw":"GET /a9d6a07d87f62b3487809a95a3b11612.js HTTP/1.1\r\nHost: be1c6e25e9.ca6d30883b.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poo.phd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Dec 2024 23:03:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Thu, 26 Dec 2024 12:39:46 GMT\r\netag: W/\"676d4e92-86f13\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 26 Dec 2024 23:08:21 GMT\r\ncache-control: max-age=300\r\nx-proxy-cache: HIT\r\nx-cdn-host-id: ds8137\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":552723,"size_decoded":552723,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-26","alert":"Sinkholed","trigger":"ca6d30883b.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pagead2.googlesyndication.com/pagead/js/adsbygoogle.js","fqdn":"pagead2.googlesyndication.com","domain":"googlesyndication.com","tld":"com"},"ip":{"addr":"216.58.211.2","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://metrolagu.cam/watch?v=vve-1aKPqmI","date":"2024-12-26T23:03:23.451Z","timestamp":1735254203451,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.doubleclick.net","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Dec 2024 08:35:56 GMT","end":"Mon, 24 Feb 2025 08:35:55 GMT"},"fingerprint":{"sha1":"BA:DF:E8:69:61:F6:F8:D5:A5:A9:E9:A2:92:F0:8A:AA:A7:E6:7A:EA","sha256":"F0:68:29:84:79:07:12:05:80:DD:D7:75:28:69:35:34:0A:D5:6A:93:EA:36:F3:91:C8:0E:47:A3:5E:F7:99:82"}}},"request":{"raw":"GET /pagead/js/adsbygoogle.js HTTP/1.1\r\nHost: pagead2.googlesyndication.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://metrolagu.cam/\r\nOrigin: https://metrolagu.cam\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nlink: \u003chttps://googleads.g.doubleclick.net\u003e; rel=\"preconnect\"; crossorigin\r\nvary: Accept-Encoding\r\ndate: Thu, 26 Dec 2024 23:03:23 GMT\r\nexpires: Thu, 26 Dec 2024 23:03:23 GMT\r\ncache-control: private, max-age=3600, stale-while-revalidate=3600\r\ncontent-type: text/javascript; charset=UTF-8\r\netag: 4163617329273953449\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\nserver: cafe\r\ncontent-length: 53258\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":159284,"size_decoded":159284,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3679)","md5":"0322cfd4cd88b32828a17c1e43f977cd","sha1":"83002e8046058956b232a971001708f90f01fe65","sha256":"cd06d9fa2a1b4f93fa74a1fc76b465fa08e80e1cf98cb08e9344645108e0b45a","sha512":"70327c1cf406d6bc5bc2667168f57e157ccd899299de704cf236e1dcda026abcc1609c28dec075a4ef29bee934efc5259edbcd4894ce6dfdf1d7ca1f8d5b3a58","ssdeep":"3072:Dk0LnA+PehJg8VX0TSFbo3FqpPeIQ2jSuaJBtQT1WJrq+Cs7lTj/EUHojiug7wX+:Dk0LnA+Pefg8VX0TSFbo3Fw2IQ2hs7Qi","tlshash":"dcf3f99a7192bcb38b6399e5006f4147b42d9873f00cc4b0b1dcded97a2496652b7fac","first_seen":"2024-12-26T23:03:50.510647Z","last_seen":"2024-12-26T23:03:50.510647Z","times_seen":1,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":71,"dns":2,"connect":7,"send":0,"wait":31,"receive":15,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ax4.poopstream.co/play.svg","fqdn":"ax4.poopstream.co","domain":"poopstream.co","tld":"co"},"ip":{"addr":"172.67.200.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poo.phd/e/5m4670oun9xb","date":"2024-12-26T23:03:20.574Z","timestamp":1735254200574,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ax4.poopstream.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Dec 2024 09:08:50 GMT","end":"Wed, 19 Mar 2025 10:08:49 GMT"},"fingerprint":{"sha1":"2A:3B:7A:45:B3:66:2B:58:D6:9D:CD:11:2C:75:63:01:6D:0A:29:47","sha256":"B6:B0:CB:0B:D7:EE:02:F3:E3:FE:70:B5:BF:4A:0B:B1:08:79:C3:8C:E8:1F:32:C8:A0:FE:E1:D3:5F:96:1A:9F"}}},"request":{"raw":"GET /play.svg HTTP/1.1\r\nHost: ax4.poopstream.co\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://poo.phd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Dec 2024 23:03:20 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"85f08506e5a64050719e7e18a26cd9c4\"\r\nlast-modified: Thu, 14 Mar 2024 17:17:30 GMT\r\nvary: Accept-Encoding\r\ncache-control: max-age=1200\r\ncf-cache-status: HIT\r\nage: 6143\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BTLPkcXrghloCMFeFGDa%2FA%2BPmzh5WBbvcGvJ%2BMOxHjioMHVeuqX1NaTSNeyyroaCVh5W3uEuotOkUVtV7EYWr6qHSMAlT%2BKps0XEuIhD7MSfaLo%2B4WJlrZbl%2B1pNLp5MsahiLQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f84b421fcedb4ed-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=550\u0026min_rtt=472\u0026rtt_var=185\u0026sent=7\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3194\u0026recv_bytes=1068\u0026delivery_rate=6776911\u0026cwnd=253\u0026unsent_bytes=0\u0026cid=e30092a82e8a51a0\u0026ts=30\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":633,"size_decoded":633,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fa7e52a78c2db6968656093b3b4f6266","sha1":"d3c582a7ce14bbe3f2e3a486e8e038d7ccbdfc6a","sha256":"3ba523164e3d24ae32abd260e3728d4418e4720f145e0571acac76c42e81d3cb","sha512":"9815fb8b1cc28f9db05117c272901e0a0fd647db2536a8a5ef1868b03f19c477ab0a8080179dbd5b813f89359961a22509576ab610f18bb0a703a1c4cd683a26","ssdeep":"","tlshash":"08019e18ea5819ba0c0fcbd6131d7a60702fb9ddf8f8078a639a449272669fd3008103","first_seen":"2023-11-12T14:58:37Z","last_seen":"2025-04-05T15:44:44.208621Z","times_seen":221,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":60,"dns":32,"connect":5,"send":0,"wait":10,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js?userId=00813e94674843eee24e13ac04ad9abe","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mp4skin.com/watch?V=qqqRuFM3thI","date":"2024-12-26T23:03:22.173Z","timestamp":1735254202173,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 Nov 2024 10:31:42 GMT","end":"Tue, 04 Feb 2025 10:31:41 GMT"},"fingerprint":{"sha1":"8A:B7:CD:87:FA:39:07:A8:88:41:1C:9E:2D:0E:97:51:61:75:C1:34","sha256":"A9:31:D4:17:BF:30:7D:3A:D4:2A:97:13:3D:DD:D5:0B:67:61:57:30:98:FA:DD:96:F5:8F:88:B5:6F:21:A7:5E"}}},"request":{"raw":"GET /gid.js?userId=00813e94674843eee24e13ac04ad9abe HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mp4skin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mp4skin.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Dec 2024 23:03:22 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: https://mp4skin.com\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\ntiming-allow-origin: *, *\r\nset-cookie: ID=00813e94674843eee24e13ac04ad9abe; expires=Fri, 26 Dec 2025 23:03:22 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DC7NX0M67aPW1IiUERLLwwjtsoNBdLMrUJt6i%2FhGx7efkbIgSZppbRf1Vn63edpMakr8igAAytTIO6BZHp%2BB7TqJtGMe%2F3nBifhQsGP8C4DQrF52gZ4MM6%2B0XNOxzIBv\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f84b42bbd1c56c4-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=505\u0026min_rtt=392\u0026rtt_var=209\u0026sent=7\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3201\u0026recv_bytes=1100\u0026delivery_rate=7812949\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=7984e533c886deec\u0026ts=61\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":65,"size_decoded":65,"mime_type":"application/json; charset=utf-8","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"3bc2daa7c9d4e8170b5502adb2d23fdc","sha1":"afe19690955923fbfe263cedcc7adcab008a4699","sha256":"af24e1f336dac8ae5e9cb6b681044b86b548ea78537fb88d9d99f650538c4a21","sha512":"ff0c4669222eb39dd2430a18e1e98e24b83fe47e024c9e97c903b2e4b20610f3a31deadd48963040b51cc845205bd6910db704c1384386b92a53c6ab589fa3e3","ssdeep":"","tlshash":"19a022ea323c8cc2ac300cc8ebabce032088c280e200080083c0a20202c33bc08a2380","first_seen":"2024-12-26T23:03:50.513226Z","last_seen":"2024-12-26T23:03:50.513226Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":24,"dns":1,"connect":1,"send":0,"wait":40,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poo.phd/e/5m4670oun9xb","fqdn":"poo.phd","domain":"poo.phd","tld":"phd"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-12-26T23:03:19.634Z","timestamp":1735254199634,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poo.phd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Dec 2024 16:48:14 GMT","end":"Thu, 20 Mar 2025 17:48:11 GMT"},"fingerprint":{"sha1":"D6:36:DE:79:30:4A:6D:68:F7:8B:44:4B:F5:6B:48:0A:0F:05:B9:C0","sha256":"BB:68:FC:5B:96:D6:FF:5B:90:40:5B:B7:1B:D1:B8:0D:1C:8F:78:AD:49:60:CD:C4:FB:13:14:4A:71:3E:68:49"}}},"request":{"raw":"GET /e/5m4670oun9xb HTTP/1.1\r\nHost: poo.phd\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Dec 2024 23:03:20 GMT\r\ncontent-type: text/html;charset=UTF-8\r\ncache-control: public, max-age=3600, must-revalidate\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3F3vm8kWNWTigGje9%2BlFnEqjJKSkzpIVa0M0tfz2IvQjSqLYH0WIByZVTP4zRKbqqfVen%2F0YQunSiYIe6Fs%2BApZU82iu0%2FS%2B5k9aQjSA6ayDr5hVkmlgJSNE\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8f84b41c4e6b568b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=6725\u0026min_rtt=491\u0026rtt_var=10750\u0026sent=8\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3191\u0026recv_bytes=1121\u0026delivery_rate=7144736\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=d8a9840d80018a46\u0026ts=547\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11503,"size_decoded":11503,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (6442)","md5":"c8fcbf48f009a870caf937b1d23b27e4","sha1":"6d91a21777da9cb3c893885e586956fb948436b6","sha256":"1ad438eb3bb9ed27be6a46717b6d1062f0794477b215296b0ef3c7ba7581952d","sha512":"435a13b7dddd5aa17bf24f176131e82d87d8217411704cbe7df2ae65a104bd775cb1ca69c0e8eb92b24780d902ad9188d599af52700cc5d76848c3c6959be1ad","ssdeep":"192:A3jvqF7fJry6OwzTtGJaO6AoDhxf9H9eWQVAhB08ThlURa6TtO0zg:XutMtGsOEzMtTtOB","tlshash":"fb32b3f2bda7228c939372e57d261101c020945a12a9fc58f9aeb2d5beb4ded4877370","first_seen":"2024-12-26T23:03:50.514685Z","last_seen":"2024-12-26T23:03:50.514685Z","times_seen":1,"resource_available":false,"data":null}},"time_used":706,"timings":{"blocked":86,"dns":64,"connect":3,"send":0,"wait":533,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}