{"report_id":"36fa14b1-bb2e-4ca9-bd8c-fb05f66efb52","version":6,"status":"done","tags":[],"date":"2025-05-03T00:11:50Z","url":{"schema":"http","addr":"lagostin.cf/docs/sportv1/1746134485720.doc","fqdn":"lagostin.cf","domain":"lagostin.cf","tld":"cf"},"ip":{"addr":"104.21.96.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"lookmommynohands.com/?rzi=2064973\u0026rsz=2064973\u0026rid=","fqdn":"lookmommynohands.com","domain":"lookmommynohands.com","tld":"com"},"title":"Confirm"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-12T00:11:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"lagostin.cf","ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2022-08-27T10:02:26Z","last_seen":"2024-10-10T22:09:58Z","alert_count":0,"request_count":1,"received_data":4931,"sent_data":510,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pagerrentablespotlight.com","ip":{"addr":"94.242.247.34","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-03-12","domain_rank":0,"first_seen":"2025-04-21T03:01:24.809947Z","last_seen":"2025-05-03T00:02:07.875473Z","alert_count":0,"request_count":3,"received_data":93743,"sent_data":2427,"comment":"","tags":null,"fingerprints":null},{"fqdn":"veryfastcdn.com","ip":{"addr":"172.67.163.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-17","domain_rank":0,"first_seen":"2025-02-20T01:29:37Z","last_seen":"2025-04-26T19:15:24.081464Z","alert_count":1,"request_count":1,"received_data":5426,"sent_data":475,"comment":"","tags":null,"fingerprints":null},{"fqdn":"notfound.vg","ip":{"addr":"104.21.21.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-10-16","domain_rank":0,"first_seen":"2023-10-16T13:51:37Z","last_seen":"2025-05-03T00:02:08.067241Z","alert_count":0,"request_count":1,"received_data":4759,"sent_data":480,"comment":"","tags":null,"fingerprints":null},{"fqdn":"lookmommynohands.com","ip":{"addr":"172.67.160.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-07-31","domain_rank":0,"first_seen":"2024-07-31T14:53:40Z","last_seen":"2025-04-26T19:15:24.090182Z","alert_count":0,"request_count":2,"received_data":12911,"sent_data":1347,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2025-05-03T00:11:17Z","timestamp":1746231077,"ip_dst":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.23","port":57844,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Suspicious Domain (*.cf) in TLS SNI","source":"{\"timestamp\":\"2025-05-03T00:11:17.879862+0000\",\"flow_id\":1629099871522339,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.23\",\"src_port\":57844,\"dest_ip\":\"104.21.64.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025111,\"rev\":6,\"signature\":\"ET INFO Suspicious Domain (*.cf) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"Medium\"],\"created_at\":[\"2017_12_03\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"sni\":\"lagostin.cf\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":913,\"bytes_toclient\":3517,\"start\":\"2025-05-03T00:11:17.871971+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-05-03","alert":"Sinkholed","trigger":"veryfastcdn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"pagerrentablespotlight.com/2064973/","fqdn":"pagerrentablespotlight.com","domain":"pagerrentablespotlight.com","tld":"com"},"ip":{"addr":"94.242.247.34","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"eeac76dd345c27bbd868416bd19ac9cf","sha1":"861d44f4a2667d343e30b2847c75f967ae8af16b","sha256":"b6e8b6d4724b52aa7a90781928748f252302d7dd6e316733810c1470f645224d","sha512":"8d35285f67f51ec96f5381413439f45fde34e3bb75fb0916ea1ea9ee7e387704bb2a64d63a68f48a232d74c8143c11b162b5238a9ea1774a2945aa54c166f408","ssdeep":"","tlshash":"93f023431f22905b77b130167a05245ea913a147f99420a45111aa8a003bfceea7b55c","size":650,"data":"","first_seen":"2025-05-03T00:11:51.575293Z","last_seen":"2025-05-03T00:11:51.575293Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagerrentablespotlight.com/2064973/","fqdn":"pagerrentablespotlight.com","domain":"pagerrentablespotlight.com","tld":"com"},"ip":{"addr":"94.242.247.34","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"Function","is_inline":false,"md5":"c2dd7d8e46fb296d0b59227db8cbf6ca","sha1":"93d69e7d506dcdfe898ae9b93303fa900774223c","sha256":"2c97794098f7fd60dae4dd037d2c33eb609bafe57cc145402d615b6d0017522d","sha512":"e36f8fc6e823ce3616e766adbd3c6c839ea590c19206efb68ee4641eeebc3f5f4755333df2ba07112192498d2f3107998625293d56e19610f35f062b81ff2428","ssdeep":"","tlshash":"19f020832f22e00afb3031613a14585ea402900bbed520284550a89a01633c9f63b12c","size":523,"data":"","first_seen":"2025-05-03T00:11:51.576482Z","last_seen":"2025-05-03T00:11:51.576482Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagerrentablespotlight.com/submit.min.js?abvar=","fqdn":"pagerrentablespotlight.com","domain":"pagerrentablespotlight.com","tld":"com"},"ip":{"addr":"94.242.247.34","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1bdddeae698c7bf7bab88a33001b310c","sha1":"cbafa42216af3bed6d645933d14aeadb96877aa3","sha256":"376fa71c884dccca2d957e2a3c03c4b5550dfcb646764cfa3f17138dfc7dacf4","sha512":"2cb0b4539e030434084b15ab8db04986f0768393eee64a765c9c2e54cbd2f614b1b4a4da6b2d1e1869ac6b129735bc6408414aa09ceeb14826e31d70e747b3ed","ssdeep":"","tlshash":"74113595a2142c39e03a5195ed3f304a94fb1124244ea8435e17f9cdcdbc5d6c792942","size":1000,"data":"","first_seen":"2025-05-03T00:02:11.735881Z","last_seen":"2025-05-03T00:23:57.149938Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lookmommynohands.com/?b=4240630\u0026ba=1\u0026campid=3086116\u0026did={deviceid}\u0026dm=0\u0026ep=1\u0026g=no\u0026i18db=1\u0026l=rVzHfhQ1K6Q4O5W\u0026oaid=25050219110c3420768aa9468092ca4f2ad7\u0026rid=2064957\u0026s=25050219110c3420768aa9468092ca4f2ad7\u0026ssk=521458dafae737dd14cf5bc005e6a6b2\u0026svar=1746231078\u0026vi=1\u0026vo=1\u0026z=2064973\u0026tr=default","fqdn":"lookmommynohands.com","domain":"lookmommynohands.com","tld":"com"},"ip":{"addr":"172.67.160.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b2f28b11adefd6c40c5a0cda80c29e26","sha1":"e286d0fe22deb82288d963e05f5f3d2bca593d42","sha256":"3ef376c9cf71e355c70777252ad451257042a57ee92c80cc97a9183f1d67b4bd","sha512":"471481ae5822898aed622984afe841797ca7599aa1b8b89074209133f1e6714798c21f645acb5e6d462ed4ac2ee1c1a91d5fa381c71447951ffd3717b6fe817b","ssdeep":"","tlshash":"d531441e45d42174ec7774708b6f705038a7925b184ad9803e2de5d44f26a1f89cdfec","size":1593,"data":"","first_seen":"2025-05-03T00:11:51.577453Z","last_seen":"2025-05-03T00:11:51.577453Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lookmommynohands.com/?b=4240630\u0026ba=1\u0026campid=3086116\u0026did={deviceid}\u0026dm=0\u0026ep=1\u0026g=no\u0026i18db=1\u0026l=rVzHfhQ1K6Q4O5W\u0026oaid=25050219110c3420768aa9468092ca4f2ad7\u0026rid=2064957\u0026s=25050219110c3420768aa9468092ca4f2ad7\u0026ssk=521458dafae737dd14cf5bc005e6a6b2\u0026svar=1746231078\u0026vi=1\u0026vo=1\u0026z=2064973\u0026tr=default#","fqdn":"lookmommynohands.com","domain":"lookmommynohands.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"b2f28b11adefd6c40c5a0cda80c29e26","sha1":"e286d0fe22deb82288d963e05f5f3d2bca593d42","sha256":"3ef376c9cf71e355c70777252ad451257042a57ee92c80cc97a9183f1d67b4bd","sha512":"471481ae5822898aed622984afe841797ca7599aa1b8b89074209133f1e6714798c21f645acb5e6d462ed4ac2ee1c1a91d5fa381c71447951ffd3717b6fe817b","ssdeep":"","tlshash":"d531441e45d42174ec7774708b6f705038a7925b184ad9803e2de5d44f26a1f89cdfec","size":1593,"data":"","first_seen":"2025-05-03T00:11:51.577453Z","last_seen":"2025-05-03T00:11:51.577453Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"pagerrentablespotlight.com/2064973/","fqdn":"pagerrentablespotlight.com","domain":"pagerrentablespotlight.com","tld":"com"},"ip":{"addr":"94.242.247.34","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-05-03T00:11:18.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pagerrentablespotlight.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Mar 2025 15:17:39 GMT","end":"Tue, 10 Jun 2025 15:17:38 GMT"},"fingerprint":{"sha1":"E7:09:D6:64:C5:12:99:98:6F:7B:16:F9:A0:6D:48:A4:18:77:CB:D6","sha256":"C2:C2:00:B7:00:BE:D2:A0:A8:2F:08:1C:A0:AF:CA:4C:F1:A4:32:D4:55:8F:00:3D:BB:22:A5:33:CF:51:A9:9E"}}},"request":{"raw":"GET /2064973/ HTTP/1.1\r\nHost: pagerrentablespotlight.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 May 2025 00:11:18 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: check.sumbit.dl\r\nreferrer-policy: no-referrer\r\nx-trace: IyQEioIe_hB9g-qtwChkcOvAddH8hD_YlZaUPVz7fH7tnyT5rPGo7mFJhU1ojBkGVTXjuHM0\r\nset-cookie: CHCK=1; Path=/; Expires=Sat, 06 Jun 2026 00:11:18 GMT; Secure; SameSite=None\nUID=250502191185327aec23944152b76cf1e1dc; Path=/; Expires=Sat, 06 Jun 2026 00:11:18 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4425,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (4425), with no line terminators","md5":"33381cba8e2e5393cc2b9e165610c228","sha1":"d59049e4f989064cc10a298dcec3e1dcb102355a","sha256":"695f2106fb0e0f10afea0fa73f287ded84bad0a90437a37ae402a8c85c25a9a8","sha512":"3ce9b290f793f902a55de0e7003ee78bde55da57e3d63eb22f6988b307560ad0176e00e8c4f874bbf8421c759d8ca73d8d835f181820b95dfca8bd281262080f","ssdeep":"48:cntBfAXaoB3iu6eR/oxr2YNhaazhyzTczT/zB9uGUR2yqcIxwL2zl621iuYXv9vk:coXTBreTO2H3UR2yqhxwLWo22K","tlshash":"c891c0628883405ef02744a5a2e86f19183dc733d7120fdb722528afe7d5fd9e4e3256","first_seen":"2025-05-03T00:11:51.569612Z","last_seen":"2025-05-03T00:11:51.569612Z","times_seen":1,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":43,"dns":0,"connect":17,"send":0,"wait":18,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagerrentablespotlight.com/r/dir?zoneid=2064973\u0026pb=fdabe020ac0984664ca2f5ff511b3fc61746238278\u0026pbc=mBf3P5sNQHZGexVo\u0026pbu=5Hff24cSxF9GexVo\u0026psp=vahoGPEwN62NZhQIH7BWpl1XYQm5TIbAMAvadFDW3RKXQUcYGLpG1i4rfFvVw4KgiX6TYPGdkiUzK5S-VNCl7VdQVBlbKaVRfhNHdnyW3CDnNxd0T9yjhvtgxPdM0-DgBmjGp3VpeMJ4jHUVAKyfONVRFIs2Ee49d2a7Xcam-9SViRNdsrAGKHMZW_Y-TLpe7uDUuDAkEZvhk5m7MbRJSe-xJ_pUTaz5JaTe-45dqbWT1VRcse5vs5pDha4KpQQ-e76j87b8\u0026fdl=1\u0026nojs=0\u0026abvar=0\u0026febuild=1.0.539\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=Ii3\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Linux%20x86_64\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=cDq5zNMaHR0cHM6Ly9wYWdlcnJlbnRhYmxlc3BvdGxpZ2h0LmNvbS8yMDY0OTczLw\u0026afid=4336565650622976\u0026eclog=0\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026de=0\u0026pload=876\u0026rlp=%5B0%2C0%2C43%2C24%2C14%2C134%2C55%2C71%5D","fqdn":"pagerrentablespotlight.com","domain":"pagerrentablespotlight.com","tld":"com"},"ip":{"addr":"94.242.247.34","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-05-03T00:11:18.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pagerrentablespotlight.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Mar 2025 15:17:39 GMT","end":"Tue, 10 Jun 2025 15:17:38 GMT"},"fingerprint":{"sha1":"E7:09:D6:64:C5:12:99:98:6F:7B:16:F9:A0:6D:48:A4:18:77:CB:D6","sha256":"C2:C2:00:B7:00:BE:D2:A0:A8:2F:08:1C:A0:AF:CA:4C:F1:A4:32:D4:55:8F:00:3D:BB:22:A5:33:CF:51:A9:9E"}}},"request":{"raw":"GET /r/dir?zoneid=2064973\u0026pb=fdabe020ac0984664ca2f5ff511b3fc61746238278\u0026pbc=mBf3P5sNQHZGexVo\u0026pbu=5Hff24cSxF9GexVo\u0026psp=vahoGPEwN62NZhQIH7BWpl1XYQm5TIbAMAvadFDW3RKXQUcYGLpG1i4rfFvVw4KgiX6TYPGdkiUzK5S-VNCl7VdQVBlbKaVRfhNHdnyW3CDnNxd0T9yjhvtgxPdM0-DgBmjGp3VpeMJ4jHUVAKyfONVRFIs2Ee49d2a7Xcam-9SViRNdsrAGKHMZW_Y-TLpe7uDUuDAkEZvhk5m7MbRJSe-xJ_pUTaz5JaTe-45dqbWT1VRcse5vs5pDha4KpQQ-e76j87b8\u0026fdl=1\u0026nojs=0\u0026abvar=0\u0026febuild=1.0.539\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=Ii3\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Linux%20x86_64\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=cDq5zNMaHR0cHM6Ly9wYWdlcnJlbnRhYmxlc3BvdGxpZ2h0LmNvbS8yMDY0OTczLw\u0026afid=4336565650622976\u0026eclog=0\u0026vp=0\u0026dto=2\u0026im=1\u0026noch=1\u0026de=0\u0026pload=876\u0026rlp=%5B0%2C0%2C43%2C24%2C14%2C134%2C55%2C71%5D HTTP/1.1\r\nHost: pagerrentablespotlight.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: CHCK=1; UID=250502191185327aec23944152b76cf1e1dc; UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 May 2025 00:11:18 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: redirect.dl\r\nreferrer-policy: no-referrer\r\nx-trace: KrlCKXo5HRyvFWPZHU4zeFhivlc25fTi8SnWreC7dl5VCggKisnBI84-WRI1gcAYuT0ZGQ56\r\nset-cookie: CHCK=1; Path=/; Expires=Sat, 06 Jun 2026 00:11:18 GMT; Secure; SameSite=None\nOACCAP=AC8XJAAAAAAAAAAB; Path=/; Expires=Mon, 02 Jun 2025 00:11:18 GMT; Secure; SameSite=None\nOACBLOCK=AC8XJAAAAABoFVyA; Path=/; Expires=Mon, 02 Jun 2025 00:11:18 GMT; Secure; SameSite=None\nTUCAP=TNM0uAAAAAAAAAAB; Path=/; Expires=Mon, 02 Jun 2025 00:11:18 GMT; Secure; SameSite=None\nTUBLOCK=TNM0uAAAAABoFVyA; Path=/; Expires=Mon, 02 Jun 2025 00:11:18 GMT; Secure; SameSite=None\nOXCCLK=AC8XJAAAAAAAAAAB; Path=/; Expires=Sun, 04 May 2025 00:11:18 GMT; Secure; SameSite=None\nOXPCLK=AAIY6gAAAAAAAAAB; Path=/; Expires=Sun, 04 May 2025 00:11:18 GMT; Secure; SameSite=None\nppucnt=1; Path=/; Expires=Sun, 04 May 2025 00:11:18 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"veryfastcdn.com/clickadu/templates/onebutton/AIMANAGER/18.png","fqdn":"veryfastcdn.com","domain":"veryfastcdn.com","tld":"com"},"ip":{"addr":"172.67.163.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://lookmommynohands.com/?b=4240630\u0026ba=1\u0026campid=3086116\u0026did={deviceid}\u0026dm=0\u0026ep=1\u0026g=no\u0026i18db=1\u0026l=rVzHfhQ1K6Q4O5W\u0026oaid=25050219110c3420768aa9468092ca4f2ad7\u0026rid=2064957\u0026s=25050219110c3420768aa9468092ca4f2ad7\u0026ssk=521458dafae737dd14cf5bc005e6a6b2\u0026svar=1746231078\u0026vi=1\u0026vo=1\u0026z=2064973\u0026tr=default","date":"2025-05-03T00:11:19.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"veryfastcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Apr 2025 12:06:24 GMT","end":"Wed, 16 Jul 2025 13:04:49 GMT"},"fingerprint":{"sha1":"AE:DA:F5:14:B3:2D:97:5F:33:EF:7F:1A:B1:31:6F:58:A4:7D:4A:74","sha256":"2A:2D:3A:72:FE:E2:CE:18:99:76:A3:4E:FF:A0:35:F8:CD:92:5C:FC:D5:46:BB:E1:C5:C5:B3:3F:79:AD:A6:38"}}},"request":{"raw":"GET /clickadu/templates/onebutton/AIMANAGER/18.png HTTP/1.1\r\nHost: veryfastcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lookmommynohands.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 May 2025 00:11:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 4652\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nlast-modified: Wed, 30 Apr 2025 08:50:19 GMT\r\nvary: Accept-Encoding\r\netag: \"6811e44b-122c\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range\r\naccess-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 770\r\ncf-ray: 939b8a5489295685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4652,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"46cb3edc4a2ea526989b8c22ba6144bb","sha1":"307edaf289185e85a5af9f777dade274c8e381b5","sha256":"af583d4b34b8c7ea070531ba08a688388d35f9184891041edf6203a49d745bc3","sha512":"e17c3ebf99e8120ccae0db20ca6bb12fc3fb5b0598a25a080ff4b799075a9c24be21392245543324d31dc7e51180c4b9887f94a265fc86be7280dd37f9cdf7e2","ssdeep":"96:pNn/Wum7kAdtKoI4qYOBc/PeJ00tZN9CPJ:X27kmtm0Omq007U","tlshash":"fea19ded1b5d1ddabb14cce68ebc32fed7104331439827d5232a80fca48a450689afd6","first_seen":"2023-05-01T20:08:06Z","last_seen":"2026-01-03T05:17:55.734568Z","times_seen":457,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":19,"dns":1,"connect":1,"send":0,"wait":18,"receive":1,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-05-03","alert":"Sinkholed","trigger":"veryfastcdn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"notfound.vg/","fqdn":"notfound.vg","domain":"notfound.vg","tld":"vg"},"ip":{"addr":"104.21.21.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-05-03T00:11:18.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"notfound.vg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Mar 2025 12:49:01 GMT","end":"Mon, 16 Jun 2025 13:47:28 GMT"},"fingerprint":{"sha1":"AA:08:3A:3A:81:17:50:6F:F3:B8:1E:C0:2D:11:DA:7A:A6:D9:DE:7E","sha256":"AD:6C:E7:DE:DF:BE:4B:AC:FE:FC:95:51:45:B0:AA:A2:6D:25:E8:8F:AB:B5:C0:A6:57:D6:4B:88:93:95:7A:AC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: notfound.vg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":117,"data":"{\"indicatorType\":\"url\",\"decodedSearchValue\":\"2024.sci-hub.se/2294/7a43bb4cf6c57229b02a9604a1f4614e/skidmore1966.pdf\"}"}},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 03 May 2025 00:11:18 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://pagerrentablespotlight.com/2064973/\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ncf-cache-status: DYNAMIC\r\nx-robots-tag: noindex, nofollow\r\ncf-ray: 939b8a4dfa68b524-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":4425,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":21,"dns":1,"connect":1,"send":0,"wait":67,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagerrentablespotlight.com/submit.min.js?abvar=","fqdn":"pagerrentablespotlight.com","domain":"pagerrentablespotlight.com","tld":"com"},"ip":{"addr":"94.242.247.34","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"","requested_by":"https://pagerrentablespotlight.com/2064973/","date":"2025-05-03T00:11:18.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pagerrentablespotlight.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Mar 2025 15:17:39 GMT","end":"Tue, 10 Jun 2025 15:17:38 GMT"},"fingerprint":{"sha1":"E7:09:D6:64:C5:12:99:98:6F:7B:16:F9:A0:6D:48:A4:18:77:CB:D6","sha256":"C2:C2:00:B7:00:BE:D2:A0:A8:2F:08:1C:A0:AF:CA:4C:F1:A4:32:D4:55:8F:00:3D:BB:22:A5:33:CF:51:A9:9E"}}},"request":{"raw":"GET /submit.min.js?abvar= HTTP/1.1\r\nHost: pagerrentablespotlight.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: CHCK=1; UID=250502191185327aec23944152b76cf1e1dc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 May 2025 00:11:18 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 28 Apr 2025 08:42:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"680f3f67-14fe8\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":85992,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1000), with no line terminators","md5":"1bdddeae698c7bf7bab88a33001b310c","sha1":"cbafa42216af3bed6d645933d14aeadb96877aa3","sha256":"376fa71c884dccca2d957e2a3c03c4b5550dfcb646764cfa3f17138dfc7dacf4","sha512":"2cb0b4539e030434084b15ab8db04986f0768393eee64a765c9c2e54cbd2f614b1b4a4da6b2d1e1869ac6b129735bc6408414aa09ceeb14826e31d70e747b3ed","ssdeep":"","tlshash":"74113595a2142c39e03a5195ed3f304a94fb1124244ea8435e17f9cdcdbc5d6c792942","first_seen":"2025-05-03T00:02:11.735881Z","last_seen":"2025-05-03T00:23:57.149938Z","times_seen":6,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lookmommynohands.com/?b=4240630\u0026ba=1\u0026campid=3086116\u0026did={deviceid}\u0026dm=0\u0026ep=1\u0026g=no\u0026i18db=1\u0026l=rVzHfhQ1K6Q4O5W\u0026oaid=25050219110c3420768aa9468092ca4f2ad7\u0026rid=2064957\u0026s=25050219110c3420768aa9468092ca4f2ad7\u0026ssk=521458dafae737dd14cf5bc005e6a6b2\u0026svar=1746231078\u0026vi=1\u0026vo=1\u0026z=2064973\u0026tr=default","fqdn":"lookmommynohands.com","domain":"lookmommynohands.com","tld":"com"},"ip":{"addr":"172.67.160.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-05-03T00:11:18.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmommynohands.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Mar 2025 18:48:26 GMT","end":"Sun, 22 Jun 2025 19:47:06 GMT"},"fingerprint":{"sha1":"B2:FB:ED:83:03:27:41:78:2B:56:78:53:97:5C:4B:AF:B0:CF:BD:97","sha256":"6B:5D:D2:30:EC:6C:D2:91:67:C0:8F:22:A7:67:F3:3B:A8:E3:9A:40:76:C7:91:A1:F8:90:90:18:65:FC:72:88"}}},"request":{"raw":"GET /?b=4240630\u0026ba=1\u0026campid=3086116\u0026did={deviceid}\u0026dm=0\u0026ep=1\u0026g=no\u0026i18db=1\u0026l=rVzHfhQ1K6Q4O5W\u0026oaid=25050219110c3420768aa9468092ca4f2ad7\u0026rid=2064957\u0026s=25050219110c3420768aa9468092ca4f2ad7\u0026ssk=521458dafae737dd14cf5bc005e6a6b2\u0026svar=1746231078\u0026vi=1\u0026vo=1\u0026z=2064973\u0026tr=default HTTP/1.1\r\nHost: lookmommynohands.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 May 2025 00:11:18 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.4.33\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, HEAD\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range\r\naccess-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: reverse=ZsxjE5uhl_d4QsmZn1Kg20uSHEzZlH-zN1uisgVXXMA; Path=/; Max-Age=3600; Expires=Sat, 03 May 2025 01:11:18 GMT\nOAID=63314275377cc9c492de60082ffa8524; Path=/; Max-Age=1777767078; Expires=Tue, 02 Sep 2081 00:22:36 GMT\noaidts=1746231078; Path=/; Max-Age=1777767078; Expires=Tue, 02 Sep 2081 00:22:36 GMT\nsyncedCookie=deleted; Path=/; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:01 GMT\r\ncf-ray: 939b8a52a87db4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11006,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1954), with CRLF, LF line terminators","md5":"216bf8f1f903f880c743e74dd3658a86","sha1":"4b8fbc7f484947ccef80877817a287034d133bf4","sha256":"44e2a8f54fc88c590c00c47ed83174d9990595c9e39135cbd4427cb385d269cf","sha512":"df93e1a21f3e8cff177d7f17af35ee42442e4c4007b7bc84b56c1fba4ff9a3d2e51f1aee0097d7ea82b6f504a6b145abcd8e79de4595af7eeca5cdf15c9f42d1","ssdeep":"192:9GOCaVCb52ZHtN+kOD++5cgr9Z4Ct3EJeOjcVUFHfq7ZFTn6qq:9tK2z0DtjyhMGH4A","tlshash":"9832a55b96933214e93394742be7330436228023c107ed587daca6e8cf96b564eda7ce","first_seen":"2025-05-03T00:11:51.574023Z","last_seen":"2025-05-03T00:11:51.574023Z","times_seen":1,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":18,"dns":1,"connect":1,"send":0,"wait":75,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lookmommynohands.com/favicon.ico","fqdn":"lookmommynohands.com","domain":"lookmommynohands.com","tld":"com"},"ip":{"addr":"172.67.160.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://lookmommynohands.com/?b=4240630\u0026ba=1\u0026campid=3086116\u0026did={deviceid}\u0026dm=0\u0026ep=1\u0026g=no\u0026i18db=1\u0026l=rVzHfhQ1K6Q4O5W\u0026oaid=25050219110c3420768aa9468092ca4f2ad7\u0026rid=2064957\u0026s=25050219110c3420768aa9468092ca4f2ad7\u0026ssk=521458dafae737dd14cf5bc005e6a6b2\u0026svar=1746231078\u0026vi=1\u0026vo=1\u0026z=2064973\u0026tr=default","date":"2025-05-03T00:11:19.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lookmommynohands.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Mar 2025 18:48:26 GMT","end":"Sun, 22 Jun 2025 19:47:06 GMT"},"fingerprint":{"sha1":"B2:FB:ED:83:03:27:41:78:2B:56:78:53:97:5C:4B:AF:B0:CF:BD:97","sha256":"6B:5D:D2:30:EC:6C:D2:91:67:C0:8F:22:A7:67:F3:3B:A8:E3:9A:40:76:C7:91:A1:F8:90:90:18:65:FC:72:88"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: lookmommynohands.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lookmommynohands.com/?rzi=2064973\u0026rsz=2064973\u0026rid=\r\nCookie: reverse=ZsxjE5uhl_d4QsmZn1Kg20uSHEzZlH-zN1uisgVXXMA; OAID=63314275377cc9c492de60082ffa8524; oaidts=1746231078\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Sat, 03 May 2025 00:11:19 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=PH25p%2BH%2FDdNNKChAC4T0P53SYgZNLiHYhsuQ2hUPbH%2BbiRAUc%2Br3z5XpxjjSdYmpTar1whWM3C9JJQAkhV7XpbhJwaFaMTL9abX218JR%2F84qgVYcfjHXm4WMWE%2B56pJw0tY7Dc%2F1FA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nage: 6821\r\ncf-ray: 939b8a54def4b529-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=5783\u0026min_rtt=1758\u0026rtt_var=3004\u0026sent=33\u0026recv=36\u0026lost=0\u0026retrans=0\u0026sent_bytes=4874\u0026recv_bytes=2755\u0026delivery_rate=2153\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=9f2bcdbbb727131a\u0026ts=290\u0026x=16\"\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lagostin.cf/docs/sportv1/1746134485720.doc","fqdn":"lagostin.cf","domain":"lagostin.cf","tld":"cf"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-05-03T00:11:17.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lagostin.cf","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Apr 2025 20:13:56 GMT","end":"Fri, 04 Jul 2025 21:12:23 GMT"},"fingerprint":{"sha1":"2F:2D:CE:BD:34:19:11:CD:DC:66:4F:FF:76:68:4A:C9:A8:3F:AB:CA","sha256":"28:4D:1C:F4:0B:7A:19:17:7B:96:78:98:B8:72:EB:F0:40:40:17:6B:A1:75:47:2B:D6:BF:5F:68:2A:62:AC:EB"}}},"request":{"raw":"GET /docs/sportv1/1746134485720.doc HTTP/1.1\r\nHost: lagostin.cf\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 03 May 2025 00:11:18 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 154\r\nlocation: https://notfound.vg/\r\ncache-control: public, max-age=14400, s-maxage=7200, no-transform\r\nserver: cloudflare\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nreferrer-policy: no-referrer\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\ncf-ray: 939b8a4cdb50569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":4425,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":23,"dns":1,"connect":1,"send":0,"wait":159,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}