{"report_id":"375c858d-3f31-4aaf-98d5-3a944a6278dd","version":6,"status":"done","tags":[],"date":"2025-10-16T18:57:09Z","url":{"schema":"http","addr":"www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","fqdn":"www.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"ip":{"addr":"104.21.90.43","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","fqdn":"www.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"title":"(1) New Message!"},"submit":{"url":{"schema":"http","addr":"www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","fqdn":"www.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"ip":{"addr":"104.21.90.43","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-20T18:57:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":15}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"understandinstalledalfred.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"understandinstalledalfred.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"s3t3d2y9.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"u3y8v8u4.aucdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"cdn.tapioni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"tsyndicate.com","ip":{"addr":"116.202.247.32","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2017-03-08","domain_rank":1289,"first_seen":"2017-03-16T09:04:54Z","last_seen":"2025-10-13T15:00:17.911455Z","alert_count":0,"request_count":2,"received_data":29728,"sent_data":1042,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"go.forscprts.com","ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-13","domain_rank":168242,"first_seen":"2025-03-11T08:31:55.912898Z","last_seen":"2025-10-16T18:56:41.988074Z","alert_count":0,"request_count":2,"received_data":6217,"sent_data":1658,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"skinnycrawlinglax.com","ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"domain_registered":"2024-09-01","domain_rank":38609,"first_seen":"2025-07-09T22:28:05.771371Z","last_seen":"2025-10-13T03:57:20.763365Z","alert_count":15,"request_count":5,"received_data":9507,"sent_data":2731,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"a.orbsrv.com","ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2020-05-16","domain_rank":53726,"first_seen":"2023-08-10T07:24:24Z","last_seen":"2025-10-11T11:06:44.615863Z","alert_count":0,"request_count":3,"received_data":556053,"sent_data":1257,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"s.orbsrv.com","ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2020-05-16","domain_rank":50502,"first_seen":"2020-09-02T21:53:48Z","last_seen":"2025-10-13T22:55:14.291499Z","alert_count":0,"request_count":6,"received_data":18566,"sent_data":4307,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"astonishlandmassnervy.com","ip":{"addr":"94.242.247.27","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2024-05-17","domain_rank":19161,"first_seen":"2024-05-21T16:59:10Z","last_seen":"2025-10-16T10:43:32.250973Z","alert_count":0,"request_count":1,"received_data":4901,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-10-12T22:15:22.841346Z","alert_count":0,"request_count":2,"received_data":9255,"sent_data":947,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-10-12T22:16:17.945241Z","alert_count":0,"request_count":2,"received_data":4427,"sent_data":941,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"go.tscprts.com","ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-13","domain_rank":0,"first_seen":"2025-08-12T20:13:06.51137Z","last_seen":"2025-10-15T12:25:57.270963Z","alert_count":0,"request_count":1,"received_data":2689,"sent_data":915,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2025-10-15T05:47:09.33032Z","alert_count":3,"request_count":1,"received_data":85963,"sent_data":414,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.storageimagedisplay.com","ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":170153,"first_seen":"2024-09-13T12:56:32Z","last_seen":"2025-10-12T22:34:06.069164Z","alert_count":0,"request_count":1,"received_data":50461,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"understandinstalledalfred.com","ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"domain_registered":"2025-03-23","domain_rank":0,"first_seen":"2025-08-14T23:42:33.747891Z","last_seen":"2025-10-16T18:56:41.861551Z","alert_count":10,"request_count":5,"received_data":95130,"sent_data":5006,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"s.magsrv.com","ip":{"addr":"95.211.229.245","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-08-01","domain_rank":47665,"first_seen":"2023-08-04T12:48:00Z","last_seen":"2025-10-13T04:59:41.097318Z","alert_count":4,"request_count":4,"received_data":17903,"sent_data":3155,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.xxxfiles.com","ip":{"addr":"172.67.194.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1996-03-22","domain_rank":122377,"first_seen":"2019-12-29T04:11:54Z","last_seen":"2025-10-08T08:59:10.610118Z","alert_count":0,"request_count":14,"received_data":823599,"sent_data":9708,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}]},{"fqdn":"s.uuidksinc.net","ip":{"addr":"185.98.54.153","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2015-05-05","domain_rank":47808,"first_seen":"2015-07-20T12:00:35Z","last_seen":"2025-10-13T07:32:11.516598Z","alert_count":0,"request_count":1,"received_data":574,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.23.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"news.jennydanny.com","ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"2024-11-20","domain_rank":1625511,"first_seen":"2024-11-22T02:52:50.634677Z","last_seen":"2025-10-11T11:06:44.013688Z","alert_count":0,"request_count":30,"received_data":953555,"sent_data":19216,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"jcdn.tsyndicate.com","ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2017-03-08","domain_rank":65259,"first_seen":"2024-09-05T14:47:10Z","last_seen":"2025-10-13T06:07:08.067536Z","alert_count":0,"request_count":1,"received_data":389,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"vjs.zencdn.net","ip":{"addr":"151.101.66.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2011-12-27","domain_rank":43797,"first_seen":"2012-05-21T08:26:59Z","last_seen":"2025-10-13T03:40:19.360234Z","alert_count":0,"request_count":2,"received_data":548149,"sent_data":858,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pxl-eu.tsyndicate.com","ip":{"addr":"142.132.201.97","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2017-03-08","domain_rank":61788,"first_seen":"2025-07-17T15:56:50.105461Z","last_seen":"2025-10-13T06:07:07.885241Z","alert_count":0,"request_count":7,"received_data":1332,"sent_data":11420,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"professionaltrafficmonitor.com","ip":{"addr":"35.157.114.140","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-01-23","domain_rank":16376,"first_seen":"2025-01-25T08:56:07.448138Z","last_seen":"2025-10-12T22:34:05.876953Z","alert_count":0,"request_count":1,"received_data":425,"sent_data":455,"comment":"","tags":null,"fingerprints":null},{"fqdn":"creative-sb1.com","ip":{"addr":"104.21.35.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-01","domain_rank":22211,"first_seen":"2025-08-08T09:32:32.509707Z","last_seen":"2025-10-13T03:05:29.919249Z","alert_count":10,"request_count":5,"received_data":174701,"sent_data":2318,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"tsvideo.sacdnssedge.com","ip":{"addr":"212.102.62.46","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2024-01-30","domain_rank":173953,"first_seen":"2024-02-27T12:33:47Z","last_seen":"2025-10-15T05:56:43.020669Z","alert_count":0,"request_count":3,"received_data":1393649,"sent_data":1637,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.show-sb.com","ip":{"addr":"172.67.170.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":187612,"first_seen":"2024-08-31T03:46:04Z","last_seen":"2025-10-13T03:57:20.808603Z","alert_count":1,"request_count":1,"received_data":2554,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-12T22:12:25.402635Z","alert_count":0,"request_count":6,"received_data":226052,"sent_data":3308,"comment":"","tags":null,"fingerprints":null},{"fqdn":"video.sacdnssedge.com","ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2024-01-30","domain_rank":155152,"first_seen":"2024-01-31T13:27:57Z","last_seen":"2025-10-15T06:16:57.66861Z","alert_count":0,"request_count":3,"received_data":1442888,"sent_data":1631,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"ad.twinrdengine.com","ip":{"addr":"34.111.67.216","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2023-06-07","domain_rank":79586,"first_seen":"2024-01-20T17:03:24Z","last_seen":"2025-10-15T02:12:32.581195Z","alert_count":0,"request_count":2,"received_data":11790,"sent_data":1464,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"u3y8v8u4.aucdn.net","ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2022-06-27","domain_rank":57444,"first_seen":"2022-08-08T13:30:47Z","last_seen":"2025-10-13T06:07:08.092238Z","alert_count":1,"request_count":1,"received_data":3725872,"sent_data":550,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"img.xxxfiles.com","ip":{"addr":"172.67.194.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1996-03-22","domain_rank":4936035,"first_seen":"2020-01-27T17:16:20Z","last_seen":"2025-10-06T15:14:28.366019Z","alert_count":0,"request_count":5,"received_data":185225,"sent_data":3120,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"go.xlivrdr.com","ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-06-22","domain_rank":49821,"first_seen":"2021-07-02T10:51:24Z","last_seen":"2025-10-13T13:50:43.514879Z","alert_count":0,"request_count":3,"received_data":12562,"sent_data":2450,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"s3t3d2y9.afcdn.net","ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2022-06-27","domain_rank":36521,"first_seen":"2025-05-07T19:37:13.89914Z","last_seen":"2025-10-13T04:59:40.755666Z","alert_count":3,"request_count":3,"received_data":79134,"sent_data":1538,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"cdn.tsyndicate.com","ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2017-03-08","domain_rank":40822,"first_seen":"2017-07-04T06:00:09Z","last_seen":"2025-10-13T06:07:07.190218Z","alert_count":0,"request_count":8,"received_data":101541,"sent_data":3771,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-12T22:12:24.910527Z","alert_count":0,"request_count":2,"received_data":34268,"sent_data":883,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.tapioni.com","ip":{"addr":"172.66.163.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-05-27","domain_rank":177570,"first_seen":"2021-07-01T10:46:55Z","last_seen":"2025-10-13T06:07:07.373174Z","alert_count":1,"request_count":1,"received_data":2818,"sent_data":413,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.xxxfiles.com/js/main.js","fqdn":"www.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"ip":{"addr":"172.67.194.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c719a8f50a9ec082de5a40a2d0b1a442","sha1":"e9c74b76c56ad7106bd75cb77ef4bbbdb6f67859","sha256":"96c5ec1f6d8d942a6c1f563600a7f05d8424371972aeb6576be2cd762bee5b1c","sha512":"5c252835eb785ef382fd422ec6ea6f5e26cac9160f4fe91bdc1db951c1e7d223239db91135111d8f15c328e0d7bf27bf5b5d17a858a8bfe237168b2c5f7969f3","ssdeep":"192:cEK3mT9YYNRUCYffCKCAJX/ENk2CQWbPG90pjCljoVFDgFDwFHUdlCUdldfwq+k:dvRU9DX8N/EPG90c4F10nplR","tlshash":"cc927359f7bc6842a03730698d5f10cd233e6072a5838d56fd7a95b858ec93c326ac77","size":20767,"data":"","first_seen":"2023-03-07T12:03:02Z","last_seen":"2026-04-21T23:34:11.248314Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxxfiles.com/js/videojs.persistvolume.js","fqdn":"www.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"ip":{"addr":"172.67.194.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2bdaf6b076a3f5c4b201043fa99e7e6","sha1":"f55071bc8b46698523719fa2be0528fdbf2dc53b","sha256":"7876724352a649e130f98ef346619e17272581ce1db46e7dbafc470a7354d055","sha512":"84c34375c1c6e6e00581bfc6b362caec58f96467a55231895d9efa19b7acde369f8d103f95545c5b1c1c5848b4a80071491d5043d695adeb06c3120f0a320fda","ssdeep":"","tlshash":"3c71fb1ce8fa61d44463b1b9678f61a1b2324523205deb04b85da3906f5086e46bbaed","size":3679,"data":"","first_seen":"2023-03-07T12:03:02Z","last_seen":"2026-04-27T23:56:30.338047Z","times_seen":855,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/adgpt.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"172.66.163.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef9a81ee9ff82a08a41088ae4cbc7824","sha1":"b8eb866cf4d72bccb948f6f2791f56c9243e1ee8","sha256":"34b2437f43830b2c82bf69b4996e65b0fa6e16ba406cfe755c694c3b753883cf","sha512":"f2c32274da408677b3c2c772f097e903b314ad34b650d5b15e25cacc6b30c8ba6e941fb1196bb81d38312953fbe06ade59f6d27e8e0cfce8443d9c93f704386b","ssdeep":"","tlshash":"9b4113ee25a4fda0179b714c212b180af1bd35e0e3ace8c69fb984b47d7d6441111aed","size":2403,"data":"","first_seen":"2025-09-22T17:16:58.948655Z","last_seen":"2025-10-23T15:15:33.025845Z","times_seen":283,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/spots/321354?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d5230d1d7b3a373f2e5dd305bd404ee","sha1":"ce0aba4208f8147130cf4fcfcda9857aa64b79a3","sha256":"d892bb6ed3b32d95827610dce4764df465e2acdaa04ba7713b9238034d281689","sha512":"ec302ed952a5ba3137809ed184b64f0445a6534c20bb72fca0e0427952e5f67a7b9b9433b3c86915eab8613c1467ab78110863d1bfd06fb1d45d2104edf6cdfc","ssdeep":"","tlshash":"cdd097cdf31dc9a006ee306c143831c3106c02d2bc5340d2e984c588482088c9288e83","size":233,"data":"","first_seen":"2025-10-16T18:57:17.780198Z","last_seen":"2025-10-16T18:57:17.780198Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/spots/334568?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"c0a47a9de7c500bf1821a66b530675a0","sha1":"31c01b8cf232f7b9155e3a23dd5fcad245bd5679","sha256":"5439360d548599227793fc02d575ce6c5f38b14e472f8a2c1c03a497eb82098a","sha512":"694ed38f8e380a9e7414938dd71a9af70040542968bb4f4de713416044b2f0622ab6d1bcf5c6056ba73a65d0bd7bc91154c151c21e84dbf7c8812cb8737a1ad8","ssdeep":"","tlshash":"aad097cdd71dc8c012a8303c003c22c7282c20c968524042cd44c88c90000cd9188d82","size":234,"data":"","first_seen":"2025-10-16T18:57:17.783603Z","last_seen":"2025-10-16T18:57:17.783603Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/sandbox%20eval%20code","fqdn":"www.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-28T16:24:02.712773Z","times_seen":822569,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/users/476266?host=www.xxxfiles.com\u0026ev=223\u0026wh=1024\u0026ww=1280\u0026uuid=\u0026url=https%3A%2F%2Fwww.xxxfiles.com%2Fvideos%2F55518986%2F4b7001fc05ae7151a106bbadf1ad5510%2F%3Fts%3D645499\u0026sid=88f35fcc-fb69-4a35-b05a-90b281d4e335\u0026i=1\u0026kw=Teen%2CBrunette%2CBig%20Ass%2Cvaginal%2CBig%20Cock%2CEuropean%2CRussian%2Ccum%20on%20ass%2Ctoned%2Cass%2Cleggings%2Cstanding%20doggy%2Cdoggy%2Camateur%20girl%2Cbwc%2Cbeeg.com%2Cintro%2Cpov-doggy%2Cfrom-behind%2Cbend-over%2Cindie%20girl%2CMy%20Little%20Betsy\u0026url=https%3A%2F%2Fwww.xxxfiles.com%2Fvideos%2F55518986%2F4b7001fc05ae7151a106bbadf1ad5510%2F%3Fts%3D645499","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"e305047abc1440e8e35275d87f78c8c9","sha1":"4369d86f6911765a9d10a76cfe03dae231264e46","sha256":"3b64488b54643a42b0ac663da6c9605e8f5897dc6aa87c69ce644d4711d549d5","sha512":"584fbd36e8782c9dc2a29cfcb0d4287bb0b5e3839cecd1cccd0639ebf113b5a2ce764c47c1252a75eb2e83f9420d332827c75b111473bd33d5b91b39db599b98","ssdeep":"","tlshash":"26012dc242ac69fad34860f7b83f1ea59c9e453927204007fb48239e2ace04102e029b","size":674,"data":"","first_seen":"2025-10-16T18:57:17.654564Z","last_seen":"2025-10-16T18:57:17.654564Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/spots/322254?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"5c7fe1cb0d1850b831c17bd27e97702a","sha1":"876fd84d267f1f9a89b0773e88a165538cbd4451","sha256":"0cab686fde31795b9e544ad0e0a42be44ea58542e1f72dc8c96df35416f0d58c","sha512":"21402821af3ced460c7cd292a49b72551c0dcd2786a086a244c440a6ccbb31383535259ccdba37ffbaccb4271d285f040d6f98d68658ebd23cbe55fc7714cb16","ssdeep":"","tlshash":"eed097ced30ed5c046dd306c583833cb202c42d1a8428892ca48d59c5a1084c4a4ce82","size":233,"data":"","first_seen":"2025-10-16T18:57:17.791583Z","last_seen":"2025-10-16T18:57:17.791583Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/spots/322254?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"55aed59797e1ab0629a925ecff121530","sha1":"1d2fe5809c1ba0f4032b0c415a102ad99127b754","sha256":"b38235a461d34da6db925f4b4542a5c6f3b4e9fd380bf78039f29264ebcd0c18","sha512":"a6b55242a55f208c62390ccb501884acb40ea8cd083a5ebe1bc1bc990fdb031971610bd9be3090e01a769eabd6e849b07a5e0e0fa57fb4d21457362cd16e70fd","ssdeep":"","tlshash":"d3016de371628a7005ef766f30a99b443934c08def401a488c2c4c718038fcaa176bd6","size":777,"data":"","first_seen":"2024-09-14T06:59:30Z","last_seen":"2026-04-28T15:16:43.892011Z","times_seen":5979,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/spots/322253?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"945fd288f0c20b29f597b8853055a80a","sha1":"d467f8cbd0cb11def165a22c145a0cfe67104648","sha256":"93e81b2942e5f0afe9bc6830a256b4c85898835fcd148db79401114b654ac691","sha512":"68b11a6eb0c7baaebcbeacedda5dbf7f7a6ca6ee6bb7dc977228a63fb495f2f410d40d3a08e78a17218fb71c01ad32f09fff1642069aea142cb900f9c7a191e7","ssdeep":"","tlshash":"a3d097cfd70ed9c002ac30ac143832db203c0282b8038442da44da98886548ca218e82","size":234,"data":"","first_seen":"2025-10-16T18:57:17.7979Z","last_seen":"2025-10-16T18:57:17.7979Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/spots/321354?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"55aed59797e1ab0629a925ecff121530","sha1":"1d2fe5809c1ba0f4032b0c415a102ad99127b754","sha256":"b38235a461d34da6db925f4b4542a5c6f3b4e9fd380bf78039f29264ebcd0c18","sha512":"a6b55242a55f208c62390ccb501884acb40ea8cd083a5ebe1bc1bc990fdb031971610bd9be3090e01a769eabd6e849b07a5e0e0fa57fb4d21457362cd16e70fd","ssdeep":"","tlshash":"d3016de371628a7005ef766f30a99b443934c08def401a488c2c4c718038fcaa176bd6","size":777,"data":"","first_seen":"2024-09-14T06:59:30Z","last_seen":"2026-04-28T15:16:43.892011Z","times_seen":5979,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/spots/321354?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"6148e3e792692ea5d0f1c145f748ae24","sha1":"25230336cfbe0615f0726c863c0361992a94878e","sha256":"7eaace5789f88fecb7172ae409d7160227a820d3997f31830db857ada459ec71","sha512":"201a69bfc976f56fb65e01972c99f88256791f6c01922fdf3d0065e44f53e1c2d4a6927089db41611ac3adffe0ca88ef3cd8bca1c9d2e2831a5ff65abc392a03","ssdeep":"","tlshash":"e121fe1d0c14857212a500e9b13ff71a74b215fb612ce4a0915ecc6839b8f8f994eec2","size":1195,"data":"","first_seen":"2024-09-14T06:59:30Z","last_seen":"2026-04-28T15:16:43.897944Z","times_seen":5926,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.orbsrv.com/ad-provider.js","fqdn":"a.orbsrv.com","domain":"orbsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9d9a46431ce98e9d753c60bd718ed6a","sha1":"e52c626717e209704abc31585964b46cd42c1b29","sha256":"3beb224ef60407ca9c9a0c7c0cd4236674a8b2ecfd83f3e409da49259797ee3f","sha512":"a96982d7bfd3b7be09b9bd3cdce3e681bcad60fccfb5d8be6bcc088c28ed9f58efa3973b54c85dd7e9385cf8c08939c6b93d7e12f75ac63bddf104c7f1c0bf83","ssdeep":"3072:msrN0p28VOkqDG2CjyR19wnRBqI9gxxIisGEolY4o/CXMtpo:yp28VOkq62T19wnRvgxXs7bpo","tlshash":"38045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","size":184838,"data":"","first_seen":"2025-10-04T10:16:49.453034Z","last_seen":"2025-10-17T05:10:23.595057Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","fqdn":"www.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"ip":{"addr":"172.67.194.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d974a291f3f7d6123957d575a72f656b","sha1":"32cc12e15a56fa089a12e7aef43bd1dd74b3fa2a","sha256":"fec4a792e5198fe00e8778f8d8309b898599c853173883754f5ccd131a77cd62","sha512":"c3ea16395a2f847c8bc82318d9347b172ea8bf82a8067decd21bbb00607d2088fe0b1ef0f6b1ce8beb37ed143b0f3cd54b1c5639c0746e93919cd316c56303b3","ssdeep":"","tlshash":"f49004c551c0f001c57337d405171c4c103d007035454fc1d045f4550d55033151d47c","size":40,"data":"","first_seen":"2023-04-13T15:44:34Z","last_seen":"2026-04-27T23:56:31.088627Z","times_seen":740,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/interstitial/icon_animated/1/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.35.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6326c600df01e3bfb9b40e1aa08176f8","sha1":"6b4fb754d29b297b539bf62ba9b4eaf0f33f314a","sha256":"df34524351c5fabc921a89183b5da5667aebd7b9e9a1c52255c76ff722935ea3","sha512":"641aaeecb9b89bcc319cabfef18f76faa9b1ba79f9de30c6d07f22d385fc78ac3f11a718fe9ec96f8a13d82e3dff4ca34944ccb449a4ef8e378ad65dfad581c0","ssdeep":"1536:oP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98Hri:f+41hJiz6fhdlTqya98Hri","tlshash":"eb83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84384,"data":"","first_seen":"2023-03-07T01:10:11Z","last_seen":"2026-04-28T16:23:42.884986Z","times_seen":11041,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/n.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b040ad17eb65b4c7ac1aec0b7c0b11b9","sha1":"e9aebf38f8349af4a3910526792584e752886480","sha256":"fd206e7267d232fd26e191aec9a1dc8e6f8dbfe9cf0eed99211b9880fbfc93f4","sha512":"a7a54e9497a442cfab854cf75c78eec9dd3abfbfffc12097c3ef8efeb7bdc9deb60f491794e3bb78978fc114a337ecd67b90ec17ddea15775fabd2d4599e8200","ssdeep":"768:pnuWgBzZorgLu4oV1N3bZmOByGBe2vI3Xdyc2aW3TU/1B5eO6C5XBJs8QB:puWWsZ4s19IOoGY3Ec2/TU/vAM5vszB","tlshash":"53434ce97595743121ab01a6819f174b733d3917ac0d4c00a077eae13d78ecad63bfa9","size":55460,"data":"","first_seen":"2025-10-16T02:04:48.785313Z","last_seen":"2025-10-28T21:43:37.087041Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"15f4c47ea4aa6cf5f6598954e55d95db","sha1":"33fe5cf5741653db2fef8cdb4b7e1a743b02433f","sha256":"9b1ca0f38196e249da8de6372656f594bb038c1e08630f4ab6c1ffc014acfe04","sha512":"788c6d0b2b47a1a3eb81a1efe8a04da5f6035638cd6e322003edef13d60c0879b9835466c8f88a56b52590e594158d07c577fca0325f7ead995cd28578d631f0","ssdeep":"","tlshash":"cb214863271583f07573f52ad25160caaa3b028ae8d543937b1c088c0ee5b7c06e81e1","size":1289,"data":"","first_seen":"2025-08-17T09:28:46.119509Z","last_seen":"2025-10-26T18:59:57.293383Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/spots/322253?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"55aed59797e1ab0629a925ecff121530","sha1":"1d2fe5809c1ba0f4032b0c415a102ad99127b754","sha256":"b38235a461d34da6db925f4b4542a5c6f3b4e9fd380bf78039f29264ebcd0c18","sha512":"a6b55242a55f208c62390ccb501884acb40ea8cd083a5ebe1bc1bc990fdb031971610bd9be3090e01a769eabd6e849b07a5e0e0fa57fb4d21457362cd16e70fd","ssdeep":"","tlshash":"d3016de371628a7005ef766f30a99b443934c08def401a488c2c4c718038fcaa176bd6","size":777,"data":"","first_seen":"2024-09-14T06:59:30Z","last_seen":"2026-04-28T15:16:43.892011Z","times_seen":5979,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/spots/322254?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"6148e3e792692ea5d0f1c145f748ae24","sha1":"25230336cfbe0615f0726c863c0361992a94878e","sha256":"7eaace5789f88fecb7172ae409d7160227a820d3997f31830db857ada459ec71","sha512":"201a69bfc976f56fb65e01972c99f88256791f6c01922fdf3d0065e44f53e1c2d4a6927089db41611ac3adffe0ca88ef3cd8bca1c9d2e2831a5ff65abc392a03","ssdeep":"","tlshash":"e121fe1d0c14857212a500e9b13ff71a74b215fb612ce4a0915ecc6839b8f8f994eec2","size":1195,"data":"","first_seen":"2024-09-14T06:59:30Z","last_seen":"2026-04-28T15:16:43.897944Z","times_seen":5926,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/spots/322254?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"559464d2fdab12a0e6d5a25d2a90af4f","sha1":"4fa5f49c77c06fb3152f25fec3da567203ffcd99","sha256":"5706d563a030dc361f4b388167b9cb91690cfe9682213acff81f19955722ab58","sha512":"cde126c59299f64ba114f9139bf48c7573f40da3063d4a8232ee83188d9c42144d721c72960a967073a7b354d8f768b1109198d69e93c53ce3afcebe08b9a80a","ssdeep":"","tlshash":"15e07df5ad03d0164826349dba79de5cf09cf22aed6588c527ce84309040dd11c004c5","size":309,"data":"","first_seen":"2023-12-02T06:38:52Z","last_seen":"2025-10-26T18:59:57.29697Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/evwWFw7.js","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"0eef4f80e127c9db6bb4c0135bffc83e","sha1":"84925fb336ae49a8b356cad8fc9c220db72a6395","sha256":"e2fa18a9d94f65ebb3bcf6b40556457d88d86d94e750f4f97b8fa136c546c97a","sha512":"f94748fa14b66f7c8b5713274e355c95a70cf8c702d32d42e85e229a24a467a2fb958e99dd1907176c7af0266a14dc5fadcff78d91b9afa706600eb21ba93b7e","ssdeep":"6144:AedFcApjUoMdMH4gCyCthyPpfM7t+ZBRnH8VoceXz93Y+OL1fKd2fNKfnEWVhwTm:JpwoMjGS1O","tlshash":"9034c889b6c1b0b402e3b1b4056f551af277b944744ec5c1f629d9c0aeb9a0e9a37f3c","size":245512,"data":"","first_seen":"2025-09-22T17:52:53.981101Z","last_seen":"2025-10-22T07:04:13.260466Z","times_seen":220,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/spots/322253?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"41eece0da217398b6f4d4ee2f01b6245","sha1":"72f2098b0520b07dd3c6874646c920a3d367a4e2","sha256":"62bba8c2295a14bb2d007a3f7f8730fd10cef7348a6474f3f832c99ca6795d35","sha512":"1009ef0076bfb735c9b40fa3b106c8de414943b27fd74cfd315265ad768592a9d3eaf408c2392269659fb5af26c32f454d8f8a86fe0044d5a0c46ef424ebe207","ssdeep":"","tlshash":"dec09b3d110413fedfd5359ddc05667d1811b1b1d1918cb04715d527605de144cf3801","size":134,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-28T15:16:43.899891Z","times_seen":12156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/spots/334568?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"55aed59797e1ab0629a925ecff121530","sha1":"1d2fe5809c1ba0f4032b0c415a102ad99127b754","sha256":"b38235a461d34da6db925f4b4542a5c6f3b4e9fd380bf78039f29264ebcd0c18","sha512":"a6b55242a55f208c62390ccb501884acb40ea8cd083a5ebe1bc1bc990fdb031971610bd9be3090e01a769eabd6e849b07a5e0e0fa57fb4d21457362cd16e70fd","ssdeep":"","tlshash":"d3016de371628a7005ef766f30a99b443934c08def401a488c2c4c718038fcaa176bd6","size":777,"data":"","first_seen":"2024-09-14T06:59:30Z","last_seen":"2026-04-28T15:16:43.892011Z","times_seen":5979,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jcdn.tsyndicate.com/da0de22e3f4349b1a3ce238ccc04a9d0.js","fqdn":"jcdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-28T16:23:41.371529Z","times_seen":603663,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","fqdn":"www.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"ip":{"addr":"172.67.194.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"45eac9445952bc7383892466b80e9b42","sha1":"cc9e484055085b943e59b48c5af97df7c59d9c60","sha256":"10067f06be11098454b991c0092ccd224ce91068795544b28847c5daaa898093","sha512":"d7de95cb71cfdbc23963e78ae3776851ecb8a19f8a9b25c387f3cfd0fac42df88a4fbb4564ac695b34b1fcef5fbc13712fac2beb6638d41563e0646e4014d4cf","ssdeep":"","tlshash":"2df00e942ecc802473b2012627eba195753d6a2b280eac11c58c8881289ada908ef90c","size":507,"data":"","first_seen":"2023-05-21T08:51:20Z","last_seen":"2026-04-21T23:34:11.465394Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","fqdn":"www.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"ip":{"addr":"172.67.194.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4c720b577d61af654e8782ee8396f7f8","sha1":"165b7ee6bfb994da944d05b5baa0860119306364","sha256":"c7df607d56f439093c790ddd597c9df782c290864565e80c3f849a84cb02136b","sha512":"46184bda7612e43b7388360b75f7d8ff6b0d85c9b4a683d7b0ee792254429d60b9ffbaf69ead45c68a9b72d7fac7fbb7014d738f017a3de3999fa39224d74ea4","ssdeep":"192:orohdhkulTycmW1qowmchL/Wr6N4Xn4pkmUfeae2iL2aNC2I2NuMsQFf+dYsEe:orohbxgOe84pkVfjsLFuMs70e","tlshash":"11f1ecbaf78dc52aa69533c9d989f667fca323974d20d2c7193adbe1642087015cf432","size":7705,"data":"","first_seen":"2025-10-16T18:57:17.819731Z","last_seen":"2025-10-16T18:57:17.819731Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/spots/322254?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"35d1da5b6f60af629e2adb39b4059a05","sha1":"b9ac9ed1552fca1c1b62b18ae20d512b316ad998","sha256":"7e278ad69b2869ab0439d669a4066bb87f9c8600070c6c00f3e6559a30450c25","sha512":"6e12823b4c22dc77ac6f7f59ba34c05149645c6735da269160e53c3621c0dbf590c8c57349e298aac0ff6ddf50789a7840412282f62e22ee3426cd0816c2cc58","ssdeep":"","tlshash":"5e11444224a721bf0cbe040f333713683e3d84914559053243b9b68e27bfe4b9b927c5","size":946,"data":"","first_seen":"2025-10-16T18:57:17.825749Z","last_seen":"2025-10-16T18:57:17.825749Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/spots/321354?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"7159693cec52e5bf65c494f30c286b1a","sha1":"fe28bd9059fad8bfa9185b1a679806074335dba1","sha256":"95d366da735f7e1fa5d20ac3562f92eceff758ab29d51b354f4fb453d930f880","sha512":"fe241ea262263faedafb85bfe54096e0874d9965b18985af18793c692e160256dccbec8cccfbdb34971c75d3565719540f56ae34cacf9e0e9007a60ed9e539cb","ssdeep":"","tlshash":"0ee07db5ae02d0160832389e7975ce5df05ce22aed6588c567ce80709040dd55c00485","size":309,"data":"","first_seen":"2023-08-19T03:16:36Z","last_seen":"2025-11-04T16:26:30.22288Z","times_seen":483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/spots/322253?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"6148e3e792692ea5d0f1c145f748ae24","sha1":"25230336cfbe0615f0726c863c0361992a94878e","sha256":"7eaace5789f88fecb7172ae409d7160227a820d3997f31830db857ada459ec71","sha512":"201a69bfc976f56fb65e01972c99f88256791f6c01922fdf3d0065e44f53e1c2d4a6927089db41611ac3adffe0ca88ef3cd8bca1c9d2e2831a5ff65abc392a03","ssdeep":"","tlshash":"e121fe1d0c14857212a500e9b13ff71a74b215fb612ce4a0915ecc6839b8f8f994eec2","size":1195,"data":"","first_seen":"2024-09-14T06:59:30Z","last_seen":"2026-04-28T15:16:43.897944Z","times_seen":5926,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxxfiles.com/js/silvermine-videojs-quality-selector.min.js","fqdn":"www.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"ip":{"addr":"172.67.194.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1a1404512562af8f7dcdf1bdc1d00a4","sha1":"0e9aa3a3ac0f57a6c9f17a0831f6eb87c0ea9dd8","sha256":"40cfd1d94146e13481a08a38bf2a36728df34c09eede6ad7d7510890f9f09b6e","sha512":"e89cd84ed1507f0cd8e984958c536a872852268b1b3a560a28945270fd6a62e8fb8654efee484d33cd582c303ab31cb4138d88776a58f588b9531b3643939970","ssdeep":"384:7r8u+97hWV2GJvUHoupOg28jQPiS7xmiGNfx7+y/WnhRRGkULlYTXQs2kzuY6C7q:7PCTNR2Rskci2/rsHglaHu4R8W40R8","tlshash":"7f3353da7582f59593a271aa002f6147f1f5289260eff480d290d6e4ecfa28dc17ef1d","size":50662,"data":"","first_seen":"2023-11-15T22:40:16Z","last_seen":"2026-04-27T23:56:30.499093Z","times_seen":548,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","fqdn":"www.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"ip":{"addr":"172.67.194.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ca0c97655f8e914d086753ecd5bbc772","sha1":"e26fb75a10e3836212cbc8f8c0fcd769084f5ded","sha256":"5ca45b27c61eb8902998682e4a788fb549779665c22e8a866350734a2eee12c9","sha512":"daac76a83ac4208ac6ed572bca85bf330b2512271d1037e3b2fe7d043278fd47a9ce03032bff68077961dc55212ade23c0cff009990c7cea50aa8e56808ad490","ssdeep":"","tlshash":"6b31336aff4c703640ad20320d7be2cd583c18731913985f8cacee159ca4eae5f29968","size":1590,"data":"","first_seen":"2023-03-07T12:03:02Z","last_seen":"2026-04-21T23:34:11.472836Z","times_seen":120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.orbsrv.com/ad-provider.js","fqdn":"a.orbsrv.com","domain":"orbsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9d9a46431ce98e9d753c60bd718ed6a","sha1":"e52c626717e209704abc31585964b46cd42c1b29","sha256":"3beb224ef60407ca9c9a0c7c0cd4236674a8b2ecfd83f3e409da49259797ee3f","sha512":"a96982d7bfd3b7be09b9bd3cdce3e681bcad60fccfb5d8be6bcc088c28ed9f58efa3973b54c85dd7e9385cf8c08939c6b93d7e12f75ac63bddf104c7f1c0bf83","ssdeep":"3072:msrN0p28VOkqDG2CjyR19wnRBqI9gxxIisGEolY4o/CXMtpo:yp28VOkq62T19wnRvgxXs7bpo","tlshash":"38045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","size":184838,"data":"","first_seen":"2025-10-04T10:16:49.453034Z","last_seen":"2025-10-17T05:10:23.595057Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85386,"data":"","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/spots/334568?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"6148e3e792692ea5d0f1c145f748ae24","sha1":"25230336cfbe0615f0726c863c0361992a94878e","sha256":"7eaace5789f88fecb7172ae409d7160227a820d3997f31830db857ada459ec71","sha512":"201a69bfc976f56fb65e01972c99f88256791f6c01922fdf3d0065e44f53e1c2d4a6927089db41611ac3adffe0ca88ef3cd8bca1c9d2e2831a5ff65abc392a03","ssdeep":"","tlshash":"e121fe1d0c14857212a500e9b13ff71a74b215fb612ce4a0915ecc6839b8f8f994eec2","size":1195,"data":"","first_seen":"2024-09-14T06:59:30Z","last_seen":"2026-04-28T15:16:43.897944Z","times_seen":5926,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/spots/322253?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"08750e0a293109b83b8c8919ec9b4244","sha1":"e69e06d9e8a14c73da37e14662b0198801917025","sha256":"219350d347d44089c344ba505aa1a0721111f4648070f75c385303c85884a97c","sha512":"b9ea2320edbd459737c10cc0c409f3ed666af19dc7298541bf706634e8bc215ed06edb775e92afd653b9eed042ae08e0ff63860bd44ee87a63a012eaaecd11dd","ssdeep":"","tlshash":"43e07db6ad02d0164826389eb979de5cf05cf22aed6588c527ce80709040dd11c004c5","size":309,"data":"","first_seen":"2023-11-28T09:02:00Z","last_seen":"2025-10-26T18:59:57.311409Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxxfiles.com/js/kvs/main.min.js","fqdn":"www.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"ip":{"addr":"172.67.194.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bbfc761f3a524e108e25fc8c5451ef5b","sha1":"0daaa3873cada1fd1283409fa6729249c51c404d","sha256":"c6900d97762ace02398d34ae5bed95f7b4765c74353b1fde456fa352d070a119","sha512":"301ac2758bc102dc8706cd4e008bd085d2ab38fdbcf2418a34f2453aadf5719e301a305567d4e5ee2ac0d9e25be3a18af2cb8ceb85eb2c1f36d88ebfb35cf595","ssdeep":"3072:4dkWgoBhcZRQQmW42q2DhhQqGUbD+F5Q5OZiVRSoBAmdP+HrAi6KC99h6sJHcatP:6BKZGF/2DhhIUWiV7BAmcrAJvJH9","tlshash":"b34418cd76d1b13247eb30b6206f530a71329a3ab4498954b02cd8f96dbde492237f6d","size":266952,"data":"","first_seen":"2023-03-08T21:36:40Z","last_seen":"2026-04-21T23:34:11.36664Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","fqdn":"www.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"ip":{"addr":"172.67.194.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"86e28477871564712b0e2bb4842346e9","sha1":"20c66df7ae17c92f8d39c354aa842ac6fdeb7c64","sha256":"bbb5879aa49106b0d2991135a40a79e95afb1f0d76ebb4ff246713d56672a259","sha512":"d5a32b47215fc4462a8a493153506b932eb19b99f09e1fb481e9cef513e4590fba4662342a0917c2a72f56409a92b1b0533a873ed45dfac791b0f9a70bec2429","ssdeep":"","tlshash":"7851cc8869ba20192437b0b84fbf61183177414be104df00bc0d57a09f5d966ed8abdc","size":2806,"data":"","first_seen":"2025-10-16T18:57:17.842125Z","last_seen":"2025-10-16T18:57:17.842125Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"understandinstalledalfred.com/bf/1e/cf/bf1ecfe7c52535c960b6a6e62f77b00e.js","fqdn":"understandinstalledalfred.com","domain":"understandinstalledalfred.com","tld":"com"},"ip":{"addr":"192.243.59.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4d1e843da64a842d9aa686ef1eb7262","sha1":"24c10d3f7113f573cf85711449e606d6547067c6","sha256":"f08c5fe36b497936f1d22888735f3967c9ea9fd77b783903edddf641e8811645","sha512":"e7f93d66a333275edda84d6576734ee7a359c4a00b7e47def49759068292a7acdc4dbd7e2dca948e2d8ce3480172eb278547882923d6d4e8b0d4fc32c3921987","ssdeep":"1536:UbksDEFAkM9IWf3pDTf0zpxftTgA4VEIaAa4Ru37oIXDWeGXMtb4cnSzB:MDxk4+BgA4VEIaAa4McBeGXMtb4/","tlshash":"dd83f848bb82b869425620ba332ff01af15a4d421de8d444dc57f8d96fb8b1de637e24","size":84216,"data":"","first_seen":"2025-10-13T13:50:54.857427Z","last_seen":"2025-10-17T01:32:53.232904Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/53/ec/88/53ec8834cbf78e169a3978bfa593ae42.js","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"efe226df7b34cfaf12077e69c581fc6c","sha1":"a59956a3eea86867af25c422cde94c65bec3516e","sha256":"546c3b249eb34013446f85b06e8e833ded12a229890e5a23a17b6455fffa7abe","sha512":"46bb70f28959da2732afd2977eab33508b891a27718de4f51c51bb2a1a646026136c32a3f17636b49346631cf4977279778b5b0b03d64b48970599960567c944","ssdeep":"192:Aiu3jQ5Vd/MinGiJ9HLfOHMcDkUpRwwls:Aiu3jQ5kinXHLfOscoUpOwm","tlshash":"3fd1c9dc3f8071e007ab647bba3fa41ab5a9cc54618fd81cc012b5e03d74a6ad577761","size":6581,"data":"","first_seen":"2025-10-14T13:51:47.725273Z","last_seen":"2025-10-21T12:57:18.671573Z","times_seen":522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/spots/321354?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"623fd2f2326c174c050ed9491132ead8","sha1":"5eb1913dea7fe3538ebb144848927e2863c6685b","sha256":"376d8da82d49bd4dbaf69a561c6dc022a63fe1e3d021c324c6f99bce37ceeae5","sha512":"5f037b581c8a264993a509b48b63f7cb16cdd823c6dd0af29ab9c08b191b0c93476fb36c1a9b738136f8f55cef680438e16dfbf70b8c281e57fb5e53ea509cbe","ssdeep":"","tlshash":"f1111c0275ba21bf0cbf000f333713603a3d4091550a017242b9b68e277ee8fa7a27c5","size":946,"data":"","first_seen":"2025-10-16T18:57:17.846939Z","last_seen":"2025-10-16T18:57:17.846939Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.orbsrv.com/ad-provider.js","fqdn":"a.orbsrv.com","domain":"orbsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9d9a46431ce98e9d753c60bd718ed6a","sha1":"e52c626717e209704abc31585964b46cd42c1b29","sha256":"3beb224ef60407ca9c9a0c7c0cd4236674a8b2ecfd83f3e409da49259797ee3f","sha512":"a96982d7bfd3b7be09b9bd3cdce3e681bcad60fccfb5d8be6bcc088c28ed9f58efa3973b54c85dd7e9385cf8c08939c6b93d7e12f75ac63bddf104c7f1c0bf83","ssdeep":"3072:msrN0p28VOkqDG2CjyR19wnRBqI9gxxIisGEolY4o/CXMtpo:yp28VOkq62T19wnRvgxXs7bpo","tlshash":"38045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","size":184838,"data":"","first_seen":"2025-10-04T10:16:49.453034Z","last_seen":"2025-10-17T05:10:23.595057Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/spots/334568?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"87d026080508efbf36b7b3e96873299e","sha1":"3cc13c74d20532ad3954dfd71ba308d2b200a967","sha256":"fd19864f5d47219ccdaed6064ff9e5c8c17cb53651f1581d9895d12f65931d75","sha512":"94c10e1e0f1a4deab54e546e97a3a64047d4438bdf697a1a8364db3e02186f16caef7c427c6fc7c2408da917fa4802f5001c9fda4010a32aefc705d727dc5b95","ssdeep":"","tlshash":"06c080e9bb1d919567ee1413f63773813c7741a951437100c20c54d562dcb4e4342f44","size":180,"data":"","first_seen":"2024-09-14T09:51:23Z","last_seen":"2026-04-27T23:56:31.036578Z","times_seen":4373,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/spots/322253?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a25fbf79cac269694083d01cac79175","sha1":"5c00e865e4833d89dceda3e9a371d39dd1c7faa0","sha256":"b26abfb1c1f449bc9e5c457c4c32b4ae379cd6ac260b3fa0e0574772f922cf6b","sha512":"2eb8daa2fdf7cd52e1e45997cb2cff9167af9d2bf6af5df3dbfba408b6ed993781275f97bb64ddf7a93599d062015370058366e86bb9a9872f5e98ae58308e1e","ssdeep":"","tlshash":"b411444268aa21ef08be004f333353743e3c4452594a443282b9768e277fd4fb7a27c5","size":948,"data":"","first_seen":"2025-10-16T18:57:17.855282Z","last_seen":"2025-10-16T18:57:17.855282Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","fqdn":"www.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"ip":{"addr":"172.67.194.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c6f6f8bb334c92967d7d8fd68c58cc59","sha1":"76e738e03239dd5706b5269ee5bb0fbcf832cf9f","sha256":"2305708f7653f9c43711d773e236729b7f441c47bbf33a056f4c8599ba9e8b24","sha512":"275435871399276b5d81ecf89a78c0467fca26360a3b4e1ad5125e7c7969d33c9657149f60844fa314b49d195880d6a3d9acc5a02b4ea467acccf59b6dd31e9f","ssdeep":"","tlshash":"8ae0f14e382854e141e3b5f733b3851cf822230e5440f8637e1c854c1f00651009b2dc","size":412,"data":"","first_seen":"2023-12-11T22:02:11Z","last_seen":"2026-04-21T23:34:11.486076Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-28T16:24:02.712051Z","times_seen":820952,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vjs.zencdn.net/7.5.5/video.min.js","fqdn":"vjs.zencdn.net","domain":"zencdn.net","tld":"net"},"ip":{"addr":"151.101.66.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"abf127b5ab0bb498119a93890119a660","sha1":"86083627a04fe65a9ff242a3edb746b94da084a8","sha256":"4122c012e6c8aba50f529e47785cd402e2b1f6dc1c643907a9fb65375d5cee11","sha512":"dabaf8862d242eecef3ab4c53cf1703c91c5a8ef4fe14d07b9a65171092dfe095db8af4f064bc7e5301e557a0c76284af6aa47380de50c3d4f5a390ad1783ee6","ssdeep":"6144:/5MNKYqpim6TGEw1HO53SWKebFTFMnv0S9aLPCsAuMJDnKkDMIe:/5MNKYqIm6AZD93e","tlshash":"f6b42bd83281716247d370b6903f120a723b99395849c16cf629f9d92df8e49a23bf7d","size":502401,"data":"","first_seen":"2023-04-10T19:50:37Z","last_seen":"2026-04-27T23:56:30.812734Z","times_seen":869,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/spots/322254?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"632c34738f64c30e3c229785d7704e32","sha1":"eacc851287c54dc95b3368b9fb421bf4a4655757","sha256":"45921c4305fed78185611b0f1ceba7fe504a1a4b59b8f6ef2ce658d82035a7bb","sha512":"fbaea2eb80d526b5fab30d3fa37004325fb4b45dda4173959baff485204501ba3fb41814571019ff898dd2a563c74bf605c7b16e2a030b1c5a6a24a2f37fd81b","ssdeep":"","tlshash":"3a119c44738915bf00c2e7cb732f77083aaa45e6ba0042406a79ece6575ced760a57cc","size":927,"data":"","first_seen":"2025-10-16T18:57:17.864946Z","last_seen":"2025-10-16T18:57:17.864946Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxxfiles.com/vpaid/videojs_5.vast.vpaid.min.js","fqdn":"www.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"ip":{"addr":"172.67.194.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3eb2d1bdcb22ab1037fe9f6b5cf00143","sha1":"b065d9fabe06ca3488cdd628c6da319c49dd4a78","sha256":"66348d21d329d78be67f953ac0aad20a504ec3f3f911d3d67f58516475a18036","sha512":"9378a33c4128d4b6cf29948dd74f908b6205aba19da23bab99f6c480a2674ff55f7f15c93a1070d46e1aee91e7a2baf2d88e53c740efabd1cf494839b41cef1c","ssdeep":"1536:ISvuzH6ZDN2fKThPnX9ijMDCMKbeYVvdWt9:Nvuz9C9GuGeiC","tlshash":"74a3f64c7251707747e270b4843f620b62f4a86a744ac2a0f5b1e8e86db895e9737f3c","size":106174,"data":"","first_seen":"2023-03-07T12:03:02Z","last_seen":"2026-04-27T23:56:30.205848Z","times_seen":958,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/spots/334568?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"d891fd5e37c95ae126954960d8768fe2","sha1":"a768063f33ac1f620845fe92bfd6ddd14f8c1d3e","sha256":"bf689b8b6b52a598c9d4e9d9c99ff3509818134416ff36cc0e8d2b2bc1c5b21c","sha512":"62d45d283d82cae9c2cf6d8c752022f40b156e8f6b25a97de0cade3d59a7c758467b6f54ad7c1baac909f554057dee0a63374ef553d110c43370b732c2006567","ssdeep":"","tlshash":"7c11801e9a082a3744c1781d20fd9ef56188604fe9220fbd3d8fb0ad57520bd8ea5799","size":957,"data":"","first_seen":"2023-03-08T14:32:36Z","last_seen":"2026-04-27T23:56:31.04185Z","times_seen":244,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","fqdn":"www.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"ip":{"addr":"172.67.194.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"183e4c70ff6ae1cee42fc1c508eae166","sha1":"faad098748c8cd162b4c4e786b285b64cc00f59b","sha256":"faa5657623d16e3ad4901dbe7e69f5f1a1b0215f358ac892ba2aaf81491376ae","sha512":"2bd767e2ed4dec6dc98081fc685a3a945052d54e12e961ec68d5a6c6d7cb8b706658b19454e2728d625e8711bfcbc253cd68374d24c9f4890645772cca0f0117","ssdeep":"","tlshash":"250126c828d372960226b0287b8b301ab275a447240cda00bd3e50507f5583be5abbd9","size":695,"data":"","first_seen":"2023-03-07T15:48:31Z","last_seen":"2026-04-21T23:34:11.492257Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","fqdn":"www.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"ip":{"addr":"172.67.194.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b9cf4d634c1477ec562587641739a768","sha1":"28ace4012e9df695e856f2fdff95ed67bad9060b","sha256":"a27749bbbb0692f9fcc90d5cfcdcba076f498b0dd4f722c4859a023cdac4b6ce","sha512":"cb605d2e4384a279f396684fb9cc64c24b30634199738d47f5106b371dfa8120c33014178a0ada63cac84874f293ce6788d44cb73ae3fd39d9c400f000d376c6","ssdeep":"","tlshash":"b8014c3d54f720a410b730798bcf9205313a5507511cdd027d0ccff05f84725c886a8d","size":834,"data":"","first_seen":"2023-03-07T12:03:02Z","last_seen":"2026-04-21T23:34:11.495092Z","times_seen":119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/oT5Ugwa.js","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d1334f3c3a996494fb08804135bdc50","sha1":"47471dbaea65a8db04a1284cc5efb99b9745164e","sha256":"1b53f16245ba49c58090b7e7b95c8a3cd257c7295b511701b836db56a4991dae","sha512":"2c3ac8f3aba2e80328ff00cf43199a554c6218cc3b581df039aa1a1359f263e0e722a2636c41f54d2b7ee8538c54a3f69520d5163d181d01931691b4c67be4b0","ssdeep":"6144:IdFfNgmYyEUOfsna/wNjXnCT1c28bJYfC:yNDYyEUOfsna/MjXnCZD8bJYfC","tlshash":"9b64b4c9b6c6b0a543e7b1b8403f520ef276a955b44ac9c0e266e9d0ac7c94e5037f7c","size":316021,"data":"","first_seen":"2025-09-22T17:52:53.955078Z","last_seen":"2025-10-22T07:28:21.563525Z","times_seen":175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/spots/321354?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"41eece0da217398b6f4d4ee2f01b6245","sha1":"72f2098b0520b07dd3c6874646c920a3d367a4e2","sha256":"62bba8c2295a14bb2d007a3f7f8730fd10cef7348a6474f3f832c99ca6795d35","sha512":"1009ef0076bfb735c9b40fa3b106c8de414943b27fd74cfd315265ad768592a9d3eaf408c2392269659fb5af26c32f454d8f8a86fe0044d5a0c46ef424ebe207","ssdeep":"","tlshash":"dec09b3d110413fedfd5359ddc05667d1811b1b1d1918cb04715d527605de144cf3801","size":134,"data":"","first_seen":"2023-03-07T01:02:10Z","last_seen":"2026-04-28T15:16:43.899891Z","times_seen":12156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/spots/334568?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"4dce71ff684ae28b7cf3538f00d3c6bf","sha1":"b5b3c967363fed68e59128abdf5f262d14ced21b","sha256":"6178d2e76e997c831912c79678e2f74ddd429dd8299619a697f9faa91b41f218","sha512":"412e302b718db9c1800e2f796137042a4662b7c9cbd10f36648d54e544dd95e9b464236bda240b6bfd6243e135710d7aaca5f3fef50e812dede982401a2d3faa","ssdeep":"","tlshash":"3a11004264ba22ef187e001f333753643a3d54918959053242b9b69e37bed8ba7927c5","size":946,"data":"","first_seen":"2025-10-16T18:57:17.877735Z","last_seen":"2025-10-16T18:57:17.877735Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/spots/322254?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"49d5fe343295bcd3e53254404952450d","sha1":"abcca6fa672908efa599507aedd37941d1b61cc7","sha256":"709cd99fa7dadde27dbb83684ee099ab3c6f2c360815c2b5bd505a34fd55fcea","sha512":"66b3ef6599ddaa050fcba691da45e187aa3977fdc402d1604a63c764c45dbd81f01f02107845dd55e0806eb41ba15fbc4d226b24493bc03d016ec6a995422a81","ssdeep":"","tlshash":"caa00235f403901e20265c71bd266a0cf84e9475e19c34570b170470d0e3c4b5d104c7","size":76,"data":"","first_seen":"2024-11-30T10:40:48.663326Z","last_seen":"2026-04-28T15:16:43.900364Z","times_seen":1337,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/spots/322253?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"c9aa269a5c713c552d7bacfe97297e9a","sha1":"0ae07a9f7b31581c76f88765ddf7b65ffbafe4d2","sha256":"f367eb4f416443247e686f5209378ddb1e1902429f1b1f37bf9cd73eada99df7","sha512":"9334fd5d5180136da295746feb55647ce91cb085c92bdeb9311225f740b75b95b2c5a6760c23640c920df0d61e4d07f9878f430c37d94adb870e8adcdf5321b3","ssdeep":"","tlshash":"0b115744a78915bb10c2e3cb332f771839b64496ba00410079799ce2572cddb61a57cc","size":929,"data":"","first_seen":"2025-10-16T18:57:17.884353Z","last_seen":"2025-10-16T18:57:17.884353Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/spots/321354?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"49d5fe343295bcd3e53254404952450d","sha1":"abcca6fa672908efa599507aedd37941d1b61cc7","sha256":"709cd99fa7dadde27dbb83684ee099ab3c6f2c360815c2b5bd505a34fd55fcea","sha512":"66b3ef6599ddaa050fcba691da45e187aa3977fdc402d1604a63c764c45dbd81f01f02107845dd55e0806eb41ba15fbc4d226b24493bc03d016ec6a995422a81","ssdeep":"","tlshash":"caa00235f403901e20265c71bd266a0cf84e9475e19c34570b170470d0e3c4b5d104c7","size":76,"data":"","first_seen":"2024-11-30T10:40:48.663326Z","last_seen":"2026-04-28T15:16:43.900364Z","times_seen":1337,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/spots/334568?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1c8b86255a0cdbc90017d9cd61de710","sha1":"3fac1ab6d35f9a7001bfd34a6eb28200ec32ec5f","sha256":"7ab903effc8d3ca67e4e79d8db88d3910ed7a36125fc0424caaa98ef97784d84","sha512":"925c7b5ab7ea8c725a1b20a5bcbda87956676be4635eaec985e16b1668eafd45fced74d8aab528a5b05e7cf40a6896903264f0203b46527dc7f7e4fcbb321f59","ssdeep":"","tlshash":"df01f227de0c211b9789543e28ab61d1910c908bed542ef67a0da490cbad13d47fbfd5","size":707,"data":"","first_seen":"2024-12-01T22:30:10.346366Z","last_seen":"2026-04-27T23:56:31.01288Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/spots/322253?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"49d5fe343295bcd3e53254404952450d","sha1":"abcca6fa672908efa599507aedd37941d1b61cc7","sha256":"709cd99fa7dadde27dbb83684ee099ab3c6f2c360815c2b5bd505a34fd55fcea","sha512":"66b3ef6599ddaa050fcba691da45e187aa3977fdc402d1604a63c764c45dbd81f01f02107845dd55e0806eb41ba15fbc4d226b24493bc03d016ec6a995422a81","ssdeep":"","tlshash":"caa00235f403901e20265c71bd266a0cf84e9475e19c34570b170470d0e3c4b5d104c7","size":76,"data":"","first_seen":"2024-11-30T10:40:48.663326Z","last_seen":"2026-04-28T15:16:43.900364Z","times_seen":1337,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxxfiles.com/js/plugins.js","fqdn":"www.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"ip":{"addr":"172.67.194.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3167e4fb71c974f622dd3466f4e73263","sha1":"768f89b7870c63a58ceb948cbcd5c5407764c0d7","sha256":"d3f2e6fa7cb777a8957a0673706c2df43280f6daa4e8ef3d502fa459185cbcb6","sha512":"6e50fae832814586c3baf23cb302142443849f908e1b115d958e69462b473636b57472d5412776693d6308c6b83a6929e55ceb1e6fe7920895fba6abee0a1ecd","ssdeep":"1536:reGnwUsdSNJkOZWfXLEGAzNeehZdTBpcnAQKzRJbfzSMx94S4d737Pb3rFQbx/5u:rJ95kOiLEGAzsuXBynAQKubFQlRu","tlshash":"b7d3e7487643723142af60a6656f110f7236677ea40989acb028cddd5e7de1832bbf3d","size":130671,"data":"","first_seen":"2023-03-07T12:03:02Z","last_seen":"2026-04-21T23:34:11.429866Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/videojs-thumbnails/0.1.1/videojs.thumbnails.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb638361f3402431eb2195f569607d91","sha1":"c00d931f8738add2a738429784343ea1702b19cf","sha256":"2a9c9c017aa931fb3ea3db71751ab13c8d8f7e5c4e6f785d3922ad07820443b7","sha512":"254a63f6f759c5495c441f6cbd49de75b88b67f94fc76d896f6439ed5d3c70b8764c9f5e746a254b96d06880ec6ad6269f1a3493cfce3f5fb4dc519f87b18010","ssdeep":"192:OAOBFZqya/uyeUNa9MQd8qBxclYtxLtGsuKlb/sm6IbAV3aqkavrK0:POBFRICBwAxxuKhsm7y2sK0","tlshash":"24d1119965b213324113f16de79fe4a973368043211bdd007c9defa49f819b28e93bda","size":6365,"data":"","first_seen":"2023-03-07T12:03:02Z","last_seen":"2026-04-27T23:56:30.815679Z","times_seen":872,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","fqdn":"www.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"ip":{"addr":"172.67.194.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6a2ba898485e3d118b9799e46c664e6d","sha1":"5229e69fb3c96cb705b9ebfaf74e2ac94eefcf1c","sha256":"ba3e3a43b4436666163778a23e0c92cc726c620f3e2a1b73c34ef86fe6f64950","sha512":"ffb263039435671f2626570a92dd821d001c0c091d09e082cd3a19221c39d0b6a837381fc1004eb6dcf24ab01fc68a156f77ae80f4c29809504a7bbe59636881","ssdeep":"","tlshash":"2641ef556da3102550af21314feb9118b831a9134516f80a7c7ceb66cf40e789e66f98","size":2311,"data":"","first_seen":"2025-03-21T06:54:04.278717Z","last_seen":"2026-03-18T02:49:29.335567Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/CWSPWla.js","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d1334f3c3a996494fb08804135bdc50","sha1":"47471dbaea65a8db04a1284cc5efb99b9745164e","sha256":"1b53f16245ba49c58090b7e7b95c8a3cd257c7295b511701b836db56a4991dae","sha512":"2c3ac8f3aba2e80328ff00cf43199a554c6218cc3b581df039aa1a1359f263e0e722a2636c41f54d2b7ee8538c54a3f69520d5163d181d01931691b4c67be4b0","ssdeep":"6144:IdFfNgmYyEUOfsna/wNjXnCT1c28bJYfC:yNDYyEUOfsna/MjXnCZD8bJYfC","tlshash":"9b64b4c9b6c6b0a543e7b1b8403f520ef276a955b44ac9c0e266e9d0ac7c94e5037f7c","size":316021,"data":"","first_seen":"2025-09-22T17:52:53.955078Z","last_seen":"2025-10-22T07:28:21.563525Z","times_seen":175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/js-cookie@2/src/js.cookie.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4c61fa637bdb18bc2d18a19cb5f30f1","sha1":"782a4bfcda4edb025c24b89da68661d9c616f4ee","sha256":"ee22d4cf088fa680c31dbdf48fe1d58586859539ec5ab71738f826ebeb939d93","sha512":"a7a5982531eec5e77e7ff2961372bfe12a3d1857e4f2d9e0ad08623492787c27e354cd83e54a3ddf683ff3af2e09cd30ca629ab489342419e2d12b482739eae3","ssdeep":"","tlshash":"c941c9e578883c45115b06b1433f228ff2354616added196932da0f0387447b561bfe7","size":2120,"data":"","first_seen":"2025-03-16T13:04:11.219865Z","last_seen":"2026-04-28T15:26:57.287446Z","times_seen":1768,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/spots/321354?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"c6ed5565410d4c02817b42fcf35fc750","sha1":"c63917e5de4cee8ca3276b5aef540438509a5607","sha256":"beaf910cc12a6a83cfb649f450a01ae4afb5a16a0a646b0848aff98eeaa744a6","sha512":"de3d15b9ed517d8f85a9d749d48c13959e759eceec3d428742f25dd598b82de29606d6ad7ef81fc047d8eaf98f7888c221fbb56aeb9f9fefdb53be1a523a926e","ssdeep":"","tlshash":"0e117a14b389157f01c2e38b332f770836a644d6ba00428039b9ece2532cedba0a57cd","size":927,"data":"","first_seen":"2025-10-16T18:57:17.896975Z","last_seen":"2025-10-16T18:57:17.896975Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/spots/334568?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"c5208af07048af77a4d34480b2c6b8ab","sha1":"08142865ac09c8011287c8016358ddbc5fa2115b","sha256":"438844eda481db92f449eb62e9ea31b631efac17c90c89dd533d1779ced9a5ee","sha512":"8b64713424fe4a6ff0b803796b219bcb7754249597477a7b84a90cb435281e62ebde13364b81ca420ac4e18fb9a4141ff1c210a8d0ca06d63a6a3856b8176bab","ssdeep":"","tlshash":"19119944b38916bb11d2e3cf336f7b083aa754d6ba00410029baece2531cddb60a57cc","size":927,"data":"","first_seen":"2025-10-16T18:57:17.90224Z","last_seen":"2025-10-16T18:57:17.90224Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"36fc6c4d09131653458daa5a921cfec5","sha1":"858cd28b56aa37464c92ca7f3fdcd964fbde28ee","sha256":"6de4bb5342ad57a3746cb58d24bfb9048f8e1452dd4977ec99481a3964b1eace","sha512":"71ae79f7aa8288c0c5f87d57d8a2a713dd1d1b23fc83fad68ce9539ea2dc082340036f10d691036db0f4a8d1712c0861da242b9f8192f6b68c6c2317ad4920a6","ssdeep":"","tlshash":"3ed0a765fe03c06b04a3bdc5e9b5dd4df0caa63dd995e4c621db9030a151de90c215c9","size":244,"data":"","first_seen":"2023-08-19T03:16:36Z","last_seen":"2025-11-04T16:26:30.241599Z","times_seen":522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"957dd76fbc26a1973ff73c8d12099759","sha1":"c6e22df6e6e1a22f7fe29b5746f9b6b63ba2e889","sha256":"2c5243088844b157684a497ddeb1edad9122054dc8c8bb37b75ed393e407f90e","sha512":"aaf76cb524e121e0d4c2c7e1fd6d29a531b208d51ed50588c1d110b385265d90b575e23225402bb8ccabd0cf66c35577264a6daec8584f7db52c79adb15c42e3","ssdeep":"","tlshash":"26018927de0c611b5245202d28bba1c5d00c9047ed816ef6368da080cbad17d4bfbfd4","size":801,"data":"","first_seen":"2023-03-08T14:32:36Z","last_seen":"2026-04-27T23:56:31.093197Z","times_seen":251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"ce80c951306a9528ac603aea3917e7fa","sha1":"adc62ae4c803e9f08570f8393d7b91f2d3406131","sha256":"d74fff260f3cccea93aec8c9a67618e16466791e27a056982e6ba26f23daa3fe","sha512":"89e8f53260b0c1680270c3103f04f82036515829928f168c78506cc5753f6dd636fb7dc6e8435d3693c8cbe22070da220324912db07c954d308f889551566f9e","ssdeep":"","tlshash":"00d0a762fd03c06b04a3bdc5e9b5ed4cf4cab63dd994d4c621db9030a152de91c215c5","size":244,"data":"","first_seen":"2023-11-28T09:02:01Z","last_seen":"2025-10-26T18:59:57.328903Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"8fc8c282eee29139ee6e82884e01b74c","sha1":"c9e226b49dedf47814af7f9b8a21cb7d95335979","sha256":"f4a12bb6c96d405f416896930c10923d8da01731068086037a4dfe59d90d9b0f","sha512":"6b96fcf8ad0160495e70fc2ed097dbb3574d4453e4c26b81a337a4aa88f596f1d4d70af031ee9be4265ee9a43eeaa5171448eb06db85994375eddf841e953068","ssdeep":"","tlshash":"63d0a761fd03c06b08a3bdc5e9b5ed4cf4cab63dda94c4c621db9430a151de91c215c5","size":244,"data":"","first_seen":"2023-12-02T06:38:53Z","last_seen":"2025-10-26T18:59:57.329629Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"news.jennydanny.com/api/settings/438258","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:42.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.atakcdn.art","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 15:28:40 GMT","end":"Thu, 18 Dec 2025 15:28:39 GMT"},"fingerprint":{"sha1":"33:89:62:94:E1:12:11:52:2C:41:37:9F:D0:85:B5:1C:03:F9:7C:8B","sha256":"0A:3B:6A:A7:BF:8D:C8:FC:CC:33:8A:30:AD:CC:20:E8:E8:CB:8D:06:80:07:C6:16:A9:6D:F1:89:2E:26:80:75"}}},"request":{"raw":"GET /api/settings/438258 HTTP/1.1\r\nHost: news.jennydanny.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xxxfiles.com/\r\nOrigin: https://www.xxxfiles.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:42 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1be64b6d6652effba7dcf744e90def6a","sha1":"d9fbc7d1fa49fa4733f90a3739882d63972c2352","sha256":"72d79d0ad9a70ef53c1bab65c588d44bffb1a1b5aba0eb2f9f6a886c4c3aec4f","sha512":"ff1aee5b5d4ba25f4f78a0ddc80cd878856815c1ded88b32370c72bff242e73522e6aefb60fa5e53c434f10d2611dab7679152edf9321edc2b656e0265ef7006","ssdeep":"","tlshash":"408004c00dc1545410c010f4434043150103140f535c3304d41d1701147f4d17030150","first_seen":"2023-04-06T10:58:14Z","last_seen":"2026-04-28T12:03:15.983513Z","times_seen":7354,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:42.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 23:05:43 GMT","end":"Fri, 28 Nov 2025 23:05:42 GMT"},"fingerprint":{"sha1":"B9:51:95:1F:A8:75:17:3A:9B:B1:75:96:F4:7D:7A:CF:3D:52:C9:71","sha256":"36:D1:B1:18:05:03:10:B2:46:BC:6C:71:A5:E7:BE:07:32:66:88:16:04:1E:5F:96:0F:10:B6:4B:BF:01:D1:42"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Thu, 16 Oct 2025 18:56:42 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32182\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: f0816fb1a0ee46dac5f6b913b0b3fb4d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85386,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"46a6fef91632b94d14252fe324c1585f","sha1":"387cebbd261b8fe947fe9805875300f2ceeb5cfd","sha256":"36d0c771f8bf310d740cb4d0ca144354c45df284e72361660448708d72f175d5","sha512":"a3aaa1b5ab1113a12793bd1085332eb257416aaa9c4a690525838b91453a281580a979bfb856b3c429c2d4243c3ce02bd318a4b7048124eef96912179836d0fd","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRL:nPncLBSUBULGVTfGpucE5fox","tlshash":"528395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-07-08T10:38:39.799377Z","last_seen":"2025-11-18T17:01:51.014373Z","times_seen":15230,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":53,"dns":1,"connect":17,"send":0,"wait":26,"receive":19,"ssl":56},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/click/14223187728251190115?c=60\u0026data[error]=3\u0026data[errormsg]=Failed%20to%20decode%20media","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:46.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.atakcdn.art","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 15:28:40 GMT","end":"Thu, 18 Dec 2025 15:28:39 GMT"},"fingerprint":{"sha1":"33:89:62:94:E1:12:11:52:2C:41:37:9F:D0:85:B5:1C:03:F9:7C:8B","sha256":"0A:3B:6A:A7:BF:8D:C8:FC:CC:33:8A:30:AD:CC:20:E8:E8:CB:8D:06:80:07:C6:16:A9:6D:F1:89:2E:26:80:75"}}},"request":{"raw":"GET /api/click/14223187728251190115?c=60\u0026data[error]=3\u0026data[errormsg]=Failed%20to%20decode%20media HTTP/1.1\r\nHost: news.jennydanny.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nCookie: nauid=E2RleDXzoH4IjEhznVUM; asgfp=faed01b113cfb270c624ee1aa793ad6c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:46 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/click/5407680911088762115?c=90","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://news.jennydanny.com/api/spots/321354?p=1\u0026s1=%subid1%\u0026kw=","date":"2025-10-16T18:56:42.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.atakcdn.art","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 15:28:40 GMT","end":"Thu, 18 Dec 2025 15:28:39 GMT"},"fingerprint":{"sha1":"33:89:62:94:E1:12:11:52:2C:41:37:9F:D0:85:B5:1C:03:F9:7C:8B","sha256":"0A:3B:6A:A7:BF:8D:C8:FC:CC:33:8A:30:AD:CC:20:E8:E8:CB:8D:06:80:07:C6:16:A9:6D:F1:89:2E:26:80:75"}}},"request":{"raw":"GET /api/click/5407680911088762115?c=90 HTTP/1.1\r\nHost: news.jennydanny.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://news.jennydanny.com/api/spots/321354?p=1\u0026s1=%subid1%\u0026kw=\r\nCookie: nauid=E2RleDXzoH4IjEhznVUM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:42 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tsyndicate.com/do2/da0de22e3f4349b1a3ce238ccc04a9d0/dynamic?xu=5c090c43e6639fd1\u0026count=5\u0026w=1280\u0026h=1024\u0026keywords=334568\u0026adtype=label-under\u0026tz=0","fqdn":"tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"116.202.247.32","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://news.jennydanny.com/api/spots/334568?p=1\u0026s1=%subid1%\u0026kw=","date":"2025-10-16T18:56:43.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 20:10:41 GMT","end":"Thu, 11 Dec 2025 20:10:40 GMT"},"fingerprint":{"sha1":"25:5B:D4:FE:8D:85:CA:1A:7D:3A:B0:58:EC:2D:7A:B0:62:90:21:1F","sha256":"DF:0A:26:3C:A9:CF:97:54:23:20:C6:11:EB:C6:8C:7F:02:14:58:C8:F6:3B:08:10:27:BF:78:67:09:32:DC:9C"}}},"request":{"raw":"GET /do2/da0de22e3f4349b1a3ce238ccc04a9d0/dynamic?xu=5c090c43e6639fd1\u0026count=5\u0026w=1280\u0026h=1024\u0026keywords=334568\u0026adtype=label-under\u0026tz=0 HTTP/1.1\r\nHost: tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://news.jennydanny.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://news.jennydanny.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: https://news.jennydanny.com\r\naccess-control-allow-methods: POST, GET, HEAD\r\naccess-control-allow-headers: Accept, X-Requested-With, X-Forwarded-For, X-Real-IP, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Legacy, Content-Type,Authorization, Nav-Ua-He-Mobile, Nav-Ua-He-Platform, Nav-Ua-He-Brands, Nav-Ua-He-Platformversion, Nav-Ua-He-Model, Nav-Ua-He-Architecture, Nav-Ua-He-Bitness, Nav-Ua-He-Fullversionlist, Nav-Ua-He-Uafullversion, Nav-Ua-He-Wow64\r\naccess-control-allow-credentials: true\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding, *\r\nset-cookie: cookie_user_id=1e53e9e4-975e-5e9e-92c3-ab3396a61f0d; expires=Thu, 16 Apr 2026 18:56:43 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, no-transform\r\nx-robots-tag: none, noindex, nofollow\r\nreport-to: { \"url\": \"https://pxl.tsyndicate.com/api/v1/heavy-ad/report\", \"max_age\": 86401 }\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\npermissions-policy: ch-ua-model=(self \"https://tsyndicate.com\"), ch-ua-platform-version=(self)\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20898,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"73cb8edb4e6a182dce461b8b1cccd0f1","sha1":"826cdb178231c6fab4ef2e94188d6cc65f0c8feb","sha256":"31c794821a1f1f7666b31ba00ea80d8ea2f2e7a85067df43269a85067ab724c6","sha512":"5b95bfa154439efd3e3ffb959edda3ad598e22a37d8884158ee534c4f80269ecc0965c3cf58582da40fceb32036e65b73c6805be73be98e4278cefce6e223876","ssdeep":"384:ffWzdEcobVwUmJ6zOwKWv/zIB555p0zyvAWQtzA35Ar5AszHU02rgNxu6zg5O5as:H0OcwVwUmmhKGIrTpGyYWEzAJA1Ae00B","tlshash":"01926db2ce7c4ca61395561976872ddcc44c042ad8fbefec8140e102a6acafe197e64d","first_seen":"2025-10-16T18:57:17.406329Z","last_seen":"2025-10-16T18:57:17.406329Z","times_seen":1,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":66,"dns":1,"connect":25,"send":0,"wait":51,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/si/6c/eb/24/6ceb2451484515036a0e73aa3dcbf9d2be06a543ac8b41190106ef73c3d85811.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:45.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 02:32:56 GMT","end":"Sun, 07 Dec 2025 02:32:55 GMT"},"fingerprint":{"sha1":"F2:37:25:60:C4:34:06:EB:37:74:9F:D1:9C:FE:63:47:1F:30:4C:58","sha256":"AA:72:28:9B:C9:B7:77:AB:D7:89:4F:AC:CB:86:72:85:1D:1B:E5:15:4D:07:7B:D9:77:0F:D5:BE:92:06:8D:71"}}},"request":{"raw":"GET /si/6c/eb/24/6ceb2451484515036a0e73aa3dcbf9d2be06a543ac8b41190106ef73c3d85811.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:56:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 50112\r\nserver: nginx/1.21.6\r\nlast-modified: Mon, 02 Jun 2025 17:21:13 GMT\r\netag: \"683ddd89-c3c0\"\r\nexpires: Sat, 18 Oct 2025 18:56:45 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50112,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"b3a3706e80cfe44c216b222ab63beed0","sha1":"35257ba74c0fba1421e8640c703e0ba3f6ecaa6c","sha256":"ea864866dbb5b85fb1c99a722b0f392d65a0055d274af37a43f6efdc6d2f32bd","sha512":"0fbab5afcf280b019e48e016d110bf6701d97e522ad02007efe97b8823cb232c38b494ac78cf941a7174048d6a30524da05c8f05a905d389a94637763f45ddd9","ssdeep":"768:OUkLMzn5nUhDMFffhzucK2KpmOjAFIgHrYyS7Zs2FS+h0wLzAnwug:OU08kD4fZqcopx+2cm8E","tlshash":"c523029888c2587a5e8982d5f8bde5c1f0745b0bd3da06043ca1b1e5aadc3ea73d8479","first_seen":"2025-10-16T16:32:45.516653Z","last_seen":"2025-10-30T07:31:21.678515Z","times_seen":166,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":45,"dns":0,"connect":20,"send":0,"wait":40,"receive":20,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"understandinstalledalfred.com/pixel/sbs?c=1","fqdn":"understandinstalledalfred.com","domain":"understandinstalledalfred.com","tld":"com"},"ip":{"addr":"192.243.59.12","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:46.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"understandinstalledalfred.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Sep 2025 01:17:10 GMT","end":"Sat, 20 Dec 2025 01:17:09 GMT"},"fingerprint":{"sha1":"F6:A5:BB:A7:2B:F6:3E:5D:91:AE:99:15:7E:23:C0:21:A2:4B:AF:20","sha256":"67:97:94:2E:7C:6E:4D:38:EE:50:40:F6:AC:EA:29:7F:DB:74:0A:EC:B6:6D:10:F0:C0:7E:6B:DA:E3:CC:85:BD"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: understandinstalledalfred.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl27319047=1; slecbf1ecfe7c52535c960b6a6e62f77b00e=[6243697]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Thu, 16 Oct 2025 18:56:46 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: understandinstalledalfred.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":721,"timings":{"blocked":295,"dns":3,"connect":93,"send":0,"wait":97,"receive":1,"ssl":229},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"understandinstalledalfred.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"understandinstalledalfred.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/vregister.php?a=vview\u0026errorcode=3\u0026idzone=4646906\u0026dg=4373588-NOR-59972026-3-0-1-0-InLine","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.245","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:46.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 10:23:20 GMT","end":"Sun, 09 Nov 2025 10:23:19 GMT"},"fingerprint":{"sha1":"55:BE:EE:FC:B1:CE:38:D7:E3:0B:2C:85:5B:6D:AB:D5:10:D4:4A:F5","sha256":"24:7B:E3:CE:C3:89:75:CF:67:F0:7D:DE:47:E2:76:14:8C:B0:ED:F5:77:94:62:09:16:06:5A:DE:2E:51:00:4F"}}},"request":{"raw":"GET /vregister.php?a=vview\u0026errorcode=3\u0026idzone=4646906\u0026dg=4373588-NOR-59972026-3-0-1-0-InLine HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nCookie: c-tag=%7B%22tag-video%22%3A%22v6%7C%7CNOR%7C4646906%7C59972026%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C%7C0%7Cxxxfiles.com%7C%7C%7C16%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1760641005%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1%7C0%7C2%7Cs.magsrv.com%7C%7C%7C%7Cporngo.com%7C26ca6cc7332946fd75cf4e491e729cc4%7Cok%22%7D; __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%22f303ef8c2910cbe477d12c2a199959e3%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 16 Oct 2025 18:56:46 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: \r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.xxxfiles.com/55518000/55518986/medium@2x/1.jpg","fqdn":"img.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"ip":{"addr":"172.67.194.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:41.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxxfiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 05:44:51 GMT","end":"Sat, 13 Dec 2025 00:22:17 GMT"},"fingerprint":{"sha1":"D2:12:09:01:09:64:3E:BF:A3:21:1E:BA:8A:77:4F:5B:F2:26:08:7B","sha256":"3C:16:72:A8:86:4C:AF:3A:B1:B9:0F:B3:06:44:AE:CD:20:24:BA:AD:17:A8:77:D6:F1:7A:90:F9:6E:1B:18:88"}}},"request":{"raw":"GET /55518000/55518986/medium@2x/1.jpg HTTP/1.1\r\nHost: img.xxxfiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nCookie: PHPSESSID=djv2bk6h5k865sqpul7re7ls7b; kt_rt_ts=645499; kt_qparams=id%3D55518986%26dir%3D4b7001fc05ae7151a106bbadf1ad5510%26ts%3D645499; kt_ips=91.90.42.154\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 16 Oct 2025 18:56:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 34492\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FYxTto2WQMv7TzlE7T43NE7Mf4TLJFBBADXzIFA%2BCnhQXM4ipx95Ld%2BFMbXtIw0D10zVAA7OQfZhJWGh%2BAOsTFgiJSoi3SliQebU35fky7A%3D\"}]}\r\nlast-modified: Mon, 06 Feb 2023 17:17:26 GMT\r\netag: \"63e13626-86bc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 12990\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98f9c71298710daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34492,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc58.35.100\", baseline, precision 8, 744x420, components 3","md5":"37ccc68b3655ff7acb0c9e27c3709397","sha1":"d984d450ec951051f6a5f9344b0572ef6aa6b258","sha256":"3322ede60b73714fb05227f17c06592310fb0905b10f02950eaf9eb207709b7e","sha512":"5173886512b52f24cc3824138bf1631923e1360e1641d9de0abab6fda7bd268f3e43d958b33e1dd1390fb06b4f72da4b41a9081ab7adfca43740a7f5afb30a5c","ssdeep":"768:2Ylv5QVGVznIdvIB8t3TVxw0id+efHyfiapylQ9cyLf9q:2YDzINMK3T7Hp6aElKcyc","tlshash":"aff2e189be8bd2c94082ce775210e4e0c3345b6716b9ff195c74666d17dfa82e038a7d","first_seen":"2023-09-16T19:22:29Z","last_seen":"2025-10-16T18:57:17.415731Z","times_seen":5,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/spots/322254?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:42.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.atakcdn.art","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 15:28:40 GMT","end":"Thu, 18 Dec 2025 15:28:39 GMT"},"fingerprint":{"sha1":"33:89:62:94:E1:12:11:52:2C:41:37:9F:D0:85:B5:1C:03:F9:7C:8B","sha256":"0A:3B:6A:A7:BF:8D:C8:FC:CC:33:8A:30:AD:CC:20:E8:E8:CB:8D:06:80:07:C6:16:A9:6D:F1:89:2E:26:80:75"}}},"request":{"raw":"GET /api/spots/322254?p=1\u0026s1=%subid1%\u0026kw= HTTP/1.1\r\nHost: news.jennydanny.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nset-cookie: nauid=E2RleDXzoH4IjEhznVUM; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10612,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (4649)","md5":"988ee850bc4f6040ff607c97f3cd3307","sha1":"4e8195adb1a9cbdfe44790c7c0a8081278d351a3","sha256":"7781941c68033847aedfc14ce79528763d9c691bee69208d7f0443c68848d288","sha512":"516ccc750d6dc8262ff196f5a9f5e0fb4a4005c5ea234a43ac403deaeef0452005efc5457e4395f1e671476d75d08ea5aecb3f7d6c06617cff5f1b1a449dee1b","ssdeep":"192:t/xww3GjnEyEohSOlg3/6nxDyKxyMoyYcoWKNuxJoyaSEo:7ww3oTE13/6nxDyKxyMoyYcTBJFEo","tlshash":"bb222b56bb05123e40fb839d663b775c313ed086fa124648a17dec6446eefcb9812ec8","first_seen":"2025-10-16T18:57:17.421386Z","last_seen":"2025-10-16T18:57:17.421386Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.orbsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA01QW2rEMAy8Si+wQZJlW9r//raw0APESVwoNCkbaLswh6+TLUts9ECMNBoJSTwxnTg9sZ5jOqvAuXPqVDqOipfXC5TxtVzn96Ublk+wezKDBM5ZYORmGSpq0RWRDDlYyJbALNE8BoMSAujxc8Dz22U3BjeaBha0fCOD0FYFi9EvkygsEtdQg/ZShsLSe/EaPNU8VmYL8BSr5IGNs3Ep6tlqGvrAHoaaytimEebpZ+0+pnm+jX1zu5T/hbrG4g0khx1PW09gDaKK9gh7uV9v8wA8YE3cFuKuT7YBm+Ew6CD7kd2p1m65lvX6fb8qDl2b/j2BWLax956nOlBNLVCtadTSTjy58x/CxNJNwAEAAA==\u0026cb=e2e_68f13feae87f57.54187829","fqdn":"s.orbsrv.com","domain":"orbsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://news.jennydanny.com/api/spots/321354?p=1\u0026s1=%subid1%\u0026kw=","date":"2025-10-16T18:56:43.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orbsrv.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 10:26:18 GMT","end":"Sun, 09 Nov 2025 10:26:17 GMT"},"fingerprint":{"sha1":"00:74:5D:38:3E:06:53:77:B8:F1:AE:17:A8:D6:76:6D:1A:00:70:42","sha256":"92:60:CE:DC:13:DC:18:C6:14:88:11:40:ED:8C:58:5B:97:94:42:B0:84:09:B9:2C:88:48:CF:94:97:09:B3:D4"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA01QW2rEMAy8Si+wQZJlW9r//raw0APESVwoNCkbaLswh6+TLUts9ECMNBoJSTwxnTg9sZ5jOqvAuXPqVDqOipfXC5TxtVzn96Ublk+wezKDBM5ZYORmGSpq0RWRDDlYyJbALNE8BoMSAujxc8Dz22U3BjeaBha0fCOD0FYFi9EvkygsEtdQg/ZShsLSe/EaPNU8VmYL8BSr5IGNs3Ep6tlqGvrAHoaaytimEebpZ+0+pnm+jX1zu5T/hbrG4g0khx1PW09gDaKK9gh7uV9v8wA8YE3cFuKuT7YBm+Ew6CD7kd2p1m65lvX6fb8qDl2b/j2BWLax956nOlBNLVCtadTSTjy58x/CxNJNwAEAAA==\u0026cb=e2e_68f13feae87f57.54187829 HTTP/1.1\r\nHost: s.orbsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://news.jennydanny.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://news.jennydanny.com/\r\nCookie: __uvt=s%3A32%3A%228501f3f34a2bcb12a9b9f396f7df1183%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 16 Oct 2025 18:56:43 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://news.jennydanny.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.forscprts.com/easy?campaignId=25bdc61ed3917811c8f3f36a1e6e0fb40a4bf9db56e01082448f446fc27cc57b\u0026userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d\u0026memberId=06414b2db3c7bb1f26b1ff\u0026sourceId=52154\u0026p1=61055\u0026p2=113256\u0026p3=103612","fqdn":"go.forscprts.com","domain":"forscprts.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:45.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.forscprts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 20:58:53 GMT","end":"Fri, 12 Dec 2025 21:19:55 GMT"},"fingerprint":{"sha1":"AD:2E:E6:89:40:EE:99:C2:2F:D5:3E:7F:72:5E:7A:8B:D9:8F:CF:F7","sha256":"40:2F:2D:5E:AB:0A:F5:22:4B:8E:CA:F1:13:FC:E5:AA:5D:30:90:AE:83:A7:8D:A8:17:49:54:0E:FA:65:A3:66"}}},"request":{"raw":"GET /easy?campaignId=25bdc61ed3917811c8f3f36a1e6e0fb40a4bf9db56e01082448f446fc27cc57b\u0026userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d\u0026memberId=06414b2db3c7bb1f26b1ff\u0026sourceId=52154\u0026p1=61055\u0026p2=113256\u0026p3=103612 HTTP/1.1\r\nHost: go.forscprts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xxxfiles.com/\r\nOrigin: https://www.xxxfiles.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 16 Oct 2025 18:56:45 GMT\r\ncontent-length: 0\r\nlocation: https://go.forscprts.com/api/models/vast?action=sbSignupWithModelSoft\u0026campaignId=25bdc61ed3917811c8f3f36a1e6e0fb40a4bf9db56e01082448f446fc27cc57b\u0026campaignType=smartpop\u0026creativeId=c9b7e049622029cfc0319cc5a63e6f98450c376d3776beafa8030c904a3fd6d5\u0026duration=00%3A00%3A30\u0026iterationId=1075275\u0026masterSmartpopId=2683\u0026memberId=06414b2db3c7bb1f26b1ff\u0026p1=61055\u0026p2=113256\u0026p3=103612\u0026ruleId=29\u0026skipOffset=00%3A00%3A05\u0026smartpopId=14005\u0026sourceId=52154\u0026tag=girls\u0026trafficType=preroll\u0026usePreroll=true\u0026userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d\u0026variationId=34734\u0026videoType=ol\r\ncf-ray: 98f9c72e4e3eb4ee-OSL\r\naccess-control-allow-origin: https://www.xxxfiles.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2226,"size_decoded":0,"mime_type":"text/xml; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":64,"dns":0,"connect":1,"send":0,"wait":37,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/evwWFw7.js","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:41.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.atakcdn.art","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 15:28:40 GMT","end":"Thu, 18 Dec 2025 15:28:39 GMT"},"fingerprint":{"sha1":"33:89:62:94:E1:12:11:52:2C:41:37:9F:D0:85:B5:1C:03:F9:7C:8B","sha256":"0A:3B:6A:A7:BF:8D:C8:FC:CC:33:8A:30:AD:CC:20:E8:E8:CB:8D:06:80:07:C6:16:A9:6D:F1:89:2E:26:80:75"}}},"request":{"raw":"GET /evwWFw7.js HTTP/1.1\r\nHost: news.jennydanny.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:41 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 77002\r\nlast-modified: Mon, 22 Sep 2025 10:01:41 GMT\r\nvary: Accept-Encoding\r\netag: \"68d11e85-12cca\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\nage: 834488\r\ncf-cache-status: HIT\r\ncf-ray: 98812b05ef2dc876-FRA\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":245512,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65503), with no line terminators","md5":"0eef4f80e127c9db6bb4c0135bffc83e","sha1":"84925fb336ae49a8b356cad8fc9c220db72a6395","sha256":"e2fa18a9d94f65ebb3bcf6b40556457d88d86d94e750f4f97b8fa136c546c97a","sha512":"f94748fa14b66f7c8b5713274e355c95a70cf8c702d32d42e85e229a24a467a2fb958e99dd1907176c7af0266a14dc5fadcff78d91b9afa706600eb21ba93b7e","ssdeep":"6144:AedFcApjUoMdMH4gCyCthyPpfM7t+ZBRnH8VoceXz93Y+OL1fKd2fNKfnEWVhwTm:JpwoMjGS1O","tlshash":"9034c889b6c1b0b402e3b1b4056f551af277b944744ec5c1f629d9c0aeb9a0e9a37f3c","first_seen":"2025-09-22T17:52:53.981101Z","last_seen":"2025-10-22T07:04:13.260466Z","times_seen":220,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":12,"connect":17,"send":0,"wait":96,"receive":6,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:42.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.xxxfiles.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 12:56:02 GMT\r\nexpires: Fri, 16 Oct 2026 12:56:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 21640\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-28T16:24:24.069383Z","times_seen":769423,"resource_available":false,"data":null}},"time_used":508,"timings":{"blocked":244,"dns":2,"connect":22,"send":0,"wait":8,"receive":4,"ssl":222},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.orbsrv.com/v1/api.php","fqdn":"s.orbsrv.com","domain":"orbsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://news.jennydanny.com/api/spots/322253?p=1\u0026s1=%subid1%\u0026kw=","date":"2025-10-16T18:56:42.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orbsrv.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 10:26:18 GMT","end":"Sun, 09 Nov 2025 10:26:17 GMT"},"fingerprint":{"sha1":"00:74:5D:38:3E:06:53:77:B8:F1:AE:17:A8:D6:76:6D:1A:00:70:42","sha256":"92:60:CE:DC:13:DC:18:C6:14:88:11:40:ED:8C:58:5B:97:94:42:B0:84:09:B9:2C:88:48:CF:94:97:09:B3:D4"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.orbsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 456\r\nOrigin: https://news.jennydanny.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://news.jennydanny.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 16 Oct 2025 18:56:42 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://news.jennydanny.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nSet-Cookie: __uvt=s%3A32%3A%228501f3f34a2bcb12a9b9f396f7df1183%22%3B; expires=Sat, 16 Oct 2027 18:56:42 GMT; Max-Age=63072000; path=/; domain=orbsrv.com; secure; SameSite=None\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6956,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9fd243ed0a913b9af7ace3770a061678","sha1":"c9a74a033a4cc7f3852acb36120a931615570542","sha256":"cb6bb99564256edf45ea57d94e5eb646bdda2d453b71ebbfe0d2f88bc16dc87f","sha512":"de9c07f3f0c9e4e5bd3b18dfcfeb3fa1942c99b70b89f21317d0771a2fe216b10765392b7cd4ded14d17ba5b51ca6a0b05dcc20c95c4704aeb88bda8b8a96d18","ssdeep":"192:T5T/eqaO2Vl3r3CkG7MpsLeri8ISIhUV1oLM5aXbnbwRxA0Lq2JV:Rr0LifYsXbnbA1LqOV","tlshash":"22e19367eb8414f962d25f908de73ffcec7c2106ca514e722b84a62653c89e20667368","first_seen":"2025-10-16T18:57:17.433408Z","last_seen":"2025-10-16T18:57:17.433408Z","times_seen":1,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":71,"dns":4,"connect":25,"send":0,"wait":60,"receive":2,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499\u0026video_id=55518986\u0026mode=async\u0026action=js_stats\u0026rand=1760641002609","fqdn":"www.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"ip":{"addr":"172.67.194.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:42.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxxfiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 05:44:51 GMT","end":"Sat, 13 Dec 2025 00:22:17 GMT"},"fingerprint":{"sha1":"D2:12:09:01:09:64:3E:BF:A3:21:1E:BA:8A:77:4F:5B:F2:26:08:7B","sha256":"3C:16:72:A8:86:4C:AF:3A:B1:B9:0F:B3:06:44:AE:CD:20:24:BA:AD:17:A8:77:D6:F1:7A:90:F9:6E:1B:18:88"}}},"request":{"raw":"GET /videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499\u0026video_id=55518986\u0026mode=async\u0026action=js_stats\u0026rand=1760641002609 HTTP/1.1\r\nHost: www.xxxfiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499\r\nCookie: PHPSESSID=djv2bk6h5k865sqpul7re7ls7b; kt_rt_ts=645499; kt_qparams=id%3D55518986%26dir%3D4b7001fc05ae7151a106bbadf1ad5510%26ts%3D645499; kt_ips=91.90.42.154; show_pops2=true2; show_pops1=true1; test=test; kt_tcookie=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 16 Oct 2025 18:56:42 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nset-cookie: kt_is_visited=1; SameSite=Lax; Path=/; Domain=xxxfiles.com; Max-Age=86400; Expires=Fri, 17 Oct 2025 18:56:42 GMT\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jwcdQ1dtu0%2FJ7pjkiZ3Zp%2F8GG6EXQ3KBzvOjz4VB2mEGgxwhl%2BPTxLfr8Cuyac1eyOO2Z9hQWvXvaAL2idHxigJXhr3Db%2FOXlVHJ8Ua7qa4%3D\"}]}\r\ncf-ray: 98f9c71b29a40daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"57f187c7a868faeac558007a8eb6cb2e","sha1":"11ab10ab109fdb53d91d444ac781101f5a6360c6","sha256":"aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22","sha512":"3844065e1dd778a05e8cc39901fbf3191ded380d594359df137901ec56ca52e03d57eb60acc2421a0ee74f0733bbb5d781b7744685c26fb013a236f49b02fed3","ssdeep":"","tlshash":"5f900407c1500051c151c4310444cf1017407570010d030d50dc1055dc1715d0d01100","first_seen":"2023-04-07T09:22:11Z","last_seen":"2026-04-28T16:24:25.774891Z","times_seen":59250,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.orbsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA01QXWrDMAy+yi4QI8myLfd9rxsUdgDHSQeDJSOBbYXv8HPS0sVCshDfj2whCR1Tx/GJ9RTiSQWZXSan4jgoXl7PUMbXvEzvs6vzJzjnaAbxnJLAKJslqOQYsyKQIXnzySKYJVgOTVEJHvSI5PH8dt6Twc2mgQWt38wgtE3BYvTLJNoIuSQRT3Ggsfg+9VbTkC88StCBizSrBprGn9V9jNN0HUor+653R0c+bZpyWKLbOJ7ViyraIezjsl6nCjxgQW/X/gDZBLbEQeg/7NHdrFY3L/26fN++DQcW33uEENX3tRa2Uq0v0RuZKXGyVC9j/QPfv4dRoAEAAA==\u0026cb=e2e_68f13fead36569.94808023","fqdn":"s.orbsrv.com","domain":"orbsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://news.jennydanny.com/api/spots/322253?p=1\u0026s1=%subid1%\u0026kw=","date":"2025-10-16T18:56:43.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orbsrv.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 10:26:18 GMT","end":"Sun, 09 Nov 2025 10:26:17 GMT"},"fingerprint":{"sha1":"00:74:5D:38:3E:06:53:77:B8:F1:AE:17:A8:D6:76:6D:1A:00:70:42","sha256":"92:60:CE:DC:13:DC:18:C6:14:88:11:40:ED:8C:58:5B:97:94:42:B0:84:09:B9:2C:88:48:CF:94:97:09:B3:D4"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA01QXWrDMAy+yi4QI8myLfd9rxsUdgDHSQeDJSOBbYXv8HPS0sVCshDfj2whCR1Tx/GJ9RTiSQWZXSan4jgoXl7PUMbXvEzvs6vzJzjnaAbxnJLAKJslqOQYsyKQIXnzySKYJVgOTVEJHvSI5PH8dt6Twc2mgQWt38wgtE3BYvTLJNoIuSQRT3Ggsfg+9VbTkC88StCBizSrBprGn9V9jNN0HUor+653R0c+bZpyWKLbOJ7ViyraIezjsl6nCjxgQW/X/gDZBLbEQeg/7NHdrFY3L/26fN++DQcW33uEENX3tRa2Uq0v0RuZKXGyVC9j/QPfv4dRoAEAAA==\u0026cb=e2e_68f13fead36569.94808023 HTTP/1.1\r\nHost: s.orbsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://news.jennydanny.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://news.jennydanny.com/\r\nCookie: __uvt=s%3A32%3A%228501f3f34a2bcb12a9b9f396f7df1183%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 16 Oct 2025 18:56:42 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://news.jennydanny.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxxfiles.com/vpaid/videojs_5.vast.vpaid.min.js","fqdn":"www.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"ip":{"addr":"172.67.194.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:41.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxxfiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 05:44:51 GMT","end":"Sat, 13 Dec 2025 00:22:17 GMT"},"fingerprint":{"sha1":"D2:12:09:01:09:64:3E:BF:A3:21:1E:BA:8A:77:4F:5B:F2:26:08:7B","sha256":"3C:16:72:A8:86:4C:AF:3A:B1:B9:0F:B3:06:44:AE:CD:20:24:BA:AD:17:A8:77:D6:F1:7A:90:F9:6E:1B:18:88"}}},"request":{"raw":"GET /vpaid/videojs_5.vast.vpaid.min.js HTTP/1.1\r\nHost: www.xxxfiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499\r\nCookie: PHPSESSID=djv2bk6h5k865sqpul7re7ls7b; kt_rt_ts=645499; kt_qparams=id%3D55518986%26dir%3D4b7001fc05ae7151a106bbadf1ad5510%26ts%3D645499; kt_ips=91.90.42.154\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 16 Oct 2025 18:56:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 20 Nov 2019 11:59:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Y25%2FVzf%2FixvPZNhDlLXDPt9pCY%2FYYUpqKh0uBHzKSs7EzqrkXVi6EZJZw0X%2B6u%2FGoBz6V8CApT2NRxOpZ2gVr7KtkqwfDzr3ecbuBQclnI%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"5dd52a8b-19ebe\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 4197772\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98f9c71288680daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106174,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32057)","md5":"3eb2d1bdcb22ab1037fe9f6b5cf00143","sha1":"b065d9fabe06ca3488cdd628c6da319c49dd4a78","sha256":"66348d21d329d78be67f953ac0aad20a504ec3f3f911d3d67f58516475a18036","sha512":"9378a33c4128d4b6cf29948dd74f908b6205aba19da23bab99f6c480a2674ff55f7f15c93a1070d46e1aee91e7a2baf2d88e53c740efabd1cf494839b41cef1c","ssdeep":"1536:ISvuzH6ZDN2fKThPnX9ijMDCMKbeYVvdWt9:Nvuz9C9GuGeiC","tlshash":"74a3f64c7251707747e270b4843f620b62f4a86a744ac2a0f5b1e8e86db895e9737f3c","first_seen":"2023-03-07T12:03:02Z","last_seen":"2026-04-27T23:56:30.205848Z","times_seen":958,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxxfiles.com/js/videojs.persistvolume.js","fqdn":"www.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"ip":{"addr":"172.67.194.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:41.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxxfiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 05:44:51 GMT","end":"Sat, 13 Dec 2025 00:22:17 GMT"},"fingerprint":{"sha1":"D2:12:09:01:09:64:3E:BF:A3:21:1E:BA:8A:77:4F:5B:F2:26:08:7B","sha256":"3C:16:72:A8:86:4C:AF:3A:B1:B9:0F:B3:06:44:AE:CD:20:24:BA:AD:17:A8:77:D6:F1:7A:90:F9:6E:1B:18:88"}}},"request":{"raw":"GET /js/videojs.persistvolume.js HTTP/1.1\r\nHost: www.xxxfiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499\r\nCookie: PHPSESSID=djv2bk6h5k865sqpul7re7ls7b; kt_rt_ts=645499; kt_qparams=id%3D55518986%26dir%3D4b7001fc05ae7151a106bbadf1ad5510%26ts%3D645499; kt_ips=91.90.42.154\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 16 Oct 2025 18:56:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 20 Nov 2019 11:00:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mCNkAHB9DHPWtyeJGb2rFnwadonJ7IP9FkmbVtj%2BRU1a9AF68hIE63hJj6yXAA4vfF95w%2F99roSDYQWpf%2FbyDi6pJIf03A0Er1W02SHmf%2Fg%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"5dd51cda-e5f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 9112457\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98f9c71288690daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3679,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"f2bdaf6b076a3f5c4b201043fa99e7e6","sha1":"f55071bc8b46698523719fa2be0528fdbf2dc53b","sha256":"7876724352a649e130f98ef346619e17272581ce1db46e7dbafc470a7354d055","sha512":"84c34375c1c6e6e00581bfc6b362caec58f96467a55231895d9efa19b7acde369f8d103f95545c5b1c1c5848b4a80071491d5043d695adeb06c3120f0a320fda","ssdeep":"","tlshash":"3c71fb1ce8fa61d44463b1b9678f61a1b2324523205deb04b85da3906f5086e46bbaed","first_seen":"2023-03-07T12:03:02Z","last_seen":"2026-04-27T23:56:30.338047Z","times_seen":855,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.xxxfiles.com/55548000/55548375/medium@2x/1.jpg","fqdn":"img.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"ip":{"addr":"172.67.194.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:41.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxxfiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 05:44:51 GMT","end":"Sat, 13 Dec 2025 00:22:17 GMT"},"fingerprint":{"sha1":"D2:12:09:01:09:64:3E:BF:A3:21:1E:BA:8A:77:4F:5B:F2:26:08:7B","sha256":"3C:16:72:A8:86:4C:AF:3A:B1:B9:0F:B3:06:44:AE:CD:20:24:BA:AD:17:A8:77:D6:F1:7A:90:F9:6E:1B:18:88"}}},"request":{"raw":"GET /55548000/55548375/medium@2x/1.jpg HTTP/1.1\r\nHost: img.xxxfiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nCookie: PHPSESSID=djv2bk6h5k865sqpul7re7ls7b; kt_rt_ts=645499; kt_qparams=id%3D55518986%26dir%3D4b7001fc05ae7151a106bbadf1ad5510%26ts%3D645499; kt_ips=91.90.42.154\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 16 Oct 2025 18:56:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 36192\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=72RKGBfFxFujUvtmq1YQqM%2Ff8W9DxCirGPWLwpzZNufT6trO9zPiAzbhxurok6cb5Cw55vfqpXF99nr3Z5CLyy1dtacH%2BN0Rp80kkKMakzw%3D\"}]}\r\nlast-modified: Wed, 31 Jul 2024 10:11:20 GMT\r\netag: \"66aa0dc8-8d60\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98f9c71298740daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36192,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 744x420, components 3","md5":"58508136c89ee1a599421d5f67d19d60","sha1":"7102294297854170d3ff56b45013accf43d3e6ba","sha256":"ce16106d3ef1e54989b90f789c06929cda82509330003b2f7cb9d3abdc19e8d6","sha512":"0f9b45c67e8d0387f2e2112f7bc7b026902bda8a6695d779ea3f8ebc352d2861543277fe741d745d1af1e6f72b5636b7d20af1ab73473a7620ade2b9bfd3fc6c","ssdeep":"768:TTGaCHp0IZ9qAS/BBnu/lD7p79RUw8oyQJ8x:vGaCKi5S3u/9p7ww1yf","tlshash":"0af2f13ffaa0186f1d10c7b29cf5a9b125890696c6fefb48c6777a4d62884d10c9836d","first_seen":"2025-10-16T18:57:17.449785Z","last_seen":"2025-10-16T18:57:17.449785Z","times_seen":1,"resource_available":false,"data":null}},"time_used":931,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":898,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/users/2312985871249234115/2036206?fill=0\u0026kw=Teen,Brunette,Big%20Ass,vaginal,Big%20Cock,European,Russian,cum%20on%20ass,toned,ass,leggings,standing%20doggy,doggy,amateur%20girl,bwc,beeg.com,intro,pov-doggy,from-behind,bend-over,indie%20girl,My%20Little%20Betsy","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:45.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.atakcdn.art","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 15:28:40 GMT","end":"Thu, 18 Dec 2025 15:28:39 GMT"},"fingerprint":{"sha1":"33:89:62:94:E1:12:11:52:2C:41:37:9F:D0:85:B5:1C:03:F9:7C:8B","sha256":"0A:3B:6A:A7:BF:8D:C8:FC:CC:33:8A:30:AD:CC:20:E8:E8:CB:8D:06:80:07:C6:16:A9:6D:F1:89:2E:26:80:75"}}},"request":{"raw":"GET /api/users/2312985871249234115/2036206?fill=0\u0026kw=Teen,Brunette,Big%20Ass,vaginal,Big%20Cock,European,Russian,cum%20on%20ass,toned,ass,leggings,standing%20doggy,doggy,amateur%20girl,bwc,beeg.com,intro,pov-doggy,from-behind,bend-over,indie%20girl,My%20Little%20Betsy HTTP/1.1\r\nHost: news.jennydanny.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xxxfiles.com/\r\nOrigin: https://www.xxxfiles.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: nauid=E2RleDXzoH4IjEhznVUM; asgfp=faed01b113cfb270c624ee1aa793ad6c\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:45 GMT\r\ncontent-type: text/xml\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.xxxfiles.com\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1981,"size_decoded":0,"mime_type":"text/xml","magic":"XML 1.0 document, ASCII text, with very long lines (321)","md5":"48fe50dc66e4c452a2ab335590083996","sha1":"934bc839329b0cc6908b7b044a6d97fdb6de738a","sha256":"e9f5bdb0e1b1e838600b5af960075f8327f3e85df25d97cf40da0dea49e4432c","sha512":"010e063c4717738d3c204ce570965eea04151116d3e4073aa63d52e9c5bb5a04b2fabff240af8296954a7c1e92f88c904d9e24d9d0e584d211ba64f66e0d459b","ssdeep":"","tlshash":"9a41601c75fc70f508900114d7a8da878ff92eab4754685aba9dccc5bf0db42229b2da","first_seen":"2025-10-16T18:57:17.454748Z","last_seen":"2025-10-16T18:57:17.454748Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"astonishlandmassnervy.com/sc4fr/rwff/f9ef/2002348/dba.xml","fqdn":"astonishlandmassnervy.com","domain":"astonishlandmassnervy.com","tld":"com"},"ip":{"addr":"94.242.247.27","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:45.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astonishlandmassnervy.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 12:57:13 GMT","end":"Tue, 30 Dec 2025 12:57:12 GMT"},"fingerprint":{"sha1":"74:3F:AA:48:CF:C3:0D:1B:DD:B3:42:58:DB:61:34:EA:C9:53:D9:E9","sha256":"00:43:E5:28:6F:89:1A:33:C2:1C:48:1D:02:3D:69:49:14:91:D3:97:6E:07:BA:D1:FF:8B:92:62:5F:78:59:90"}}},"request":{"raw":"GET /sc4fr/rwff/f9ef/2002348/dba.xml HTTP/1.1\r\nHost: astonishlandmassnervy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xxxfiles.com/\r\nOrigin: https://www.xxxfiles.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:45 GMT\r\ncontent-type: text/xml; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: video.vast.config\r\naccess-control-allow-origin: https://www.xxxfiles.com\r\naccess-control-allow-credentials: true\r\nset-cookie: CHCK=1; Path=/; Expires=Thu, 19 Nov 2026 18:56:45 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Thu, 19 Nov 2026 18:56:45 GMT; Secure; SameSite=None\nUID=2510161356bacc31c840e04fb6a383eab330; Path=/; Expires=Thu, 19 Nov 2026 18:56:45 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3831,"size_decoded":0,"mime_type":"text/xml; charset=utf-8","magic":"XML 1.0 document, ASCII text, with very long lines (3792)","md5":"df1d591ed5a10b87da72c4ff1f0aac0e","sha1":"c218319ba44376a01a76528ddb2b2b1de02b0341","sha256":"3de87d02cc91d2ccc1570cb11849606cd0c979a8f578891c9d44ad2741cf40df","sha512":"91a964afd671527a657b28b56679b2518fd610cd99154bc7d72148105481d1da83711559aec36324c5879dd24a30cb9c6051dbe1890507a645875cdfee6538d6","ssdeep":"","tlshash":"3881097116380d8ba61678a261247a4b42ffb07f69c1ac80cb1a41d6341fa9197f8bd9","first_seen":"2025-10-16T18:57:17.459505Z","last_seen":"2025-10-16T18:57:17.459505Z","times_seen":1,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":73,"dns":0,"connect":24,"send":0,"wait":18,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Finterstitial%2Ficon_animated%2F1%2Fjs%2Fscript.js\u0026l=975\u0026fd=18","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:45.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:00:34 GMT","end":"Tue, 25 Nov 2025 22:00:33 GMT"},"fingerprint":{"sha1":"FC:5B:24:E2:ED:A9:65:69:CA:97:74:44:F8:E9:93:1A:50:E7:73:C1","sha256":"26:1B:F8:72:30:B2:C4:49:6A:2E:E7:A5:FC:26:35:74:02:CB:56:D1:F7:7E:A5:5E:89:65:A9:B4:1F:1F:DB:8F"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Finterstitial%2Ficon_animated%2F1%2Fjs%2Fscript.js\u0026l=975\u0026fd=18 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Thu, 16 Oct 2025 18:56:46 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":696,"timings":{"blocked":293,"dns":1,"connect":100,"send":0,"wait":108,"receive":1,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pxl-eu.tsyndicate.com/api/v1/p/p.gif?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zCyGGMTPDTA0ZYlrEsEEjRwsaMWDYaIFDBpkxLWDMiFGmzIwbNmqOsSHiYZg6YzLiiEGmRpgwOMK0GGMm5ckyZFbmyDGjRouaMGKIEQOjTEszZXpCJGOHIo6SOB7CqSNmoQwYOWzY8AkHjtsYMXA4FDEHzkQdM3LQsDEDR1oRY9rY1YHjBowaVX2SMbPQhoyHYty4WUijRo0cjmE8bOMGI8MZMt6qJW06tV7RIurIYcPZBg4bOHM8rCMjIxo6dODM0fHixZk3LsSwGUPmzRkXY960eTGnTRg5wd_AeUEDRmczNsxsFNO5Bg3DMcyMuVEmR8oaZsDS2FmQRhiQ5mmUscF88o2hZORg00zdhWHDfUOJ8UMdcyCUBBk9QKXfDDSU9JYMYVS4EVIxzFQDDDeEkQMZMWAYwxhxyYBaXjZ0RYMY6o2BYRhazTADjYaBJkaLZXBRBwwwyGDDHG_INkYZD_bQ2GNV-QikkG2U0YYYDkKIhhlkZHFEGm3AEEccYuCQRAtM3JEHETW4sYQeUUQxhxRRoLHGHDccoYcSeLA1RhpDNIGGGzjQoYVlNdSBxxNBCJGGHVhYIQYWayihBR5Y2EBHFEnAAYUTdySRkhI45NDGGFiI8QQeVighhxYMCrGGEEfY8MUVdLQgxRFzuDGDFHmEwYYYRLyBRRRfnFFFEkRIUUUaTgZpAxwx9BDYYIXh0CyUbxzEhhNhRNlDEXacKUdBbYjVXLk6iOBGGXfM4YIaZWiWBxlhyAuddGKNEcZfW8zUBWaU6QCDC1k9JIcdi6kWWx1pZEQTZO2VQUMLoNVQRgsWC0ixDGPM0EIYYtgYl4HpwUCGWGksJoJ7LuQwMA0yuNAQDWLJ8UXKGbHssgswy2yeWHWEkVETb-iRBhtshPFCDQSDgMIVabjRXLsgOEEFCCkRvAMIULtB0tZ4fA3CwafRQHAKIBxRxhhrvPHCWylllRUIRqQxrhlv4PFCh2bDkG9Q6TrxhFhv2DwG4CIILtZyGRXhhLll2PHFuLQxVMMN_81gG5AGn7GZDjLU0NhDB0kuhhwLGUZ65F-0ka1bt1UkAhlyvLHQDA-9oZAONKhVOx55LLSXzXD8HrwOe5X-BR16ZOS3wWUEPBBwwhH3wrrtvhuvG_PWy_2904l1h8NB0vwQGg7LgMPzfB2cUe107Ft4C3W4kUatqLlARm-5z-E-8ipBzQ1KpJvZIe4gX9ifWOiArhjgRCUoARLuRMDA3jDkgSSJW1UKNpbJlaEvX9gXRTAYQZk8hHW-QggddtevilDoXxARw19mF72fsGEiamGcwB4yBji0QXJy2FcabCcwFxhGBjkYymUQY5oS8RB9OtiCCMRCxYdUcYpWzCIWt3hFKnahDwoICA%3D%3D\u0026r=1\u0026s=add5e85d0572be746550b79b93ca692476b22b5cc73cbd1b6a5e758c012924b61760641003\u0026w=t\u0026ir=242x130","fqdn":"pxl-eu.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"142.132.201.97","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://news.jennydanny.com/api/spots/334568?p=1\u0026s1=%subid1%\u0026kw=","date":"2025-10-16T18:56:44.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 20:10:41 GMT","end":"Thu, 11 Dec 2025 20:10:40 GMT"},"fingerprint":{"sha1":"25:5B:D4:FE:8D:85:CA:1A:7D:3A:B0:58:EC:2D:7A:B0:62:90:21:1F","sha256":"DF:0A:26:3C:A9:CF:97:54:23:20:C6:11:EB:C6:8C:7F:02:14:58:C8:F6:3B:08:10:27:BF:78:67:09:32:DC:9C"}}},"request":{"raw":"GET /api/v1/p/p.gif?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zCyGGMTPDTA0ZYlrEsEEjRwsaMWDYaIFDBpkxLWDMiFGmzIwbNmqOsSHiYZg6YzLiiEGmRpgwOMK0GGMm5ckyZFbmyDGjRouaMGKIEQOjTEszZXpCJGOHIo6SOB7CqSNmoQwYOWzY8AkHjtsYMXA4FDEHzkQdM3LQsDEDR1oRY9rY1YHjBowaVX2SMbPQhoyHYty4WUijRo0cjmE8bOMGI8MZMt6qJW06tV7RIurIYcPZBg4bOHM8rCMjIxo6dODM0fHixZk3LsSwGUPmzRkXY960eTGnTRg5wd_AeUEDRmczNsxsFNO5Bg3DMcyMuVEmR8oaZsDS2FmQRhiQ5mmUscF88o2hZORg00zdhWHDfUOJ8UMdcyCUBBk9QKXfDDSU9JYMYVS4EVIxzFQDDDeEkQMZMWAYwxhxyYBaXjZ0RYMY6o2BYRhazTADjYaBJkaLZXBRBwwwyGDDHG_INkYZD_bQ2GNV-QikkG2U0YYYDkKIhhlkZHFEGm3AEEccYuCQRAtM3JEHETW4sYQeUUQxhxRRoLHGHDccoYcSeLA1RhpDNIGGGzjQoYVlNdSBxxNBCJGGHVhYIQYWayihBR5Y2EBHFEnAAYUTdySRkhI45NDGGFiI8QQeVighhxYMCrGGEEfY8MUVdLQgxRFzuDGDFHmEwYYYRLyBRRRfnFFFEkRIUUUaTgZpAxwx9BDYYIXh0CyUbxzEhhNhRNlDEXacKUdBbYjVXLk6iOBGGXfM4YIaZWiWBxlhyAuddGKNEcZfW8zUBWaU6QCDC1k9JIcdi6kWWx1pZEQTZO2VQUMLoNVQRgsWC0ixDGPM0EIYYtgYl4HpwUCGWGksJoJ7LuQwMA0yuNAQDWLJ8UXKGbHssgswy2yeWHWEkVETb-iRBhtshPFCDQSDgMIVabjRXLsgOEEFCCkRvAMIULtB0tZ4fA3CwafRQHAKIBxRxhhrvPHCWylllRUIRqQxrhlv4PFCh2bDkG9Q6TrxhFhv2DwG4CIILtZyGRXhhLll2PHFuLQxVMMN_81gG5AGn7GZDjLU0NhDB0kuhhwLGUZ65F-0ka1bt1UkAhlyvLHQDA-9oZAONKhVOx55LLSXzXD8HrwOe5X-BR16ZOS3wWUEPBBwwhH3wrrtvhuvG_PWy_2904l1h8NB0vwQGg7LgMPzfB2cUe107Ft4C3W4kUatqLlARm-5z-E-8ipBzQ1KpJvZIe4gX9ifWOiArhjgRCUoARLuRMDA3jDkgSSJW1UKNpbJlaEvX9gXRTAYQZk8hHW-QggddtevilDoXxARw19mF72fsGEiamGcwB4yBji0QXJy2FcabCcwFxhGBjkYymUQY5oS8RB9OtiCCMRCxYdUcYpWzCIWt3hFKnahDwoICA%3D%3D\u0026r=1\u0026s=add5e85d0572be746550b79b93ca692476b22b5cc73cbd1b6a5e758c012924b61760641003\u0026w=t\u0026ir=242x130 HTTP/1.1\r\nHost: pxl-eu.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://news.jennydanny.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:44 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-robots-tag: noindex, nofollow\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ba036c43037cfe89320d1ef7b64cd43f","sha1":"88c72d3e26047eb1e45e5564a76427734f120efe","sha256":"42cb846e07917f6731406e500f24aeb2e88c42cda124eaa59e08c5331cad8bcb","sha512":"aa80ccd27c05eb729f730b9d830b011650bcf12cbb25d19edf29efcf962c7465bb5685a5ff5d084356c6710c08e829d16b59e7a59a41767eb14744f326b6c124","ssdeep":"","tlshash":"19900403f5400003d175d03107170340134cd110057c0307405d505cdc553510c01010","first_seen":"2023-05-10T09:10:20Z","last_seen":"2026-04-28T15:06:43.146143Z","times_seen":14953,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":78,"dns":1,"connect":25,"send":0,"wait":28,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F81%2F79%2F8e%2F81798e42dbdf5b40d74fb93e1530c3b7%2F1698745431.html\u0026l=1812\u0026fd=225","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:45.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:00:34 GMT","end":"Tue, 25 Nov 2025 22:00:33 GMT"},"fingerprint":{"sha1":"FC:5B:24:E2:ED:A9:65:69:CA:97:74:44:F8:E9:93:1A:50:E7:73:C1","sha256":"26:1B:F8:72:30:B2:C4:49:6A:2E:E7:A5:FC:26:35:74:02:CB:56:D1:F7:7E:A5:5E:89:65:A9:B4:1F:1F:DB:8F"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F81%2F79%2F8e%2F81798e42dbdf5b40d74fb93e1530c3b7%2F1698745431.html\u0026l=1812\u0026fd=225 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Thu, 16 Oct 2025 18:56:45 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/videojs-thumbnails/0.1.1/videojs.thumbnails.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:41.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/videojs-thumbnails/0.1.1/videojs.thumbnails.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:56:41 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1675\r\ncf-ray: 98f9c712dcd956a5-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb04020-18dd\"\r\nlast-modified: Mon, 04 May 2020 16:17:36 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 75522\r\nexpires: Tue, 06 Oct 2026 18:56:41 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RTsgeDHudD8uig9cfw7zR8WP5bvjIFD4xm3mtkQvsXNT6YbulEQFvkhfdIgcY7w4BBNVOoDNYou%2B%2BwvaYkYQ52pVyFkFT0yCJ3kDfK3h6WYzuAlUKNQg85eSzdlWdia3P2mT2olM\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6365,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"eb638361f3402431eb2195f569607d91","sha1":"c00d931f8738add2a738429784343ea1702b19cf","sha256":"2a9c9c017aa931fb3ea3db71751ab13c8d8f7e5c4e6f785d3922ad07820443b7","sha512":"254a63f6f759c5495c441f6cbd49de75b88b67f94fc76d896f6439ed5d3c70b8764c9f5e746a254b96d06880ec6ad6269f1a3493cfce3f5fb4dc519f87b18010","ssdeep":"192:OAOBFZqya/uyeUNa9MQd8qBxclYtxLtGsuKlb/sm6IbAV3aqkavrK0:POBFRICBwAxxuKhsm7y2sK0","tlshash":"24d1119965b213324113f16de79fe4a973368043211bdd007c9defa49f819b28e93bda","first_seen":"2023-03-07T12:03:02Z","last_seen":"2026-04-27T23:56:30.815679Z","times_seen":872,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":26,"dns":0,"connect":1,"send":0,"wait":20,"receive":1,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.xlivrdr.com/smartpop/c5135a4f2a1f31dec37f81076f43ce3228115817d90d19693df2b5c1c9764766?userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026sourceId=594678\u0026memberId=b46d_d5QSP2xkf14hikRvQJypWFTIleian7phAo3MFAG_wAoFWkZ3UkSIGYG51M87vgo0Kl9eSRNmT1AZFSfYRt02x2Kj370YgvfNfvHmpvdIrV2_gUIDRUi\u0026p1=4073707\u0026ax=0\u0026showCompanion=1","fqdn":"go.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:45.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:02:48 GMT","end":"Sun, 07 Dec 2025 09:02:14 GMT"},"fingerprint":{"sha1":"18:51:33:CF:A8:88:6B:8C:BA:0C:FC:AD:26:65:64:F8:F9:5A:32:CA","sha256":"37:C7:74:68:D2:46:40:59:86:A9:99:8C:2C:5E:F6:86:48:C4:47:28:01:2B:8E:2C:93:DF:31:57:81:AD:07:A0"}}},"request":{"raw":"GET /smartpop/c5135a4f2a1f31dec37f81076f43ce3228115817d90d19693df2b5c1c9764766?userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026sourceId=594678\u0026memberId=b46d_d5QSP2xkf14hikRvQJypWFTIleian7phAo3MFAG_wAoFWkZ3UkSIGYG51M87vgo0Kl9eSRNmT1AZFSfYRt02x2Kj370YgvfNfvHmpvdIrV2_gUIDRUi\u0026p1=4073707\u0026ax=0\u0026showCompanion=1 HTTP/1.1\r\nHost: go.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xxxfiles.com/\r\nOrigin: https://www.xxxfiles.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Thu, 16 Oct 2025 18:56:46 GMT\r\ncontent-length: 0\r\nlocation: https://go.xlivrdr.com/api/models/vast?action=sbSignupWithModelSoft\u0026ax=0\u0026campaignId=c5135a4f2a1f31dec37f81076f43ce3228115817d90d19693df2b5c1c9764766\u0026campaignType=smartpop\u0026creativeId=c9b7e049622029cfc0319cc5a63e6f98450c376d3776beafa8030c904a3fd6d5\u0026duration=00%3A00%3A30\u0026iterationId=1075268\u0026masterSmartpopId=2683\u0026memberId=b46d_d5QSP2xkf14hikRvQJypWFTIleian7phAo3MFAG_wAoFWkZ3UkSIGYG51M87vgo0Kl9eSRNmT1AZFSfYRt02x2Kj370YgvfNfvHmpvdIrV2_gUIDRUi\u0026p1=4073707\u0026ruleId=29\u0026showCompanion=1\u0026skipOffset=00%3A00%3A05\u0026smartpopId=13956\u0026sourceId=594678\u0026tag=girls\u0026trafficType=preroll\u0026usePreroll=true\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34734\u0026videoType=ol\r\ncf-ray: 98f9c72f6e0b723c-OSL\r\naccess-control-allow-origin: https://www.xxxfiles.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3733,"size_decoded":0,"mime_type":"text/xml; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.orbsrv.com/ad-provider.js","fqdn":"a.orbsrv.com","domain":"orbsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://news.jennydanny.com/api/spots/322253?p=1\u0026s1=%subid1%\u0026kw=","date":"2025-10-16T18:56:42.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orbsrv.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 10:26:18 GMT","end":"Sun, 09 Nov 2025 10:26:17 GMT"},"fingerprint":{"sha1":"00:74:5D:38:3E:06:53:77:B8:F1:AE:17:A8:D6:76:6D:1A:00:70:42","sha256":"92:60:CE:DC:13:DC:18:C6:14:88:11:40:ED:8C:58:5B:97:94:42:B0:84:09:B9:2C:88:48:CF:94:97:09:B3:D4"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.orbsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://news.jennydanny.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:56:42 GMT\r\ncontent-type: application/javascript\r\netag: W/\"e52c626717e209704abc3158596\"\r\nexpires: Wed, 15 Oct 2025 17:39:59 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH38hEAAAwBuUwKAQH3vAAAAAwBw7WvAgG3XgAAAA\r\nx-77-nzt-ray: 2a494a157c419dae0f40f16859d52017\r\nx-77-cache: HIT\r\nx-77-age: 4594\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":184838,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39009)","md5":"b9d9a46431ce98e9d753c60bd718ed6a","sha1":"e52c626717e209704abc31585964b46cd42c1b29","sha256":"3beb224ef60407ca9c9a0c7c0cd4236674a8b2ecfd83f3e409da49259797ee3f","sha512":"a96982d7bfd3b7be09b9bd3cdce3e681bcad60fccfb5d8be6bcc088c28ed9f58efa3973b54c85dd7e9385cf8c08939c6b93d7e12f75ac63bddf104c7f1c0bf83","ssdeep":"3072:msrN0p28VOkqDG2CjyR19wnRBqI9gxxIisGEolY4o/CXMtpo:yp28VOkq62T19wnRvgxXs7bpo","tlshash":"38045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","first_seen":"2025-10-04T10:16:49.453034Z","last_seen":"2025-10-17T05:10:23.595057Z","times_seen":71,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":84,"dns":13,"connect":11,"send":0,"wait":11,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"35.157.114.140","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:42.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.xxxfiles.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:56:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://www.xxxfiles.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=6bb486e4-0010-4226-9cfd-e81b1a1e05a0:3:1; expires=Sun, 14 Oct 2035 18:56:42 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"9931276f5a95e9ed749d7dbf140aeda7","sha1":"36009c8d803272a0501b0716443697a560706ac8","sha256":"21ddc99ad990421c49c10b2d425549a8520219ce64d4df2074c13a276c983883","sha512":"7391148d402ee59183e6f1edca65ecaecc0682566b9efb661a0b2996bb4b90ba8d057bd06cdf3276b07ae9ac32404dc4f2591316b2281b3ed7149c27896de4cc","ssdeep":"","tlshash":"1990040141510051c3d714573f15d51410450353407d33104d57ddcc1310c13c004cc3","first_seen":"2025-10-16T18:57:17.471004Z","last_seen":"2025-10-16T18:57:17.471004Z","times_seen":1,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":141,"dns":1,"connect":25,"send":0,"wait":22,"receive":0,"ssl":139},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y9.afcdn.net/library/199688/e82d199b1e9298985fc73a2ca0c62e2316efc55d.webp","fqdn":"s3t3d2y9.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://news.jennydanny.com/api/spots/321354?p=1\u0026s1=%subid1%\u0026kw=","date":"2025-10-16T18:56:43.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 18:41:03 GMT","end":"Fri, 12 Dec 2025 18:41:02 GMT"},"fingerprint":{"sha1":"68:CA:E4:09:64:51:A6:A3:68:11:14:36:D0:A1:63:6E:AD:58:59:50","sha256":"CD:C8:8A:2C:B0:B6:21:9E:3A:54:19:23:96:3D:87:BC:F7:14:BC:D3:A0:FA:97:48:A5:00:85:A5:C9:08:9D:0A"}}},"request":{"raw":"GET /library/199688/e82d199b1e9298985fc73a2ca0c62e2316efc55d.webp HTTP/1.1\r\nHost: s3t3d2y9.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://news.jennydanny.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:56:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7060\r\nlast-modified: Thu, 25 Jul 2024 08:11:25 GMT\r\netag: \"66a208ad-1b94\"\r\nexpires: Fri, 25 Jul 2025 08:58:07 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-77-nzt: EwwBX63NDQH3xfhtAAwBuUwKAQH30VwAAAwBJRPCLgG3XEfDAA\r\nx-77-nzt-ray: 2a494a15747e6ebc1040f168419ed904\r\nx-77-cache: HIT\r\nx-77-age: 7207109\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7060,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0b3b2b1a57b013bf5c52582254450008","sha1":"e82d199b1e9298985fc73a2ca0c62e2316efc55d","sha256":"e4c86bb45cebfb92a7a1c0fdf07fe9908670ffb486171181627df32702dd87e3","sha512":"cf63deab0650f2f7d6f30c8f5515fa4a4643fa16c2b021835e6ce244937257950817a409a9cff9cd5e9b8cb429e4276a3936dced2445028616deace17fa3ff7b","ssdeep":"192:FSfqadZdroqMLJpfoGTeaQ+5jz4zrZkJIAF:F2hZo3LDoGTbQ+5j0kJIAF","tlshash":"9ee1ae65bf020a6d0e0cfcca08823b4f1ed51248af574b669406a56ace5e7f9fcce064","first_seen":"2025-03-03T21:22:15.539473Z","last_seen":"2026-02-02T22:30:23.045104Z","times_seen":869,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"s3t3d2y9.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/users/8860595770177514115/1636030?fill=0\u0026kw=Teen,Brunette,Big%20Ass,vaginal,Big%20Cock,European,Russian,cum%20on%20ass,toned,ass,leggings,standing%20doggy,doggy,amateur%20girl,bwc,beeg.com,intro,pov-doggy,from-behind,bend-over,indie%20girl,My%20Little%20Betsy","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:45.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.atakcdn.art","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 15:28:40 GMT","end":"Thu, 18 Dec 2025 15:28:39 GMT"},"fingerprint":{"sha1":"33:89:62:94:E1:12:11:52:2C:41:37:9F:D0:85:B5:1C:03:F9:7C:8B","sha256":"0A:3B:6A:A7:BF:8D:C8:FC:CC:33:8A:30:AD:CC:20:E8:E8:CB:8D:06:80:07:C6:16:A9:6D:F1:89:2E:26:80:75"}}},"request":{"raw":"GET /api/users/8860595770177514115/1636030?fill=0\u0026kw=Teen,Brunette,Big%20Ass,vaginal,Big%20Cock,European,Russian,cum%20on%20ass,toned,ass,leggings,standing%20doggy,doggy,amateur%20girl,bwc,beeg.com,intro,pov-doggy,from-behind,bend-over,indie%20girl,My%20Little%20Betsy HTTP/1.1\r\nHost: news.jennydanny.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xxxfiles.com/\r\nOrigin: https://www.xxxfiles.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: nauid=E2RleDXzoH4IjEhznVUM; asgfp=faed01b113cfb270c624ee1aa793ad6c\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:45 GMT\r\ncontent-type: text/xml\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.xxxfiles.com\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2237,"size_decoded":0,"mime_type":"text/xml","magic":"XML 1.0 document, ASCII text, with very long lines (368)","md5":"13ee4419f58ebe6aab53190c824505cb","sha1":"571ed811d635ebe614490c602c65c9f816621ab0","sha256":"320cfc5584008a835df935e418ee67460698528a452fa5b5aa98efc6a8710766","sha512":"f2c27398a10314eea617946559f07b3aa8d895578f2018e1c911009f2f7a52c96cf17c75d17a6fc6b277a02917dcbc7dafd29659d0fc513882468e73e750291b","ssdeep":"","tlshash":"6e412b2c21fa60f94c9015149bb8e9be8fb62daf17489843794e9c847f0d782228f2c1","first_seen":"2025-10-16T18:57:17.477274Z","last_seen":"2025-10-16T18:57:17.477274Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"video.sacdnssedge.com/video/ol_5c2fe6eeec49e3ef1e7843f4851d34fe.mp4","fqdn":"video.sacdnssedge.com","domain":"sacdnssedge.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:46.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1894120159.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 11:23:17 GMT","end":"Mon, 01 Dec 2025 11:23:16 GMT"},"fingerprint":{"sha1":"6C:F0:E6:7B:64:17:10:A8:FA:BF:27:07:10:15:AF:6E:E6:98:D4:B0","sha256":"96:D2:44:B3:D4:D6:DE:C6:FD:A7:7F:68:CE:B6:6A:C0:5A:AF:0C:DD:A8:39:FC:80:62:ED:93:CA:F6:D7:27:72"}}},"request":{"raw":"GET /video/ol_5c2fe6eeec49e3ef1e7843f4851d34fe.mp4 HTTP/1.1\r\nHost: video.sacdnssedge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=262144-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Thu, 16 Oct 2025 18:56:46 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 2013874\r\nvary: accept-encoding\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"ol_5c2fe6eeec49e3ef1e7843f4851d34fe.mp4\"\r\netag: \"2e13ab1ba9b141ea07c8cc1a214056e9\"\r\nexpires: Thu, 16 Oct 2025 19:40:54 GMT\r\nlast-modified: Thu, 16 Oct 2025 18:40:54 GMT\r\ncache-control: max-age=7200\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncf-cache-status: HIT\r\nage: 0\r\ncf-ray: 98f9affabbc1038e-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-77-nzt: EwwBX63NDQH3sQMAAAwBuUwKAQH3BQAAAAwBw7WvBgG3AQAAAA\r\nx-77-nzt-ray: 2a494a15f772ecf51340f16867952c0c\r\nx-77-cache: HIT\r\nx-77-age: 945\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 262144-2276017/2276018\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":622556,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"86107571597487c521e4e79583c0f328","sha1":"8651632e3e77e87b1825faa3135585efb5879d7a","sha256":"39626a0c5ab2a0d61ce9600a447d7ca86cd111ed5d20514a453e06d6cf8cb493","sha512":"b0e57dfaa2611bfe30a35d9aded8e783863ff3368996a354e07e4d8300a4915ec1c60c2a61390b23b72017e762dcaa4a3aacfdb1351cadc257181f4e69ea00f6","ssdeep":"12288:8Ad16VpkqinzmVqA3xX0wDN0yElTD2UqhmEstC2Czt+oL:8vKqizmIAhk2N4GUqYE+C2gP","tlshash":"bad42390b8b6e0c3cd1ee33ad4036b64632c7bd59d871dbfc36a69245bb65885c52c23","first_seen":"2025-10-16T18:57:17.483956Z","last_seen":"2025-10-16T18:57:17.483956Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.xxxfiles.com/55545000/55545033/medium@2x/1.jpg","fqdn":"img.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"ip":{"addr":"172.67.194.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:41.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxxfiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 05:44:51 GMT","end":"Sat, 13 Dec 2025 00:22:17 GMT"},"fingerprint":{"sha1":"D2:12:09:01:09:64:3E:BF:A3:21:1E:BA:8A:77:4F:5B:F2:26:08:7B","sha256":"3C:16:72:A8:86:4C:AF:3A:B1:B9:0F:B3:06:44:AE:CD:20:24:BA:AD:17:A8:77:D6:F1:7A:90:F9:6E:1B:18:88"}}},"request":{"raw":"GET /55545000/55545033/medium@2x/1.jpg HTTP/1.1\r\nHost: img.xxxfiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nCookie: PHPSESSID=djv2bk6h5k865sqpul7re7ls7b; kt_rt_ts=645499; kt_qparams=id%3D55518986%26dir%3D4b7001fc05ae7151a106bbadf1ad5510%26ts%3D645499; kt_ips=91.90.42.154\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 16 Oct 2025 18:56:42 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 30393\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J35GAHdctsFMyB4UrsfQ3wp7ZAIynRpbmNP84SjXvCV4u%2BEz5BlYBdm1KNZ32SOjp4YnXfOAaJtdYsWTafiDPPYQxKpT4qCmjFJyYBpZwPo%3D\"}]}\r\nlast-modified: Mon, 17 Jun 2024 08:12:53 GMT\r\netag: \"666ff005-76b9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98f9c712a87c0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30393,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 744x420, components 3","md5":"96cdf2aa4ca2b6265d7f46a315491d06","sha1":"7446160c14483db3a2cd48b287f6e026becf0f97","sha256":"18df3289e5eeda35403cebc304f17bc3b830dbda4ab29713fa58a97529c2bb66","sha512":"6248d7bb62c97a9a902ea97ca9139830e051413e8592a71acae59a729c188929116c0c50c051078cfcee23affc21ff99e037fba495326e3143eae3b217e760a5","ssdeep":"768:dayJuzsCMMz+U8yfigYLOyE4by3G8xi1jzCDurK5QarC:dayIkMiU8yf5/4byWqdH5jC","tlshash":"15d2f1f1b4e0b8eab531d27ceee956b43847b91ae23cd60ec2a687d405017d407cb9b5","first_seen":"2025-10-16T18:57:17.489254Z","last_seen":"2025-10-16T18:57:17.489254Z","times_seen":1,"resource_available":false,"data":null}},"time_used":966,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":935,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/oT5Ugwa.js","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:41.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.atakcdn.art","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 15:28:40 GMT","end":"Thu, 18 Dec 2025 15:28:39 GMT"},"fingerprint":{"sha1":"33:89:62:94:E1:12:11:52:2C:41:37:9F:D0:85:B5:1C:03:F9:7C:8B","sha256":"0A:3B:6A:A7:BF:8D:C8:FC:CC:33:8A:30:AD:CC:20:E8:E8:CB:8D:06:80:07:C6:16:A9:6D:F1:89:2E:26:80:75"}}},"request":{"raw":"GET /oT5Ugwa.js HTTP/1.1\r\nHost: news.jennydanny.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:41 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 89108\r\nlast-modified: Mon, 22 Sep 2025 10:01:41 GMT\r\nvary: Accept-Encoding\r\netag: \"68d11e85-15c14\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\nage: 246887\r\ncf-cache-status: HIT\r\ncf-ray: 984883c5ca2cd2e2-FRA\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":316021,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65503), with no line terminators","md5":"6d1334f3c3a996494fb08804135bdc50","sha1":"47471dbaea65a8db04a1284cc5efb99b9745164e","sha256":"1b53f16245ba49c58090b7e7b95c8a3cd257c7295b511701b836db56a4991dae","sha512":"2c3ac8f3aba2e80328ff00cf43199a554c6218cc3b581df039aa1a1359f263e0e722a2636c41f54d2b7ee8538c54a3f69520d5163d181d01931691b4c67be4b0","ssdeep":"6144:IdFfNgmYyEUOfsna/wNjXnCT1c28bJYfC:yNDYyEUOfsna/MjXnCZD8bJYfC","tlshash":"9b64b4c9b6c6b0a543e7b1b8403f520ef276a955b44ac9c0e266e9d0ac7c94e5037f7c","first_seen":"2025-09-22T17:52:53.955078Z","last_seen":"2025-10-22T07:28:21.563525Z","times_seen":175,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":65,"dns":3,"connect":35,"send":0,"wait":29,"receive":73,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/interstitial/icon_animated/1/css/style.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.35.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:45.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 Aug 2025 18:23:14 GMT","end":"Thu, 27 Nov 2025 19:21:45 GMT"},"fingerprint":{"sha1":"99:06:8C:E5:8E:41:8B:38:F8:46:C0:E9:CF:99:E2:11:F2:8E:DD:AB","sha256":"93:A8:69:6F:83:C3:C8:1B:E8:A3:20:9C:19:F4:47:35:74:85:80:F1:82:1F:48:42:AB:AA:77:A3:35:AB:29:20"}}},"request":{"raw":"GET /sb/ssp/interstitial/icon_animated/1/css/style.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.xxxfiles.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:56:45 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa8501-10a1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nage: 28899\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=otUeMbnfOIIRaRVNJEi4%2FmfRD75fZpQj7hf8gRPI4sMrk7UdkqsuPn0pNBlYuOBS%2BLgxW9moyVF7BaV3noHgDEPyRpon00lWQWBqcwM2\"}]}\r\ncf-ray: 98f9c72e4a177129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4257,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"48c6473a6f95c70089437b6e14dba5ff","sha1":"b5647ce85919828bbefc6e3beab3f022997c656e","sha256":"e50d9ec6f2bf5c91f7faa480f538e849774689ddada06f572919abe46d1e69eb","sha512":"99b8c7d13a01f6e600bd3d261292738833a07b08ebf637fd64c8a4fea7dfb3d3ec397ac5bf2a7ee7b83a851188a2b1d3c1fed4ae25ac1633463ca6abf249fa9d","ssdeep":"96:q4oLZBhjTMXPMXHbfy9inU8XHbfyRUuq4BPywWZ7LWHic1SH+r:MHRMX0XHTy9MXHTyvpyyYH+r","tlshash":"54918c6725631604b507d8192fe92b4363688113960ff5b63ec366088fcb98d96e739f","first_seen":"2024-08-02T20:34:42Z","last_seen":"2025-12-03T23:02:36.51757Z","times_seen":215,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":80,"dns":3,"connect":1,"send":0,"wait":8,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/vregister.php?a=vview\u0026errorcode=400\u0026idzone=4646906\u0026dg=4373588-NOR-59972026-3-0-1-0-InLine","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.245","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:46.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 10:23:20 GMT","end":"Sun, 09 Nov 2025 10:23:19 GMT"},"fingerprint":{"sha1":"55:BE:EE:FC:B1:CE:38:D7:E3:0B:2C:85:5B:6D:AB:D5:10:D4:4A:F5","sha256":"24:7B:E3:CE:C3:89:75:CF:67:F0:7D:DE:47:E2:76:14:8C:B0:ED:F5:77:94:62:09:16:06:5A:DE:2E:51:00:4F"}}},"request":{"raw":"GET /vregister.php?a=vview\u0026errorcode=400\u0026idzone=4646906\u0026dg=4373588-NOR-59972026-3-0-1-0-InLine HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nCookie: c-tag=%7B%22tag-video%22%3A%22v6%7C%7CNOR%7C4646906%7C59972026%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C%7C0%7Cxxxfiles.com%7C%7C%7C16%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1760641005%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1%7C0%7C2%7Cs.magsrv.com%7C%7C%7C%7Cporngo.com%7C26ca6cc7332946fd75cf4e491e729cc4%7Cok%22%7D; __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%22f303ef8c2910cbe477d12c2a199959e3%22%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 16 Oct 2025 18:56:46 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: \r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":63,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pxl-eu.tsyndicate.com/api/v1/error?errorcode=3\u0026p=APeICDOGjggdMFgMhAPnYAwZNGrkUDimTUMdEmnYuIFDoRg3bg7OqIEDBg4cNBTSaePwhg0YNmjEgAGjhso2Mlq-jDmzZswbCuGwGXMwoYgxZ4pSRHPQTR02bPooCAg%3D\u0026s=9c9f48e8ea278fd043866557736a151172c988de1d879bc31091e2399cc488391760641005","fqdn":"pxl-eu.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"142.132.201.97","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:46.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 20:10:41 GMT","end":"Thu, 11 Dec 2025 20:10:40 GMT"},"fingerprint":{"sha1":"25:5B:D4:FE:8D:85:CA:1A:7D:3A:B0:58:EC:2D:7A:B0:62:90:21:1F","sha256":"DF:0A:26:3C:A9:CF:97:54:23:20:C6:11:EB:C6:8C:7F:02:14:58:C8:F6:3B:08:10:27:BF:78:67:09:32:DC:9C"}}},"request":{"raw":"GET /api/v1/error?errorcode=3\u0026p=APeICDOGjggdMFgMhAPnYAwZNGrkUDimTUMdEmnYuIFDoRg3bg7OqIEDBg4cNBTSaePwhg0YNmjEgAGjhso2Mlq-jDmzZswbCuGwGXMwoYgxZ4pSRHPQTR02bPooCAg%3D\u0026s=9c9f48e8ea278fd043866557736a151172c988de1d879bc31091e2399cc488391760641005 HTTP/1.1\r\nHost: pxl-eu.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nCookie: cookie_user_id=a3478f5e-53f5-5f37-994f-8bde9a7ba683; bfq=APeIECNCx5YZNXDAwIGDRhcWIsYU3BLjoYgyE2PcsAHjhowbNGDU6NJH\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:46 GMT\r\ncontent-length: 0\r\nx-robots-tag: noindex, nofollow\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/n.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://news.jennydanny.com/api/spots/334568?p=1\u0026s1=%subid1%\u0026kw=","date":"2025-10-16T18:56:42.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Oct 2025 10:32:14 GMT","end":"Tue, 30 Dec 2025 10:32:13 GMT"},"fingerprint":{"sha1":"A5:85:96:D7:D3:14:D9:8C:D5:7D:34:E1:96:37:CB:A5:1A:3F:0C:D2","sha256":"B3:A3:D1:79:1A:8D:A0:85:E5:76:38:A5:30:A8:3D:4B:39:88:E2:D3:C4:87:4C:5F:4A:41:4A:B5:6D:39:9C:85"}}},"request":{"raw":"GET /sdk/v1/n.js HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://news.jennydanny.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:56:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 14 Oct 2025 15:24:28 GMT\r\netag: W/\"68ee6b2c-d8a4\"\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncache-control: max-age=172800\r\nexpires: Sat, 18 Oct 2025 18:56:42 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS5859\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55460,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (55382)","md5":"b040ad17eb65b4c7ac1aec0b7c0b11b9","sha1":"e9aebf38f8349af4a3910526792584e752886480","sha256":"fd206e7267d232fd26e191aec9a1dc8e6f8dbfe9cf0eed99211b9880fbfc93f4","sha512":"a7a54e9497a442cfab854cf75c78eec9dd3abfbfffc12097c3ef8efeb7bdc9deb60f491794e3bb78978fc114a337ecd67b90ec17ddea15775fabd2d4599e8200","ssdeep":"768:pnuWgBzZorgLu4oV1N3bZmOByGBe2vI3Xdyc2aW3TU/1B5eO6C5XBJs8QB:puWWsZ4s19IOoGY3Ec2/TU/vAM5vszB","tlshash":"53434ce97595743121ab01a6819f174b733d3917ac0d4c00a077eae13d78ecad63bfa9","first_seen":"2025-10-16T02:04:48.785313Z","last_seen":"2025-10-28T21:43:37.087041Z","times_seen":42,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":32,"dns":1,"connect":20,"send":0,"wait":21,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.uuidksinc.net/match/1924/?remote_uid=5c090c43e6639fd1","fqdn":"s.uuidksinc.net","domain":"uuidksinc.net","tld":"net"},"ip":{"addr":"185.98.54.153","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://news.jennydanny.com/api/spots/334568?p=1\u0026s1=%subid1%\u0026kw=","date":"2025-10-16T18:56:43.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uuidksinc.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 23:22:10 GMT","end":"Fri, 28 Nov 2025 23:22:09 GMT"},"fingerprint":{"sha1":"DF:8A:AE:8B:ED:44:80:4D:3B:EB:26:59:E2:5F:93:03:BC:7D:31:F4","sha256":"D9:6C:DC:4A:1E:9E:64:3A:2B:71:51:9B:CD:A8:75:44:2E:9A:DC:B5:A7:C8:35:79:8A:0E:0C:05:6E:D6:AD:FB"}}},"request":{"raw":"GET /match/1924/?remote_uid=5c090c43e6639fd1 HTTP/1.1\r\nHost: s.uuidksinc.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://news.jennydanny.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://news.jennydanny.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.23.2\r\ndate: Thu, 16 Oct 2025 18:56:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 74\r\naccess-control-allow-headers: X-Requested-With, Cache-Control, Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://news.jennydanny.com\r\nset-cookie: jcsuuid=PPVICcvyKSnhYRYuL4qS; expires=Fri, 16 Oct 2026 18:56:43 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.23.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced","md5":"9e24e19b024c44b778301d880bd8e6f4","sha1":"d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e","sha256":"01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb","sha512":"4957e24a00b7ff54b350c33392560937e69ee5accf2e439781e27b4ac506eeeddef3bebd5d911185add175d648f4636dc5116e311b9c6c6ed34b842153e0b124","ssdeep":"","tlshash":"1ba022e22380fcbccc220033002003b0ceb0802808208e0f0c2c8c3a0800a0880cc383","first_seen":"2023-04-06T20:02:01Z","last_seen":"2026-04-28T11:06:58.143905Z","times_seen":6645,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":52,"dns":2,"connect":17,"send":0,"wait":18,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tsyndicate.com/do2/9a538454fe9046a29f4b62e07d8cf4f3/vast?","fqdn":"tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"116.202.247.32","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:45.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 20:10:41 GMT","end":"Thu, 11 Dec 2025 20:10:40 GMT"},"fingerprint":{"sha1":"25:5B:D4:FE:8D:85:CA:1A:7D:3A:B0:58:EC:2D:7A:B0:62:90:21:1F","sha256":"DF:0A:26:3C:A9:CF:97:54:23:20:C6:11:EB:C6:8C:7F:02:14:58:C8:F6:3B:08:10:27:BF:78:67:09:32:DC:9C"}}},"request":{"raw":"GET /do2/9a538454fe9046a29f4b62e07d8cf4f3/vast? HTTP/1.1\r\nHost: tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xxxfiles.com/\r\nOrigin: https://www.xxxfiles.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:45 GMT\r\ncontent-type: application/xml; charset=utf-8\r\naccess-control-allow-origin: https://www.xxxfiles.com\r\naccess-control-allow-methods: POST, GET, HEAD\r\naccess-control-allow-headers: Accept, X-Requested-With, X-Forwarded-For, X-Real-IP, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Legacy, Content-Type,Authorization, Nav-Ua-He-Mobile, Nav-Ua-He-Platform, Nav-Ua-He-Brands, Nav-Ua-He-Platformversion, Nav-Ua-He-Model, Nav-Ua-He-Architecture, Nav-Ua-He-Bitness, Nav-Ua-He-Fullversionlist, Nav-Ua-He-Uafullversion, Nav-Ua-He-Wow64\r\naccess-control-allow-credentials: true\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding, *\r\nx-vast: 3.0\r\nset-cookie: cookie_user_id=a3478f5e-53f5-5f37-994f-8bde9a7ba683; expires=Thu, 16 Apr 2026 18:56:45 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None\nbfq=APeIECNCx5YZNXDAwIGDRhcWIsYU3BLjoYgyE2PcsAHjhowbNGDU6NJH; expires=Fri, 17 Oct 2025 18:56:45 GMT; domain=.tsyndicate.com; path=/; HttpOnly; secure; SameSite=None\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, no-transform\r\nx-robots-tag: none, noindex, nofollow\r\nreport-to: { \"url\": \"https://pxl.tsyndicate.com/api/v1/heavy-ad/report\", \"max_age\": 86401 }\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\npermissions-policy: ch-ua-model=(self \"https://tsyndicate.com\"), ch-ua-platform-version=(self)\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5740,"size_decoded":0,"mime_type":"application/xml; charset=utf-8","magic":"XML 1.0 document, ASCII text, with very long lines (5701)","md5":"cc1b481045faa493840d849578d5f771","sha1":"c0745799d3c419c9d078f7f009224a2045122e29","sha256":"adfe1f32f4b8b43f9596c85fd1896ad9f66f08679b461ed74950198622c03e6f","sha512":"9e4427eb5c1cddc2277bbe15ced0b63f84eb7c327dcefa48c778fa127173755b7bddcb1cf2bba2e3b8dccc55283e69ac633e7789c08775eb0a8da898e7ba4bec","ssdeep":"96:On7E1ha7u7G//jI1LQoktahG//jI1LQoktuZGJIG0sByR59HS:87ES7gw/jIioktaw/jIiokt44f0wyvA","tlshash":"80c15c5adb03ccaa00404a2ecf51d58d867e8f2affeb46a9e075c44b0b9805d0a2f1c6","first_seen":"2025-10-16T18:57:17.506131Z","last_seen":"2025-10-16T18:57:17.506131Z","times_seen":1,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":61,"dns":0,"connect":24,"send":0,"wait":41,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/click/14223187728251190115?c=60\u0026data[error]=3\u0026data[errormsg]=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:46.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.atakcdn.art","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 15:28:40 GMT","end":"Thu, 18 Dec 2025 15:28:39 GMT"},"fingerprint":{"sha1":"33:89:62:94:E1:12:11:52:2C:41:37:9F:D0:85:B5:1C:03:F9:7C:8B","sha256":"0A:3B:6A:A7:BF:8D:C8:FC:CC:33:8A:30:AD:CC:20:E8:E8:CB:8D:06:80:07:C6:16:A9:6D:F1:89:2E:26:80:75"}}},"request":{"raw":"GET /api/click/14223187728251190115?c=60\u0026data[error]=3\u0026data[errormsg]= HTTP/1.1\r\nHost: news.jennydanny.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nCookie: nauid=E2RleDXzoH4IjEhznVUM; asgfp=faed01b113cfb270c624ee1aa793ad6c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:46 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxxfiles.com/js/main.js","fqdn":"www.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"ip":{"addr":"172.67.194.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:41.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxxfiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 05:44:51 GMT","end":"Sat, 13 Dec 2025 00:22:17 GMT"},"fingerprint":{"sha1":"D2:12:09:01:09:64:3E:BF:A3:21:1E:BA:8A:77:4F:5B:F2:26:08:7B","sha256":"3C:16:72:A8:86:4C:AF:3A:B1:B9:0F:B3:06:44:AE:CD:20:24:BA:AD:17:A8:77:D6:F1:7A:90:F9:6E:1B:18:88"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: www.xxxfiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499\r\nCookie: PHPSESSID=djv2bk6h5k865sqpul7re7ls7b; kt_rt_ts=645499; kt_qparams=id%3D55518986%26dir%3D4b7001fc05ae7151a106bbadf1ad5510%26ts%3D645499; kt_ips=91.90.42.154\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 16 Oct 2025 18:56:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 04 May 2021 10:44:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I%2BY6ZPOT2Yd1DNiQwA5hB%2FOg%2Fl0qLYEe9%2BPTeGcbmOZOBnbyQ8HFeHHzy8iPCdpjiOkmP0PnjNYhwpnWkV6xjYBbr5AhDSiV7zH8EhikwLg%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"60912589-511f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 4206946\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98f9c71278630daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20767,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"c719a8f50a9ec082de5a40a2d0b1a442","sha1":"e9c74b76c56ad7106bd75cb77ef4bbbdb6f67859","sha256":"96c5ec1f6d8d942a6c1f563600a7f05d8424371972aeb6576be2cd762bee5b1c","sha512":"5c252835eb785ef382fd422ec6ea6f5e26cac9160f4fe91bdc1db951c1e7d223239db91135111d8f15c328e0d7bf27bf5b5d17a858a8bfe237168b2c5f7969f3","ssdeep":"192:cEK3mT9YYNRUCYffCKCAJX/ENk2CQWbPG90pjCljoVFDgFDwFHUdlCUdldfwq+k:dvRU9DX8N/EPG90c4F10nplR","tlshash":"cc927359f7bc6842a03730698d5f10cd233e6072a5838d56fd7a95b858ec93c326ac77","first_seen":"2023-03-07T12:03:02Z","last_seen":"2026-04-21T23:34:11.248314Z","times_seen":112,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.orbsrv.com/cimp.php?t=api\u0026data=H4sIAAAAAAAAA11PW2rDQAy8Si+QRa995bv9bSElB1jbS6FQO9jQJjCH79ptTKkGhJA0Go2Q+APTgcMD29GHowkyu0zOxLE3PL+cYIzLNI9vk+unD6hZiAGiHKMgUU4pwiSHkAM8JUTVJG3EzJl8IIIRFHSHI+K2hKfzCefXx9ZIQRkMgRJdxVOrV11Io7aaJdGVSayxJfiUKQ0ivRcqvfpIVVOOOZkNXNo6Yaxfi3uv43gbSkvb27s4Z9209n9wWDnKpmKGFoStXZbb2AN/Flf43cp64v/0B4F/pfakd83FTXO3zJ/bT7ypOY5YLbMZba31BJqXrsZS+lSUSjTf146qlKGLdVBJ3/uekDW6AQAA\u0026cb=e2e_68f13fead261b6.08919302","fqdn":"s.orbsrv.com","domain":"orbsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://news.jennydanny.com/api/spots/322254?p=1\u0026s1=%subid1%\u0026kw=","date":"2025-10-16T18:56:42.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orbsrv.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 10:26:18 GMT","end":"Sun, 09 Nov 2025 10:26:17 GMT"},"fingerprint":{"sha1":"00:74:5D:38:3E:06:53:77:B8:F1:AE:17:A8:D6:76:6D:1A:00:70:42","sha256":"92:60:CE:DC:13:DC:18:C6:14:88:11:40:ED:8C:58:5B:97:94:42:B0:84:09:B9:2C:88:48:CF:94:97:09:B3:D4"}}},"request":{"raw":"GET /cimp.php?t=api\u0026data=H4sIAAAAAAAAA11PW2rDQAy8Si+QRa995bv9bSElB1jbS6FQO9jQJjCH79ptTKkGhJA0Go2Q+APTgcMD29GHowkyu0zOxLE3PL+cYIzLNI9vk+unD6hZiAGiHKMgUU4pwiSHkAM8JUTVJG3EzJl8IIIRFHSHI+K2hKfzCefXx9ZIQRkMgRJdxVOrV11Io7aaJdGVSayxJfiUKQ0ivRcqvfpIVVOOOZkNXNo6Yaxfi3uv43gbSkvb27s4Z9209n9wWDnKpmKGFoStXZbb2AN/Flf43cp64v/0B4F/pfakd83FTXO3zJ/bT7ypOY5YLbMZba31BJqXrsZS+lSUSjTf146qlKGLdVBJ3/uekDW6AQAA\u0026cb=e2e_68f13fead261b6.08919302 HTTP/1.1\r\nHost: s.orbsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://news.jennydanny.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://news.jennydanny.com/\r\nCookie: __uvt=s%3A32%3A%228501f3f34a2bcb12a9b9f396f7df1183%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 16 Oct 2025 18:56:42 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://news.jennydanny.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/images/c/9/8507c58f3490acc70f59c864765bb8424d5560/main.webp","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://news.jennydanny.com/api/spots/334568?p=1\u0026s1=%subid1%\u0026kw=","date":"2025-10-16T18:56:43.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Oct 2025 10:32:14 GMT","end":"Tue, 30 Dec 2025 10:32:13 GMT"},"fingerprint":{"sha1":"A5:85:96:D7:D3:14:D9:8C:D5:7D:34:E1:96:37:CB:A5:1A:3F:0C:D2","sha256":"B3:A3:D1:79:1A:8D:A0:85:E5:76:38:A5:30:A8:3D:4B:39:88:E2:D3:C4:87:4C:5F:4A:41:4A:B5:6D:39:9C:85"}}},"request":{"raw":"GET /images/c/9/8507c58f3490acc70f59c864765bb8424d5560/main.webp HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://news.jennydanny.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:56:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3636\r\nserver: nginx\r\nlast-modified: Fri, 02 Oct 2020 00:32:28 GMT\r\netag: \"5f76751c-e34\"\r\nx-robots-tag: noindex, nofollow\r\ncache-control: max-age=172800\r\nexpires: Sat, 18 Oct 2025 18:56:43 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: ah1742,DS5859\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3636,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f2b65e0896ab421da9c67d4728936e40","sha1":"37b0c47c3c3296fbb6a5538e025dd5386a68dc16","sha256":"fcdcf1e3c7bad9550dfe464ed93a9bfecd57740691b00a9eafb0239af75c606a","sha512":"6eb7c81029140539ffa140f619642fe9bf3048b92674950fcbf4046dbb991095e1682b223b9e761b6236c2b916bc9019ec83832d41f559a781dbbc79d87998f5","ssdeep":"","tlshash":"cb716d069477ee87eea2c6bdfd7742be473c524273783cb6cf53408155604d46821183","first_seen":"2023-05-06T00:35:21Z","last_seen":"2026-04-27T23:56:30.358332Z","times_seen":1103,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxxfiles.com/favicon-16x16.png","fqdn":"www.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"ip":{"addr":"172.67.194.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:44.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxxfiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 05:44:51 GMT","end":"Sat, 13 Dec 2025 00:22:17 GMT"},"fingerprint":{"sha1":"D2:12:09:01:09:64:3E:BF:A3:21:1E:BA:8A:77:4F:5B:F2:26:08:7B","sha256":"3C:16:72:A8:86:4C:AF:3A:B1:B9:0F:B3:06:44:AE:CD:20:24:BA:AD:17:A8:77:D6:F1:7A:90:F9:6E:1B:18:88"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: www.xxxfiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499\r\nCookie: PHPSESSID=djv2bk6h5k865sqpul7re7ls7b; kt_rt_ts=645499; kt_qparams=id%3D55518986%26dir%3D4b7001fc05ae7151a106bbadf1ad5510%26ts%3D645499; kt_ips=91.90.42.154; show_pops2=true2; show_pops1=true1; test=test; kt_tcookie=1; kt_is_visited=1; sb_page_bf1ecfe7c52535c960b6a6e62f77b00e=1; sb_main_bf1ecfe7c52535c960b6a6e62f77b00e=1; sb_count_bf1ecfe7c52535c960b6a6e62f77b00e=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 16 Oct 2025 18:56:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 1489\r\nlast-modified: Fri, 25 Nov 2022 12:46:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B1xE86TbCfOrSgw7eQbXnmlJiM8JKV3zkzm%2BUO2CD4xPZCEmSnAQHzpQa9uRsByo3s6R56r8hQ%2Bmu8ZW5DjNhWRF3dsgg2ib6kBNpQuJDkg%3D\"}]}\r\netag: \"6380b934-5d1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 4194731\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98f9c7239af20daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1489,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"552872354755cb050014a9501cfec4fa","sha1":"fd05b4d7002b52e705344db04db723495910e4c7","sha256":"88ef331642f08aaee6990894bd8015032891181d446faa6c4bbec095a56aba8d","sha512":"97d8d182d5b6b3f7e6dac48fd401eb6a80cefb522b9f15812f8fdf82e67806b4f98486a7f85110be3a6675a678616ec44efaa0bacfdf652d2c4c0d3e97c84572","ssdeep":"","tlshash":"e931e9c9342b440ee43253311a9eb310e76fc02707e89be1bd9ed62537e6b0650e83c2","first_seen":"2023-04-28T02:32:30Z","last_seen":"2026-04-23T12:00:53.295655Z","times_seen":382,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pxl-eu.tsyndicate.com/api/v1/error?errorcode=400\u0026p=APeICDOGjggdMFgMhAPnYAwZNGrkUDimTUMdEmnYuIFDoRg3bg7OqIEDBg4cNBTSaePwhg0YNmjEgAGjhso2Mlq-jDmzZswbCuGwGXMwoYgxZ4pSRHPQTR02bPooCAg%3D\u0026s=9c9f48e8ea278fd043866557736a151172c988de1d879bc31091e2399cc488391760641005","fqdn":"pxl-eu.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"142.132.201.97","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:46.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 20:10:41 GMT","end":"Thu, 11 Dec 2025 20:10:40 GMT"},"fingerprint":{"sha1":"25:5B:D4:FE:8D:85:CA:1A:7D:3A:B0:58:EC:2D:7A:B0:62:90:21:1F","sha256":"DF:0A:26:3C:A9:CF:97:54:23:20:C6:11:EB:C6:8C:7F:02:14:58:C8:F6:3B:08:10:27:BF:78:67:09:32:DC:9C"}}},"request":{"raw":"GET /api/v1/error?errorcode=400\u0026p=APeICDOGjggdMFgMhAPnYAwZNGrkUDimTUMdEmnYuIFDoRg3bg7OqIEDBg4cNBTSaePwhg0YNmjEgAGjhso2Mlq-jDmzZswbCuGwGXMwoYgxZ4pSRHPQTR02bPooCAg%3D\u0026s=9c9f48e8ea278fd043866557736a151172c988de1d879bc31091e2399cc488391760641005 HTTP/1.1\r\nHost: pxl-eu.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nCookie: cookie_user_id=a3478f5e-53f5-5f37-994f-8bde9a7ba683; bfq=APeIECNCx5YZNXDAwIGDRhcWIsYU3BLjoYgyE2PcsAHjhowbNGDU6NJH\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:46 GMT\r\ncontent-length: 0\r\nx-robots-tag: noindex, nofollow\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/users/438258?v2=1\u0026fill=0\u0026kw=Teen%2CBrunette%2CBig%20Ass%2Cvaginal%2CBig%20Cock%2CEuropean%2CRussian%2Ccum%20on%20ass%2Ctoned%2Cass%2Cleggings%2Cstanding%20doggy%2Cdoggy%2Camateur%20girl%2Cbwc%2Cbeeg.com%2Cintro%2Cpov-doggy%2Cfrom-behind%2Cbend-over%2Cindie%20girl%2CMy%20Little%20Betsy\u0026i=1\u0026url=https%3A%2F%2Fwww.xxxfiles.com%2Fvideos%2F55518986%2F4b7001fc05ae7151a106bbadf1ad5510%2F%3Fts%3D645499\u0026sid=88f35fcc-fb69-4a35-b05a-90b281d4e335","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:42.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.atakcdn.art","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 15:28:40 GMT","end":"Thu, 18 Dec 2025 15:28:39 GMT"},"fingerprint":{"sha1":"33:89:62:94:E1:12:11:52:2C:41:37:9F:D0:85:B5:1C:03:F9:7C:8B","sha256":"0A:3B:6A:A7:BF:8D:C8:FC:CC:33:8A:30:AD:CC:20:E8:E8:CB:8D:06:80:07:C6:16:A9:6D:F1:89:2E:26:80:75"}}},"request":{"raw":"GET /api/users/438258?v2=1\u0026fill=0\u0026kw=Teen%2CBrunette%2CBig%20Ass%2Cvaginal%2CBig%20Cock%2CEuropean%2CRussian%2Ccum%20on%20ass%2Ctoned%2Cass%2Cleggings%2Cstanding%20doggy%2Cdoggy%2Camateur%20girl%2Cbwc%2Cbeeg.com%2Cintro%2Cpov-doggy%2Cfrom-behind%2Cbend-over%2Cindie%20girl%2CMy%20Little%20Betsy\u0026i=1\u0026url=https%3A%2F%2Fwww.xxxfiles.com%2Fvideos%2F55518986%2F4b7001fc05ae7151a106bbadf1ad5510%2F%3Fts%3D645499\u0026sid=88f35fcc-fb69-4a35-b05a-90b281d4e335 HTTP/1.1\r\nHost: news.jennydanny.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xxxfiles.com/\r\nOrigin: https://www.xxxfiles.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: nauid=E2RleDXzoH4IjEhznVUM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:42 GMT\r\ncontent-type: text/xml\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.xxxfiles.com\r\naccess-control-expose-headers: X-Asg-Config, X-t\r\nx-robots-tag: noindex, nofollow\r\nx-t: 0\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3831,"size_decoded":0,"mime_type":"text/xml","magic":"XML 1.0 document, ASCII text, with very long lines (314)","md5":"c93fce20515fdb1e63afd89934fbe94c","sha1":"0c277acad7793335a49a3ad6e207b24dee9a5710","sha256":"27d2177f1631d39fd81d57ba406b003027ef1d6f976a9ed86d9eedbeef3d6e36","sha512":"c5c2592271eea045ac33b37b91ae3156c5723c7392206fa6974b6935ef8269744304e545ef2dcef3c8d57155dfb62f15ad7285364be8e45856eb59c94ee4cbd9","ssdeep":"","tlshash":"40813e3899f8223a4cc8c965c2bc4d0dff34d62b2506e7d4b0ec21896f8b956a6734e5","first_seen":"2025-10-16T18:57:17.525342Z","last_seen":"2025-10-16T18:57:17.525342Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/interstitial/icon_animated/1/js/jquery.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.35.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:45.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 Aug 2025 18:23:14 GMT","end":"Thu, 27 Nov 2025 19:21:45 GMT"},"fingerprint":{"sha1":"99:06:8C:E5:8E:41:8B:38:F8:46:C0:E9:CF:99:E2:11:F2:8E:DD:AB","sha256":"93:A8:69:6F:83:C3:C8:1B:E8:A3:20:9C:19:F4:47:35:74:85:80:F1:82:1F:48:42:AB:AA:77:A3:35:AB:29:20"}}},"request":{"raw":"GET /sb/ssp/interstitial/icon_animated/1/js/jquery.min.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:56:45 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1QchCUR5dyjEcgsXKfcYrI2VNa0p9C9pxSK2KX4cADAOwr6%2FhvnbeulGpG7UAFDWyhnvNg%2FHy81tWrOInO6eU0pG26hYHhCZI3xbjNS4\"}]}\r\nage: 1618765\r\ncf-cache-status: HIT\r\netag: W/\"65aa8501-149a0\"\r\ncontent-encoding: br\r\ncf-ray: 98f9c72e8a487129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84384,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025), with CRLF line terminators","md5":"6326c600df01e3bfb9b40e1aa08176f8","sha1":"6b4fb754d29b297b539bf62ba9b4eaf0f33f314a","sha256":"df34524351c5fabc921a89183b5da5667aebd7b9e9a1c52255c76ff722935ea3","sha512":"641aaeecb9b89bcc319cabfef18f76faa9b1ba79f9de30c6d07f22d385fc78ac3f11a718fe9ec96f8a13d82e3dff4ca34944ccb449a4ef8e378ad65dfad581c0","ssdeep":"1536:oP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98Hri:f+41hJiz6fhdlTqya98Hri","tlshash":"eb83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T01:10:11Z","last_seen":"2026-04-28T16:23:42.884986Z","times_seen":11041,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Finterstitial%2Ficon_animated%2F1%2Fcss%2Fstyle.css\u0026l=4257\u0026fd=107","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:45.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:00:34 GMT","end":"Tue, 25 Nov 2025 22:00:33 GMT"},"fingerprint":{"sha1":"FC:5B:24:E2:ED:A9:65:69:CA:97:74:44:F8:E9:93:1A:50:E7:73:C1","sha256":"26:1B:F8:72:30:B2:C4:49:6A:2E:E7:A5:FC:26:35:74:02:CB:56:D1:F7:7E:A5:5E:89:65:A9:B4:1F:1F:DB:8F"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Finterstitial%2Ficon_animated%2F1%2Fcss%2Fstyle.css\u0026l=4257\u0026fd=107 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Thu, 16 Oct 2025 18:56:46 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":86,"dns":0,"connect":0,"send":0,"wait":100,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tsvideo.sacdnssedge.com/video/ol_5c2fe6eeec49e3ef1e7843f4851d34fe.mp4","fqdn":"tsvideo.sacdnssedge.com","domain":"sacdnssedge.com","tld":"com"},"ip":{"addr":"212.102.62.46","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:46.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1306075136.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 11:45:54 GMT","end":"Mon, 01 Dec 2025 11:45:53 GMT"},"fingerprint":{"sha1":"F5:AA:C7:6C:C7:93:C4:F6:5E:96:1F:53:A8:14:56:6C:BD:F6:9C:CA","sha256":"55:94:6F:AC:E4:1C:91:4F:EC:CF:8C:69:E0:FB:E6:96:40:F2:5D:2A:41:51:B7:40:59:71:1E:98:65:A9:C4:1B"}}},"request":{"raw":"GET /video/ol_5c2fe6eeec49e3ef1e7843f4851d34fe.mp4 HTTP/1.1\r\nHost: tsvideo.sacdnssedge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=196608-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Thu, 16 Oct 2025 18:56:46 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 2079410\r\nvary: accept-encoding\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"ol_5c2fe6eeec49e3ef1e7843f4851d34fe.mp4\"\r\netag: \"2e13ab1ba9b141ea07c8cc1a214056e9\"\r\nexpires: Thu, 16 Oct 2025 19:40:54 GMT\r\nlast-modified: Thu, 16 Oct 2025 18:40:54 GMT\r\ncache-control: max-age=7200\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncf-cache-status: HIT\r\nage: 0\r\ncf-ray: 98f9affa1f9f9bdc-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-77-nzt: EgwB1GY+LgG3twMAAAwBT3/TDgG3AAAAAA\r\nx-77-nzt-ray: db5cda09317b57bcee3ff168e5b2fd2d\r\nx-77-cache: HIT\r\nx-77-age: 951\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\ncontent-range: bytes 196608-2276017/2276018\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":982968,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"d0e474b7a51a5f8a20373dff80aae020","sha1":"f9c7eed17f22998f3d7775f25c56d49caf757961","sha256":"961ef57510d10dd5f11997c6daf4abac53045ff629a511bbf9a1532f1fa822a9","sha512":"d19d7ff6d20c84e2ca99e6d87d14168e67b57a2c980ebb2ade1b61fe66417be562aa732ebc6347b907030dbb61dd02820f740a75b77e12debfdbd89e4ead76fc","ssdeep":"12288:yvkfKAd16VpkqinzmVqA3xX0wDN0yElTD2UqhmEstC2Czt+oPe83I66YGP+4+ik:4vKqizmIAhk2N4GUqYE+C2gre2y+Ak","tlshash":"ed252380b9b7a09fcd1ee3bad4033b6622b85fc25d8a09bfd322b9317565d949c50c17","first_seen":"2025-10-16T18:57:17.537417Z","last_seen":"2025-10-16T18:57:17.537417Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/au/81/79/8e/81798e42dbdf5b40d74fb93e1530c3b7/1698745431.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"172.67.170.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:45.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 15:30:46 GMT","end":"Tue, 06 Jan 2026 16:29:13 GMT"},"fingerprint":{"sha1":"CE:BB:4F:68:2C:89:90:90:9F:0D:E4:DC:37:55:B5:DC:41:49:D6:F9","sha256":"52:3F:5E:43:C5:77:DF:EF:E5:AE:11:CA:C1:74:9E:6B:A8:63:B6:7A:C9:7F:8F:58:EF:05:C6:35:2F:C7:D2:9B"}}},"request":{"raw":"GET /sb/au/81/79/8e/81798e42dbdf5b40d74fb93e1530c3b7/1698745431.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.xxxfiles.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:56:45 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 31 Oct 2023 09:43:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=36yPYY056PYhWM%2BOuTQORcrzy8OijDrolzUiM4N7OLlxQ3%2FLU158QrJtz2X98X5lsJSEC5Fz6AMluORYhN39%2FLSEs1Uihc3pT7E1k9c%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 98f9c72a3a120b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1812,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"de976c8d71dbcc86f67097cd40d8bb99","sha1":"121b4ee47e41a48329d5a2d9ef846910965a513a","sha256":"e664e9faab3c92b18fdee9c88ab94f056bfdee47414bac190a1d7b5e17378634","sha512":"d192196b5b063c6aed0c0b8509055f4a5cae987c5ae7e3bd9883fa9bf5e0cb3fb61120b9baf9ebe4425d56d27dbe3d295691e53dcd3a230a6bfd72fa65351d52","ssdeep":"","tlshash":"00317c7518f8d93312d290947b312f2bae81d643894b491173bc46548f97ed9cc67007","first_seen":"2024-08-04T23:42:22Z","last_seen":"2025-12-03T23:02:36.5671Z","times_seen":263,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":63,"dns":1,"connect":1,"send":0,"wait":133,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go.xlivrdr.com/smartpop/89e21a96bcaf7ffeade22475c382106e40fecee7182bc3cc6690d8b08e7295d0?userId=3decbf3859db847485630109f89052af3b547473f7d170edfd860d80f4112826\u0026p1=prerolls\u0026vastv=3","fqdn":"go.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:45.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:02:48 GMT","end":"Sun, 07 Dec 2025 09:02:14 GMT"},"fingerprint":{"sha1":"18:51:33:CF:A8:88:6B:8C:BA:0C:FC:AD:26:65:64:F8:F9:5A:32:CA","sha256":"37:C7:74:68:D2:46:40:59:86:A9:99:8C:2C:5E:F6:86:48:C4:47:28:01:2B:8E:2C:93:DF:31:57:81:AD:07:A0"}}},"request":{"raw":"GET /smartpop/89e21a96bcaf7ffeade22475c382106e40fecee7182bc3cc6690d8b08e7295d0?userId=3decbf3859db847485630109f89052af3b547473f7d170edfd860d80f4112826\u0026p1=prerolls\u0026vastv=3 HTTP/1.1\r\nHost: go.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xxxfiles.com/\r\nOrigin: https://www.xxxfiles.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 16 Oct 2025 18:56:45 GMT\r\ncontent-length: 0\r\nlocation: https://go.tscprts.com/api/models/vast?action=sbSignupWithModelSoft\u0026campaignId=89e21a96bcaf7ffeade22475c382106e40fecee7182bc3cc6690d8b08e7295d0\u0026campaignType=smartpop\u0026creativeId=848c9861daeb8c71077e63185fe70108f0fc581bfa4a1361d3aad7791cbd1e0d\u0026duration=00%3A00%3A30\u0026iterationId=1075007\u0026masterSmartpopId=2683\u0026p1=prerolls\u0026ruleId=29\u0026skipOffset=00%3A00%3A05\u0026smartpopId=9381\u0026tag=girls\u0026trafficType=preroll\u0026usePreroll=true\u0026userId=3decbf3859db847485630109f89052af3b547473f7d170edfd860d80f4112826\u0026variationId=34733\u0026vastv=3\u0026videoType=ol\r\ncf-ray: 98f9c72a7f7756bf-OSL\r\naccess-control-allow-origin: https://www.xxxfiles.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2092,"size_decoded":0,"mime_type":"text/xml; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":64,"dns":0,"connect":2,"send":0,"wait":37,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.twinrdengine.com/adraw?zone=01DXF6DT004000000000001JXT\u0026kw=Teen%2CBrunette%2CBig+Ass%2Cvaginal%2CBig+Cock%2CEuropean%2CRussian%2Ccum+on+ass%2Ctoned%2Cass%2Cleggings%2Cstanding+doggy%2Cdoggy%2Camateur+girl%2Cbwc%2Cbeeg.com%2Cintro%2Cpov-doggy%2Cfrom-behind%2Cbend-over%2Cindie+girl%2CMy+Little+Betsy\u0026subid=100111","fqdn":"ad.twinrdengine.com","domain":"twinrdengine.com","tld":"com"},"ip":{"addr":"34.111.67.216","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:45.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad.twinrdengine.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 01:00:18 GMT","end":"Sat, 29 Nov 2025 01:56:13 GMT"},"fingerprint":{"sha1":"1F:1D:97:E3:94:C0:3D:60:4A:4D:9F:3D:6E:0B:58:91:87:CF:3B:5D","sha256":"95:97:BE:B3:B2:08:B9:BB:49:A2:52:7D:BE:80:FB:FA:42:90:DC:15:FE:32:8E:85:DE:F2:22:A0:53:86:06:8F"}}},"request":{"raw":"GET /adraw?zone=01DXF6DT004000000000001JXT\u0026kw=Teen%2CBrunette%2CBig+Ass%2Cvaginal%2CBig+Cock%2CEuropean%2CRussian%2Ccum+on+ass%2Ctoned%2Cass%2Cleggings%2Cstanding+doggy%2Cdoggy%2Camateur+girl%2Cbwc%2Cbeeg.com%2Cintro%2Cpov-doggy%2Cfrom-behind%2Cbend-over%2Cindie+girl%2CMy+Little+Betsy\u0026subid=100111 HTTP/1.1\r\nHost: ad.twinrdengine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xxxfiles.com/\r\nOrigin: https://www.xxxfiles.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nvary: origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.xxxfiles.com\r\ncontent-type: text/xml\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\ndate: Thu, 16 Oct 2025 18:56:45 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":4932,"size_decoded":0,"mime_type":"text/xml","magic":"XML 1.0 document, ASCII text, with very long lines (1384)","md5":"4e95817028c80db25e71c65c0ddf4bdc","sha1":"74675ec89fcbdce0342e04b94a7fe93b60b39180","sha256":"d4756467d6dc03c89a5ceafe7948ba9ea455dea45c8a70d4de384b9d70eb8417","sha512":"1ff7b68781da1dc86810de3b9c94e90f3cdd7776ee1d7f14d0ae8336341da187b4f5f065046695bf3d08ee7b33990d06ee90fa57bd93edbebbbd78ced2690453","ssdeep":"96:ZLkM1MgKy65Dknd3LkM1MgKy65cLkM1MgKy658:CFgKy65Dk+FgKy65LFgKy658","tlshash":"d9a10b7610732977680059fd11ea826faf06033a1d65c24174ede5a41f27af739d23cb","first_seen":"2025-10-16T18:57:17.548191Z","last_seen":"2025-10-16T18:57:17.548191Z","times_seen":1,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":210,"dns":2,"connect":32,"send":0,"wait":45,"receive":0,"ssl":155},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/splash.php?idzone=4646906","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.245","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:45.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 10:23:20 GMT","end":"Sun, 09 Nov 2025 10:23:19 GMT"},"fingerprint":{"sha1":"55:BE:EE:FC:B1:CE:38:D7:E3:0B:2C:85:5B:6D:AB:D5:10:D4:4A:F5","sha256":"24:7B:E3:CE:C3:89:75:CF:67:F0:7D:DE:47:E2:76:14:8C:B0:ED:F5:77:94:62:09:16:06:5A:DE:2E:51:00:4F"}}},"request":{"raw":"GET /splash.php?idzone=4646906 HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xxxfiles.com/\r\nOrigin: https://www.xxxfiles.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 16 Oct 2025 18:56:45 GMT\r\nContent-Type: text/xml;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Headers: X-CH-VALUES\r\nSet-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%22f303ef8c2910cbe477d12c2a199959e3%22%3B%7D; expires=Sat, 16 Oct 2027 18:56:45 GMT; path=; domain=.magsrv.com; Secure; SameSite=none\nc-tag=%7B%22tag-video%22%3A%22v6%7C%7CNOR%7C4646906%7C59972026%7C0%7C%7C508%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C%7C0%7Cxxxfiles.com%7C%7C%7C16%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1760641005%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1%7C0%7C2%7Cs.magsrv.com%7C%7C%7C%7Cporngo.com%7C26ca6cc7332946fd75cf4e491e729cc4%7Cok%22%7D; expires=Fri, 17 Oct 2025 18:56:45 GMT; path=/; domain=.magsrv.com; Secure; SameSite=none\r\nCache-Control: no-store\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: https://www.xxxfiles.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14858,"size_decoded":0,"mime_type":"text/xml; charset=UTF-8","magic":"XML 1.0 document, ASCII text, with very long lines (2116)","md5":"24f9cba670d449ff48063f2cec9f4cd0","sha1":"eb441121554c5191da44c50194e2e10d5fa41c5c","sha256":"6bb5944d401003ad51e2286cab78ffd43cac925797a82bc7ba1cbc6beb2fd7d1","sha512":"e0c1674ccfd43d87661bffce6b77e1282bdd866cd1375600f1e6b98383a5056824f8e6aa333b0c2a81de9425451da8e05c0b783f5a3fda6a2bb0db0c34b0d6d9","ssdeep":"384:dHlZQWVzZoHlcdpPHlcX9HlcWfHlcWdHlcVIE:dFD1ZoFepPFE9FpfFpdFQIE","tlshash":"af620a1465e9829f586496704823a7dfcf850d1fafa5cfee7dce40102f9746aba01b42","first_seen":"2025-10-16T18:57:17.562294Z","last_seen":"2025-10-16T18:57:17.562294Z","times_seen":1,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":77,"dns":2,"connect":24,"send":0,"wait":42,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ad.twinrdengine.com/adraw?zone=01DXF6DT004000000000001VF0\u0026kw=Teen%2CBrunette%2CBig+Ass%2Cvaginal%2CBig+Cock%2CEuropean%2CRussian%2Ccum+on+ass%2Ctoned%2Cass%2Cleggings%2Cstanding+doggy%2Cdoggy%2Camateur+girl%2Cbwc%2Cbeeg.com%2Cintro%2Cpov-doggy%2Cfrom-behind%2Cbend-over%2Cindie+girl%2CMy+Little+Betsy\u0026subid=100111","fqdn":"ad.twinrdengine.com","domain":"twinrdengine.com","tld":"com"},"ip":{"addr":"34.111.67.216","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:45.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad.twinrdengine.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 Aug 2025 01:00:18 GMT","end":"Sat, 29 Nov 2025 01:56:13 GMT"},"fingerprint":{"sha1":"1F:1D:97:E3:94:C0:3D:60:4A:4D:9F:3D:6E:0B:58:91:87:CF:3B:5D","sha256":"95:97:BE:B3:B2:08:B9:BB:49:A2:52:7D:BE:80:FB:FA:42:90:DC:15:FE:32:8E:85:DE:F2:22:A0:53:86:06:8F"}}},"request":{"raw":"GET /adraw?zone=01DXF6DT004000000000001VF0\u0026kw=Teen%2CBrunette%2CBig+Ass%2Cvaginal%2CBig+Cock%2CEuropean%2CRussian%2Ccum+on+ass%2Ctoned%2Cass%2Cleggings%2Cstanding+doggy%2Cdoggy%2Camateur+girl%2Cbwc%2Cbeeg.com%2Cintro%2Cpov-doggy%2Cfrom-behind%2Cbend-over%2Cindie+girl%2CMy+Little+Betsy\u0026subid=100111 HTTP/1.1\r\nHost: ad.twinrdengine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xxxfiles.com/\r\nOrigin: https://www.xxxfiles.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nvary: origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.xxxfiles.com\r\ncontent-type: text/xml\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\ndate: Thu, 16 Oct 2025 18:56:43 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":6248,"size_decoded":0,"mime_type":"text/xml","magic":"XML 1.0 document, ASCII text, with very long lines (1391)","md5":"9ca5bc49b7778ae8ce65ade6c5128c87","sha1":"579283776e5473e987ea6b724457745623037e82","sha256":"4a9a541b02a7a04ad29a01dd070f601e54d4085eb9b7592fa7097eea8f03dd8c","sha512":"2817e92d9d2e7c714df3411a4e1ec68704ebd93edc5278573c42fda50f359cc822490fdf43e955a93547507ecf2ae0eb0cd1b5a2fbff727d34bf326a7cf9989b","ssdeep":"96:27MikMMOMgMCa587d7fHgZJIkMMOMgMCa58bkMMOMgMCa58cM:27M9RgPPxfHgZJ3RgPPARgPP3","tlshash":"fcd1f93253f61c8bad02657f2275bf8fcba4752f2990c420724cd2d71b2c5672a92bc8","first_seen":"2025-10-16T18:57:17.573758Z","last_seen":"2025-10-16T18:57:17.573758Z","times_seen":1,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":171,"dns":0,"connect":16,"send":0,"wait":46,"receive":0,"ssl":151},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/click/11018471212915398115?c=90","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://news.jennydanny.com/api/spots/322253?p=1\u0026s1=%subid1%\u0026kw=","date":"2025-10-16T18:56:42.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.atakcdn.art","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 15:28:40 GMT","end":"Thu, 18 Dec 2025 15:28:39 GMT"},"fingerprint":{"sha1":"33:89:62:94:E1:12:11:52:2C:41:37:9F:D0:85:B5:1C:03:F9:7C:8B","sha256":"0A:3B:6A:A7:BF:8D:C8:FC:CC:33:8A:30:AD:CC:20:E8:E8:CB:8D:06:80:07:C6:16:A9:6D:F1:89:2E:26:80:75"}}},"request":{"raw":"GET /api/click/11018471212915398115?c=90 HTTP/1.1\r\nHost: news.jennydanny.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://news.jennydanny.com/api/spots/322253?p=1\u0026s1=%subid1%\u0026kw=\r\nCookie: nauid=E2RleDXzoH4IjEhznVUM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:42 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/CWSPWla.js","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:41.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.atakcdn.art","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 15:28:40 GMT","end":"Thu, 18 Dec 2025 15:28:39 GMT"},"fingerprint":{"sha1":"33:89:62:94:E1:12:11:52:2C:41:37:9F:D0:85:B5:1C:03:F9:7C:8B","sha256":"0A:3B:6A:A7:BF:8D:C8:FC:CC:33:8A:30:AD:CC:20:E8:E8:CB:8D:06:80:07:C6:16:A9:6D:F1:89:2E:26:80:75"}}},"request":{"raw":"GET /CWSPWla.js HTTP/1.1\r\nHost: news.jennydanny.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:41 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 89108\r\nlast-modified: Mon, 22 Sep 2025 10:01:41 GMT\r\nvary: Accept-Encoding\r\netag: \"68d11e85-15c14\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\nage: 246887\r\ncf-cache-status: HIT\r\ncf-ray: 984883c5ca2cd2e2-FRA\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":316021,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65503), with no line terminators","md5":"6d1334f3c3a996494fb08804135bdc50","sha1":"47471dbaea65a8db04a1284cc5efb99b9745164e","sha256":"1b53f16245ba49c58090b7e7b95c8a3cd257c7295b511701b836db56a4991dae","sha512":"2c3ac8f3aba2e80328ff00cf43199a554c6218cc3b581df039aa1a1359f263e0e722a2636c41f54d2b7ee8538c54a3f69520d5163d181d01931691b4c67be4b0","ssdeep":"6144:IdFfNgmYyEUOfsna/wNjXnCT1c28bJYfC:yNDYyEUOfsna/MjXnCZD8bJYfC","tlshash":"9b64b4c9b6c6b0a543e7b1b8403f520ef276a955b44ac9c0e266e9d0ac7c94e5037f7c","first_seen":"2025-09-22T17:52:53.955078Z","last_seen":"2025-10-22T07:28:21.563525Z","times_seen":175,"resource_available":true,"data":null}},"time_used":381,"timings":{"blocked":128,"dns":40,"connect":35,"send":0,"wait":76,"receive":26,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/spots/321354?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:42.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.atakcdn.art","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 15:28:40 GMT","end":"Thu, 18 Dec 2025 15:28:39 GMT"},"fingerprint":{"sha1":"33:89:62:94:E1:12:11:52:2C:41:37:9F:D0:85:B5:1C:03:F9:7C:8B","sha256":"0A:3B:6A:A7:BF:8D:C8:FC:CC:33:8A:30:AD:CC:20:E8:E8:CB:8D:06:80:07:C6:16:A9:6D:F1:89:2E:26:80:75"}}},"request":{"raw":"GET /api/spots/321354?p=1\u0026s1=%subid1%\u0026kw= HTTP/1.1\r\nHost: news.jennydanny.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nCookie: nauid=E2RleDXzoH4IjEhznVUM\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10613,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (4650)","md5":"c919a92b75c7eef00b97cf2d950f1470","sha1":"175e95a8154d6014bcd803c437880e8c0bbdb16d","sha256":"ad1617497c13d53cf16af45a2cd1922cbcb730125df4d34702f0d893a0ff2e8a","sha512":"386c55e3936d89f6d8cfe3c31d0c3394488534cb957c48cb15f5066a2ec1cd8005de7d53fa4023b7929c40afb1462b2f3529fcfb1410bb3d2ff8689972a963fe","ssdeep":"192:t/xww3GjnEyEzOlg3/6nxPyKxyMoyYcoWKNuxJSyaSDb:7ww3oTED3/6nxPyKxyMoyYcTBJ3Db","tlshash":"67220856bb05023e01eb839d663b7758313ed086fa224588a17dac6445fefcb9852ec8","first_seen":"2025-10-16T18:57:17.578908Z","last_seen":"2025-10-16T18:57:17.578908Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/images/b/d/3b1ca531f7c6d2dec47b25e310fa294ca1bc07/main.webp","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://news.jennydanny.com/api/spots/334568?p=1\u0026s1=%subid1%\u0026kw=","date":"2025-10-16T18:56:43.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Oct 2025 10:32:14 GMT","end":"Tue, 30 Dec 2025 10:32:13 GMT"},"fingerprint":{"sha1":"A5:85:96:D7:D3:14:D9:8C:D5:7D:34:E1:96:37:CB:A5:1A:3F:0C:D2","sha256":"B3:A3:D1:79:1A:8D:A0:85:E5:76:38:A5:30:A8:3D:4B:39:88:E2:D3:C4:87:4C:5F:4A:41:4A:B5:6D:39:9C:85"}}},"request":{"raw":"GET /images/b/d/3b1ca531f7c6d2dec47b25e310fa294ca1bc07/main.webp HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://news.jennydanny.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:56:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5502\r\nserver: nginx\r\nlast-modified: Thu, 01 Oct 2020 21:54:31 GMT\r\netag: \"5f765017-157e\"\r\nx-robots-tag: noindex, nofollow\r\ncache-control: max-age=172800\r\nexpires: Sat, 18 Oct 2025 18:56:43 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: ah1742,DS5859\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5502,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a183f4e882ccce477e809bfc3133cc0e","sha1":"825a67fe3cb7dd5a8b5c93902df9065650feee0f","sha256":"50792870a56b4bbc6af9bc9fc38f1178245024bef64a68e01befbba5dd0bfd10","sha512":"528cec0661511f1f07374e11cf209a80380b9ad266a16cbe76bf7097f7bf696d68523f6ac3bddb590359576553d60abafcb0b3d7b91f7c8e26daac50d100646f","ssdeep":"96:HTtQLqmJymeRcDhEXRLTfADurl7spIC4tnGzqMTOre9Mwab10t:HJQum3eRcVEXRvADurlZViqMTBmwai","tlshash":"0fb18e19003997178d8b3a45ec3d6d3a1c393d8da6a7514c6882efb4f0b3b09a66f746","first_seen":"2023-04-07T09:03:30Z","last_seen":"2026-04-27T23:56:30.428498Z","times_seen":1028,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/click/8338494417593631115?c=60\u0026data[error]=400\u0026data[errormsg]=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:46.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.atakcdn.art","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 15:28:40 GMT","end":"Thu, 18 Dec 2025 15:28:39 GMT"},"fingerprint":{"sha1":"33:89:62:94:E1:12:11:52:2C:41:37:9F:D0:85:B5:1C:03:F9:7C:8B","sha256":"0A:3B:6A:A7:BF:8D:C8:FC:CC:33:8A:30:AD:CC:20:E8:E8:CB:8D:06:80:07:C6:16:A9:6D:F1:89:2E:26:80:75"}}},"request":{"raw":"GET /api/click/8338494417593631115?c=60\u0026data[error]=400\u0026data[errormsg]= HTTP/1.1\r\nHost: news.jennydanny.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nCookie: nauid=E2RleDXzoH4IjEhznVUM; asgfp=faed01b113cfb270c624ee1aa793ad6c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:46 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":64,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tsvideo.sacdnssedge.com/video/ol_5c2fe6eeec49e3ef1e7843f4851d34fe.mp4","fqdn":"tsvideo.sacdnssedge.com","domain":"sacdnssedge.com","tld":"com"},"ip":{"addr":"212.102.62.46","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:46.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1306075136.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 11:45:54 GMT","end":"Mon, 01 Dec 2025 11:45:53 GMT"},"fingerprint":{"sha1":"F5:AA:C7:6C:C7:93:C4:F6:5E:96:1F:53:A8:14:56:6C:BD:F6:9C:CA","sha256":"55:94:6F:AC:E4:1C:91:4F:EC:CF:8C:69:E0:FB:E6:96:40:F2:5D:2A:41:51:B7:40:59:71:1E:98:65:A9:C4:1B"}}},"request":{"raw":"GET /video/ol_5c2fe6eeec49e3ef1e7843f4851d34fe.mp4 HTTP/1.1\r\nHost: tsvideo.sacdnssedge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=2228224-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Thu, 16 Oct 2025 18:56:46 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 47794\r\nvary: accept-encoding\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"ol_5c2fe6eeec49e3ef1e7843f4851d34fe.mp4\"\r\netag: \"2e13ab1ba9b141ea07c8cc1a214056e9\"\r\nexpires: Thu, 16 Oct 2025 19:40:54 GMT\r\nlast-modified: Thu, 16 Oct 2025 18:40:54 GMT\r\ncache-control: max-age=7200\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncf-cache-status: HIT\r\nage: 0\r\ncf-ray: 98f9affa1f9f9bdc-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-77-nzt: EgwB1GY+LgG3twMAAAwBT3/TDgG3AAAAAA\r\nx-77-nzt-ray: db5cda09317b57bcee3ff16820c52526\r\nx-77-cache: HIT\r\nx-77-age: 951\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\ncontent-range: bytes 2228224-2276017/2276018\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47794,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"8450c11dd7607af8a3093f2a67c2ffce","sha1":"d765853d35a71866e1345e3b2833704b5fe279d3","sha256":"14e1d26feddb354c68ba6e8b67c12654e051982f43941a2bb7f84c39e27d984d","sha512":"6c24d1b5b577233d3286ed75503800fe3c023299e3a1715994b9bdcb8e391dfee78eb4e8c5bbc878f331ffe334276c11b691f7c043f1686eed31df81f6a9a8ae","ssdeep":"768:i4zpmOex3qR1UfWvZncSMpmDpzjywxzzkh:PvT+Wv4pmDpzjHz8","tlshash":"5f234ca2e315100bed62273554e213227330e96523734b4f8aa3a73feda73d65e475e2","first_seen":"2025-10-16T18:56:50.307004Z","last_seen":"2025-10-16T19:00:40.915417Z","times_seen":4,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxxfiles.com/js/silvermine-videojs-quality-selector.min.js","fqdn":"www.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"ip":{"addr":"172.67.194.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:41.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxxfiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 05:44:51 GMT","end":"Sat, 13 Dec 2025 00:22:17 GMT"},"fingerprint":{"sha1":"D2:12:09:01:09:64:3E:BF:A3:21:1E:BA:8A:77:4F:5B:F2:26:08:7B","sha256":"3C:16:72:A8:86:4C:AF:3A:B1:B9:0F:B3:06:44:AE:CD:20:24:BA:AD:17:A8:77:D6:F1:7A:90:F9:6E:1B:18:88"}}},"request":{"raw":"GET /js/silvermine-videojs-quality-selector.min.js HTTP/1.1\r\nHost: www.xxxfiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499\r\nCookie: PHPSESSID=djv2bk6h5k865sqpul7re7ls7b; kt_rt_ts=645499; kt_qparams=id%3D55518986%26dir%3D4b7001fc05ae7151a106bbadf1ad5510%26ts%3D645499; kt_ips=91.90.42.154\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 16 Oct 2025 18:56:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 15 Mar 2025 14:39:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gV1FSMPUYxQt8NP2kiseTxGzG0orC0R%2B2LhT2eUrOtRVBpzovx7C0evjluxmnitNAu6ewwby9qAaNv7FVEeHDSglPayUXDMha6WJwbxeFhU%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"67d59113-c5e6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 1099776\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98f9c71278640daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50662,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50530)","md5":"e1a1404512562af8f7dcdf1bdc1d00a4","sha1":"0e9aa3a3ac0f57a6c9f17a0831f6eb87c0ea9dd8","sha256":"40cfd1d94146e13481a08a38bf2a36728df34c09eede6ad7d7510890f9f09b6e","sha512":"e89cd84ed1507f0cd8e984958c536a872852268b1b3a560a28945270fd6a62e8fb8654efee484d33cd582c303ab31cb4138d88776a58f588b9531b3643939970","ssdeep":"384:7r8u+97hWV2GJvUHoupOg28jQPiS7xmiGNfx7+y/WnhRRGkULlYTXQs2kzuY6C7q:7PCTNR2Rskci2/rsHglaHu4R8W40R8","tlshash":"7f3353da7582f59593a271aa002f6147f1f5289260eff480d290d6e4ecfa28dc17ef1d","first_seen":"2023-11-15T22:40:16Z","last_seen":"2026-04-27T23:56:30.499093Z","times_seen":548,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxxfiles.com/img/logo.png?v=3","fqdn":"www.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"ip":{"addr":"172.67.194.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:42.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxxfiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 05:44:51 GMT","end":"Sat, 13 Dec 2025 00:22:17 GMT"},"fingerprint":{"sha1":"D2:12:09:01:09:64:3E:BF:A3:21:1E:BA:8A:77:4F:5B:F2:26:08:7B","sha256":"3C:16:72:A8:86:4C:AF:3A:B1:B9:0F:B3:06:44:AE:CD:20:24:BA:AD:17:A8:77:D6:F1:7A:90:F9:6E:1B:18:88"}}},"request":{"raw":"GET /img/logo.png?v=3 HTTP/1.1\r\nHost: www.xxxfiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/css/main.css\r\nCookie: PHPSESSID=djv2bk6h5k865sqpul7re7ls7b; kt_rt_ts=645499; kt_qparams=id%3D55518986%26dir%3D4b7001fc05ae7151a106bbadf1ad5510%26ts%3D645499; kt_ips=91.90.42.154; show_pops2=true2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 16 Oct 2025 18:56:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 23819\r\nlast-modified: Fri, 13 Dec 2019 13:17:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5KTL6ns7DADglkY92qfc2wM%2Bs2HbxHrn903wQskSH0WFmjlda%2FHor%2FqT%2FCOSDSAEE0LPxC8UKklVnkkMJsxRgQEf0aT8fu3RzHTnElHRscE%3D\"}]}\r\netag: \"5df38f71-5d0b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 5695090\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98f9c717b9240daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23819,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 520 x 156, 8-bit/color RGBA, non-interlaced","md5":"9822997e90cc16212365e3cb4ce8271c","sha1":"abdbe5c5e45ce673d6544f560ad8ea38639b78a7","sha256":"504871362cd7d2f604b1b6cb99ebf785c53ee84f4cf19d029ec9c99b07e9611b","sha512":"0395b7947c48f5bff57457ac277ecec1d66c718c36cb2a69ae2ac862e84797787646f8d7f9236185b1d81e5fc8f390287a14b36e2f66aa9caddba570a8eb6f12","ssdeep":"384:bratng3K27AgKY1ZdRCq6dR6p+hgrEm9C/8VXuakiB8K9f7ke6aM8rSlEocu1+ef:bG6Ugfj+TBhQj9CeXuaB8K173H6EQ1+c","tlshash":"60b2e14863477f00fb826d60fad44e8b874f55c6ca629c474ca642971294c87f9dd72e","first_seen":"2023-05-05T10:53:14Z","last_seen":"2026-04-21T23:34:11.439624Z","times_seen":114,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.orbsrv.com/ad-provider.js","fqdn":"a.orbsrv.com","domain":"orbsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://news.jennydanny.com/api/spots/321354?p=1\u0026s1=%subid1%\u0026kw=","date":"2025-10-16T18:56:42.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orbsrv.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 10:26:18 GMT","end":"Sun, 09 Nov 2025 10:26:17 GMT"},"fingerprint":{"sha1":"00:74:5D:38:3E:06:53:77:B8:F1:AE:17:A8:D6:76:6D:1A:00:70:42","sha256":"92:60:CE:DC:13:DC:18:C6:14:88:11:40:ED:8C:58:5B:97:94:42:B0:84:09:B9:2C:88:48:CF:94:97:09:B3:D4"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.orbsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://news.jennydanny.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:56:42 GMT\r\ncontent-type: application/javascript\r\netag: W/\"e52c626717e209704abc3158596\"\r\nexpires: Wed, 15 Oct 2025 17:39:59 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH38hEAAAwBuUwKAQH3vAAAAAwBw7WvAgG3XgAAAA\r\nx-77-nzt-ray: 2a494a157c419dae0f40f1683e28182c\r\nx-77-cache: HIT\r\nx-77-age: 4594\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":184838,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39009)","md5":"b9d9a46431ce98e9d753c60bd718ed6a","sha1":"e52c626717e209704abc31585964b46cd42c1b29","sha256":"3beb224ef60407ca9c9a0c7c0cd4236674a8b2ecfd83f3e409da49259797ee3f","sha512":"a96982d7bfd3b7be09b9bd3cdce3e681bcad60fccfb5d8be6bcc088c28ed9f58efa3973b54c85dd7e9385cf8c08939c6b93d7e12f75ac63bddf104c7f1c0bf83","ssdeep":"3072:msrN0p28VOkqDG2CjyR19wnRBqI9gxxIisGEolY4o/CXMtpo:yp28VOkq62T19wnRvgxXs7bpo","tlshash":"38045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","first_seen":"2025-10-04T10:16:49.453034Z","last_seen":"2025-10-17T05:10:23.595057Z","times_seen":71,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/images/a/6/f630ccafec38030fef1e1280955c53334fe500/main.webp","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://news.jennydanny.com/api/spots/334568?p=1\u0026s1=%subid1%\u0026kw=","date":"2025-10-16T18:56:43.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Oct 2025 10:32:14 GMT","end":"Tue, 30 Dec 2025 10:32:13 GMT"},"fingerprint":{"sha1":"A5:85:96:D7:D3:14:D9:8C:D5:7D:34:E1:96:37:CB:A5:1A:3F:0C:D2","sha256":"B3:A3:D1:79:1A:8D:A0:85:E5:76:38:A5:30:A8:3D:4B:39:88:E2:D3:C4:87:4C:5F:4A:41:4A:B5:6D:39:9C:85"}}},"request":{"raw":"GET /images/a/6/f630ccafec38030fef1e1280955c53334fe500/main.webp HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://news.jennydanny.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:56:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3476\r\nserver: nginx\r\nlast-modified: Fri, 02 Oct 2020 22:14:27 GMT\r\netag: \"5f77a643-d94\"\r\nx-robots-tag: noindex, nofollow\r\ncache-control: max-age=172800\r\nexpires: Sat, 18 Oct 2025 18:56:43 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: ah1742,DS5859\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3476,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"496c270eb77306334daf164ae8b3102d","sha1":"59724967ce508aa1ced2a7d8ca4c7c708be919dd","sha256":"76cd1fb6c03c7dd3863999e150caab552ad9c28b100971a0c6236c26f18e594e","sha512":"5fb51ec968383435cc9cf9583f851ee6f609322b645062f8c13fc591b64a74c86dd79d66518a8a310bdd307e8ddb1ad8cf4f0b4c614b3d5802447c42a5255c3b","ssdeep":"","tlshash":"19716d742d70e89bb35aed0251723389a4df86256b92feaa3838120c38b257f136441c","first_seen":"2024-03-07T18:53:47Z","last_seen":"2026-04-27T23:56:30.269911Z","times_seen":1092,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pxl-eu.tsyndicate.com/api/v1/p/p.gif?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XMCFOGBpkYYXK06GijTAsaNG7IaIHjxg0aLczUEPNSZZkYOWDUEPEwTJ0xGXHEIFMjTBgcYVqMMRMDxskyZGy0yJFjRo2RZWDEECMGRhkcMsyU4QmRjB2KOGjkwPEQTh0xC2XAyGHDRk84cOLGiIHDoYg5cCbqmJGDho0ZONiKGNMmr46WOq32JGNmoQ0ZD8W4cbOQRo0adKk-bOMGI8MZMuS2JW06dV8YD-vIYdPZBg4bN2zHlpERDR06cOboePHizBsXYtiMIfPmjIsxb9q8mNMmjBzgb-C8oAHDsxkbZsKYEeO5Bo3EMcyMuVEmR9MaZsTSGFMyDI0wMsSYp1HGxnLKNwhFRg5lzDBDDNyFYQN-QonxQx1zIJQEGT1Axd8MKOUglwz23ReeUAfWAMMNIX3EYQxj0CUDanzZ4BUNYqg3BodhbGVgjYnlcIMYLpbBRR0wwCCDDXO8IdsYZUzYA2Q1WPVjkEO2UUYbYkhI4VQxtKFEGUS8UYYYa6yhYwtLHIFDDmewkUYcd4zhhhV9qUEEHUbMwIYTHOJxhxEyCGGHGEO8AcUReqABIR4z3PGGGlBUYQYRScTwRhVK5BDFGkXQYMYdd-CRxgx4DKFGU2tkYcQNQuTAhmx2ZLFGFXocYUceZOgBhRZBaJGGHUa0UIUYeETxxRlVJEGEFFWk8aSQNsARQw-EGYYYDstG-cZBd4YhZQ9FzEqEHAW1QRZz4uogghtl3DGHC2qUsRmtYbz7XHRkjRGGYFsc2EVmlekAgwtaPSSHHY6pJkIddaSRUQxlNNleR1PdUINJExM4lQxjzNBCGGIYSJeC6cFABllpOCaCey7k5AINMrjQEA1kyfFFyRmhrDLLLptHVh1hZNTEG3qkwQYbYbxQA8AgoHBFGm4wpy4ITlABQlMA7wDC0m7YQIPVeGht9cCn0QBwCiAcUcYYa7zxglxNaaUVCEakAa4Zb-DxQgwYAlwvUOY68QRZb8g8Bt8i-E2WchkV4cS4ZdjxBbi0MVSDSzjMYFuQAp_BmQ4y1NDSQwc5LoYcCyUGeuNftHFtXLdVJAIZcryx0AwPvaGQDjS0FTseeSzkl8xw7N67Dn6F_gUdemQEQ8xl9DvQb8EN9wK66rLrrhvwyguddGTdsbCQMD-ExsIy4LD8Q3MMnFHsdNwbeAt1uJEGHS2g5gIZvNWe_lnEw3CYDDeIgQxyADrCHeQL-CMLHcoVg9z4jwZto50IFsgbhjhQaxEUkQQN8rgyAOYL96LIBSEYJAmiLgxsQAgdbpevimBoXxARg2Be1zyfsGEibUEc7h4yBji0wXFyuFcaZOcvF_SlKiHioWkEyMPx6WALIiCLFB8yxShS8YpWzGIVpdiFPiggIA%3D%3D\u0026r=1\u0026s=e761663ca8e4af712c5d3c01648d81bcd72eec1248ae32ee051c367289c3e1381760641003\u0026w=t\u0026ir=242x130","fqdn":"pxl-eu.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"142.132.201.97","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://news.jennydanny.com/api/spots/334568?p=1\u0026s1=%subid1%\u0026kw=","date":"2025-10-16T18:56:44.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 20:10:41 GMT","end":"Thu, 11 Dec 2025 20:10:40 GMT"},"fingerprint":{"sha1":"25:5B:D4:FE:8D:85:CA:1A:7D:3A:B0:58:EC:2D:7A:B0:62:90:21:1F","sha256":"DF:0A:26:3C:A9:CF:97:54:23:20:C6:11:EB:C6:8C:7F:02:14:58:C8:F6:3B:08:10:27:BF:78:67:09:32:DC:9C"}}},"request":{"raw":"GET /api/v1/p/p.gif?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XMCFOGBpkYYXK06GijTAsaNG7IaIHjxg0aLczUEPNSZZkYOWDUEPEwTJ0xGXHEIFMjTBgcYVqMMRMDxskyZGy0yJFjRo2RZWDEECMGRhkcMsyU4QmRjB2KOGjkwPEQTh0xC2XAyGHDRk84cOLGiIHDoYg5cCbqmJGDho0ZONiKGNMmr46WOq32JGNmoQ0ZD8W4cbOQRo0adKk-bOMGI8MZMuS2JW06dV8YD-vIYdPZBg4bN2zHlpERDR06cOboePHizBsXYtiMIfPmjIsxb9q8mNMmjBzgb-C8oAHDsxkbZsKYEeO5Bo3EMcyMuVEmR9MaZsTSGFMyDI0wMsSYp1HGxnLKNwhFRg5lzDBDDNyFYQN-QonxQx1zIJQEGT1Axd8MKOUglwz23ReeUAfWAMMNIX3EYQxj0CUDanzZ4BUNYqg3BodhbGVgjYnlcIMYLpbBRR0wwCCDDXO8IdsYZUzYA2Q1WPVjkEO2UUYbYkhI4VQxtKFEGUS8UYYYa6yhYwtLHIFDDmewkUYcd4zhhhV9qUEEHUbMwIYTHOJxhxEyCGGHGEO8AcUReqABIR4z3PGGGlBUYQYRScTwRhVK5BDFGkXQYMYdd-CRxgx4DKFGU2tkYcQNQuTAhmx2ZLFGFXocYUceZOgBhRZBaJGGHUa0UIUYeETxxRlVJEGEFFWk8aSQNsARQw-EGYYYDstG-cZBd4YhZQ9FzEqEHAW1QRZz4uogghtl3DGHC2qUsRmtYbz7XHRkjRGGYFsc2EVmlekAgwtaPSSHHY6pJkIddaSRUQxlNNleR1PdUINJExM4lQxjzNBCGGIYSJeC6cFABllpOCaCey7k5AINMrjQEA1kyfFFyRmhrDLLLptHVh1hZNTEG3qkwQYbYbxQA8AgoHBFGm4wpy4ITlABQlMA7wDC0m7YQIPVeGht9cCn0QBwCiAcUcYYa7zxglxNaaUVCEakAa4Zb-DxQgwYAlwvUOY68QRZb8g8Bt8i-E2WchkV4cS4ZdjxBbi0MVSDSzjMYFuQAp_BmQ4y1NDSQwc5LoYcCyUGeuNftHFtXLdVJAIZcryx0AwPvaGQDjS0FTseeSzkl8xw7N67Dn6F_gUdemQEQ8xl9DvQb8EN9wK66rLrrhvwyguddGTdsbCQMD-ExsIy4LD8Q3MMnFHsdNwbeAt1uJEGHS2g5gIZvNWe_lnEw3CYDDeIgQxyADrCHeQL-CMLHcoVg9z4jwZto50IFsgbhjhQaxEUkQQN8rgyAOYL96LIBSEYJAmiLgxsQAgdbpevimBoXxARg2Be1zyfsGEibUEc7h4yBji0wXFyuFcaZOcvF_SlKiHioWkEyMPx6WALIiCLFB8yxShS8YpWzGIVpdiFPiggIA%3D%3D\u0026r=1\u0026s=e761663ca8e4af712c5d3c01648d81bcd72eec1248ae32ee051c367289c3e1381760641003\u0026w=t\u0026ir=242x130 HTTP/1.1\r\nHost: pxl-eu.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://news.jennydanny.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:44 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-robots-tag: noindex, nofollow\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ba036c43037cfe89320d1ef7b64cd43f","sha1":"88c72d3e26047eb1e45e5564a76427734f120efe","sha256":"42cb846e07917f6731406e500f24aeb2e88c42cda124eaa59e08c5331cad8bcb","sha512":"aa80ccd27c05eb729f730b9d830b011650bcf12cbb25d19edf29efcf962c7465bb5685a5ff5d084356c6710c08e829d16b59e7a59a41767eb14744f326b6c124","ssdeep":"","tlshash":"19900403f5400003d175d03107170340134cd110057c0307405d505cdc553510c01010","first_seen":"2023-05-10T09:10:20Z","last_seen":"2026-04-28T15:06:43.146143Z","times_seen":14953,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":85,"dns":0,"connect":27,"send":0,"wait":26,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxxfiles.com/apple-touch-icon.png","fqdn":"www.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"ip":{"addr":"172.67.194.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:44.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxxfiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 05:44:51 GMT","end":"Sat, 13 Dec 2025 00:22:17 GMT"},"fingerprint":{"sha1":"D2:12:09:01:09:64:3E:BF:A3:21:1E:BA:8A:77:4F:5B:F2:26:08:7B","sha256":"3C:16:72:A8:86:4C:AF:3A:B1:B9:0F:B3:06:44:AE:CD:20:24:BA:AD:17:A8:77:D6:F1:7A:90:F9:6E:1B:18:88"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: www.xxxfiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499\r\nCookie: PHPSESSID=djv2bk6h5k865sqpul7re7ls7b; kt_rt_ts=645499; kt_qparams=id%3D55518986%26dir%3D4b7001fc05ae7151a106bbadf1ad5510%26ts%3D645499; kt_ips=91.90.42.154; show_pops2=true2; show_pops1=true1; test=test; kt_tcookie=1; kt_is_visited=1; sb_page_bf1ecfe7c52535c960b6a6e62f77b00e=1; sb_main_bf1ecfe7c52535c960b6a6e62f77b00e=1; sb_count_bf1ecfe7c52535c960b6a6e62f77b00e=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 16 Oct 2025 18:56:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 13713\r\nlast-modified: Fri, 25 Nov 2022 12:46:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hxf%2Fkx4zq%2BX7VxCr%2B4t%2FIaaf0uFUJLrUi0bmD4FG3TWOX00X681YJosutDUMdJURbx4TB9nw6cw6lKTjubEzIxnYM5CzzhZmlatQkKZphe0%3D\"}]}\r\netag: \"6380b934-3591\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 8684335\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98f9c7239af10daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13713,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"302003967bcce57931c372aa26310c88","sha1":"526045f535e90a6d7b19240532f9100c9535beee","sha256":"117477b129e4ca959b0afd092f7edca8f460ff25120b8dbe2011a88d9f48bef8","sha512":"96a452746925455c1621625b1c183d66bef59b71ce61c898987eb072b43905d48de89972e6c7793b92593b2cc95ee5b9077cd4255694ea0568af0761c7b0c1a2","ssdeep":"384:G6Ius9dZ2mBVuh/qjaooJ2/lZUc6J5lkHyPfgR:G6C26uxTVoUc6bkHy+","tlshash":"8952bfe30d9fa4379166935bacca9a48dd7e004bea2315491f81fd156b8ee4c0f8036d","first_seen":"2023-04-24T23:45:49Z","last_seen":"2026-04-27T23:56:30.82137Z","times_seen":722,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/click/16774127962865821115?c=60\u0026data[error]=3\u0026data[errormsg]=Failed%20to%20decode%20media","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:46.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.atakcdn.art","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 15:28:40 GMT","end":"Thu, 18 Dec 2025 15:28:39 GMT"},"fingerprint":{"sha1":"33:89:62:94:E1:12:11:52:2C:41:37:9F:D0:85:B5:1C:03:F9:7C:8B","sha256":"0A:3B:6A:A7:BF:8D:C8:FC:CC:33:8A:30:AD:CC:20:E8:E8:CB:8D:06:80:07:C6:16:A9:6D:F1:89:2E:26:80:75"}}},"request":{"raw":"GET /api/click/16774127962865821115?c=60\u0026data[error]=3\u0026data[errormsg]=Failed%20to%20decode%20media HTTP/1.1\r\nHost: news.jennydanny.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nCookie: nauid=E2RleDXzoH4IjEhznVUM; asgfp=faed01b113cfb270c624ee1aa793ad6c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:46 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/53/ec/88/53ec8834cbf78e169a3978bfa593ae42.js","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:42.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:00:34 GMT","end":"Tue, 25 Nov 2025 22:00:33 GMT"},"fingerprint":{"sha1":"FC:5B:24:E2:ED:A9:65:69:CA:97:74:44:F8:E9:93:1A:50:E7:73:C1","sha256":"26:1B:F8:72:30:B2:C4:49:6A:2E:E7:A5:FC:26:35:74:02:CB:56:D1:F7:7E:A5:5E:89:65:A9:B4:1F:1F:DB:8F"}}},"request":{"raw":"GET /53/ec/88/53ec8834cbf78e169a3978bfa593ae42.js HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Thu, 16 Oct 2025 18:56:43 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3466\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 37240c604652cd48d9e2e927f5a9df53\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6581,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6581), with no line terminators","md5":"efe226df7b34cfaf12077e69c581fc6c","sha1":"a59956a3eea86867af25c422cde94c65bec3516e","sha256":"546c3b249eb34013446f85b06e8e833ded12a229890e5a23a17b6455fffa7abe","sha512":"46bb70f28959da2732afd2977eab33508b891a27718de4f51c51bb2a1a646026136c32a3f17636b49346631cf4977279778b5b0b03d64b48970599960567c944","ssdeep":"192:Aiu3jQ5Vd/MinGiJ9HLfOHMcDkUpRwwls:Aiu3jQ5kinXHLfOscoUpOwm","tlshash":"3fd1c9dc3f8071e007ab647bba3fa41ab5a9cc54618fd81cc012b5e03d74a6ad577761","first_seen":"2025-10-14T13:51:47.725273Z","last_seen":"2025-10-21T12:57:18.671573Z","times_seen":522,"resource_available":true,"data":null}},"time_used":643,"timings":{"blocked":259,"dns":1,"connect":92,"send":0,"wait":94,"receive":1,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/users/8860595770177514115/1636042?fill=0\u0026kw=Teen,Brunette,Big%20Ass,vaginal,Big%20Cock,European,Russian,cum%20on%20ass,toned,ass,leggings,standing%20doggy,doggy,amateur%20girl,bwc,beeg.com,intro,pov-doggy,from-behind,bend-over,indie%20girl,My%20Little%20Betsy","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:45.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.atakcdn.art","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 15:28:40 GMT","end":"Thu, 18 Dec 2025 15:28:39 GMT"},"fingerprint":{"sha1":"33:89:62:94:E1:12:11:52:2C:41:37:9F:D0:85:B5:1C:03:F9:7C:8B","sha256":"0A:3B:6A:A7:BF:8D:C8:FC:CC:33:8A:30:AD:CC:20:E8:E8:CB:8D:06:80:07:C6:16:A9:6D:F1:89:2E:26:80:75"}}},"request":{"raw":"GET /api/users/8860595770177514115/1636042?fill=0\u0026kw=Teen,Brunette,Big%20Ass,vaginal,Big%20Cock,European,Russian,cum%20on%20ass,toned,ass,leggings,standing%20doggy,doggy,amateur%20girl,bwc,beeg.com,intro,pov-doggy,from-behind,bend-over,indie%20girl,My%20Little%20Betsy HTTP/1.1\r\nHost: news.jennydanny.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xxxfiles.com/\r\nOrigin: https://www.xxxfiles.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: nauid=E2RleDXzoH4IjEhznVUM; asgfp=faed01b113cfb270c624ee1aa793ad6c\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:45 GMT\r\ncontent-type: text/xml\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.xxxfiles.com\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1981,"size_decoded":0,"mime_type":"text/xml","magic":"XML 1.0 document, ASCII text, with very long lines (321)","md5":"187aa25def5c5db2616185ac3ba05bd7","sha1":"7b0410c0160963fae69b195a18669e6b533e8c8c","sha256":"c43ba25270cb90b899a0343986bb85553e77ed5c3572b4972e6d9d0b6eda4bab","sha512":"ec4a717902cbcadf4d01cb6ce76690d743a59a514fe0190c779e879fd2298e374a6ba1215d68c47ff7101af2c7518673a962e740983e830fd0ca4573d8303506","ssdeep":"","tlshash":"a241c25c66f8a0f558c8002497a8c5865ffa6dab07185c4bb95f98807f0ea85228f189","first_seen":"2025-10-16T18:57:17.603821Z","last_seen":"2025-10-16T18:57:17.603821Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"understandinstalledalfred.com/impr.gif?sid=H4sIAAAAAAAC_1RSzWskRR-uTgIvvB5c18WLCH1UkUn39Hxk3EMw7kaCMYnZSA4eluqq6kmZmq7equ7pyVwMBmSPoyePnWeSDbqL6B8gLBMPQlDIeAqyQfDoSYQ9S08Goj_o3wdPH56P-vwwuyQBMnqx8YHuS6XofL3iua9vy5jr3LprW67vVbzb7raMG7Xbbq9spvu2H9Qq3hvue4Lt6vmq53ue7_nusjQi0r35CQqZPGn5lZZXqVUrfr2GnvnvbTMHljrg3UtyE5KPX_wj-hiSjRB3vrsj7G6qk7fudjJFU23Q5ScfxbuxzmN0rtfIOIjik-nf0HZMyFcz0PHJVAF096hUgFCOycwrzxDGJ1OaCLvHV0xDBREj5C8g744g1AiSjsD0ASQ_JwDjWFtH3Hm0pk1O965QWqJjMvf8b8h8TOae3ULc-XZJyZ57T6sslTq26EUFZG8E2R4hyU6R9mcg81Ow9DNI_guZf76KuHO0bpWG5MVEvYxGoNZBVn7SQRY5yBIHHX7h1ryFGvNp0IhanDW9Gq3VuAi91kLV82iLNZGxktYAaTIAUwMws4_E7GNXfnlev3m-ugKTPYXdKWC5A5uOifPhPrq8QC4IckuQU4JcEuQpQd4tjrmyVVs84spmoT-d1ekMiqFO24f0WKdtERNQM4DhxZFMHtgDsHR22I8sH-qy0TAthjTkxWFySV4qvXOK3_6HXXHhhpEvWCSarF6tB3XWanhhgzZEoxo1m6HnCVhZQNqZiS19OSZv3m8gKQOlPyOkp7DqFEzeAM1eA80L0J0C_fhxr9eLpBK2knbBdYEknUO65xyqS_LycHNr6ekkwft3H0Cws8XfyaTATIHEFPhE_kjQVg-HmzonR5s6t-T79SSVHdmnZbr3UpqK2W_eF3u5Nnzljh18_Q4rgXJ9siVsukpjLuO2JY-XJOfCLGvDBPlhxW6LcCOzO0uZibNkdePd5ZVOYoS1UscjUDkm___pUzA5JreCVycvt3HDBUv2YZNrnlYThIkDJQmUOCPTAg0L2H_d4fV-aB-ibRzQ9ABxp0DXFOiqAlQNYLPZYZqYs8Vfg0khVM4wVMY5CpVRX1z5ZOWFGwWiyjxvodnwg4VI-EGNs6i-UGvxBvWCQCC1452_Fv_8JwAA__8mWNGvXAQAAA==","fqdn":"understandinstalledalfred.com","domain":"understandinstalledalfred.com","tld":"com"},"ip":{"addr":"192.243.59.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:46.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"understandinstalledalfred.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Sep 2025 01:17:10 GMT","end":"Sat, 20 Dec 2025 01:17:09 GMT"},"fingerprint":{"sha1":"F6:A5:BB:A7:2B:F6:3E:5D:91:AE:99:15:7E:23:C0:21:A2:4B:AF:20","sha256":"67:97:94:2E:7C:6E:4D:38:EE:50:40:F6:AC:EA:29:7F:DB:74:0A:EC:B6:6D:10:F0:C0:7E:6B:DA:E3:CC:85:BD"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSzWskRR-uTgIvvB5c18WLCH1UkUn39Hxk3EMw7kaCMYnZSA4eluqq6kmZmq7equ7pyVwMBmSPoyePnWeSDbqL6B8gLBMPQlDIeAqyQfDoSYQ9S08Goj_o3wdPH56P-vwwuyQBMnqx8YHuS6XofL3iua9vy5jr3LprW67vVbzb7raMG7Xbbq9spvu2H9Qq3hvue4Lt6vmq53ue7_nusjQi0r35CQqZPGn5lZZXqVUrfr2GnvnvbTMHljrg3UtyE5KPX_wj-hiSjRB3vrsj7G6qk7fudjJFU23Q5ScfxbuxzmN0rtfIOIjik-nf0HZMyFcz0PHJVAF096hUgFCOycwrzxDGJ1OaCLvHV0xDBREj5C8g744g1AiSjsD0ASQ_JwDjWFtH3Hm0pk1O965QWqJjMvf8b8h8TOae3ULc-XZJyZ57T6sslTq26EUFZG8E2R4hyU6R9mcg81Ow9DNI_guZf76KuHO0bpWG5MVEvYxGoNZBVn7SQRY5yBIHHX7h1ryFGvNp0IhanDW9Gq3VuAi91kLV82iLNZGxktYAaTIAUwMws4_E7GNXfnlev3m-ugKTPYXdKWC5A5uOifPhPrq8QC4IckuQU4JcEuQpQd4tjrmyVVs84spmoT-d1ekMiqFO24f0WKdtERNQM4DhxZFMHtgDsHR22I8sH-qy0TAthjTkxWFySV4qvXOK3_6HXXHhhpEvWCSarF6tB3XWanhhgzZEoxo1m6HnCVhZQNqZiS19OSZv3m8gKQOlPyOkp7DqFEzeAM1eA80L0J0C_fhxr9eLpBK2knbBdYEknUO65xyqS_LycHNr6ekkwft3H0Cws8XfyaTATIHEFPhE_kjQVg-HmzonR5s6t-T79SSVHdmnZbr3UpqK2W_eF3u5Nnzljh18_Q4rgXJ9siVsukpjLuO2JY-XJOfCLGvDBPlhxW6LcCOzO0uZibNkdePd5ZVOYoS1UscjUDkm___pUzA5JreCVycvt3HDBUv2YZNrnlYThIkDJQmUOCPTAg0L2H_d4fV-aB-ibRzQ9ABxp0DXFOiqAlQNYLPZYZqYs8Vfg0khVM4wVMY5CpVRX1z5ZOWFGwWiyjxvodnwg4VI-EGNs6i-UGvxBvWCQCC1452_Fv_8JwAA__8mWNGvXAQAAA== HTTP/1.1\r\nHost: understandinstalledalfred.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl27319047=1; slecbf1ecfe7c52535c960b6a6e62f77b00e=[6243697]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Thu, 16 Oct 2025 18:56:46 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nVary: Origin\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nSet-Cookie: iprc_l+10bf3a53691395c612c5b86b4786405e=6243697; expires=Fri, 17 Oct 2025 18:56:46 GMT; path=/; secure; SameSite=None\niprc_l:6243697=1; expires=Fri, 17 Oct 2025 18:56:46 GMT; path=/; secure; SameSite=None\r\nHost: understandinstalledalfred.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: f4e854c80b56933bce47ca873b1bda60\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"understandinstalledalfred.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"understandinstalledalfred.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:46.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.xxxfiles.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 12:56:02 GMT\r\nexpires: Fri, 16 Oct 2026 12:56:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 21644\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-28T16:24:24.069383Z","times_seen":769423,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxxfiles.com/js/plugins.js","fqdn":"www.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"ip":{"addr":"172.67.194.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:41.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxxfiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 05:44:51 GMT","end":"Sat, 13 Dec 2025 00:22:17 GMT"},"fingerprint":{"sha1":"D2:12:09:01:09:64:3E:BF:A3:21:1E:BA:8A:77:4F:5B:F2:26:08:7B","sha256":"3C:16:72:A8:86:4C:AF:3A:B1:B9:0F:B3:06:44:AE:CD:20:24:BA:AD:17:A8:77:D6:F1:7A:90:F9:6E:1B:18:88"}}},"request":{"raw":"GET /js/plugins.js HTTP/1.1\r\nHost: www.xxxfiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499\r\nCookie: PHPSESSID=djv2bk6h5k865sqpul7re7ls7b; kt_rt_ts=645499; kt_qparams=id%3D55518986%26dir%3D4b7001fc05ae7151a106bbadf1ad5510%26ts%3D645499; kt_ips=91.90.42.154\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 16 Oct 2025 18:56:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 26 Nov 2019 06:40:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zFSo7qimrZVa7oiS4Di4MZsC4NjN%2Bx5Jr33VHrK0ahNbYjzkYTSw2TC6gypcwTB%2BnsguTrl6Hht1mFVCu61q99S2Rs5U3NcSo57c437Ml44%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"5ddcc8eb-1fe6f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 1705447\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98f9c71278620daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":130671,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30439), with LF, NEL line terminators","md5":"a37da4b94050656deb235e05ebb9756c","sha1":"09a365f5991bf0d08e38368d5f6e25e6582a46a9","sha256":"205283fa52d124cc8deed819accf55e6717ae5088c3402e2fc9968d2e9a56f55","sha512":"e1f04145067e41dd85137a25e65e66b218495af8ef6a31093b0a90c70a4575ec3292b8999e45935a14938250b4bdac50ca8b5af557f107263db28816846c6c04","ssdeep":"1536:reGnwUsdSNOZfX1tEGAzNeehZdTBpcnAQKzRJbfzSMx94S4d737Pb3rFQbx/5ZY:rJ9+91tEGAzsuXBynAQKubFQlRu","tlshash":"45d3d74d7642333146af60a6646f110b6236ab7da40989acb068cddc7d7ed1831bbf3d","first_seen":"2025-10-16T18:57:17.607929Z","last_seen":"2025-10-16T18:57:17.607929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:46.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.xxxfiles.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 12:56:02 GMT\r\nexpires: Fri, 16 Oct 2026 12:56:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 21644\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-28T16:24:24.069383Z","times_seen":769423,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.xxxfiles.com/55554000/55554918/medium@2x/1.jpg","fqdn":"img.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"ip":{"addr":"172.67.194.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:41.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxxfiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 05:44:51 GMT","end":"Sat, 13 Dec 2025 00:22:17 GMT"},"fingerprint":{"sha1":"D2:12:09:01:09:64:3E:BF:A3:21:1E:BA:8A:77:4F:5B:F2:26:08:7B","sha256":"3C:16:72:A8:86:4C:AF:3A:B1:B9:0F:B3:06:44:AE:CD:20:24:BA:AD:17:A8:77:D6:F1:7A:90:F9:6E:1B:18:88"}}},"request":{"raw":"GET /55554000/55554918/medium@2x/1.jpg HTTP/1.1\r\nHost: img.xxxfiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nCookie: PHPSESSID=djv2bk6h5k865sqpul7re7ls7b; kt_rt_ts=645499; kt_qparams=id%3D55518986%26dir%3D4b7001fc05ae7151a106bbadf1ad5510%26ts%3D645499; kt_ips=91.90.42.154\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 16 Oct 2025 18:56:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 33638\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r1K8aMPf4hqdBjwYG13pSeQac9pM1aJCJYLKSO446iLpYsLdaxfn5fC9wrCGZ9c67c28A3afDY%2BqZT4xIxkKn8sL6TfpWbXSFR6bF7fhVFs%3D\"}]}\r\nlast-modified: Mon, 10 Feb 2025 03:18:04 GMT\r\netag: \"67a96fec-8366\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98f9c712c8820daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33638,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 744x420, components 3","md5":"bfecbdfaa2d4dc28db50d08f5348e810","sha1":"a712f3adcd12b8b61ee11701274f6d5b0fe12fb6","sha256":"e0bd05a1d5392b6afbfaa0b461b91522b963c406e8f220d9e80afea94c768e84","sha512":"e4f2301f0f59089a9e35c72b639a9120662d32fb11c777ed33c3e3c371ff63d64bcb6c224ffee370a5992a7d8ff9aad337df7232956ffa85ac3d268861d1c3a1","ssdeep":"768:fhN4ifKx3Cqve/J0HVoPybajWwfPDNqVStZCbCdzc/xrdMDD:fgifKMeHVoP2ajWwXDNq2QbCAw/","tlshash":"afe2f131b0abec14012ed3b706de2d98e3c54c77c21f3d6f9e9e89c9e7581d958a5018","first_seen":"2025-10-16T18:57:17.611958Z","last_seen":"2025-10-16T18:57:17.611958Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2262,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:41.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"04:E6:D3:58:E3:A1:E3:05:2B:C3:56:5D:68:BB:1B:0A:08:C6:E3:FB","sha256":"25:4C:B3:A3:9A:E1:D7:FD:25:B6:BF:E9:AA:97:95:20:5D:F2:15:EA:41:46:B6:6B:01:17:19:26:EC:EF:D3:CA"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 16 Oct 2025 18:56:41 GMT\r\ndate: Thu, 16 Oct 2025 18:56:41 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16161,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1402b251e470b45ffd7863f3f78e9334","sha1":"61255a50be09825d91a753116d4081240c820536","sha256":"c3548a791cc43a0cf1397da68cd8789b939b6f92dd91f2a7168ad91d31e82be0","sha512":"87c4191535d8ec3f35fd4bb4d029b285446f63e2c781866f77bd256d36f3325bd8301ed9ae8b7f6a6c3c6a71800592c314d92ec7182ed9a5281884610af16021","ssdeep":"384:3wfnw+whwdwySw/qY4owmwGw3wfawDwwwkwyfw/qY45wLwrwmwf7wCwFwZwyOw/F:3KNyEfSQv3rgXU/9ffQiqG1GJuofOQj1","tlshash":"8672fba108174000978358e223cebf30fe4f92507141d0b5abfd9b6bedcbca652693ad","first_seen":"2025-09-09T01:59:19.552144Z","last_seen":"2026-04-24T09:35:02.078832Z","times_seen":1180,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":28,"dns":5,"connect":9,"send":0,"wait":21,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:42.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.xxxfiles.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 12:56:02 GMT\r\nexpires: Fri, 16 Oct 2026 12:56:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 21640\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-28T16:24:24.069383Z","times_seen":769423,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":110,"dns":1,"connect":8,"send":0,"wait":9,"receive":9,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"u3y8v8u4.aucdn.net/library/88693/11b04ea781045dc6985f269502122c14c65080e0.mp4","fqdn":"u3y8v8u4.aucdn.net","domain":"aucdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:46.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 18:41:03 GMT","end":"Fri, 12 Dec 2025 18:41:02 GMT"},"fingerprint":{"sha1":"68:CA:E4:09:64:51:A6:A3:68:11:14:36:D0:A1:63:6E:AD:58:59:50","sha256":"CD:C8:8A:2C:B0:B6:21:9E:3A:54:19:23:96:3D:87:BC:F7:14:BC:D3:A0:FA:97:48:A5:00:85:A5:C9:08:9D:0A"}}},"request":{"raw":"GET /library/88693/11b04ea781045dc6985f269502122c14c65080e0.mp4 HTTP/1.1\r\nHost: u3y8v8u4.aucdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Thu, 16 Oct 2025 18:56:46 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 3725269\r\nlast-modified: Tue, 31 Jan 2023 04:04:40 GMT\r\netag: \"63d89358-38d7d5\"\r\nexpires: Sat, 14 Mar 2026 17:27:45 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap02-sec01-prg1-1\r\nx-77-nzt: EwwBX63NDQH3y9ccAQwBuUwKAQH30wAAAAwBJRPCMQG3PwAAAA\r\nx-77-nzt-ray: 2a494a15747e6ebc1340f168b08abe0d\r\nx-77-cache: HIT\r\nx-77-age: 18667467\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-3725268/3725269\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":3725269,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"dfbd2a093fb0067397b54c674246a93f","sha1":"ed8bb9c947e70e3845d381944971908395cfd691","sha256":"c2ff1dd2f6b860e8fd89d475e2973ef9a30a59cc24c9ce9d36ae17799948e4e5","sha512":"1845f1ba17827fa5110522990d634dca669ac6c8e2b8429bd1f95827610d3ceb52c0397dbcf4d81daa7d339fca2bab5547b90fc3ee7c066ef7b9e833610dac78","ssdeep":"24576:wpUWHGEV2qFRROpHj3tuKeg30OdsBd1esKgVJmMu4cXVw1w0B9CZ:iBGEV7jR+DgifmBd1tVVEG1w0CZ","tlshash":"1c2523b1f7618426c16562bdd0d04b39b7b1e883c70e265e48656fd79cfaaa60a33cc1","first_seen":"2025-03-20T10:42:39.097486Z","last_seen":"2025-11-30T13:27:43.971009Z","times_seen":138,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":305,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"u3y8v8u4.aucdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.xxxfiles.com/css/main.css","fqdn":"www.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"ip":{"addr":"172.67.194.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:41.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxxfiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 05:44:51 GMT","end":"Sat, 13 Dec 2025 00:22:17 GMT"},"fingerprint":{"sha1":"D2:12:09:01:09:64:3E:BF:A3:21:1E:BA:8A:77:4F:5B:F2:26:08:7B","sha256":"3C:16:72:A8:86:4C:AF:3A:B1:B9:0F:B3:06:44:AE:CD:20:24:BA:AD:17:A8:77:D6:F1:7A:90:F9:6E:1B:18:88"}}},"request":{"raw":"GET /css/main.css HTTP/1.1\r\nHost: www.xxxfiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499\r\nCookie: PHPSESSID=djv2bk6h5k865sqpul7re7ls7b; kt_rt_ts=645499; kt_qparams=id%3D55518986%26dir%3D4b7001fc05ae7151a106bbadf1ad5510%26ts%3D645499; kt_ips=91.90.42.154\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 16 Oct 2025 18:56:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 23 May 2022 12:38:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=85OH2lROjndNeplfDET%2F7jMEpiv6lfN9LVhpuCU5unWQh1F561r2pyQZyVbOczyXHB9hga8fdZkpNeOucJwpowN%2BE1DArqIf9VHEHCHgLA0%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"628b8038-12e50\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 1857068\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98f9c712785f0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77392,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (492)","md5":"f2acc5750c70ce7508edcacb053ddda2","sha1":"93cbb3c6fa87587f1c1c09ad44e7769ca8f41ea5","sha256":"762a4d48cacd0adbc7d45e1feec08bc734ceeab368130560d57154d8c9d4a1fd","sha512":"7520bf2a12a42f524469c2cdeb57d9f34b0c47398e799d2fdbf12628247df2c9b188376b4b0d28120507d24812f400c1434e100e32e3cb4b1302d18a87d273c4","ssdeep":"1536:yaJoUc8OOwaVf4pXSVL2uDOZtFvVXEpYWQTJTV4gOrpYoVDO+Q:S+OOwaVf4piVL2uDOZtFvVXoADOTVDG","tlshash":"1173116b655312047817e8281fea4b696375c013d18aeff97ec32158cf8f6c489e27da","first_seen":"2023-05-05T10:53:15Z","last_seen":"2026-04-21T23:34:11.438804Z","times_seen":91,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jcdn.tsyndicate.com/da0de22e3f4349b1a3ce238ccc04a9d0.js","fqdn":"jcdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://news.jennydanny.com/api/spots/334568?p=1\u0026s1=%subid1%\u0026kw=","date":"2025-10-16T18:56:43.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jcdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 Aug 2025 05:32:09 GMT","end":"Sat, 29 Nov 2025 05:32:08 GMT"},"fingerprint":{"sha1":"2A:BD:A3:1C:2B:E5:69:B4:AF:63:83:0C:52:66:96:70:0C:AF:BE:F1","sha256":"C3:CF:80:41:C0:4A:BB:F6:18:E0:72:BB:1A:16:DA:FC:BB:E2:B0:FB:69:E4:FC:BA:00:85:6F:4D:72:55:25:EC"}}},"request":{"raw":"GET /da0de22e3f4349b1a3ce238ccc04a9d0.js HTTP/1.1\r\nHost: jcdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://news.jennydanny.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:56:43 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 2\r\nserver: nginx\r\nx-request-id: a0990696-eb0f-4f00-bef4-dd732c4e29e1\r\nx-robots-tag: noindex, nofollow\r\ncache-control: max-age=300\r\nexpires: Thu, 16 Oct 2025 19:01:43 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS5058\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-28T16:23:41.371529Z","times_seen":603663,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":59,"dns":0,"connect":20,"send":0,"wait":20,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/images/f/0/ceeb150c0ac3b5e2b9dc67ad91cbef3715e697/main.webp","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://news.jennydanny.com/api/spots/334568?p=1\u0026s1=%subid1%\u0026kw=","date":"2025-10-16T18:56:43.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Oct 2025 10:32:14 GMT","end":"Tue, 30 Dec 2025 10:32:13 GMT"},"fingerprint":{"sha1":"A5:85:96:D7:D3:14:D9:8C:D5:7D:34:E1:96:37:CB:A5:1A:3F:0C:D2","sha256":"B3:A3:D1:79:1A:8D:A0:85:E5:76:38:A5:30:A8:3D:4B:39:88:E2:D3:C4:87:4C:5F:4A:41:4A:B5:6D:39:9C:85"}}},"request":{"raw":"GET /images/f/0/ceeb150c0ac3b5e2b9dc67ad91cbef3715e697/main.webp HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://news.jennydanny.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:56:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3438\r\nserver: nginx\r\nlast-modified: Wed, 30 Sep 2020 23:27:34 GMT\r\netag: \"5f751466-d6e\"\r\nx-robots-tag: noindex, nofollow\r\ncache-control: max-age=172800\r\nexpires: Sat, 18 Oct 2025 18:56:43 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: ah1742,DS5859\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3438,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c58c8a6e797fcad9ededbe1602f2df9b","sha1":"ed34e4db2fe7b63463af6416d6d461d5fe4bc587","sha256":"8bb3980bc152f80c2f7c15ad756aef2cb7c8e61fb96c92d140313e1911ae6f61","sha512":"3cbe1f07cac23bd5d304824dba79baf2531045adf6ebe26d121696792a0dba788ba2d452db5759ef322464e490429f70f6a562ba9fcf4d8045e9b2dee69bc734","ssdeep":"","tlshash":"fa615dd001143a4752d7842de80546f5a5af419dae3f3952a3c2fda86e21dbe1f832f5","first_seen":"2023-04-08T13:32:23Z","last_seen":"2026-04-27T23:56:30.496163Z","times_seen":1086,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/interstitial/icon_animated/1/css/animate.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.35.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:45.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 Aug 2025 18:23:14 GMT","end":"Thu, 27 Nov 2025 19:21:45 GMT"},"fingerprint":{"sha1":"99:06:8C:E5:8E:41:8B:38:F8:46:C0:E9:CF:99:E2:11:F2:8E:DD:AB","sha256":"93:A8:69:6F:83:C3:C8:1B:E8:A3:20:9C:19:F4:47:35:74:85:80:F1:82:1F:48:42:AB:AA:77:A3:35:AB:29:20"}}},"request":{"raw":"GET /sb/ssp/interstitial/icon_animated/1/css/animate.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.xxxfiles.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:56:45 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa8501-13365\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nage: 28899\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4MqaEtPvivOjUy1UzHGHsdW1pgqxQVNw6eigqC7AD4HnXkAaaPgnQicm2Kw%2FwFThUPJlDwDXMAbOk25tHUYNHEXIS1J8i017Mqqz1fFp\"}]}\r\ncf-ray: 98f9c72e09d37129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78693,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5982c5377696d20476871062646b253f","sha1":"8bf2c93fa9ccc908f7df0fb7abb911bbac3e4242","sha256":"4e23a6449e6ef4614f0107cecf5c9eda75d2041c7c71f4a55d45f2a7e75450f4","sha512":"92592dac2a817293e8ec1d94bf99df639626a90d524420b01a12210398927c0650cc26fa8e730300096b29961563aa02efb707478c6d51ac8616bb1bde5a0cb2","ssdeep":"384:jvuAuF81dghu3uFlZlX/m/Gu7uNUtrL4VrbZJgBhLYNKwZiMUL6Vpaj7F:jvuAu21dghu3uhu7uNKwZiMUL6Vpaj7F","tlshash":"1d731bad399115845263861d83df9e68273ce5731826acef73c2488bcf8bf9867c9147","first_seen":"2024-02-12T20:28:38Z","last_seen":"2026-04-28T16:23:43.069016Z","times_seen":6822,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":42,"dns":1,"connect":1,"send":0,"wait":14,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/interstitial/icon_animated/1/js/script.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.35.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:45.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 Aug 2025 18:23:14 GMT","end":"Thu, 27 Nov 2025 19:21:45 GMT"},"fingerprint":{"sha1":"99:06:8C:E5:8E:41:8B:38:F8:46:C0:E9:CF:99:E2:11:F2:8E:DD:AB","sha256":"93:A8:69:6F:83:C3:C8:1B:E8:A3:20:9C:19:F4:47:35:74:85:80:F1:82:1F:48:42:AB:AA:77:A3:35:AB:29:20"}}},"request":{"raw":"GET /sb/ssp/interstitial/icon_animated/1/js/script.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.xxxfiles.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:56:45 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5lpnCsIVs6DtB6KAFQS%2BvFKPEeIZ9SkUL1ILEfx6Lrfoa8rlF6xVM1BokpyxyTgivCZjSNRHfsYpHcyvJvf5VR64hx3u5L%2FXB5Yb4k08\"}]}\r\nage: 28898\r\ncf-cache-status: HIT\r\netag: W/\"65aa8501-3cf\"\r\ncontent-encoding: br\r\ncf-ray: 98f9c72eeab97129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":975,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"bfd47b5dfff6e6feac7624980fe9f680","sha1":"b437c81b3addc9d7154b96f495b2eb82148e5101","sha256":"b53d941e5ec9ce3482ce722008c8dfdae35f630aa4a7cb7c4bdd0e7342fc63fb","sha512":"edbc2509ebf5b53042d1219d29ae84b0c5c8556a9aa8b34d1f3f943dd6cf8e424287bfb29ca98fe7d4776cd3a5efeae11ca77833892030ab67a156a1393d6f8d","ssdeep":"","tlshash":"61115b37116982f46357f027a21725daea32029be81b9717721c05cd0fd47b913f96e7","first_seen":"2023-12-05T16:53:58Z","last_seen":"2026-02-03T01:05:39.247335Z","times_seen":1197,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"video.sacdnssedge.com/video/ol_5c2fe6eeec49e3ef1e7843f4851d34fe.mp4","fqdn":"video.sacdnssedge.com","domain":"sacdnssedge.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:45.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1894120159.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 11:23:17 GMT","end":"Mon, 01 Dec 2025 11:23:16 GMT"},"fingerprint":{"sha1":"6C:F0:E6:7B:64:17:10:A8:FA:BF:27:07:10:15:AF:6E:E6:98:D4:B0","sha256":"96:D2:44:B3:D4:D6:DE:C6:FD:A7:7F:68:CE:B6:6A:C0:5A:AF:0C:DD:A8:39:FC:80:62:ED:93:CA:F6:D7:27:72"}}},"request":{"raw":"GET /video/ol_5c2fe6eeec49e3ef1e7843f4851d34fe.mp4 HTTP/1.1\r\nHost: video.sacdnssedge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Thu, 16 Oct 2025 18:56:46 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 2276018\r\nvary: accept-encoding\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"ol_5c2fe6eeec49e3ef1e7843f4851d34fe.mp4\"\r\netag: \"2e13ab1ba9b141ea07c8cc1a214056e9\"\r\nexpires: Thu, 16 Oct 2025 19:40:54 GMT\r\nlast-modified: Thu, 16 Oct 2025 18:40:54 GMT\r\ncache-control: max-age=7200\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncf-cache-status: HIT\r\nage: 0\r\ncf-ray: 98f9affabbc1038e-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-77-nzt: EwwBX63NDQH3sQMAAAwBuUwKAQH3BQAAAAwBw7WvBgG3AQAAAA\r\nx-77-nzt-ray: 2a494a15f772ecf51340f16890d9fd02\r\nx-77-cache: HIT\r\nx-77-age: 945\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-2276017/2276018\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":770030,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"365862394a7f70a4e9fea30e3f469a89","sha1":"a4fef24c073b2eea10877029aca271bdf5b3d9eb","sha256":"d5d494f8f13a5587bab173d63023f6801ad3fed12d5fd9cfc6b9425901da4cac","sha512":"286de3ac75523597bb6506fea68d7bcee8cb9e924bee5585f4f7c0cf29fed4f860a1a81d084c801aca2ead82d77b9255b9f51003013ac92fd33b710346131ba6","ssdeep":"12288:TMV3X/LBxYUVtMva22MnxuRvkfKAd16VpkqinzmVqA3xX0wDN0yElTD2UqhmEstC:I3PPYCuvaKx0vKqizmIAhk2N4GUqYE+C","tlshash":"bef423e6357bc083dc1ea23ae8439b796780b386de421cbfd76b363725a56449c51c23","first_seen":"2025-10-16T18:57:17.635411Z","last_seen":"2025-10-16T18:57:17.635411Z","times_seen":1,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":56,"dns":35,"connect":5,"send":0,"wait":8,"receive":29,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:46.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.xxxfiles.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20408\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 12:57:40 GMT\r\nexpires: Fri, 16 Oct 2026 12:57:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 21546\r\nlast-modified: Mon, 08 Sep 2025 18:08:08 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20408,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20408, version 1.0","md5":"e8730678d4610fa908d3cba1ef0b4ddf","sha1":"1efcbee909ce74bf04878d74867f12a1e41ae7a4","sha256":"e921785496ed2d98c2257c88a6f838afa6acbee05cb8467048501bfe2a301461","sha512":"d7c3f81ad11ac5b3e6f454fbbb9be0940b3e8da93cde0b80f9a91a8259966be466b4d6a0fd5527fcc6c8f218aad8ffd0124bb29dfa08f6ca658ce49fe9e37e6c","ssdeep":"384:D+h1xN53scre+kLtT5+wpcR98ffVvdSMyNaHAUvLFNPBtn2aotFn9mTCAKDi055c:Ss/XRT5+wpM98ffxd6uZZRXnemWDj5WL","tlshash":"fa92d1cdfc0e5797a8e14ee93c0a7a4dd76f438af366a94b25e66122e67a55c040320c","first_seen":"2025-01-09T02:30:28.977279Z","last_seen":"2026-04-28T15:38:00.044943Z","times_seen":56935,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.orbsrv.com/ad-provider.js","fqdn":"a.orbsrv.com","domain":"orbsrv.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://news.jennydanny.com/api/spots/322254?p=1\u0026s1=%subid1%\u0026kw=","date":"2025-10-16T18:56:42.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orbsrv.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 10:26:18 GMT","end":"Sun, 09 Nov 2025 10:26:17 GMT"},"fingerprint":{"sha1":"00:74:5D:38:3E:06:53:77:B8:F1:AE:17:A8:D6:76:6D:1A:00:70:42","sha256":"92:60:CE:DC:13:DC:18:C6:14:88:11:40:ED:8C:58:5B:97:94:42:B0:84:09:B9:2C:88:48:CF:94:97:09:B3:D4"}}},"request":{"raw":"GET /ad-provider.js HTTP/1.1\r\nHost: a.orbsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://news.jennydanny.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:56:42 GMT\r\ncontent-type: application/javascript\r\netag: W/\"e52c626717e209704abc3158596\"\r\nexpires: Wed, 15 Oct 2025 17:39:59 GMT\r\ncache-control: max-age=10800\r\nx-robots-tag: noindex, follow\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBX63NDQH38hEAAAwBuUwKAQH3vAAAAAwBw7WvAgG3XgAAAA\r\nx-77-nzt-ray: 2a494a157c419dae0f40f1682b14be16\r\nx-77-cache: HIT\r\nx-77-age: 4594\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":184838,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39009)","md5":"b9d9a46431ce98e9d753c60bd718ed6a","sha1":"e52c626717e209704abc31585964b46cd42c1b29","sha256":"3beb224ef60407ca9c9a0c7c0cd4236674a8b2ecfd83f3e409da49259797ee3f","sha512":"a96982d7bfd3b7be09b9bd3cdce3e681bcad60fccfb5d8be6bcc088c28ed9f58efa3973b54c85dd7e9385cf8c08939c6b93d7e12f75ac63bddf104c7f1c0bf83","ssdeep":"3072:msrN0p28VOkqDG2CjyR19wnRBqI9gxxIisGEolY4o/CXMtpo:yp28VOkq62T19wnRvgxXs7bpo","tlshash":"38045c993792307441d3a11daaff53093371506ab80f4884bb4dd8a427adeea51a3ffd","first_seen":"2025-10-04T10:16:49.453034Z","last_seen":"2025-10-17T05:10:23.595057Z","times_seen":71,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":58,"dns":0,"connect":5,"send":0,"wait":11,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y9.afcdn.net/library/199688/382c69cfec26cb595b0cc9144957070a819ac725.webp","fqdn":"s3t3d2y9.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://news.jennydanny.com/api/spots/322253?p=1\u0026s1=%subid1%\u0026kw=","date":"2025-10-16T18:56:43.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 18:41:03 GMT","end":"Fri, 12 Dec 2025 18:41:02 GMT"},"fingerprint":{"sha1":"68:CA:E4:09:64:51:A6:A3:68:11:14:36:D0:A1:63:6E:AD:58:59:50","sha256":"CD:C8:8A:2C:B0:B6:21:9E:3A:54:19:23:96:3D:87:BC:F7:14:BC:D3:A0:FA:97:48:A5:00:85:A5:C9:08:9D:0A"}}},"request":{"raw":"GET /library/199688/382c69cfec26cb595b0cc9144957070a819ac725.webp HTTP/1.1\r\nHost: s3t3d2y9.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://news.jennydanny.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:56:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7780\r\nlast-modified: Thu, 25 Jul 2024 08:11:25 GMT\r\netag: \"66a208ad-1e64\"\r\nexpires: Fri, 25 Jul 2025 08:58:10 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-77-nzt: EwwBX63NDQH3I89tAAwBuUwKEwH3FUgAAAwBJRPCNAG3cDDDAA\r\nx-77-nzt-ray: 2a494a15747e6ebc1040f168bfdfa502\r\nx-77-cache: HIT\r\nx-77-age: 7196451\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7780,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"afd7eef3f03fe90084f45c93770ed7bc","sha1":"382c69cfec26cb595b0cc9144957070a819ac725","sha256":"1b86ae194b8fe85ea8fa6ebc6adc7915215831d0acdb41dcc29e494483d5232f","sha512":"3f3d4f5b389d5877a0ad4b184b74d67b039a4925388a012bc5cf72a008115483fd9f4cb2e9ebf3978960cb747dc9b6e4067d974e7a8616217d9ace74e59173a2","ssdeep":"192:4HzkWCH+cq9I1A/l6Cx4KYzQqquQA7reFvDAMGxG/:4HzkWCH+cq9wA/ACCKoQvTA7KVn","tlshash":"5bf1af7b2936fbccd031d5faaadfd572ac471a12d155e7091629a6039262323870dc3c","first_seen":"2025-03-01T23:33:09.728761Z","last_seen":"2026-02-03T09:29:09.629658Z","times_seen":683,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":31,"dns":34,"connect":4,"send":0,"wait":7,"receive":1,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"s3t3d2y9.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pxl-eu.tsyndicate.com/api/v1/p/p.gif?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0WQgRGjzBgZN3C0oEGmRoyRMMqcxCGDxpgWN2bk6FhGBgwZOcrYEPEwTJ0xGXHEKBkmDI4wLcaYiQFjZBkyNlrkyDGjRosyZTiKEZOSpZkyPCGSsUMRB40cOB7CqSNmoc0cNmz0hAPHbYwYOByKmANnog6ZNGzMwJFWxJg2dXXguAGjRtWeZMwstCHjoRg3bhbSqFEjB-MZD9u4wchwhgybakWTPp0XxsM6cthotoHDxo2Yr2VkREOHDpw5Ol68OPPGhRg2Y8i8OeNizJs2L-a0CSPH9xs4L2jA2GzGhpkwZsRsrkGDcAwzY26UmdnYzFeXNgrSCCNDDHkaOpNHDjk054wZMWgXhg30CSXGD3XMgVASZPTwFH4z0HCWTTKEISF4RsUAYA0w3BBGDmTEUGEMY8Alg2l42ZASDWKg91FRMYjxXxh44eCZGCqWwUUdMNxkwxxvwDZGGQz2sFhjVe3Yoww2tFFGG2Is2KASUtAghxJHZHEGDVhKgQQWOcwBQxVqtKCFHEMMAQcTbyyhh3JPvEEDFULMeYYUd0DBBgxURFEnGnl8AQUWcWjRhBFJXIFUGUqkQcMScJTExhwtGJFHHG9ckcQSMsBxRw1DULEcG2nckcQZaVBhBx1L1DFEC1g0cYYbVhCXhgxtNCFDEXd8cUYVSRAhRRVpKOkjHDH0AJhghBnLZBtvHMSGE2E42UMRduRBhBwFtRGWct7qIIIbZdwxhwtqlIFZHmSEsW5zz4U1Rhh-bQFgF5ZJpgMMLnD0kBx2JIaaCHXUkUZGHTm2Xhk0SHVDDWW0AHFOUskwxgwthCGjTATacB4MZISVRmIizORCDvzSIIMLDdEQlhxfjJyRySi7oDLL5IVVRxgZNfGGHmmwwUYYL9TQLwgoXJGGG8qZC4ITVIDAVL87gKC0GzbQUDUeWVcNcGk09JsCCEd4tMYbL9jEFEccgWBEGtya8QYeL2gYNgzyAiWuE0-E9QbMY-gtAt9hIZdREU58W4YdX3ArG0M13IbDDLT1-O-sbtWw2EMHMS6GHAsRxvniX0Absg4y1FaRRnK8sRBoIryhkA40qNU6HnkspBfMcNyeuw56df4FHXpkhPe_Zeg7UG-_BfcCueaiq64b7LpLPbzQhXUHwje5_BAaCKd-_F4AZ9Q6HfT-3UIdbqRBRwumuUCGbg_JXj7wMAgGkog5cC74QV-YX1joEK4Y3EBFWVsb7AioG4YcMH80UCCHKiOWxpWBL1-gF0UemMAewY50YWADQugwO3tVJEL4gogY_KKR5PmEDRNRi-FQ95AxwKENjJMDvdLgun25YDE5ONF2amcY0oiohuDTwRZEEJYmPsSJTHyiFKNIRSg2sQt9UEBAAA%3D%3D\u0026r=1\u0026s=69158042a45daca2ba6ee642c17c2fc58c278bfe4a4702bf76b5e71f3be2668a1760641003\u0026w=t\u0026ir=242x130","fqdn":"pxl-eu.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"142.132.201.97","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://news.jennydanny.com/api/spots/334568?p=1\u0026s1=%subid1%\u0026kw=","date":"2025-10-16T18:56:44.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 20:10:41 GMT","end":"Thu, 11 Dec 2025 20:10:40 GMT"},"fingerprint":{"sha1":"25:5B:D4:FE:8D:85:CA:1A:7D:3A:B0:58:EC:2D:7A:B0:62:90:21:1F","sha256":"DF:0A:26:3C:A9:CF:97:54:23:20:C6:11:EB:C6:8C:7F:02:14:58:C8:F6:3B:08:10:27:BF:78:67:09:32:DC:9C"}}},"request":{"raw":"GET /api/v1/p/p.gif?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0WQgRGjzBgZN3C0oEGmRoyRMMqcxCGDxpgWN2bk6FhGBgwZOcrYEPEwTJ0xGXHEKBkmDI4wLcaYiQFjZBkyNlrkyDGjRosyZTiKEZOSpZkyPCGSsUMRB40cOB7CqSNmoc0cNmz0hAPHbYwYOByKmANnog6ZNGzMwJFWxJg2dXXguAGjRtWeZMwstCHjoRg3bhbSqFEjB-MZD9u4wchwhgybakWTPp0XxsM6cthotoHDxo2Yr2VkREOHDpw5Ol68OPPGhRg2Y8i8OeNizJs2L-a0CSPH9xs4L2jA2GzGhpkwZsRsrkGDcAwzY26UmdnYzFeXNgrSCCNDDHkaOpNHDjk054wZMWgXhg30CSXGD3XMgVASZPTwFH4z0HCWTTKEISF4RsUAYA0w3BBGDmTEUGEMY8Alg2l42ZASDWKg91FRMYjxXxh44eCZGCqWwUUdMNxkwxxvwDZGGQz2sFhjVe3Yoww2tFFGG2Is2KASUtAghxJHZHEGDVhKgQQWOcwBQxVqtKCFHEMMAQcTbyyhh3JPvEEDFULMeYYUd0DBBgxURFEnGnl8AQUWcWjRhBFJXIFUGUqkQcMScJTExhwtGJFHHG9ckcQSMsBxRw1DULEcG2nckcQZaVBhBx1L1DFEC1g0cYYbVhCXhgxtNCFDEXd8cUYVSRAhRRVpKOkjHDH0AJhghBnLZBtvHMSGE2E42UMRduRBhBwFtRGWct7qIIIbZdwxhwtqlIFZHmSEsW5zz4U1Rhh-bQFgF5ZJpgMMLnD0kBx2JIaaCHXUkUZGHTm2Xhk0SHVDDWW0AHFOUskwxgwthCGjTATacB4MZISVRmIizORCDvzSIIMLDdEQlhxfjJyRySi7oDLL5IVVRxgZNfGGHmmwwUYYL9TQLwgoXJGGG8qZC4ITVIDAVL87gKC0GzbQUDUeWVcNcGk09JsCCEd4tMYbL9jEFEccgWBEGtya8QYeL2gYNgzyAiWuE0-E9QbMY-gtAt9hIZdREU58W4YdX3ArG0M13IbDDLT1-O-sbtWw2EMHMS6GHAsRxvniX0Absg4y1FaRRnK8sRBoIryhkA40qNU6HnkspBfMcNyeuw56df4FHXpkhPe_Zeg7UG-_BfcCueaiq64b7LpLPbzQhXUHwje5_BAaCKd-_F4AZ9Q6HfT-3UIdbqRBRwumuUCGbg_JXj7wMAgGkog5cC74QV-YX1joEK4Y3EBFWVsb7AioG4YcMH80UCCHKiOWxpWBL1-gF0UemMAewY50YWADQugwO3tVJEL4gogY_KKR5PmEDRNRi-FQ95AxwKENjJMDvdLgun25YDE5ONF2amcY0oiohuDTwRZEEJYmPsSJTHyiFKNIRSg2sQt9UEBAAA%3D%3D\u0026r=1\u0026s=69158042a45daca2ba6ee642c17c2fc58c278bfe4a4702bf76b5e71f3be2668a1760641003\u0026w=t\u0026ir=242x130 HTTP/1.1\r\nHost: pxl-eu.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://news.jennydanny.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:44 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-robots-tag: noindex, nofollow\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ba036c43037cfe89320d1ef7b64cd43f","sha1":"88c72d3e26047eb1e45e5564a76427734f120efe","sha256":"42cb846e07917f6731406e500f24aeb2e88c42cda124eaa59e08c5331cad8bcb","sha512":"aa80ccd27c05eb729f730b9d830b011650bcf12cbb25d19edf29efcf962c7465bb5685a5ff5d084356c6710c08e829d16b59e7a59a41767eb14744f326b6c124","ssdeep":"","tlshash":"19900403f5400003d175d03107170340134cd110057c0307405d505cdc553510c01010","first_seen":"2023-05-10T09:10:20Z","last_seen":"2026-04-28T15:06:43.146143Z","times_seen":14953,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":85,"dns":0,"connect":25,"send":0,"wait":26,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/users/2312985871249234115/2009787?fill=0\u0026kw=Teen,Brunette,Big%20Ass,vaginal,Big%20Cock,European,Russian,cum%20on%20ass,toned,ass,leggings,standing%20doggy,doggy,amateur%20girl,bwc,beeg.com,intro,pov-doggy,from-behind,bend-over,indie%20girl,My%20Little%20Betsy","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:45.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.atakcdn.art","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 15:28:40 GMT","end":"Thu, 18 Dec 2025 15:28:39 GMT"},"fingerprint":{"sha1":"33:89:62:94:E1:12:11:52:2C:41:37:9F:D0:85:B5:1C:03:F9:7C:8B","sha256":"0A:3B:6A:A7:BF:8D:C8:FC:CC:33:8A:30:AD:CC:20:E8:E8:CB:8D:06:80:07:C6:16:A9:6D:F1:89:2E:26:80:75"}}},"request":{"raw":"GET /api/users/2312985871249234115/2009787?fill=0\u0026kw=Teen,Brunette,Big%20Ass,vaginal,Big%20Cock,European,Russian,cum%20on%20ass,toned,ass,leggings,standing%20doggy,doggy,amateur%20girl,bwc,beeg.com,intro,pov-doggy,from-behind,bend-over,indie%20girl,My%20Little%20Betsy HTTP/1.1\r\nHost: news.jennydanny.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xxxfiles.com/\r\nOrigin: https://www.xxxfiles.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: nauid=E2RleDXzoH4IjEhznVUM; asgfp=faed01b113cfb270c624ee1aa793ad6c\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:45 GMT\r\ncontent-type: text/xml\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.xxxfiles.com\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2095,"size_decoded":0,"mime_type":"text/xml","magic":"XML 1.0 document, ASCII text, with very long lines (320)","md5":"eea40017ecf9a05c6408997ad093e4de","sha1":"b5a6562533a68bdf0e16024474fe829362bd694b","sha256":"fb0cf1a47740830bf897f73a34ee01ee9eb117034102fbdb47a149d827d1f4e4","sha512":"0def4ece631b02cec98c1ef06f703d01b3d2f161dd3e22aef1a963e8741732abae21bb4899725b723c04eaff5b37cf5f02c916975ffce22439dbcc93f80d2d1c","ssdeep":"","tlshash":"35419f1d55f864f5488804109ba88d9a5ffb2ffb0f246c8675ddd4807b1e64232cb2d6","first_seen":"2025-10-16T18:57:17.644739Z","last_seen":"2025-10-16T18:57:17.644739Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/click/14223187728251190115?c=60\u0026data[error]=400\u0026data[errormsg]=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:46.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.atakcdn.art","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 15:28:40 GMT","end":"Thu, 18 Dec 2025 15:28:39 GMT"},"fingerprint":{"sha1":"33:89:62:94:E1:12:11:52:2C:41:37:9F:D0:85:B5:1C:03:F9:7C:8B","sha256":"0A:3B:6A:A7:BF:8D:C8:FC:CC:33:8A:30:AD:CC:20:E8:E8:CB:8D:06:80:07:C6:16:A9:6D:F1:89:2E:26:80:75"}}},"request":{"raw":"GET /api/click/14223187728251190115?c=60\u0026data[error]=400\u0026data[errormsg]= HTTP/1.1\r\nHost: news.jennydanny.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nCookie: nauid=E2RleDXzoH4IjEhznVUM; asgfp=faed01b113cfb270c624ee1aa793ad6c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:46 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxxfiles.com/js/kvs/main.min.js","fqdn":"www.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"ip":{"addr":"172.67.194.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:41.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxxfiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 05:44:51 GMT","end":"Sat, 13 Dec 2025 00:22:17 GMT"},"fingerprint":{"sha1":"D2:12:09:01:09:64:3E:BF:A3:21:1E:BA:8A:77:4F:5B:F2:26:08:7B","sha256":"3C:16:72:A8:86:4C:AF:3A:B1:B9:0F:B3:06:44:AE:CD:20:24:BA:AD:17:A8:77:D6:F1:7A:90:F9:6E:1B:18:88"}}},"request":{"raw":"GET /js/kvs/main.min.js HTTP/1.1\r\nHost: www.xxxfiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499\r\nCookie: PHPSESSID=djv2bk6h5k865sqpul7re7ls7b; kt_rt_ts=645499; kt_qparams=id%3D55518986%26dir%3D4b7001fc05ae7151a106bbadf1ad5510%26ts%3D645499; kt_ips=91.90.42.154\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 16 Oct 2025 18:56:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 20 Nov 2019 11:57:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dp2XKxZhkA3sKRQ72jhVxNK42AutPEBbwcRLHua54NMnXBVMN8YKP65cUhJzNTqNuvy7A7bvNcZ1IdEAVyZZcCf8z72Zbw%2FUQbZKPbcdvYI%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"5dd52a1b-412c8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 6517211\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98f9c71278610daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":266952,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32089)","md5":"bbfc761f3a524e108e25fc8c5451ef5b","sha1":"0daaa3873cada1fd1283409fa6729249c51c404d","sha256":"c6900d97762ace02398d34ae5bed95f7b4765c74353b1fde456fa352d070a119","sha512":"301ac2758bc102dc8706cd4e008bd085d2ab38fdbcf2418a34f2453aadf5719e301a305567d4e5ee2ac0d9e25be3a18af2cb8ceb85eb2c1f36d88ebfb35cf595","ssdeep":"3072:4dkWgoBhcZRQQmW42q2DhhQqGUbD+F5Q5OZiVRSoBAmdP+HrAi6KC99h6sJHcatP:6BKZGF/2DhhIUWiV7BAmcrAJvJH9","tlshash":"b34418cd76d1b13247eb30b6206f530a71329a3ab4498954b02cd8f96dbde492237f6d","first_seen":"2023-03-08T21:36:40Z","last_seen":"2026-04-21T23:34:11.36664Z","times_seen":112,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3t3d2y9.afcdn.net/library/344676/21d982f39db0756fe7087f387bb297a8d3af2791.mp4","fqdn":"s3t3d2y9.afcdn.net","domain":"afcdn.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://news.jennydanny.com/api/spots/322254?p=1\u0026s1=%subid1%\u0026kw=","date":"2025-10-16T18:56:42.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afcdn.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 18:41:03 GMT","end":"Fri, 12 Dec 2025 18:41:02 GMT"},"fingerprint":{"sha1":"68:CA:E4:09:64:51:A6:A3:68:11:14:36:D0:A1:63:6E:AD:58:59:50","sha256":"CD:C8:8A:2C:B0:B6:21:9E:3A:54:19:23:96:3D:87:BC:F7:14:BC:D3:A0:FA:97:48:A5:00:85:A5:C9:08:9D:0A"}}},"request":{"raw":"GET /library/344676/21d982f39db0756fe7087f387bb297a8d3af2791.mp4 HTTP/1.1\r\nHost: s3t3d2y9.afcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://news.jennydanny.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Thu, 16 Oct 2025 18:56:43 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 62631\r\nlast-modified: Thu, 20 Jan 2022 15:19:55 GMT\r\netag: \"61e97d9b-f4a7\"\r\nexpires: Wed, 13 May 2026 07:20:31 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, follow\r\nx-served-by: hap01-sec02-prg1-1\r\nx-77-nzt: EwwBX63NDQH36ErOAAwBuUwKEwH3RAIAAAwBJRPCVwW1AAAAAA\r\nx-77-nzt-ray: 2a494a15747e6ebc1040f168530f0a03\r\nx-77-cache: HIT\r\nx-77-age: 13519592\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 0-62630/62631\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":62631,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"077ba4ef62885d83e720857c44adcbdd","sha1":"21d982f39db0756fe7087f387bb297a8d3af2791","sha256":"38137f60f2d1d4c9f55c8671019d408875985ba42ed6d61fe8c50f158a5195e4","sha512":"abd573111b59e8bbcd8aeffb3e62a8fca2b4c5222ccc01d291b7aefef969722723341ac054fb2c3afa77970113371b95652fcbe7c01fb7dc51b481a8db84d308","ssdeep":"1536:XzcP/m/1JgmXQKLTB+xBxJZbaKJok7OUoJV/Mziqvv8GiGH:jK/m9FJLTB+3xek7OBhMziqvvGGH","tlshash":"5b530256af3f5012c1a2beb871b3e65bae848b4e3375fb5537b0630c3412644c599eac","first_seen":"2025-02-06T11:14:36.801336Z","last_seen":"2025-11-26T15:43:21.056533Z","times_seen":48,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":65,"dns":27,"connect":8,"send":0,"wait":5,"receive":8,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"s3t3d2y9.afcdn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/users/476266?host=www.xxxfiles.com\u0026ev=223\u0026wh=1024\u0026ww=1280\u0026uuid=\u0026url=https%3A%2F%2Fwww.xxxfiles.com%2Fvideos%2F55518986%2F4b7001fc05ae7151a106bbadf1ad5510%2F%3Fts%3D645499\u0026sid=88f35fcc-fb69-4a35-b05a-90b281d4e335\u0026i=1\u0026kw=Teen%2CBrunette%2CBig%20Ass%2Cvaginal%2CBig%20Cock%2CEuropean%2CRussian%2Ccum%20on%20ass%2Ctoned%2Cass%2Cleggings%2Cstanding%20doggy%2Cdoggy%2Camateur%20girl%2Cbwc%2Cbeeg.com%2Cintro%2Cpov-doggy%2Cfrom-behind%2Cbend-over%2Cindie%20girl%2CMy%20Little%20Betsy\u0026url=https%3A%2F%2Fwww.xxxfiles.com%2Fvideos%2F55518986%2F4b7001fc05ae7151a106bbadf1ad5510%2F%3Fts%3D645499","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:44.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.atakcdn.art","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 15:28:40 GMT","end":"Thu, 18 Dec 2025 15:28:39 GMT"},"fingerprint":{"sha1":"33:89:62:94:E1:12:11:52:2C:41:37:9F:D0:85:B5:1C:03:F9:7C:8B","sha256":"0A:3B:6A:A7:BF:8D:C8:FC:CC:33:8A:30:AD:CC:20:E8:E8:CB:8D:06:80:07:C6:16:A9:6D:F1:89:2E:26:80:75"}}},"request":{"raw":"GET /api/users/476266?host=www.xxxfiles.com\u0026ev=223\u0026wh=1024\u0026ww=1280\u0026uuid=\u0026url=https%3A%2F%2Fwww.xxxfiles.com%2Fvideos%2F55518986%2F4b7001fc05ae7151a106bbadf1ad5510%2F%3Fts%3D645499\u0026sid=88f35fcc-fb69-4a35-b05a-90b281d4e335\u0026i=1\u0026kw=Teen%2CBrunette%2CBig%20Ass%2Cvaginal%2CBig%20Cock%2CEuropean%2CRussian%2Ccum%20on%20ass%2Ctoned%2Cass%2Cleggings%2Cstanding%20doggy%2Cdoggy%2Camateur%20girl%2Cbwc%2Cbeeg.com%2Cintro%2Cpov-doggy%2Cfrom-behind%2Cbend-over%2Cindie%20girl%2CMy%20Little%20Betsy\u0026url=https%3A%2F%2Fwww.xxxfiles.com%2Fvideos%2F55518986%2F4b7001fc05ae7151a106bbadf1ad5510%2F%3Fts%3D645499 HTTP/1.1\r\nHost: news.jennydanny.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nCookie: nauid=E2RleDXzoH4IjEhznVUM; asgfp=faed01b113cfb270c624ee1aa793ad6c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:45 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: asgfp=faed01b113cfb270c624ee1aa793ad6c; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":674,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (379)","md5":"e305047abc1440e8e35275d87f78c8c9","sha1":"4369d86f6911765a9d10a76cfe03dae231264e46","sha256":"3b64488b54643a42b0ac663da6c9605e8f5897dc6aa87c69ce644d4711d549d5","sha512":"584fbd36e8782c9dc2a29cfcb0d4287bb0b5e3839cecd1cccd0639ebf113b5a2ce764c47c1252a75eb2e83f9420d332827c75b111473bd33d5b91b39db599b98","ssdeep":"","tlshash":"26012dc242ac69fad34860f7b83f1ea59c9e453927204007fb48239e2ace04102e029b","first_seen":"2025-10-16T18:57:17.654564Z","last_seen":"2025-10-16T18:57:17.654564Z","times_seen":1,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.magsrv.com/v1/vast.php?idzone=4878486\u0026sub=100111\u0026tags=Teen%2CBrunette%2CBig+Ass%2Cvaginal%2CBig+Cock%2CEuropean%2CRussian%2Ccum+on+ass%2Ctoned%2Cass%2Cleggings%2Cstanding+doggy%2Cdoggy%2Camateur+girl%2Cbwc%2Cbeeg.com%2Cintro%2Cpov-doggy%2Cfrom-behind%2Cbend-over%2Cindie+girl%2CMy+Little+Betsy","fqdn":"s.magsrv.com","domain":"magsrv.com","tld":"com"},"ip":{"addr":"95.211.229.245","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:45.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"magsrv.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 10:23:20 GMT","end":"Sun, 09 Nov 2025 10:23:19 GMT"},"fingerprint":{"sha1":"55:BE:EE:FC:B1:CE:38:D7:E3:0B:2C:85:5B:6D:AB:D5:10:D4:4A:F5","sha256":"24:7B:E3:CE:C3:89:75:CF:67:F0:7D:DE:47:E2:76:14:8C:B0:ED:F5:77:94:62:09:16:06:5A:DE:2E:51:00:4F"}}},"request":{"raw":"GET /v1/vast.php?idzone=4878486\u0026sub=100111\u0026tags=Teen%2CBrunette%2CBig+Ass%2Cvaginal%2CBig+Cock%2CEuropean%2CRussian%2Ccum+on+ass%2Ctoned%2Cass%2Cleggings%2Cstanding+doggy%2Cdoggy%2Camateur+girl%2Cbwc%2Cbeeg.com%2Cintro%2Cpov-doggy%2Cfrom-behind%2Cbend-over%2Cindie+girl%2CMy+Little+Betsy HTTP/1.1\r\nHost: s.magsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xxxfiles.com/\r\nOrigin: https://www.xxxfiles.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 16 Oct 2025 18:56:45 GMT\r\nContent-Type: text/xml;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://www.xxxfiles.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: X-CH-VALUES\r\nCache-Control: no-store\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Request-Method: GET\r\nSet-Cookie: c-tag=%7B%22tag-video%22%3A%22v6%7C%7CNOR%7C4878486%7C122965508%7C268022%7C%7C97%7C41%7C3%7C40%7C0%7C0%7C0%7C25344%7C3143242%7C3143244%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C61da9749b3302ca9da9bd68d353a3649%7C100111%7Cxxxfiles.com%7C%7C%7C20%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1760641005%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1%7C0%7C2%7Cs.magsrv.com%7C%7C%7C%7Cporngo.com%7Cbda8bd4ebdae310066a334007f034af6%7Cok%22%7D; expires=Wed, 14 Jan 2026 18:56:45 GMT; path=/; domain=.magsrv.com; Secure; SameSite=none\n__uvt=s%3A32%3A%224784a2e3ee461fb6d80f3d3853d0097f%22%3B; expires=Sat, 16 Oct 2027 18:56:45 GMT; Max-Age=63072000; path=/; domain=magsrv.com; secure; SameSite=None\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":157,"size_decoded":0,"mime_type":"text/xml; charset=UTF-8","magic":"XML 1.0 document, ASCII text","md5":"48f8d1fb3bcdf2daa91fdef9d77340f5","sha1":"c52d5ae2414f32778c3870daff4f6471ef8bcd86","sha256":"f6c5c35ecce0214985246864081b89eeb528e2f710c4dc9f17d20f426ca16db9","sha512":"e8f901c0db258e539686a147a65468ef3a74eaa68dd7ae70aa668f987420ea4375767dbe7a6de8ed2b3e96e1619714be3641e68aad03150fcfac78f4eff6e7fb","ssdeep":"","tlshash":"d0c08caa932190222387eb418261d0067332714d04c00ed6f8e30c8106142c9020ab8f","first_seen":"2024-12-15T18:21:02.753659Z","last_seen":"2026-04-27T23:56:30.514103Z","times_seen":126,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":65,"dns":1,"connect":25,"send":0,"wait":45,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"s.magsrv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"understandinstalledalfred.com/ren.gif?sid=H4sIAAAAAAAC_1RSzWskRR-uzi688HpwXRcvIvRRRSY9Mz2djHsIxt1IMCYxG8nBw1JdVT0pU9PVW1U9PZmLwYDscfTksfNMskF3Ef0DhGXiQQgKGU9BNggePYmwZ5nJQPQH_fvg6cPzUZ8f5Bekjpyer3-ge1IpOtuoBP7rWzLlurD-6qZfDSrBbX9LplF42--Om-m8Xa2HleAN_z3BdvRsLagGQTWo-kvSiER3ZycoZPakWa00g0pYq1QbIbrmv7fNPVjqgXcuyE1IPnrxj-RjSDZE2v7ujrA7Tmdv3W3nijpt0OHHH6U7qS5StK_WxHhI0uPp39B2RMhXM9Dp8VQBdOdwrACxHJGZV54hTo-nNBF3ji6ZxgoiRcxfQNEZQqghJB2C6X1IfkYAxrG6hrT9aFWbgu5eonSMjsj1539DFiNy_dktpO1vF5Xs-ve0yp3UqUU3KSG7Q8jWEFl-AtebgSxOwNxnkPwXMvt8BWn7cM0qDcnLiXqZDEGth3z8SQ954iHPPLT5uR8G8yGr0nqUNDmbC0IahlzEQXO-FgS0yeaQszGtPlzWB1N9MLOHzOxhR3551rh5trIMkz-F3S5huQfrRsT7cA8dXqIQBIUlKChBIQkKR1B0yiOubM2Wj7iyeVydztp01suBdq0DeqRdS6QE1PRheHkoswd2H8xdG_QSywd63GjsygGNeXmQXZCXxt555W__w4449-OkKlgi5lij1qg3WDMK4ohGIqolc3NxEAhYWULamYktPTkib96PkI0DpT8jpiew6gRM3gDNXwMtStDtEr30cbfbTaQStuI64LpE5q7D7XoH6oK8PNjYXHw6SfD-3QcQ7HThdzIpMFMiMyU-kT8StNTDwYYuyOGGLiz5fi1zsi17dJzuPUeduPbN-2K30IYv37H9r99hY2C8PtkU1q3QlMu0ZcnjRcm5MEvaMEF-WLZbIl7P7fZibtI8W1l_d2m5nRlhrdTpEFSOyP9_-hRMjsit-quTlxvd8MGyPdjsiqfVBHHmQUkCJU7JtEDjEvZfd3y1H9iHaBkP1O0jbZfomBIdVYKqPmx-beAyc7rwa31SiJU3iJXxDmNl1BeXPll57jdqcT2an49EEvGkzuu1Om82AtEMaTMKm2EDzo62_1r4858AAAD__9owQXFcBAAA","fqdn":"understandinstalledalfred.com","domain":"understandinstalledalfred.com","tld":"com"},"ip":{"addr":"192.243.59.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:45.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"understandinstalledalfred.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Sep 2025 01:17:10 GMT","end":"Sat, 20 Dec 2025 01:17:09 GMT"},"fingerprint":{"sha1":"F6:A5:BB:A7:2B:F6:3E:5D:91:AE:99:15:7E:23:C0:21:A2:4B:AF:20","sha256":"67:97:94:2E:7C:6E:4D:38:EE:50:40:F6:AC:EA:29:7F:DB:74:0A:EC:B6:6D:10:F0:C0:7E:6B:DA:E3:CC:85:BD"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSzWskRR-uzi688HpwXRcvIvRRRSY9Mz2djHsIxt1IMCYxG8nBw1JdVT0pU9PVW1U9PZmLwYDscfTksfNMskF3Ef0DhGXiQQgKGU9BNggePYmwZ5nJQPQH_fvg6cPzUZ8f5Bekjpyer3-ge1IpOtuoBP7rWzLlurD-6qZfDSrBbX9LplF42--Om-m8Xa2HleAN_z3BdvRsLagGQTWo-kvSiER3ZycoZPakWa00g0pYq1QbIbrmv7fNPVjqgXcuyE1IPnrxj-RjSDZE2v7ujrA7Tmdv3W3nijpt0OHHH6U7qS5StK_WxHhI0uPp39B2RMhXM9Dp8VQBdOdwrACxHJGZV54hTo-nNBF3ji6ZxgoiRcxfQNEZQqghJB2C6X1IfkYAxrG6hrT9aFWbgu5eonSMjsj1539DFiNy_dktpO1vF5Xs-ve0yp3UqUU3KSG7Q8jWEFl-AtebgSxOwNxnkPwXMvt8BWn7cM0qDcnLiXqZDEGth3z8SQ954iHPPLT5uR8G8yGr0nqUNDmbC0IahlzEQXO-FgS0yeaQszGtPlzWB1N9MLOHzOxhR3551rh5trIMkz-F3S5huQfrRsT7cA8dXqIQBIUlKChBIQkKR1B0yiOubM2Wj7iyeVydztp01suBdq0DeqRdS6QE1PRheHkoswd2H8xdG_QSywd63GjsygGNeXmQXZCXxt555W__w4449-OkKlgi5lij1qg3WDMK4ohGIqolc3NxEAhYWULamYktPTkib96PkI0DpT8jpiew6gRM3gDNXwMtStDtEr30cbfbTaQStuI64LpE5q7D7XoH6oK8PNjYXHw6SfD-3QcQ7HThdzIpMFMiMyU-kT8StNTDwYYuyOGGLiz5fi1zsi17dJzuPUeduPbN-2K30IYv37H9r99hY2C8PtkU1q3QlMu0ZcnjRcm5MEvaMEF-WLZbIl7P7fZibtI8W1l_d2m5nRlhrdTpEFSOyP9_-hRMjsit-quTlxvd8MGyPdjsiqfVBHHmQUkCJU7JtEDjEvZfd3y1H9iHaBkP1O0jbZfomBIdVYKqPmx-beAyc7rwa31SiJU3iJXxDmNl1BeXPll57jdqcT2an49EEvGkzuu1Om82AtEMaTMKm2EDzo62_1r4858AAAD__9owQXFcBAAA HTTP/1.1\r\nHost: understandinstalledalfred.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl27319047=1; slecbf1ecfe7c52535c960b6a6e62f77b00e=[6243697]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Thu, 16 Oct 2025 18:56:45 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: understandinstalledalfred.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: bc28b802da4584d9b233b949545d7a0a\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"understandinstalledalfred.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"understandinstalledalfred.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"video.sacdnssedge.com/video/ol_5c2fe6eeec49e3ef1e7843f4851d34fe.mp4","fqdn":"video.sacdnssedge.com","domain":"sacdnssedge.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:46.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1894120159.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 11:23:17 GMT","end":"Mon, 01 Dec 2025 11:23:16 GMT"},"fingerprint":{"sha1":"6C:F0:E6:7B:64:17:10:A8:FA:BF:27:07:10:15:AF:6E:E6:98:D4:B0","sha256":"96:D2:44:B3:D4:D6:DE:C6:FD:A7:7F:68:CE:B6:6A:C0:5A:AF:0C:DD:A8:39:FC:80:62:ED:93:CA:F6:D7:27:72"}}},"request":{"raw":"GET /video/ol_5c2fe6eeec49e3ef1e7843f4851d34fe.mp4 HTTP/1.1\r\nHost: video.sacdnssedge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=2228224-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Thu, 16 Oct 2025 18:56:46 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 47794\r\nvary: accept-encoding\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"ol_5c2fe6eeec49e3ef1e7843f4851d34fe.mp4\"\r\netag: \"2e13ab1ba9b141ea07c8cc1a214056e9\"\r\nexpires: Thu, 16 Oct 2025 19:40:54 GMT\r\nlast-modified: Thu, 16 Oct 2025 18:40:54 GMT\r\ncache-control: max-age=7200\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncf-cache-status: HIT\r\nage: 0\r\ncf-ray: 98f9affabbc1038e-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-77-nzt: EwwBX63NDQH3sQMAAAwBuUwKAQH3BQAAAAwBw7WvBgG3AQAAAA\r\nx-77-nzt-ray: 2a494a15f772ecf51340f1686b111506\r\nx-77-cache: HIT\r\nx-77-age: 945\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\ncontent-range: bytes 2228224-2276017/2276018\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":47794,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"8450c11dd7607af8a3093f2a67c2ffce","sha1":"d765853d35a71866e1345e3b2833704b5fe279d3","sha256":"14e1d26feddb354c68ba6e8b67c12654e051982f43941a2bb7f84c39e27d984d","sha512":"6c24d1b5b577233d3286ed75503800fe3c023299e3a1715994b9bdcb8e391dfee78eb4e8c5bbc878f331ffe334276c11b691f7c043f1686eed31df81f6a9a8ae","ssdeep":"768:i4zpmOex3qR1UfWvZncSMpmDpzjywxzzkh:PvT+Wv4pmDpzjHz8","tlshash":"5f234ca2e315100bed62273554e213227330e96523734b4f8aa3a73feda73d65e475e2","first_seen":"2025-10-16T18:56:50.307004Z","last_seen":"2025-10-16T19:00:40.915417Z","times_seen":4,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tsvideo.sacdnssedge.com/video/ol_5c2fe6eeec49e3ef1e7843f4851d34fe.mp4","fqdn":"tsvideo.sacdnssedge.com","domain":"sacdnssedge.com","tld":"com"},"ip":{"addr":"212.102.62.46","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:46.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1306075136.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 11:45:54 GMT","end":"Mon, 01 Dec 2025 11:45:53 GMT"},"fingerprint":{"sha1":"F5:AA:C7:6C:C7:93:C4:F6:5E:96:1F:53:A8:14:56:6C:BD:F6:9C:CA","sha256":"55:94:6F:AC:E4:1C:91:4F:EC:CF:8C:69:E0:FB:E6:96:40:F2:5D:2A:41:51:B7:40:59:71:1E:98:65:A9:C4:1B"}}},"request":{"raw":"GET /video/ol_5c2fe6eeec49e3ef1e7843f4851d34fe.mp4 HTTP/1.1\r\nHost: tsvideo.sacdnssedge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Thu, 16 Oct 2025 18:56:46 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 2276018\r\nvary: accept-encoding\r\naccess-control-expose-headers: Content-Disposition\r\ncontent-disposition: inline; filename=\"ol_5c2fe6eeec49e3ef1e7843f4851d34fe.mp4\"\r\netag: \"2e13ab1ba9b141ea07c8cc1a214056e9\"\r\nexpires: Thu, 16 Oct 2025 19:40:54 GMT\r\nlast-modified: Thu, 16 Oct 2025 18:40:54 GMT\r\ncache-control: max-age=7200\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncf-cache-status: HIT\r\nage: 0\r\ncf-ray: 98f9affa1f9f9bdc-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-77-nzt: EgwB1GY+LgG3twMAAAwBT3/TDgG3AAAAAA\r\nx-77-nzt-ray: db5cda09317b57bcee3ff168917add22\r\nx-77-cache: HIT\r\nx-77-age: 951\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\ncontent-range: bytes 0-2276017/2276018\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":360412,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"d194a747562e22aa6b16303be77b5476","sha1":"0edae61c180fec37b36ee572f29a19e78df8899e","sha256":"7b6344a9306c7fc05f955b24bfff0db2012cee9a98b9d41fa49cb93f508aee3d","sha512":"151d48508e7a3cb29b7037b35bab03a32f9fa89a4d2ab54098687b33653401faddff0c9c2555b8d8ad6e83a620e1ab308a13d0ece99554da3b9666bc16972373","ssdeep":"6144:TM064R9WD3X/LBxYmKgVtkdvaZseN9MP+YIYutSwvBKf3nlkQvd162IFjkqi9tz/:TMV3X/LBxYUVtMva22MnxuRvkfKAd16a","tlshash":"447423ab317bc81be929d17bfed79b7a05d0f60183c1588de32d63b311526a0ed1981b","first_seen":"2025-10-16T18:57:17.659695Z","last_seen":"2025-10-16T18:57:17.659695Z","times_seen":1,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":97,"dns":35,"connect":7,"send":0,"wait":14,"receive":30,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vjs.zencdn.net/7.5.5/video-js.css","fqdn":"vjs.zencdn.net","domain":"zencdn.net","tld":"net"},"ip":{"addr":"151.101.66.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:41.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"vjs.zencdn.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2024 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 07 Jan 2025 21:56:05 GMT","end":"Sun, 08 Feb 2026 21:56:04 GMT"},"fingerprint":{"sha1":"22:88:1F:07:1F:92:14:54:4B:E7:66:41:59:BF:5D:37:AF:C0:31:C7","sha256":"D8:1B:9B:E3:C9:29:CD:95:A8:5F:41:02:B8:20:F7:4E:F9:81:86:30:1D:9D:00:5B:98:B8:5F:02:07:B5:0F:7A"}}},"request":{"raw":"GET /7.5.5/video-js.css HTTP/1.1\r\nHost: vjs.zencdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 13 Jun 2019 18:18:21 GMT\r\netag: \"29daa9b197765c0111b16939ce1264a9\"\r\ncache-control: public, max-age=31536000\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: gzip\r\ndate: Thu, 16 Oct 2025 18:56:41 GMT\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1950\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncontent-length: 10533\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44859,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (5636)","md5":"29daa9b197765c0111b16939ce1264a9","sha1":"d8ee7d372482beea64fc1ce2c520702f72632bf1","sha256":"f53fc4c5e613265564b6bbd94ae0af0ba9cb6c31ba804193b0fa548b96f6ee08","sha512":"c278dd771a34d117a6423e5dd050b29a7ada03ec1b86fa336b04a9b1f8a33684742e704fed3e66126903916c5b5d0c797c0b927d69617f09d513df6c23f2fbc0","ssdeep":"768:ANiPt+kzawnZjrBfALewEvhhc5R3oSqY9OYFdeN:4ictCoLewEvhhc5R3oSqYgYA","tlshash":"5d1374c2b4a58be4116e8440edc3db625729f814d989ecacabe3396ccfd925134727cd","first_seen":"2023-04-05T11:12:40Z","last_seen":"2026-04-27T23:56:30.367695Z","times_seen":930,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":82,"dns":1,"connect":30,"send":0,"wait":28,"receive":3,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/users/8860595770177514115/1635937?fill=0\u0026kw=Teen,Brunette,Big%20Ass,vaginal,Big%20Cock,European,Russian,cum%20on%20ass,toned,ass,leggings,standing%20doggy,doggy,amateur%20girl,bwc,beeg.com,intro,pov-doggy,from-behind,bend-over,indie%20girl,My%20Little%20Betsy","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:45.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.atakcdn.art","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 15:28:40 GMT","end":"Thu, 18 Dec 2025 15:28:39 GMT"},"fingerprint":{"sha1":"33:89:62:94:E1:12:11:52:2C:41:37:9F:D0:85:B5:1C:03:F9:7C:8B","sha256":"0A:3B:6A:A7:BF:8D:C8:FC:CC:33:8A:30:AD:CC:20:E8:E8:CB:8D:06:80:07:C6:16:A9:6D:F1:89:2E:26:80:75"}}},"request":{"raw":"GET /api/users/8860595770177514115/1635937?fill=0\u0026kw=Teen,Brunette,Big%20Ass,vaginal,Big%20Cock,European,Russian,cum%20on%20ass,toned,ass,leggings,standing%20doggy,doggy,amateur%20girl,bwc,beeg.com,intro,pov-doggy,from-behind,bend-over,indie%20girl,My%20Little%20Betsy HTTP/1.1\r\nHost: news.jennydanny.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xxxfiles.com/\r\nOrigin: https://www.xxxfiles.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: nauid=E2RleDXzoH4IjEhznVUM; asgfp=faed01b113cfb270c624ee1aa793ad6c\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:45 GMT\r\ncontent-type: text/xml\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.xxxfiles.com\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1953,"size_decoded":0,"mime_type":"text/xml","magic":"XML 1.0 document, ASCII text, with very long lines (320)","md5":"df8f0b009129b8f325c7479a4a8d6785","sha1":"eb90ac019a386ca495dd193d902d76d2d7e9a443","sha256":"c2e6d09e2ff8889f631b15ff662140f920f7002b8422045db61ed1d96fdb5c78","sha512":"427a9e1e5fefdb2fdb2a92092410b323ff3531a7be056191c116887fe8fcfbb75cb8e5b81ef4c4beed8ea73e870631fbecb24aae9c289e0ca9056d9f255bd12f","ssdeep":"","tlshash":"65416e1c52f8a0f60cd41110e6a8d98a9ff92ffb07146c477d9ea88a7f0db46339b185","first_seen":"2025-10-16T18:57:17.665047Z","last_seen":"2025-10-16T18:57:17.665047Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"understandinstalledalfred.com/sbar.json?key=bf1ecfe7c52535c960b6a6e62f77b00e","fqdn":"understandinstalledalfred.com","domain":"understandinstalledalfred.com","tld":"com"},"ip":{"addr":"192.243.59.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:43.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"understandinstalledalfred.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Sep 2025 01:17:10 GMT","end":"Sat, 20 Dec 2025 01:17:09 GMT"},"fingerprint":{"sha1":"F6:A5:BB:A7:2B:F6:3E:5D:91:AE:99:15:7E:23:C0:21:A2:4B:AF:20","sha256":"67:97:94:2E:7C:6E:4D:38:EE:50:40:F6:AC:EA:29:7F:DB:74:0A:EC:B6:6D:10:F0:C0:7E:6B:DA:E3:CC:85:BD"}}},"request":{"raw":"GET /sbar.json?key=bf1ecfe7c52535c960b6a6e62f77b00e HTTP/1.1\r\nHost: understandinstalledalfred.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.xxxfiles.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Thu, 16 Oct 2025 18:56:43 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 4888\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nAccess-Control-Allow-Origin: https://www.xxxfiles.com\r\nAccess-Control-Allow-Credentials: true\r\nVary: Accept-Encoding\r\nSet-Cookie: pdhtkv=true; expires=Fri, 17 Oct 2025 18:56:43 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Fri, 17 Oct 2025 18:56:43 GMT; path=/; secure; SameSite=None\npdhtkv29=true; expires=Fri, 17 Oct 2025 18:56:43 GMT; path=/; secure; SameSite=None\nuncs29=1; expires=Fri, 17 Oct 2025 18:56:43 GMT; path=/; secure; SameSite=None\nu_pl27319047=1; expires=Fri, 17 Oct 2025 18:56:43 GMT; path=/; secure; SameSite=None\nslecbf1ecfe7c52535c960b6a6e62f77b00e=[6243697]; expires=Thu, 16 Oct 2025 18:56:48 GMT; path=/; secure; SameSite=None\r\nHost: understandinstalledalfred.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: fbca0e23e07e4116003054f0982e85da\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6233,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"4d5d51ed35a2faf8b8f098dd87839738","sha1":"c96d4253c75d96cd195cdb2c3b2d5604c215b960","sha256":"899e9495292d98676912ef1bfffc606c1d3273912fbf1bdfc24c5118d5bfffa5","sha512":"00da8d38d5249775c9ca9d01e86c5354956ed6c3ffafccbc4071b6dd4b195b82d6a7d1235a4b26cb996169f5eee62742ae5fcd798391f66a46842bad7ba9787c","ssdeep":"192:9zDd+6lYXS9dl2XL1jgxfLO5QzMyVeXkW:9zR+mYC9G9AfLOCzMjUW","tlshash":"09d16b3f1e240da229c39d809a494dcecded84afca19594c5d9bcfad3f6d38147122b0","first_seen":"2025-10-16T18:57:17.668122Z","last_seen":"2025-10-16T18:57:17.668122Z","times_seen":1,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"understandinstalledalfred.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"understandinstalledalfred.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pxl-eu.tsyndicate.com/api/v1/p/p.gif?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XUKDOjRg0yM8i0kFGmjI0WNMTkiNECR44xY1qMmSEDB4yCNnKIuVFDxMMwdcZkxBGDTI0wYXCEkWkmBgyUZciczJGjY4uSMGKIEXMThwwzZXxCJGOHIg4aOXA8hFNHzEIZMHLYsPETDpy3MWLgcChiDpyJOmbkoGFjBg61Isa0uasDxw0YNTr-JGNmoQ0ZD8W4cbOQhsccjyuKaOMGI0OacNeSNi2jZg0YD-vIYdPZBg4bNx7HlpERDR06cOboePHizBsXYtiMIfPmjIsxb9q8mNMmjBzgb-C8oAHDsxkbZsKYEeO5Bo3DMcyMuVFmJWQzYGmMsVGQRhgZYszTMLmc8g2iZOTA0QwxcBeGDfcRJcYPdcyBUBJk9BDVfjPQgBZcMoRhoXhJxUDgazeEkQMZMWQYwxhyyUCTXjbclJJ6Y2QYhlYzzDDjYaCJ0WIZXNQBAwwy2DDHG7KNUQaEPTgGWUc9_hhkG2W0IcaDEQZhBRNWyKGFHnYcVAQSaxyhBB1p5AGFFGzIcYURVBhxBR1EBKGHFDAUgccNWAShxhBDsDHHFEYQoUYNQlwRBBFHHFHDDU3AEOgTRUgxxxdi6BFDEUG4UQQZTpyxRhFXvDHGFUuY4WcLVmRRQxxVqNECEXY8ccQaSCRBhHhRpOEEHG6Y0UIWcSRxxxdnVGGrFFWk0SSQNsARQw-CEWYYDss--cZBbDgRBpQ9FGFHHkTIUVAbYjFHrg4iuFHGHXO4oEYZm-VBRhjxPhedWGOEAdgWBHaRWWU6wOBCVg_JYQdjqYlQRx1pZBRDGZG1VwYNLYC2UQsbCVixDDO1EIYYNcp1YHowkCFWGoyJsJILOQhMgwwuNESDWHJ8gXJGK7fswssxmydWHWFk1MQbeqTBBhthvFDDwCCgcEUabjDHLghOUAGCUwPvAMLTbthAg9Z4eK21wafRMHAKIBxRxhhrvPECXE5llRUIRqQhrhlv4PGCh2bDgK9Q6DrxhFhv1AxTRoKLpVxGRThRbhl2fCEubQwt-t8Mtv1Y8Bmc6SBDDY49dFDkYsix0GGiQ_5FG9e-dZtoZMjxxkIzPPSGQjrQsJbseOSxEF81w8G77zrwNfoXdOiRkd8FlwHwQL8FN9wL6rLrLrxuyEtv9vZKJ9YdDgM580NoOFwT830ZnJHsdOhbeAt1uJEGHS3Q5AIZvNk-h_rFw1CYDDcoUQ5EBzgRHOQL-BMLHc4Vgxu0yGtxq50IFsgbhjjQfzSI4GskaBDJlcEvX9AXRS4IwR9JUHVhYANC6IA7flWkQv6CiBgAY0DnAYUNE1nL4gLzkDHAoQ2Rk4O-0jC7gLnAMQ7EnId6aJoS9bB8OtiCCMRCxYdUcYpWzCIWt3hFKnahDwoICA%3D%3D\u0026r=1\u0026s=06b166fdf850780fae62b039103581b53d31b9513f33779549679636e113a70c1760641003\u0026w=t\u0026ir=242x130","fqdn":"pxl-eu.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"142.132.201.97","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://news.jennydanny.com/api/spots/334568?p=1\u0026s1=%subid1%\u0026kw=","date":"2025-10-16T18:56:44.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 20:10:41 GMT","end":"Thu, 11 Dec 2025 20:10:40 GMT"},"fingerprint":{"sha1":"25:5B:D4:FE:8D:85:CA:1A:7D:3A:B0:58:EC:2D:7A:B0:62:90:21:1F","sha256":"DF:0A:26:3C:A9:CF:97:54:23:20:C6:11:EB:C6:8C:7F:02:14:58:C8:F6:3B:08:10:27:BF:78:67:09:32:DC:9C"}}},"request":{"raw":"GET /api/v1/p/p.gif?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XUKDOjRg0yM8i0kFGmjI0WNMTkiNECR44xY1qMmSEDB4yCNnKIuVFDxMMwdcZkxBGDTI0wYXCEkWkmBgyUZciczJGjY4uSMGKIEXMThwwzZXxCJGOHIg4aOXA8hFNHzEIZMHLYsPETDpy3MWLgcChiDpyJOmbkoGFjBg61Isa0uasDxw0YNTr-JGNmoQ0ZD8W4cbOQhsccjyuKaOMGI0OacNeSNi2jZg0YD-vIYdPZBg4bNx7HlpERDR06cOboePHizBsXYtiMIfPmjIsxb9q8mNMmjBzgb-C8oAHDsxkbZsKYEeO5Bo3DMcyMuVFmJWQzYGmMsVGQRhgZYszTMLmc8g2iZOTA0QwxcBeGDfcRJcYPdcyBUBJk9BDVfjPQgBZcMoRhoXhJxUDgazeEkQMZMWQYwxhyyUCTXjbclJJ6Y2QYhlYzzDDjYaCJ0WIZXNQBAwwy2DDHG7KNUQaEPTgGWUc9_hhkG2W0IcaDEQZhBRNWyKGFHnYcVAQSaxyhBB1p5AGFFGzIcYURVBhxBR1EBKGHFDAUgccNWAShxhBDsDHHFEYQoUYNQlwRBBFHHFHDDU3AEOgTRUgxxxdi6BFDEUG4UQQZTpyxRhFXvDHGFUuY4WcLVmRRQxxVqNECEXY8ccQaSCRBhHhRpOEEHG6Y0UIWcSRxxxdnVGGrFFWk0SSQNsARQw-CEWYYDss--cZBbDgRBpQ9FGFHHkTIUVAbYjFHrg4iuFHGHXO4oEYZm-VBRhjxPhedWGOEAdgWBHaRWWU6wOBCVg_JYQdjqYlQRx1pZBRDGZG1VwYNLYC2UQsbCVixDDO1EIYYNcp1YHowkCFWGoyJsJILOQhMgwwuNESDWHJ8gXJGK7fswssxmydWHWFk1MQbeqTBBhthvFDDwCCgcEUabjDHLghOUAGCUwPvAMLTbthAg9Z4eK21wafRMHAKIBxRxhhrvPECXE5llRUIRqQhrhlv4PGCh2bDgK9Q6DrxhFhv1AxTRoKLpVxGRThRbhl2fCEubQwt-t8Mtv1Y8Bmc6SBDDY49dFDkYsix0GGiQ_5FG9e-dZtoZMjxxkIzPPSGQjrQsJbseOSxEF81w8G77zrwNfoXdOiRkd8FlwHwQL8FN9wL6rLrLrxuyEtv9vZKJ9YdDgM580NoOFwT830ZnJHsdOhbeAt1uJEGHS3Q5AIZvNk-h_rFw1CYDDcoUQ5EBzgRHOQL-BMLHc4Vgxu0yGtxq50IFsgbhjjQfzSI4GskaBDJlcEvX9AXRS4IwR9JUHVhYANC6IA7flWkQv6CiBgAY0DnAYUNE1nL4gLzkDHAoQ2Rk4O-0jC7gLnAMQ7EnId6aJoS9bB8OtiCCMRCxYdUcYpWzCIWt3hFKnahDwoICA%3D%3D\u0026r=1\u0026s=06b166fdf850780fae62b039103581b53d31b9513f33779549679636e113a70c1760641003\u0026w=t\u0026ir=242x130 HTTP/1.1\r\nHost: pxl-eu.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://news.jennydanny.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:44 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-robots-tag: noindex, nofollow\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ba036c43037cfe89320d1ef7b64cd43f","sha1":"88c72d3e26047eb1e45e5564a76427734f120efe","sha256":"42cb846e07917f6731406e500f24aeb2e88c42cda124eaa59e08c5331cad8bcb","sha512":"aa80ccd27c05eb729f730b9d830b011650bcf12cbb25d19edf29efcf962c7465bb5685a5ff5d084356c6710c08e829d16b59e7a59a41767eb14744f326b6c124","ssdeep":"","tlshash":"19900403f5400003d175d03107170340134cd110057c0307405d505cdc553510c01010","first_seen":"2023-05-10T09:10:20Z","last_seen":"2026-04-28T15:06:43.146143Z","times_seen":14953,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":86,"dns":0,"connect":25,"send":0,"wait":26,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/users/2312985871249234115/1987407?fill=0\u0026kw=Teen,Brunette,Big%20Ass,vaginal,Big%20Cock,European,Russian,cum%20on%20ass,toned,ass,leggings,standing%20doggy,doggy,amateur%20girl,bwc,beeg.com,intro,pov-doggy,from-behind,bend-over,indie%20girl,My%20Little%20Betsy","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:45.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.atakcdn.art","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 15:28:40 GMT","end":"Thu, 18 Dec 2025 15:28:39 GMT"},"fingerprint":{"sha1":"33:89:62:94:E1:12:11:52:2C:41:37:9F:D0:85:B5:1C:03:F9:7C:8B","sha256":"0A:3B:6A:A7:BF:8D:C8:FC:CC:33:8A:30:AD:CC:20:E8:E8:CB:8D:06:80:07:C6:16:A9:6D:F1:89:2E:26:80:75"}}},"request":{"raw":"GET /api/users/2312985871249234115/1987407?fill=0\u0026kw=Teen,Brunette,Big%20Ass,vaginal,Big%20Cock,European,Russian,cum%20on%20ass,toned,ass,leggings,standing%20doggy,doggy,amateur%20girl,bwc,beeg.com,intro,pov-doggy,from-behind,bend-over,indie%20girl,My%20Little%20Betsy HTTP/1.1\r\nHost: news.jennydanny.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xxxfiles.com/\r\nOrigin: https://www.xxxfiles.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: nauid=E2RleDXzoH4IjEhznVUM; asgfp=faed01b113cfb270c624ee1aa793ad6c\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:45 GMT\r\ncontent-type: text/xml\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.xxxfiles.com\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2219,"size_decoded":0,"mime_type":"text/xml","magic":"XML 1.0 document, ASCII text, with very long lines (350)","md5":"9d64bc6a0535e300e8211855f9ae0a2f","sha1":"01bf323ec40ee81df719f09e172b234d0705849f","sha256":"27ef67859a2909e49276c5517073fdbc65981fae03095b3c3b7e80f11ec44fbb","sha512":"95e5c734ae093cc1b579afe591d9e14336570df2e9b5d7c3bad60162d09935dc2fb59976277ab851cf1e47a72cc4af483ff9e6ecc1c03c85b681adfbbae286db","ssdeep":"","tlshash":"8741d52c52f861f90cd40124dbb8da964ff91dbb0f78ac527a5d8d817f0e641119f195","first_seen":"2025-10-16T18:57:17.671682Z","last_seen":"2025-10-16T18:57:17.671682Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.forscprts.com/api/models/vast?action=sbSignupWithModelSoft\u0026campaignId=25bdc61ed3917811c8f3f36a1e6e0fb40a4bf9db56e01082448f446fc27cc57b\u0026campaignType=smartpop\u0026creativeId=c9b7e049622029cfc0319cc5a63e6f98450c376d3776beafa8030c904a3fd6d5\u0026duration=00%3A00%3A30\u0026iterationId=1075275\u0026masterSmartpopId=2683\u0026memberId=06414b2db3c7bb1f26b1ff\u0026p1=61055\u0026p2=113256\u0026p3=103612\u0026ruleId=29\u0026skipOffset=00%3A00%3A05\u0026smartpopId=14005\u0026sourceId=52154\u0026tag=girls\u0026trafficType=preroll\u0026usePreroll=true\u0026userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d\u0026variationId=34734\u0026videoType=ol","fqdn":"go.forscprts.com","domain":"forscprts.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:45.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.forscprts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 20:58:53 GMT","end":"Fri, 12 Dec 2025 21:19:55 GMT"},"fingerprint":{"sha1":"AD:2E:E6:89:40:EE:99:C2:2F:D5:3E:7F:72:5E:7A:8B:D9:8F:CF:F7","sha256":"40:2F:2D:5E:AB:0A:F5:22:4B:8E:CA:F1:13:FC:E5:AA:5D:30:90:AE:83:A7:8D:A8:17:49:54:0E:FA:65:A3:66"}}},"request":{"raw":"GET /api/models/vast?action=sbSignupWithModelSoft\u0026campaignId=25bdc61ed3917811c8f3f36a1e6e0fb40a4bf9db56e01082448f446fc27cc57b\u0026campaignType=smartpop\u0026creativeId=c9b7e049622029cfc0319cc5a63e6f98450c376d3776beafa8030c904a3fd6d5\u0026duration=00%3A00%3A30\u0026iterationId=1075275\u0026masterSmartpopId=2683\u0026memberId=06414b2db3c7bb1f26b1ff\u0026p1=61055\u0026p2=113256\u0026p3=103612\u0026ruleId=29\u0026skipOffset=00%3A00%3A05\u0026smartpopId=14005\u0026sourceId=52154\u0026tag=girls\u0026trafficType=preroll\u0026usePreroll=true\u0026userId=a29e4fa1023dd45be975c4ab2c3f63fc721842490735020a0d0703eb57f7300d\u0026variationId=34734\u0026videoType=ol HTTP/1.1\r\nHost: go.forscprts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.xxxfiles.com\r\nReferer: https://www.xxxfiles.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:56:45 GMT\r\ncontent-type: text/xml; charset=utf-8\r\ncf-ray: 98f9c72e9e77b4ee-OSL\r\naccess-control-allow-origin: https://www.xxxfiles.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2226,"size_decoded":0,"mime_type":"text/xml; charset=utf-8","magic":"XML 1.0 document, ASCII text, with very long lines (2226), with no line terminators","md5":"3a05ad12c3424c3c4677751b08673537","sha1":"c4f0d5661987a47ada77c819e635cbc3f99f4429","sha256":"220ba78cb159bbde681c225f5614424404e113fc09aba43e86e05146d82316b6","sha512":"9b7c38f263c6e2db52dc345e3eb443f1603c2826e83d33ca43ce43114e3cc53adb7518bc9bf8669425726d7e27e41ee6b9e48c49d270d8b2bb90309eecc7b64a","ssdeep":"","tlshash":"fa41b7785232bc3329c3db6ed598708511761b7badc1c2f5e48908229c0a5fa76f1329","first_seen":"2025-10-16T18:57:17.677317Z","last_seen":"2025-10-16T18:57:17.677317Z","times_seen":1,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/silvermine-videojs-quality-selector@1.1.2/dist/css/quality-selector.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:41.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/silvermine-videojs-quality-selector@1.1.2/dist/css/quality-selector.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 1.1.2\r\nx-jsd-version-type: version\r\netag: W/\"2fb-mEvFpizBChwdWZ0pjtUJeaoeUWw\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Thu, 16 Oct 2025 18:56:41 GMT\r\nage: 2662096\r\nx-served-by: cache-fra-eddf8230063-FRA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 335\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":763,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (449)","md5":"daf55d801b023ddc57b1c8db7ba0ac3e","sha1":"984bc5a62cc10a1c1d599d298ed50979aa1e516c","sha256":"d638f9c2f367c53ff814c4eff9ea330510b4d108ab182a9d4b1413adb70788bf","sha512":"53e82459d472c0043678fa330fb598a610b10d76ce8354ff966c4bddc2a9d89d68f1878d13e41e6705ac93aa2b8b26e5f49c51d0cf3cb4d10f24f2f2671ed3a2","ssdeep":"","tlshash":"550120af104803d9928a85f23f21f351d136d01bf4955a8408322f28eccf2902248cb7","first_seen":"2024-07-09T19:33:40Z","last_seen":"2026-04-27T23:56:30.61796Z","times_seen":414,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":94,"dns":3,"connect":25,"send":0,"wait":17,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.orbsrv.com/v1/api.php","fqdn":"s.orbsrv.com","domain":"orbsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://news.jennydanny.com/api/spots/322254?p=1\u0026s1=%subid1%\u0026kw=","date":"2025-10-16T18:56:42.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orbsrv.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 10:26:18 GMT","end":"Sun, 09 Nov 2025 10:26:17 GMT"},"fingerprint":{"sha1":"00:74:5D:38:3E:06:53:77:B8:F1:AE:17:A8:D6:76:6D:1A:00:70:42","sha256":"92:60:CE:DC:13:DC:18:C6:14:88:11:40:ED:8C:58:5B:97:94:42:B0:84:09:B9:2C:88:48:CF:94:97:09:B3:D4"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.orbsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 456\r\nOrigin: https://news.jennydanny.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://news.jennydanny.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 16 Oct 2025 18:56:42 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://news.jennydanny.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nSet-Cookie: __uvt=s%3A32%3A%224f623cd3e5429736c20f63449f1e1ba0%22%3B; expires=Sat, 16 Oct 2027 18:56:42 GMT; Max-Age=63072000; path=/; domain=orbsrv.com; secure; SameSite=None\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1938,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"315d9504791df5816904f609b6d25849","sha1":"167ac37713b24b330007ca861dc53a4290c50486","sha256":"4b690c64f02a3b41bde513712b5d7eacff178a46c06407a458be40558a2d2484","sha512":"cba633c6d602cf6104ac97e8892caebb4f60e80ac7478d009b277dce796a8ae51d693f100a679a64723897aebf2895cdab4caa8ef478801293e32e11013515ec","ssdeep":"","tlshash":"b041acb15744c4bad6e11bc766d928a54f6b7087199f8dcd900da41407fe71c17207e8","first_seen":"2025-10-16T18:57:17.684789Z","last_seen":"2025-10-16T18:57:17.684789Z","times_seen":1,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":85,"dns":1,"connect":26,"send":0,"wait":56,"receive":2,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.tscprts.com/api/models/vast?action=sbSignupWithModelSoft\u0026campaignId=89e21a96bcaf7ffeade22475c382106e40fecee7182bc3cc6690d8b08e7295d0\u0026campaignType=smartpop\u0026creativeId=848c9861daeb8c71077e63185fe70108f0fc581bfa4a1361d3aad7791cbd1e0d\u0026duration=00%3A00%3A30\u0026iterationId=1075007\u0026masterSmartpopId=2683\u0026p1=prerolls\u0026ruleId=29\u0026skipOffset=00%3A00%3A05\u0026smartpopId=9381\u0026tag=girls\u0026trafficType=preroll\u0026usePreroll=true\u0026userId=3decbf3859db847485630109f89052af3b547473f7d170edfd860d80f4112826\u0026variationId=34733\u0026vastv=3\u0026videoType=ol","fqdn":"go.tscprts.com","domain":"tscprts.com","tld":"com"},"ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:45.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.tscprts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 22:44:18 GMT","end":"Fri, 12 Dec 2025 23:09:48 GMT"},"fingerprint":{"sha1":"E6:6A:6D:29:18:8C:59:52:2A:B9:71:4D:8A:DC:15:EE:5A:CE:6F:E2","sha256":"77:14:9D:11:4E:2D:81:16:2A:B6:DE:69:A9:1F:6B:C8:3D:D8:7D:40:08:AC:7E:AD:FB:9D:2A:DF:65:20:77:FF"}}},"request":{"raw":"GET /api/models/vast?action=sbSignupWithModelSoft\u0026campaignId=89e21a96bcaf7ffeade22475c382106e40fecee7182bc3cc6690d8b08e7295d0\u0026campaignType=smartpop\u0026creativeId=848c9861daeb8c71077e63185fe70108f0fc581bfa4a1361d3aad7791cbd1e0d\u0026duration=00%3A00%3A30\u0026iterationId=1075007\u0026masterSmartpopId=2683\u0026p1=prerolls\u0026ruleId=29\u0026skipOffset=00%3A00%3A05\u0026smartpopId=9381\u0026tag=girls\u0026trafficType=preroll\u0026usePreroll=true\u0026userId=3decbf3859db847485630109f89052af3b547473f7d170edfd860d80f4112826\u0026variationId=34733\u0026vastv=3\u0026videoType=ol HTTP/1.1\r\nHost: go.tscprts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: null\r\nReferer: https://www.xxxfiles.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:56:45 GMT\r\ncontent-type: text/xml; charset=utf-8\r\ncf-ray: 98f9c72c0f47712d-OSL\r\naccess-control-allow-origin: null\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2092,"size_decoded":0,"mime_type":"text/xml; charset=utf-8","magic":"XML 1.0 document, ASCII text, with very long lines (2092), with no line terminators","md5":"e796333bca2b276e984b7ba5cea37140","sha1":"f94be08e7fe122e7d620bfe14a2a837a3043d970","sha256":"d1495309a3392b4032bc1a8403804dc73678e6120a3b7e93566b9d3a1a3d1388","sha512":"d13d8be765a1c7d145650215f75c92f7bd0127c177b639bf06621d2ce1c20f6deb27eda66431ba1d72c48d7bd20f80b8f3c258536e5ca29ff4175059f770468f","ssdeep":"","tlshash":"9e41d8b92335ec3316c3c6bfd05db18555761a0b2cc1d1a4d8ce8552550e1e633f139c","first_seen":"2025-10-16T18:57:17.68901Z","last_seen":"2025-10-16T18:57:17.68901Z","times_seen":1,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":62,"dns":0,"connect":1,"send":0,"wait":62,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:45.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"04:E6:D3:58:E3:A1:E3:05:2B:C3:56:5D:68:BB:1B:0A:08:C6:E3:FB","sha256":"25:4C:B3:A3:9A:E1:D7:FD:25:B6:BF:E9:AA:97:95:20:5D:F2:15:EA:41:46:B6:6B:01:17:19:26:EC:EF:D3:CA"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 16 Oct 2025 18:56:45 GMT\r\ndate: Thu, 16 Oct 2025 18:56:45 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"a90fc2bf15e304ef3fa4e7f75b6a8608","sha1":"0f8c2853b49a7c206d75af99117482d80a60f869","sha256":"6e10be4b6befecf6f3d1ae34b727939e6da334a1f2d815fd325ba9c455520772","sha512":"0d1a14e11c436dadf51cc489592867eaff3cae2c4a95748d2a25614c984560ad3588fb95e2aaafd4060d4954594951d09e71ab36e9859fb8590198811f156fc4","ssdeep":"384:pwf5wgwPwrwyUw/qY4+w4wYwpwfMw1wWw6wyhw/qY4XwNwtw4wfdwkwDw3wyQw/P:pc70afUQRptmJKBLfhQE8YTYHw+fQQVl","tlshash":"b472ed91041700009b835ce223cebf35fe5f92117141d0b9abfd9b6badcbc6652693ad","first_seen":"2025-09-08T23:24:40.129975Z","last_seen":"2025-11-18T23:33:55.863403Z","times_seen":3582,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxxfiles.com/css/plugins.css","fqdn":"www.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"ip":{"addr":"172.67.194.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:41.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxxfiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 05:44:51 GMT","end":"Sat, 13 Dec 2025 00:22:17 GMT"},"fingerprint":{"sha1":"D2:12:09:01:09:64:3E:BF:A3:21:1E:BA:8A:77:4F:5B:F2:26:08:7B","sha256":"3C:16:72:A8:86:4C:AF:3A:B1:B9:0F:B3:06:44:AE:CD:20:24:BA:AD:17:A8:77:D6:F1:7A:90:F9:6E:1B:18:88"}}},"request":{"raw":"GET /css/plugins.css HTTP/1.1\r\nHost: www.xxxfiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499\r\nCookie: PHPSESSID=djv2bk6h5k865sqpul7re7ls7b; kt_rt_ts=645499; kt_qparams=id%3D55518986%26dir%3D4b7001fc05ae7151a106bbadf1ad5510%26ts%3D645499; kt_ips=91.90.42.154\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 16 Oct 2025 18:56:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 20 Nov 2019 10:53:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9zrwd4cX4wT1VqV9cjE9cIM5ohKg1iqOHVGbKyV48KbkbYli9ixNs4mzs4GzThm9wnH00zEKGanOfayZExhP5ONrRw0JO57bxgdfhOZ4adA%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"5dd51b3d-c445\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 1900030\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98f9c71278600daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50245,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (29529)","md5":"4092218dab88f50c2ae78b636da0f06e","sha1":"6534c8b0dfeaa401038c595a238f3fed21b69da6","sha256":"2e3480402dc98bc43baa6327e8765e2e07dfc5781359086cb11993e817776cb6","sha512":"8cbf2ad5ac48925331b14828152f5f83cfa14a583d7c261691809bb2b2dd5d1438c4adb3c259ffcc4eb85c3a58cfd4c8198281346d49aa78fb0d240caf0cebca","ssdeep":"768:Vh6XHfBMzQ1RA6Gp53OBh2MzQ1RA6Gp53OBhx:LWffBhMfBhx","tlshash":"91333020a4c2212dfe23d53061e11ef4513bd142eda61fbda09afb6993d68f4c47b9b1","first_seen":"2023-04-05T11:12:41Z","last_seen":"2026-04-27T23:56:30.870628Z","times_seen":713,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:42.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.xxxfiles.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 12:56:02 GMT\r\nexpires: Fri, 16 Oct 2026 12:56:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 21640\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-28T16:24:24.069383Z","times_seen":769423,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":175,"dns":7,"connect":7,"send":0,"wait":8,"receive":6,"ssl":158},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/users/377394?v2=1\u0026fill=0\u0026kw=Teen%2CBrunette%2CBig%20Ass%2Cvaginal%2CBig%20Cock%2CEuropean%2CRussian%2Ccum%20on%20ass%2Ctoned%2Cass%2Cleggings%2Cstanding%20doggy%2Cdoggy%2Camateur%20girl%2Cbwc%2Cbeeg.com%2Cintro%2Cpov-doggy%2Cfrom-behind%2Cbend-over%2Cindie%20girl%2CMy%20Little%20Betsy\u0026i=1\u0026url=https%3A%2F%2Fwww.xxxfiles.com%2Fvideos%2F55518986%2F4b7001fc05ae7151a106bbadf1ad5510%2F%3Fts%3D645499\u0026sid=88f35fcc-fb69-4a35-b05a-90b281d4e335","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:42.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.atakcdn.art","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 15:28:40 GMT","end":"Thu, 18 Dec 2025 15:28:39 GMT"},"fingerprint":{"sha1":"33:89:62:94:E1:12:11:52:2C:41:37:9F:D0:85:B5:1C:03:F9:7C:8B","sha256":"0A:3B:6A:A7:BF:8D:C8:FC:CC:33:8A:30:AD:CC:20:E8:E8:CB:8D:06:80:07:C6:16:A9:6D:F1:89:2E:26:80:75"}}},"request":{"raw":"GET /api/users/377394?v2=1\u0026fill=0\u0026kw=Teen%2CBrunette%2CBig%20Ass%2Cvaginal%2CBig%20Cock%2CEuropean%2CRussian%2Ccum%20on%20ass%2Ctoned%2Cass%2Cleggings%2Cstanding%20doggy%2Cdoggy%2Camateur%20girl%2Cbwc%2Cbeeg.com%2Cintro%2Cpov-doggy%2Cfrom-behind%2Cbend-over%2Cindie%20girl%2CMy%20Little%20Betsy\u0026i=1\u0026url=https%3A%2F%2Fwww.xxxfiles.com%2Fvideos%2F55518986%2F4b7001fc05ae7151a106bbadf1ad5510%2F%3Fts%3D645499\u0026sid=88f35fcc-fb69-4a35-b05a-90b281d4e335 HTTP/1.1\r\nHost: news.jennydanny.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xxxfiles.com/\r\nOrigin: https://www.xxxfiles.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: nauid=E2RleDXzoH4IjEhznVUM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:42 GMT\r\ncontent-type: text/xml\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.xxxfiles.com\r\naccess-control-expose-headers: X-Asg-Config, X-t\r\nx-robots-tag: noindex, nofollow\r\nx-t: 0\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4522,"size_decoded":0,"mime_type":"text/xml","magic":"XML 1.0 document, ASCII text, with very long lines (314)","md5":"67cb315cd976c64ad5e486d49cfdbd67","sha1":"c887c8511a1f9292ed427c4b705de8f93bb684f1","sha256":"555d889307fbffef8cb4aaa179875404961bfb61455b3f1239a4898d83b0d967","sha512":"2c16ebed85b2e23f2a619cbf8ba14ed0d91de9d59c87eb6379ec3c32b9a12578a46bf9b3c2fda7dceeac37b3f92141bcdca198c2696c7ca516c9daf777550c9c","ssdeep":"96:2vE+KQKFeYFCQvE+KQKFeYFC4vE+KQKFeYFC5:oBcJFCCBcJFC6BcJFC5","tlshash":"95911f2842b9251b3695982d53dc8745aff0852b0a909174b1efc2984f53f1772fbef8","first_seen":"2025-10-16T18:57:17.69867Z","last_seen":"2025-10-16T18:57:17.69867Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/click/16774127962865821115?c=60\u0026data[error]=3\u0026data[errormsg]=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:46.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.atakcdn.art","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 15:28:40 GMT","end":"Thu, 18 Dec 2025 15:28:39 GMT"},"fingerprint":{"sha1":"33:89:62:94:E1:12:11:52:2C:41:37:9F:D0:85:B5:1C:03:F9:7C:8B","sha256":"0A:3B:6A:A7:BF:8D:C8:FC:CC:33:8A:30:AD:CC:20:E8:E8:CB:8D:06:80:07:C6:16:A9:6D:F1:89:2E:26:80:75"}}},"request":{"raw":"GET /api/click/16774127962865821115?c=60\u0026data[error]=3\u0026data[errormsg]= HTTP/1.1\r\nHost: news.jennydanny.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nCookie: nauid=E2RleDXzoH4IjEhznVUM; asgfp=faed01b113cfb270c624ee1aa793ad6c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:46 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"understandinstalledalfred.com/bf/1e/cf/bf1ecfe7c52535c960b6a6e62f77b00e.js","fqdn":"understandinstalledalfred.com","domain":"understandinstalledalfred.com","tld":"com"},"ip":{"addr":"192.243.59.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:41.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"understandinstalledalfred.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 21 Sep 2025 01:17:10 GMT","end":"Sat, 20 Dec 2025 01:17:09 GMT"},"fingerprint":{"sha1":"F6:A5:BB:A7:2B:F6:3E:5D:91:AE:99:15:7E:23:C0:21:A2:4B:AF:20","sha256":"67:97:94:2E:7C:6E:4D:38:EE:50:40:F6:AC:EA:29:7F:DB:74:0A:EC:B6:6D:10:F0:C0:7E:6B:DA:E3:CC:85:BD"}}},"request":{"raw":"GET /bf/1e/cf/bf1ecfe7c52535c960b6a6e62f77b00e.js HTTP/1.1\r\nHost: understandinstalledalfred.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Thu, 16 Oct 2025 18:56:41 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 32684\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: understandinstalledalfred.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 1cab8a9a6c722ca87358230706d74b42\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":84216,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d4d1e843da64a842d9aa686ef1eb7262","sha1":"24c10d3f7113f573cf85711449e606d6547067c6","sha256":"f08c5fe36b497936f1d22888735f3967c9ea9fd77b783903edddf641e8811645","sha512":"e7f93d66a333275edda84d6576734ee7a359c4a00b7e47def49759068292a7acdc4dbd7e2dca948e2d8ce3480172eb278547882923d6d4e8b0d4fc32c3921987","ssdeep":"1536:UbksDEFAkM9IWf3pDTf0zpxftTgA4VEIaAa4Ru37oIXDWeGXMtb4cnSzB:MDxk4+BgA4VEIaAa4McBeGXMtb4/","tlshash":"dd83f848bb82b869425620ba332ff01af15a4d421de8d444dc57f8d96fb8b1de637e24","first_seen":"2025-10-13T13:50:54.857427Z","last_seen":"2025-10-17T01:32:53.232904Z","times_seen":5,"resource_available":true,"data":null}},"time_used":755,"timings":{"blocked":261,"dns":11,"connect":92,"send":0,"wait":105,"receive":95,"ssl":186},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"understandinstalledalfred.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"understandinstalledalfred.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","fqdn":"www.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"ip":{"addr":"172.67.194.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-16T18:56:40.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxxfiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 05:44:51 GMT","end":"Sat, 13 Dec 2025 00:22:17 GMT"},"fingerprint":{"sha1":"D2:12:09:01:09:64:3E:BF:A3:21:1E:BA:8A:77:4F:5B:F2:26:08:7B","sha256":"3C:16:72:A8:86:4C:AF:3A:B1:B9:0F:B3:06:44:AE:CD:20:24:BA:AD:17:A8:77:D6:F1:7A:90:F9:6E:1B:18:88"}}},"request":{"raw":"GET /videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499 HTTP/1.1\r\nHost: www.xxxfiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:56:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TA8TkeXUT6eASJfUfr3D4u9neIK5%2B4ooHH1DuU0fMEJvnUB1%2FQ%2Bf8yYanEjkiH3J%2BLKgh6yQpLj5lT%2BoodpbbrvLy7GfRTeSzodYL7kx\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: PHPSESSID=djv2bk6h5k865sqpul7re7ls7b; SameSite=Lax; Path=/; Domain=xxxfiles.com\nkt_rt_ts=645499; SameSite=Lax; Path=/; Domain=xxxfiles.com; Max-Age=31104000; Expires=Sun, 11 Oct 2026 18:56:41 GMT\nkt_qparams=id%3D55518986%26dir%3D4b7001fc05ae7151a106bbadf1ad5510%26ts%3D645499; SameSite=Lax; Path=/; Domain=xxxfiles.com; Max-Age=86400; Expires=Fri, 17 Oct 2025 18:56:41 GMT\nkt_ips=91.90.42.154; SameSite=Lax; Path=/; Domain=xxxfiles.com; Max-Age=86400; Expires=Fri, 17 Oct 2025 18:56:41 GMT\r\ncf-ray: 98f9c710499256bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":65264,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7586)","md5":"e42ccdaff71c5049fa9e7a2b11d566e6","sha1":"d020f08be9c232beae911c05f72e40c98f863d97","sha256":"631978d11fc3319ccf52c04e6a4825f10b4291a42aff2ef98e6785e32b8637f4","sha512":"540511604363536e5701ba6881d1f01df0749aa01c654e773164a4f84b6d2e0427f352799629194663809d5ab77d4994ccb0752fedb3eac09cb2eac4e67b3318","ssdeep":"768:46E+AHroh9gXpuMs70CYb2gdzgRP6sTFZomRPIXCOi6iYEbg53wqN4xFsE+BfGiu:44AXirY9z7sZZo7COi6IreECu","tlshash":"e453c7b266dc583f124363c6da24b77ab89f1d73d96086c2b4bfc7505fc2d90a98b424","first_seen":"2025-10-16T18:57:17.705233Z","last_seen":"2025-10-16T18:57:17.705233Z","times_seen":1,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":57,"dns":1,"connect":1,"send":0,"wait":92,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.xxxfiles.com/55563000/55563538/medium@2x/1.jpg","fqdn":"img.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"ip":{"addr":"172.67.194.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:41.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxxfiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 05:44:51 GMT","end":"Sat, 13 Dec 2025 00:22:17 GMT"},"fingerprint":{"sha1":"D2:12:09:01:09:64:3E:BF:A3:21:1E:BA:8A:77:4F:5B:F2:26:08:7B","sha256":"3C:16:72:A8:86:4C:AF:3A:B1:B9:0F:B3:06:44:AE:CD:20:24:BA:AD:17:A8:77:D6:F1:7A:90:F9:6E:1B:18:88"}}},"request":{"raw":"GET /55563000/55563538/medium@2x/1.jpg HTTP/1.1\r\nHost: img.xxxfiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nCookie: PHPSESSID=djv2bk6h5k865sqpul7re7ls7b; kt_rt_ts=645499; kt_qparams=id%3D55518986%26dir%3D4b7001fc05ae7151a106bbadf1ad5510%26ts%3D645499; kt_ips=91.90.42.154\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 16 Oct 2025 18:56:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 46821\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TnDTPsfSTBT34YSWRJheXjksjtJRpnSdo%2Bi67HO4wpcR9oIEO8xpCWI9ydbdmMwwa34OnhFs2ue3EBDXoLiYrKsJJ5KIirmtl52Z0CAYN%2Fs%3D\"}]}\r\nlast-modified: Sat, 05 Jul 2025 21:08:52 GMT\r\netag: \"68699464-b6e5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98f9c712a87d0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46821,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 744x420, components 3","md5":"966416db2a771a0b68ebf862a6437a69","sha1":"48b2fd99c885cbc6ce7aa352120fb4858e3cf962","sha256":"b6abcc8b5063a737a013be3c614e21a5eda5963de9417f45fb8dc4fec3895ce0","sha512":"02dc7c32fe0fe73341d8447dc9b7f64fadb0bc85b3a57d5664df320076426a5a59b42b8d752345b86123154a081fbf565cb436dda9b21dd40129b4077df8b2e8","ssdeep":"768:vMO764D9TcTIquhnrlj9GZ22FzsBRsDXvRy+j0cnLHucNNbWVEmb:vuo9TwIqUpjO/Fzo2D/4+j0cLOcNpWB","tlshash":"a123f16733fea825c4aed775e15620d09666fb0e82c0ee4f2d023114ea51bd7b1d0e63","first_seen":"2025-10-16T18:57:17.714243Z","last_seen":"2025-10-16T18:57:17.714243Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1943,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1884,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/spots/322253?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:42.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.atakcdn.art","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 15:28:40 GMT","end":"Thu, 18 Dec 2025 15:28:39 GMT"},"fingerprint":{"sha1":"33:89:62:94:E1:12:11:52:2C:41:37:9F:D0:85:B5:1C:03:F9:7C:8B","sha256":"0A:3B:6A:A7:BF:8D:C8:FC:CC:33:8A:30:AD:CC:20:E8:E8:CB:8D:06:80:07:C6:16:A9:6D:F1:89:2E:26:80:75"}}},"request":{"raw":"GET /api/spots/322253?p=1\u0026s1=%subid1%\u0026kw= HTTP/1.1\r\nHost: news.jennydanny.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nset-cookie: nauid=X70pxXIN1uNBSbz9ImiB; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10617,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (4649)","md5":"b4174d33b337edc2b3da82353b2ef3ff","sha1":"c0b8b180b1df978758e0e1f7f09c3c2514029270","sha256":"3da34af162e02447ed7237615593e25531abd023940e5e2365376f1ef46e771c","sha512":"5da3c44719bd935c119def47680b197072ff63528962ea6455c52cac94cbaeb7f87aa6502f11bbc350f43be4c552523a37728cbf6ec97d1d818391f6eedd8dd4","ssdeep":"192:t/xww3GjnEyEvOlg3/6nxuyKxyMoyYcoWKNuxJKyaSAtZ:7ww3oTEf3/6nxuyKxyMoyYcTBJ/AtZ","tlshash":"5d222956be05123e00fb839d663b776d313ed086fa124548a17dac6445eefcb9812ec8","first_seen":"2025-10-16T18:57:17.723077Z","last_seen":"2025-10-16T18:57:17.723077Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/n.v2.css","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://news.jennydanny.com/api/spots/334568?p=1\u0026s1=%subid1%\u0026kw=","date":"2025-10-16T18:56:43.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Oct 2025 10:32:14 GMT","end":"Tue, 30 Dec 2025 10:32:13 GMT"},"fingerprint":{"sha1":"A5:85:96:D7:D3:14:D9:8C:D5:7D:34:E1:96:37:CB:A5:1A:3F:0C:D2","sha256":"B3:A3:D1:79:1A:8D:A0:85:E5:76:38:A5:30:A8:3D:4B:39:88:E2:D3:C4:87:4C:5F:4A:41:4A:B5:6D:39:9C:85"}}},"request":{"raw":"GET /sdk/v1/n.v2.css HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://news.jennydanny.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:56:43 GMT\r\ncontent-type: text/css\r\nserver: nginx\r\nlast-modified: Tue, 14 Oct 2025 14:50:20 GMT\r\netag: W/\"68ee632c-5bb0\"\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncache-control: max-age=172800\r\nexpires: Sat, 18 Oct 2025 18:56:43 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS5859\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23472,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (23472), with no line terminators","md5":"41adcf610d2503296fed277fd5a0bfe6","sha1":"503005c21fdd836a01012f55ab4c65d4a584cdc6","sha256":"3df2514cf4fea3ad1f5b4fec4b2c97e9cdaeef40e4c06a043804938e15459eed","sha512":"08c052a2f7516c856093b6f8a8895f67eab128d7309c551d6ad79a7818d1468acdfe31994a7f06a17d0cea73eced48c938caccc1354661bd389de20d6ce551a7","ssdeep":"384:ORsyvHAnK1CezhZBhJVhhkhfu3IhDaezh9jhbMfKaFXMSTsrFsNpwtcSTzKX:ORswAnK1V9JfcfmyD99tbeXD","tlshash":"50b2c8b449c0403cf9aacbaee521795c7269c41ae3d2876ed71cbb30e1d51c973789b8","first_seen":"2025-10-13T10:10:01.14665Z","last_seen":"2025-11-05T00:33:56.17604Z","times_seen":130,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/dsp-pixels","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://news.jennydanny.com/api/spots/334568?p=1\u0026s1=%subid1%\u0026kw=","date":"2025-10-16T18:56:43.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Oct 2025 10:32:14 GMT","end":"Tue, 30 Dec 2025 10:32:13 GMT"},"fingerprint":{"sha1":"A5:85:96:D7:D3:14:D9:8C:D5:7D:34:E1:96:37:CB:A5:1A:3F:0C:D2","sha256":"B3:A3:D1:79:1A:8D:A0:85:E5:76:38:A5:30:A8:3D:4B:39:88:E2:D3:C4:87:4C:5F:4A:41:4A:B5:6D:39:9C:85"}}},"request":{"raw":"GET /dsp-pixels HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://news.jennydanny.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://news.jennydanny.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:56:43 GMT\r\ncontent-type: application/json\r\ncontent-length: 70\r\nserver: nginx\r\ncache-control: max-age=172800\r\nx-request-id: 29f344bc-a82e-4a7b-8bf1-5b7ec34b2047\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Accept\r\nexpires: Sat, 18 Oct 2025 18:56:43 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH1742,DS5859\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d65d54baa73d8c5cf1b4145ed2f566ce","sha1":"1924c807418dc7cdf8135bbf2be4e89402e21bfd","sha256":"282322db040ca32cc2f1657864a542d7b60f5d47f4f0f0f7708704acb3c54a88","sha512":"4d9b73b80c65606c0e31a0666a398ee5660fba63277c5abba2938038ba02c1de315fc3e9be8db67e252b8789699f93644347c5805b5a6cdc1b1063cfc9eb4b37","ssdeep":"","tlshash":"5ba022bb00a8b0ceaf20e0c83008a0000ccf80b820a88088ccf22cc0820b3a23030288","first_seen":"2025-06-26T11:56:09.222052Z","last_seen":"2026-04-28T11:06:58.172593Z","times_seen":3092,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/images/3/d/649cd2113ab52389ae954a7be44cade29e1f7f/main.webp","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://news.jennydanny.com/api/spots/334568?p=1\u0026s1=%subid1%\u0026kw=","date":"2025-10-16T18:56:43.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Oct 2025 10:32:14 GMT","end":"Tue, 30 Dec 2025 10:32:13 GMT"},"fingerprint":{"sha1":"A5:85:96:D7:D3:14:D9:8C:D5:7D:34:E1:96:37:CB:A5:1A:3F:0C:D2","sha256":"B3:A3:D1:79:1A:8D:A0:85:E5:76:38:A5:30:A8:3D:4B:39:88:E2:D3:C4:87:4C:5F:4A:41:4A:B5:6D:39:9C:85"}}},"request":{"raw":"GET /images/3/d/649cd2113ab52389ae954a7be44cade29e1f7f/main.webp HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://news.jennydanny.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:56:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3156\r\nserver: nginx\r\nlast-modified: Sat, 03 Oct 2020 01:37:12 GMT\r\netag: \"5f77d5c8-c54\"\r\nx-robots-tag: noindex, nofollow\r\ncache-control: max-age=172800\r\nexpires: Sat, 18 Oct 2025 18:56:43 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: ah1742,DS5859\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3156,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"29f2895d405362109fb5b205b327e704","sha1":"c92c90467efba80e323df4db17d0b1ed4e40be90","sha256":"66d8ea4b11af10ddd18c8ffc31999a23ad2eac96dac0f6ba78145d7a4b2a320f","sha512":"26e286054958d861fd5d100e6b9f4e10f862c92fc11af7daf048c423fc523d6e5aecbaa335bee5c18380fee9888b893ca65e5660283dd4ce96cea5d0f8fd302e","ssdeep":"","tlshash":"70518d3f7fc5a581b32232985f85e7d980ab39dfa0659c832646afce89d20203d144ca","first_seen":"2023-06-18T09:42:11Z","last_seen":"2026-04-27T23:56:30.232937Z","times_seen":1086,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vjs.zencdn.net/7.5.5/video.min.js","fqdn":"vjs.zencdn.net","domain":"zencdn.net","tld":"net"},"ip":{"addr":"151.101.66.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:41.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"vjs.zencdn.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2024 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 07 Jan 2025 21:56:05 GMT","end":"Sun, 08 Feb 2026 21:56:04 GMT"},"fingerprint":{"sha1":"22:88:1F:07:1F:92:14:54:4B:E7:66:41:59:BF:5D:37:AF:C0:31:C7","sha256":"D8:1B:9B:E3:C9:29:CD:95:A8:5F:41:02:B8:20:F7:4E:F9:81:86:30:1D:9D:00:5B:98:B8:5F:02:07:B5:0F:7A"}}},"request":{"raw":"GET /7.5.5/video.min.js HTTP/1.1\r\nHost: vjs.zencdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 13 Jun 2019 18:18:22 GMT\r\netag: \"abf127b5ab0bb498119a93890119a660\"\r\ncache-control: public, max-age=31536000\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ndate: Thu, 16 Oct 2025 18:56:41 GMT\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1812\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncontent-length: 139372\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":502401,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65133)","md5":"abf127b5ab0bb498119a93890119a660","sha1":"86083627a04fe65a9ff242a3edb746b94da084a8","sha256":"4122c012e6c8aba50f529e47785cd402e2b1f6dc1c643907a9fb65375d5cee11","sha512":"dabaf8862d242eecef3ab4c53cf1703c91c5a8ef4fe14d07b9a65171092dfe095db8af4f064bc7e5301e557a0c76284af6aa47380de50c3d4f5a390ad1783ee6","ssdeep":"6144:/5MNKYqpim6TGEw1HO53SWKebFTFMnv0S9aLPCsAuMJDnKkDMIe:/5MNKYqIm6AZD93e","tlshash":"f6b42bd83281716247d370b6903f120a723b99395849c16cf629f9d92df8e49a23bf7d","first_seen":"2023-04-10T19:50:37Z","last_seen":"2026-04-27T23:56:30.812734Z","times_seen":869,"resource_available":true,"data":null}},"time_used":341,"timings":{"blocked":121,"dns":3,"connect":38,"send":0,"wait":27,"receive":56,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xxxfiles.com/vpaid/videojs.vast.vpaid.min.css","fqdn":"www.xxxfiles.com","domain":"xxxfiles.com","tld":"com"},"ip":{"addr":"172.67.194.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:41.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xxxfiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 05:44:51 GMT","end":"Sat, 13 Dec 2025 00:22:17 GMT"},"fingerprint":{"sha1":"D2:12:09:01:09:64:3E:BF:A3:21:1E:BA:8A:77:4F:5B:F2:26:08:7B","sha256":"3C:16:72:A8:86:4C:AF:3A:B1:B9:0F:B3:06:44:AE:CD:20:24:BA:AD:17:A8:77:D6:F1:7A:90:F9:6E:1B:18:88"}}},"request":{"raw":"GET /vpaid/videojs.vast.vpaid.min.css HTTP/1.1\r\nHost: www.xxxfiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499\r\nCookie: PHPSESSID=djv2bk6h5k865sqpul7re7ls7b; kt_rt_ts=645499; kt_qparams=id%3D55518986%26dir%3D4b7001fc05ae7151a106bbadf1ad5510%26ts%3D645499; kt_ips=91.90.42.154\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 16 Oct 2025 18:56:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 20 Nov 2019 10:54:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7dqGTfVQu7%2FVNVI91b34vELNK1ixyZee2PDvR0BkKP2%2FanZWAlEL5vGICe3l4j4UlOen9pig5xGP2j0wa5HNpLIfMet%2BxpSfVEjK6nvrVHI%3D\"}]}\r\nvary: Accept-Encoding\r\netag: \"5dd51b5f-7c7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 1903387\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncf-ray: 98f9c712886b0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1991,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1935)","md5":"eb9b9b38d2eb8e7ddc60d875bb518030","sha1":"6b336bc36cc5ec384bc06f6aeb5e2481093a166c","sha256":"265cfd4e7cf6e19df72e987d49834238c8a08cf0b1a29943428f2a8c038d81fb","sha512":"bb8a04b099407c91ea9c9c78890b03ac5d7ae23e28c975ba7776ad1b0ffeaf9e3025990a06bbdd93ce35ebea54d9bd1ebc596ce370e106acf516ebed2e366cb3","ssdeep":"","tlshash":"36413110b45452ed6b3fc08329d4f36b9034b886e5126bbc9032b5b08eee782257a214","first_seen":"2023-04-05T14:13:49Z","last_seen":"2026-04-27T23:56:30.752849Z","times_seen":521,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/adgpt.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"172.66.163.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:42.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tapioni.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 10:12:45 GMT","end":"Tue, 16 Dec 2025 11:12:39 GMT"},"fingerprint":{"sha1":"53:EE:30:9F:D0:82:6E:D3:05:D7:06:C0:89:A1:7F:95:D2:E2:01:7E","sha256":"21:58:AE:A3:46:B3:6B:EB:5F:82:88:D2:99:DE:87:F2:60:5D:36:27:10:AC:28:89:4F:06:F7:18:18:B4:95:23"}}},"request":{"raw":"GET /adgpt.js HTTP/1.1\r\nHost: cdn.tapioni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:56:42 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 881\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 10:01:41 GMT\r\nvary: Accept-Encoding\r\netag: \"68d11e85-371\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\nage: 292733\r\ncf-cache-status: HIT\r\ncf-ray: 98f9c71b9aea0b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2403,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2403), with no line terminators","md5":"ef9a81ee9ff82a08a41088ae4cbc7824","sha1":"b8eb866cf4d72bccb948f6f2791f56c9243e1ee8","sha256":"34b2437f43830b2c82bf69b4996e65b0fa6e16ba406cfe755c694c3b753883cf","sha512":"f2c32274da408677b3c2c772f097e903b314ad34b650d5b15e25cacc6b30c8ba6e941fb1196bb81d38312953fbe06ade59f6d27e8e0cfce8443d9c93f704386b","ssdeep":"","tlshash":"9b4113ee25a4fda0179b714c212b180af1bd35e0e3ace8c69fb984b47d7d6441111aed","first_seen":"2025-09-22T17:16:58.948655Z","last_seen":"2025-10-23T15:15:33.025845Z","times_seen":283,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":74,"dns":0,"connect":1,"send":0,"wait":7,"receive":0,"ssl":99},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"cdn.tapioni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pxl-eu.tsyndicate.com/api/v1/p/p.gif?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0WIMSPGRgwcNnC0wBHGxpgWNGbUiNEiR5kcYVrAkGHQDBkxZGLQSCniYZg6YzLiiEGmRpgwJFuMMRMDBsoyZGy0zKGyRZkyMGKIEQOjDA4ZZsr0hEjGDkUcNHLgeAinjpiFMmDksGHDJxw4cGN8dChiDpyJOmbkoGFjBo61Isa0wasDxw0YNVT6JGNmoQ0ZD8W4cbOQRo0aOR5jFtHGDUaGM2TEZVv6tGocNWA8rCOHTeeQNm7cGF1HRkY0dOjAmaPjxYszb1yIYTOGzJszLsa8afNiTpswcoS_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_9IggwsN0TCWHF-YnFHKK7f8csxj1RFGRk14mgYbbITxQg0Ag4DCFWm44Vy6IDhBBQhNAbwDCEy7YQMNV-Ox9dVpokYDwCmAcEQZY6zxxgtxNZVVViAYkca3ZryBxwsejg1DvUGV68QTY71BM4wZ_T0WcxkV4YS4Zdjxxbe2MVSDbjjMEFKPAp_BmQ4y1ODYQwc5LoYcCx0GeuNfTEsy5yBVJAIZcryx0AwPvaGQDjSwFTseeSzEF81w7N67DnyF_gUdemS0t8Bl9DtQcMMV98K56a7brhvvxov9vNSNdYfCM8n8EBoKy4DD8n2lmVHsdNwreAt1uJEGHS2k5gIZvtU-h_rEw1CYDDeIgQxyALq-va4MX8DfWOhArhjcgEVbcxvtRMBA3zDkgf6jgQRjMxqDPK4MfvnCvSiCwQj2aIKoCwMbEEKH2-WrIhbaF0TEAJgDjqcObJgIWxDHkIeMAQ5tcJwc7pUG2fnLBYcZIJMQM4bTCNCH5NPBFkQwlio-xIpUvKIWs8hFLFaxC31QQEAA\u0026r=1\u0026s=ae068e8412288cf0601746a7d40201c18b619a7ce4fc8f71e1660acefd1f8cf81760641003\u0026w=t\u0026ir=242x130","fqdn":"pxl-eu.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"142.132.201.97","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://news.jennydanny.com/api/spots/334568?p=1\u0026s1=%subid1%\u0026kw=","date":"2025-10-16T18:56:44.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tsyndicate.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Sep 2025 20:10:41 GMT","end":"Thu, 11 Dec 2025 20:10:40 GMT"},"fingerprint":{"sha1":"25:5B:D4:FE:8D:85:CA:1A:7D:3A:B0:58:EC:2D:7A:B0:62:90:21:1F","sha256":"DF:0A:26:3C:A9:CF:97:54:23:20:C6:11:EB:C6:8C:7F:02:14:58:C8:F6:3B:08:10:27:BF:78:67:09:32:DC:9C"}}},"request":{"raw":"GET /api/v1/p/p.gif?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0WIMSPGRgwcNnC0wBHGxpgWNGbUiNEiR5kcYVrAkGHQDBkxZGLQSCniYZg6YzLiiEGmRpgwJFuMMRMDBsoyZGy0zKGyRZkyMGKIEQOjDA4ZZsr0hEjGDkUcNHLgeAinjpiFMmDksGHDJxw4cGN8dChiDpyJOmbkoGFjBo61Isa0wasDxw0YNVT6JGNmoQ0ZD8W4cbOQRo0aOR5jFtHGDUaGM2TEZVv6tGocNWA8rCOHTeeQNm7cGF1HRkY0dOjAmaPjxYszb1yIYTOGzJszLsa8afNiTpswcoS_gfOCBgzPZmyYCcPRcw0ah2OYGXPjZdMaZsLSGGOjII0wMsScp1HGJBnKNwxFhkszzKATDCXhN5QYP9QxB0JJkNEDVPzNsFMOcdG0E3lIxWBgbDeEkUNONMUwxlwypPaRDV3RsNEYY9AUhlYFznhYaB11xUUdMMxkwxxv0DZGGRH24BhkKu3Yoww2tFFGG2JAKOEaTGghxRQypNGGTFPkYFRYV8AgXRl0ONGESXLYoQcSVASBxBcx0AFDE19EUQURUFShxhBUMDEEDXDkgEUMX0hBRRpOfDHHEjjQJ0QeRRCRgxJLkGHFE2HAAAcTLbyhxxFEIFEGE3joQYMccgzxRhxzFFGGHlPAYEQVeGiRRQxpCKGEGmw0cccXZ1SRBBFSVJGGkj7CEUMPghFmGA7IMtnGGwex4UQYTvZQhB15ECFHQW2M5Vy4OojgRhl3zOGCGmVslgcZYbgb3XRjjREGYFsY2EVmlekAgwtZPZQmY6uJUEcdaWQUQxmRvVQGDS3dUEMZLUzsUksyjDFDC2GIUeBcJakHAxljpcGYCDnE4EIO_9IggwsN0TCWHF-YnFHKK7f8csxj1RFGRk14mgYbbITxQg0Ag4DCFWm44Vy6IDhBBQhNAbwDCEy7YQMNV-Ox9dVpokYDwCmAcEQZY6zxxgtxNZVVViAYkca3ZryBxwsejg1DvUGV68QTY71BM4wZ_T0WcxkV4YS4Zdjxxbe2MVSDbjjMEFKPAp_BmQ4y1ODYQwc5LoYcCx0GeuNfTEsy5yBVJAIZcryx0AwPvaGQDjSwFTseeSzEF81w7N67DnyF_gUdemS0t8Bl9DtQcMMV98K56a7brhvvxov9vNSNdYfCM8n8EBoKy4DD8n2lmVHsdNwreAt1uJEGHS2k5gIZvtU-h_rEw1CYDDeIgQxyALq-va4MX8DfWOhArhjcgEVbcxvtRMBA3zDkgf6jgQRjMxqDPK4MfvnCvSiCwQj2aIKoCwMbEEKH2-WrIhbaF0TEAJgDjqcObJgIWxDHkIeMAQ5tcJwc7pUG2fnLBYcZIJMQM4bTCNCH5NPBFkQwlio-xIpUvKIWs8hFLFaxC31QQEAA\u0026r=1\u0026s=ae068e8412288cf0601746a7d40201c18b619a7ce4fc8f71e1660acefd1f8cf81760641003\u0026w=t\u0026ir=242x130 HTTP/1.1\r\nHost: pxl-eu.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://news.jennydanny.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:44 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-robots-tag: noindex, nofollow\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ba036c43037cfe89320d1ef7b64cd43f","sha1":"88c72d3e26047eb1e45e5564a76427734f120efe","sha256":"42cb846e07917f6731406e500f24aeb2e88c42cda124eaa59e08c5331cad8bcb","sha512":"aa80ccd27c05eb729f730b9d830b011650bcf12cbb25d19edf29efcf962c7465bb5685a5ff5d084356c6710c08e829d16b59e7a59a41767eb14744f326b6c124","ssdeep":"","tlshash":"19900403f5400003d175d03107170340134cd110057c0307405d505cdc553510c01010","first_seen":"2023-05-10T09:10:20Z","last_seen":"2026-04-28T15:06:43.146143Z","times_seen":14953,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":77,"dns":1,"connect":25,"send":0,"wait":26,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/ssp/interstitial/icon_animated/1/img/close.svg","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"104.21.35.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:45.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 Aug 2025 18:23:14 GMT","end":"Thu, 27 Nov 2025 19:21:45 GMT"},"fingerprint":{"sha1":"99:06:8C:E5:8E:41:8B:38:F8:46:C0:E9:CF:99:E2:11:F2:8E:DD:AB","sha256":"93:A8:69:6F:83:C3:C8:1B:E8:A3:20:9C:19:F4:47:35:74:85:80:F1:82:1F:48:42:AB:AA:77:A3:35:AB:29:20"}}},"request":{"raw":"GET /sb/ssp/interstitial/icon_animated/1/img/close.svg HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:56:45 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VUh2mFMRNa6x5QEAehAfbqJ9zpdH%2FzeuqOsI1L2vyAx5dgCKNoSNVS0GNTanb6vdR3%2FfsKt0PguDLFZYzHEMQDIkcr4xCFM1fuN17etS\"}]}\r\nage: 4737299\r\ncf-cache-status: HIT\r\netag: W/\"65aa8501-9c7\"\r\ncontent-encoding: br\r\ncf-ray: 98f9c72e7a457129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2503,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1b6231336753101ab916ff3bc2644225","sha1":"9e0ebaf400b0cdc45a1d40523ea5479205fdd2b2","sha256":"4d6367626004a96e47e82fddaf52a5ee39c7ec20e34d493d6e01c275bb9e3772","sha512":"6ec24bc79813a6de3e5d6f65d9d34960d3ab64f2befdcb0475ebc2f81a5ed32d9430abf4c464db1bf31e9d90e3a2b9f857890138fb5a41ac8a58e0099311d42d","ssdeep":"","tlshash":"4951e93482f6185c9ccd8eace6d418191c60a46b824dc1def5cc7951ef4a502bc7a298","first_seen":"2023-12-05T16:53:58Z","last_seen":"2026-02-03T01:05:39.198036Z","times_seen":1301,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/click/8338494417593631115?c=60\u0026data[error]=3\u0026data[errormsg]=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:46.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.atakcdn.art","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 15:28:40 GMT","end":"Thu, 18 Dec 2025 15:28:39 GMT"},"fingerprint":{"sha1":"33:89:62:94:E1:12:11:52:2C:41:37:9F:D0:85:B5:1C:03:F9:7C:8B","sha256":"0A:3B:6A:A7:BF:8D:C8:FC:CC:33:8A:30:AD:CC:20:E8:E8:CB:8D:06:80:07:C6:16:A9:6D:F1:89:2E:26:80:75"}}},"request":{"raw":"GET /api/click/8338494417593631115?c=60\u0026data[error]=3\u0026data[errormsg]= HTTP/1.1\r\nHost: news.jennydanny.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nCookie: nauid=E2RleDXzoH4IjEhznVUM; asgfp=faed01b113cfb270c624ee1aa793ad6c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:46 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/spots/334568?p=1\u0026s1=%subid1%\u0026kw=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:42.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.atakcdn.art","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 15:28:40 GMT","end":"Thu, 18 Dec 2025 15:28:39 GMT"},"fingerprint":{"sha1":"33:89:62:94:E1:12:11:52:2C:41:37:9F:D0:85:B5:1C:03:F9:7C:8B","sha256":"0A:3B:6A:A7:BF:8D:C8:FC:CC:33:8A:30:AD:CC:20:E8:E8:CB:8D:06:80:07:C6:16:A9:6D:F1:89:2E:26:80:75"}}},"request":{"raw":"GET /api/spots/334568?p=1\u0026s1=%subid1%\u0026kw= HTTP/1.1\r\nHost: news.jennydanny.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nCookie: nauid=E2RleDXzoH4IjEhznVUM\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11457,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5493)","md5":"9d13a27328661b07bbf3c9100ab50a7f","sha1":"e0fbe242aa9e2fdb2505ad4ccd8d488d05d493a0","sha256":"070a4c4eaa78a307f42d4d870a709394be8e87e02877901c1aa191cb1fe141d7","sha512":"f5ddae3806c0d764bfa2fe7a29dbb1e4db2198f16d4e2f5fe5f4d415b8b843d7431b2e7ec121070f8b0ae28d3dbb6258b1af1c95deb14d018f7d6e568824c17b","ssdeep":"192:t/xww3GjnEyEbOlg3/6nxJyKxyMoyYcoWKNuxJ8ra1Sd0Hpn0HBsZ:7ww3oTE73/6nxJyKxyMoyYcTBJasZ","tlshash":"dc320b56aa08123e40e7435d653b7798313dd08afa124658b07eac6847eefcf9952fc8","first_seen":"2025-10-16T18:57:17.751162Z","last_seen":"2025-10-16T18:57:17.751162Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.orbsrv.com/v1/api.php","fqdn":"s.orbsrv.com","domain":"orbsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://news.jennydanny.com/api/spots/321354?p=1\u0026s1=%subid1%\u0026kw=","date":"2025-10-16T18:56:42.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orbsrv.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 Aug 2025 10:26:18 GMT","end":"Sun, 09 Nov 2025 10:26:17 GMT"},"fingerprint":{"sha1":"00:74:5D:38:3E:06:53:77:B8:F1:AE:17:A8:D6:76:6D:1A:00:70:42","sha256":"92:60:CE:DC:13:DC:18:C6:14:88:11:40:ED:8C:58:5B:97:94:42:B0:84:09:B9:2C:88:48:CF:94:97:09:B3:D4"}}},"request":{"raw":"POST /v1/api.php HTTP/1.1\r\nHost: s.orbsrv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 456\r\nOrigin: https://news.jennydanny.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://news.jennydanny.com/\r\nCookie: __uvt=s%3A32%3A%228501f3f34a2bcb12a9b9f396f7df1183%22%3B\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 16 Oct 2025 18:56:42 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://news.jennydanny.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Authorization, Content-Type\r\nAccess-Control-Request-Method: POST\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7158,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9e2f816a3e7cee2f2ad33fb79037437b","sha1":"e23f75a23120d8a724ed146c07ff46fdc46a0620","sha256":"54d4df09dbf0487e25fe746f245b64e8d2a6cc8cb6382bf4eb745dad83a8a16a","sha512":"3315088d3f67331863c639085d00c200a3c84ebc42c007d7bddb33bf85f68f23ee0a53b713cb3f62ce68c2f39a8c82bed0763473e5eca29d39d292cdd50e8736","ssdeep":"192:r5T/0qaO2Jln3CkchWg2ShFB1cF9e5+b9qko46v2JV:Jhi81Oe5+bcko1vOV","tlshash":"ade1f93bfe8914ad63a66e91eca73ff8e57c5007d3014db15b8aa52492ccbd40633369","first_seen":"2025-10-16T18:57:17.754887Z","last_seen":"2025-10-16T18:57:17.754887Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/click/8338494417593631115?c=60\u0026data[error]=3\u0026data[errormsg]=Failed%20to%20decode%20media","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:46.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.atakcdn.art","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 15:28:40 GMT","end":"Thu, 18 Dec 2025 15:28:39 GMT"},"fingerprint":{"sha1":"33:89:62:94:E1:12:11:52:2C:41:37:9F:D0:85:B5:1C:03:F9:7C:8B","sha256":"0A:3B:6A:A7:BF:8D:C8:FC:CC:33:8A:30:AD:CC:20:E8:E8:CB:8D:06:80:07:C6:16:A9:6D:F1:89:2E:26:80:75"}}},"request":{"raw":"GET /api/click/8338494417593631115?c=60\u0026data[error]=3\u0026data[errormsg]=Failed%20to%20decode%20media HTTP/1.1\r\nHost: news.jennydanny.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nCookie: nauid=E2RleDXzoH4IjEhznVUM; asgfp=faed01b113cfb270c624ee1aa793ad6c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:46 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":67,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.xlivrdr.com/api/models/vast?action=sbSignupWithModelSoft\u0026ax=0\u0026campaignId=c5135a4f2a1f31dec37f81076f43ce3228115817d90d19693df2b5c1c9764766\u0026campaignType=smartpop\u0026creativeId=c9b7e049622029cfc0319cc5a63e6f98450c376d3776beafa8030c904a3fd6d5\u0026duration=00%3A00%3A30\u0026iterationId=1075268\u0026masterSmartpopId=2683\u0026memberId=b46d_d5QSP2xkf14hikRvQJypWFTIleian7phAo3MFAG_wAoFWkZ3UkSIGYG51M87vgo0Kl9eSRNmT1AZFSfYRt02x2Kj370YgvfNfvHmpvdIrV2_gUIDRUi\u0026p1=4073707\u0026ruleId=29\u0026showCompanion=1\u0026skipOffset=00%3A00%3A05\u0026smartpopId=13956\u0026sourceId=594678\u0026tag=girls\u0026trafficType=preroll\u0026usePreroll=true\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34734\u0026videoType=ol","fqdn":"go.xlivrdr.com","domain":"xlivrdr.com","tld":"com"},"ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:46.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.xlivrdr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:02:48 GMT","end":"Sun, 07 Dec 2025 09:02:14 GMT"},"fingerprint":{"sha1":"18:51:33:CF:A8:88:6B:8C:BA:0C:FC:AD:26:65:64:F8:F9:5A:32:CA","sha256":"37:C7:74:68:D2:46:40:59:86:A9:99:8C:2C:5E:F6:86:48:C4:47:28:01:2B:8E:2C:93:DF:31:57:81:AD:07:A0"}}},"request":{"raw":"GET /api/models/vast?action=sbSignupWithModelSoft\u0026ax=0\u0026campaignId=c5135a4f2a1f31dec37f81076f43ce3228115817d90d19693df2b5c1c9764766\u0026campaignType=smartpop\u0026creativeId=c9b7e049622029cfc0319cc5a63e6f98450c376d3776beafa8030c904a3fd6d5\u0026duration=00%3A00%3A30\u0026iterationId=1075268\u0026masterSmartpopId=2683\u0026memberId=b46d_d5QSP2xkf14hikRvQJypWFTIleian7phAo3MFAG_wAoFWkZ3UkSIGYG51M87vgo0Kl9eSRNmT1AZFSfYRt02x2Kj370YgvfNfvHmpvdIrV2_gUIDRUi\u0026p1=4073707\u0026ruleId=29\u0026showCompanion=1\u0026skipOffset=00%3A00%3A05\u0026smartpopId=13956\u0026sourceId=594678\u0026tag=girls\u0026trafficType=preroll\u0026usePreroll=true\u0026userId=d100f7df1b38527c59f2a01ce658dbfb8b696949c12c1469164f408167d4a1ca\u0026variationId=34734\u0026videoType=ol HTTP/1.1\r\nHost: go.xlivrdr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.xxxfiles.com\r\nReferer: https://www.xxxfiles.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 16 Oct 2025 18:56:46 GMT\r\ncontent-type: text/xml; charset=utf-8\r\ncf-ray: 98f9c72faea5723c-OSL\r\naccess-control-allow-origin: https://www.xxxfiles.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3733,"size_decoded":0,"mime_type":"text/xml; charset=utf-8","magic":"XML 1.0 document, ASCII text, with very long lines (3733), with no line terminators","md5":"75457e4dc19fa3b0387baf65f870cd1e","sha1":"ac0ff5dd2db0d2703fceae0d76e3bda106c4ebdd","sha256":"bcdbb5d1f85be937bb931bb2edfe8661173610f3ed39f90bb88caf0c673d12be","sha512":"04a48d34dcbdc9d9495ba7607a8c407b68f7a12850729d1ce4f8203623c9296f2c438a35845eed115ec4aef7a79181a8e52a7c3abc97e3acbb0aa5c8eea54c10","ssdeep":"","tlshash":"1a71b8b00232dcb7b883973bc7b5608909762f275cc2c1f4e9811962581ba5a7ef536b","first_seen":"2025-10-16T18:57:17.760873Z","last_seen":"2025-10-16T18:57:17.760873Z","times_seen":1,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/click/16774127962865821115?c=60\u0026data[error]=400\u0026data[errormsg]=","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:46.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.atakcdn.art","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 15:28:40 GMT","end":"Thu, 18 Dec 2025 15:28:39 GMT"},"fingerprint":{"sha1":"33:89:62:94:E1:12:11:52:2C:41:37:9F:D0:85:B5:1C:03:F9:7C:8B","sha256":"0A:3B:6A:A7:BF:8D:C8:FC:CC:33:8A:30:AD:CC:20:E8:E8:CB:8D:06:80:07:C6:16:A9:6D:F1:89:2E:26:80:75"}}},"request":{"raw":"GET /api/click/16774127962865821115?c=60\u0026data[error]=400\u0026data[errormsg]= HTTP/1.1\r\nHost: news.jennydanny.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nCookie: nauid=E2RleDXzoH4IjEhznVUM; asgfp=faed01b113cfb270c624ee1aa793ad6c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:46 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/videojs-thumbnails/0.1.1/videojs.thumbnails.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:41.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/videojs-thumbnails/0.1.1/videojs.thumbnails.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:56:41 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 256\r\ncf-ray: 98f9c7132d2756a5-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb04020-36a\"\r\nlast-modified: Mon, 04 May 2020 16:17:36 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 81753\r\nexpires: Tue, 06 Oct 2026 18:56:41 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DblFGtAgRm1koFnyY9GKdrywKxfBRyyTzzdSLP1Icre0AHHLrnPpXy06ERfY%2Fn2pfL5ISS7%2ByhYEZ9j3eC2jWu%2FxGVHz2bB4QCvGFv%2BM0UonhhkcfUIGcQSAoyhjn2UE4EKZ%2F5jG\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":874,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"39aa2ea27eb7b72cf73d0d5b4f892daf","sha1":"9fa0eb7f5d30e7c54f505ffe9fa5a1fe4725279f","sha256":"e425124d9e8e5674cdad309801b12fdc3804465bc30322d4515b09347a52be05","sha512":"17ede5fa46ea3b94d8cb49a9fcc64e3d7f45647bdf64bb71f373ec47db5b897f4adafa6f7dadf6168ea9380aa46ff0d6e466dffa573283ec88a34327a0e353d6","ssdeep":"","tlshash":"a1115cc8764512b4604a52f5b68ac29d473df148f62ed89c348ff548cf91ed47e476c0","first_seen":"2023-04-05T11:12:40Z","last_seen":"2026-04-27T23:56:30.435302Z","times_seen":841,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":67,"dns":4,"connect":2,"send":0,"wait":18,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/js-cookie@2/src/js.cookie.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:41.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/js-cookie@2/src/js.cookie.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 2.2.1\r\nx-jsd-version-type: version\r\netag: W/\"848-eCpL/NpO2wJcJLidpoZh2cYW9O4\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Thu, 16 Oct 2025 18:56:41 GMT\r\nage: 7921\r\nx-served-by: cache-fra-etou8220107-FRA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 1129\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2120,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1623)","md5":"b4c61fa637bdb18bc2d18a19cb5f30f1","sha1":"782a4bfcda4edb025c24b89da68661d9c616f4ee","sha256":"ee22d4cf088fa680c31dbdf48fe1d58586859539ec5ab71738f826ebeb939d93","sha512":"a7a5982531eec5e77e7ff2961372bfe12a3d1857e4f2d9e0ad08623492787c27e354cd83e54a3ddf683ff3af2e09cd30ca629ab489342419e2d12b482739eae3","ssdeep":"","tlshash":"c941c9e578883c45115b06b1433f228ff2354616added196932da0f0387447b561bfe7","first_seen":"2025-03-16T13:04:11.219865Z","last_seen":"2026-04-28T15:26:57.287446Z","times_seen":1768,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":63,"dns":12,"connect":18,"send":0,"wait":19,"receive":1,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/click/6821705243082421115?c=90","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://news.jennydanny.com/api/spots/322254?p=1\u0026s1=%subid1%\u0026kw=","date":"2025-10-16T18:56:42.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.atakcdn.art","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 15:28:40 GMT","end":"Thu, 18 Dec 2025 15:28:39 GMT"},"fingerprint":{"sha1":"33:89:62:94:E1:12:11:52:2C:41:37:9F:D0:85:B5:1C:03:F9:7C:8B","sha256":"0A:3B:6A:A7:BF:8D:C8:FC:CC:33:8A:30:AD:CC:20:E8:E8:CB:8D:06:80:07:C6:16:A9:6D:F1:89:2E:26:80:75"}}},"request":{"raw":"GET /api/click/6821705243082421115?c=90 HTTP/1.1\r\nHost: news.jennydanny.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://news.jennydanny.com/api/spots/322254?p=1\u0026s1=%subid1%\u0026kw=\r\nCookie: nauid=E2RleDXzoH4IjEhznVUM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:42 GMT\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.jennydanny.com/api/users/2312985871249234115/1987986?fill=0\u0026kw=Teen,Brunette,Big%20Ass,vaginal,Big%20Cock,European,Russian,cum%20on%20ass,toned,ass,leggings,standing%20doggy,doggy,amateur%20girl,bwc,beeg.com,intro,pov-doggy,from-behind,bend-over,indie%20girl,My%20Little%20Betsy","fqdn":"news.jennydanny.com","domain":"jennydanny.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:45.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.atakcdn.art","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 15:28:40 GMT","end":"Thu, 18 Dec 2025 15:28:39 GMT"},"fingerprint":{"sha1":"33:89:62:94:E1:12:11:52:2C:41:37:9F:D0:85:B5:1C:03:F9:7C:8B","sha256":"0A:3B:6A:A7:BF:8D:C8:FC:CC:33:8A:30:AD:CC:20:E8:E8:CB:8D:06:80:07:C6:16:A9:6D:F1:89:2E:26:80:75"}}},"request":{"raw":"GET /api/users/2312985871249234115/1987986?fill=0\u0026kw=Teen,Brunette,Big%20Ass,vaginal,Big%20Cock,European,Russian,cum%20on%20ass,toned,ass,leggings,standing%20doggy,doggy,amateur%20girl,bwc,beeg.com,intro,pov-doggy,from-behind,bend-over,indie%20girl,My%20Little%20Betsy HTTP/1.1\r\nHost: news.jennydanny.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.xxxfiles.com/\r\nOrigin: https://www.xxxfiles.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: nauid=E2RleDXzoH4IjEhznVUM; asgfp=faed01b113cfb270c624ee1aa793ad6c\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:56:45 GMT\r\ncontent-type: text/xml\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.xxxfiles.com\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2228,"size_decoded":0,"mime_type":"text/xml","magic":"XML 1.0 document, ASCII text, with very long lines (368)","md5":"a11b85eb7fbdda97d12dbbfccccce62e","sha1":"022dd1a21e1d83b54f0e2a3ce148f90deaf049b5","sha256":"c67c1128eed5ad9329c837703f3378c74922aeacbc67d0a8cc265af373575062","sha512":"13e52ea9dc63f51d18972efc4374a8a9bde74867dc56fab50f131e65f2be1bdf2e083b7099878c989dbbc0d1784ca1fd529f74b1c0f085ed6a5b18d74d02ab2a","ssdeep":"","tlshash":"6641a12c51f851f908944414ebb8d99a4fb63daf0664e843fe5d89817f0e78521df1c1","first_seen":"2025-10-16T18:57:17.77419Z","last_seen":"2025-10-16T18:57:17.77419Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"skinnycrawlinglax.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Finterstitial%2Ficon_animated%2F1%2Fcss%2Fanimate.css\u0026l=78693\u0026fd=68","fqdn":"skinnycrawlinglax.com","domain":"skinnycrawlinglax.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.xxxfiles.com/videos/55518986/4b7001fc05ae7151a106bbadf1ad5510/?ts=645499","date":"2025-10-16T18:56:45.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"skinnycrawlinglax.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:00:34 GMT","end":"Tue, 25 Nov 2025 22:00:33 GMT"},"fingerprint":{"sha1":"FC:5B:24:E2:ED:A9:65:69:CA:97:74:44:F8:E9:93:1A:50:E7:73:C1","sha256":"26:1B:F8:72:30:B2:C4:49:6A:2E:E7:A5:FC:26:35:74:02:CB:56:D1:F7:7E:A5:5E:89:65:A9:B4:1F:1F:DB:8F"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fssp%2Finterstitial%2Ficon_animated%2F1%2Fcss%2Fanimate.css\u0026l=78693\u0026fd=68 HTTP/1.1\r\nHost: skinnycrawlinglax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.xxxfiles.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Thu, 16 Oct 2025 18:56:46 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: skinnycrawlinglax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"skinnycrawlinglax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}