{"report_id":"3ad51ef4-7302-4e10-9ba2-e089daeab73a","version":6,"status":"done","tags":[],"date":"2025-12-09T16:31:01Z","url":{"schema":"http","addr":"russellgallery.blog/join/196270?lang=ar","fqdn":"russellgallery.blog","domain":"russellgallery.blog","tld":"blog"},"ip":{"addr":"172.67.217.128","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"snapgirls7.com/?t=notrack\u0026s2=1sjos4f.4.94lo\u0026rn=zc4ZodGUys4WmdeVEhG\u0026rf=a\u0026p=0\u0026mmid=2256\u0026mh=clhVanNsUnJvRmV3ZE9mZGtHdVZ6anFlTGxkT3hFRVV2cVh0cGEtMzU3ODQ%3D\u0026lid=18586\u0026cr=71395\u0026adb=1\u0026a=850488","fqdn":"snapgirls7.com","domain":"snapgirls7.com","tld":"com"},"title":"The most popular dating site of this month","dom":{"size":18753,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (16861)","md5":"e0449cc0a82668a04a2781502cbc2b00","sha1":"e09800e3cbc68c7fa8840e8e24558fb362e4dff2","sha256":"e8c93660546b1e4b8ca850795906f80fc732ea12d2bcfef8c5e291fb26b42931","sha512":"4cfe4ccb6ddf6982e344d46a6566a71f2608ca6cb84a71023d437728582487bf38ad375d4cf063035dc14c963feb782e1c70943508e6d99132ff48f806840044","ssdeep":"384:YCn7ceXxwSjD1KcNkctJIQf+CLAdqvEh+gS/x5TiG1:5noKjD1Kc7KCLAdqvEh+gKAm","tlshash":"288235347152386b986321f066f757ce72efc20dc82b459973be43e58bcbc85a521ab1","dom_hash":"domhash965d813d7a5c4b125370917561257520","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"russellgallery.blog/join/196270?lang=ar","fqdn":"russellgallery.blog","domain":"russellgallery.blog","tld":"blog"},"ip":{"addr":"172.67.217.128","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-13T16:31:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"waust.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"waust.at","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"waust.at","ip":{"addr":"104.26.5.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":36042,"first_seen":"2016-01-28T18:24:33Z","last_seen":"2025-12-09T05:34:34.744604Z","alert_count":2,"request_count":1,"received_data":13930,"sent_data":405,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"russellgallery.blog","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-05","domain_rank":0,"first_seen":"2025-12-09T16:31:02.856055Z","last_seen":"2025-12-09T16:31:02.856055Z","alert_count":0,"request_count":2,"received_data":3829,"sent_data":971,"comment":"","tags":null,"fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-12-07T22:25:46.118111Z","alert_count":0,"request_count":1,"received_data":6468,"sent_data":439,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"zariftenbus.com","ip":{"addr":"91.107.152.144","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2025-11-21","domain_rank":0,"first_seen":"2025-11-22T22:58:03.553339Z","last_seen":"2025-12-07T21:20:18.997417Z","alert_count":0,"request_count":1,"received_data":19080,"sent_data":529,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"snapgirls7.com","ip":{"addr":"104.21.59.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-03-02","domain_rank":6428332,"first_seen":"2025-09-03T21:21:54.792428Z","last_seen":"2025-09-03T21:21:54.792428Z","alert_count":0,"request_count":3,"received_data":43689,"sent_data":2355,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-12-07T22:16:37.28363Z","alert_count":0,"request_count":1,"received_data":433057,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"t.dtscout.com","ip":{"addr":"172.67.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-11-01","domain_rank":54823,"first_seen":"2017-01-30T04:52:42Z","last_seen":"2025-12-09T05:34:33.375789Z","alert_count":0,"request_count":3,"received_data":4235,"sent_data":1575,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"a.mrktmtrcs.net","ip":{"addr":"104.26.15.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-04","domain_rank":57910,"first_seen":"2025-07-09T09:09:08.6334Z","last_seen":"2025-12-07T20:10:02.363094Z","alert_count":0,"request_count":1,"received_data":447,"sent_data":464,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-07T22:17:02.440237Z","alert_count":0,"request_count":1,"received_data":2552,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2025-12-07T22:25:33.399392Z","alert_count":0,"request_count":1,"received_data":87518,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"p.mrktmtrcs.net","ip":{"addr":"104.26.15.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-04","domain_rank":63178,"first_seen":"2025-05-16T05:58:44.985071Z","last_seen":"2025-12-07T20:10:02.507197Z","alert_count":0,"request_count":1,"received_data":40592,"sent_data":413,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"adultgirll.com","ip":{"addr":"207.148.23.63","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"domain_registered":"2024-09-16","domain_rank":218575,"first_seen":"2024-10-25T15:36:52Z","last_seen":"2025-11-28T13:24:21.316891Z","alert_count":0,"request_count":5,"received_data":62512,"sent_data":2421,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-07T22:13:56.807982Z","alert_count":0,"request_count":1,"received_data":19615,"sent_data":558,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"russellgallery.blog/join/196270?lang=ar","fqdn":"russellgallery.blog","domain":"russellgallery.blog","tld":"blog"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5b6b86b219be7e0cc221ba49fed10430","sha1":"f40b013d053d93acdd433aeb885c8726b45693a5","sha256":"2c5fee05dbbc5461c593465e97210efd04edd181d6d766028863499bab9f47a5","sha512":"35245c77cbc4b211dfea8d0b84c8dc3e74bfd40344bd33b8df79f100ef6b1a28415e0227790670b45066c23cebfe589fefebf69039dd70dd8a40a24155fce2ec","ssdeep":"","tlshash":"11e0ab2ad8e7067c8ce93a841038c67530f874a8aab3e057620cc86cc639fc50c0caec","size":424,"data":"","first_seen":"2025-11-22T22:58:10.048017Z","last_seen":"2026-01-05T20:57:43.022593Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.dtscout.com/pv/?_a=v\u0026_h=russellgallery.blog\u0026_ss=4oy8jwimht\u0026_pv=1\u0026_ls=0\u0026_u1=1\u0026_u3=1\u0026_cc=no\u0026_pl=d\u0026_cbid=71gk\u0026_cb=_dtspv.c","fqdn":"t.dtscout.com","domain":"dtscout.com","tld":"com"},"ip":{"addr":"172.67.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"56368900e4829203e14889abeb486d84","sha1":"a7f3b90867fe3160abafa994b0cb9e522952e01e","sha256":"c578dd3f2695f613fa88a8654214bf4b7c0a6315c421e3bec4d5a5356744c9a3","sha512":"d842ec7f9151fe770af2433235d101b3bde671a948aefe71a5e2110c528fc02a574f6de0b1c53cc75696be951875c834d4f0f135f5c012ae391447a74a3e8b70","ssdeep":"","tlshash":"3c90021868d984201ac9db44146612444171039415c4519594315a64154e780d75b9b8","size":52,"data":"","first_seen":"2025-12-09T16:31:07.863763Z","last_seen":"2025-12-09T16:31:07.863763Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"snapgirls7.com/?utm_source=lLdulGEI7x1Ty\u0026utm_content=1sjos4f.4.94lo","fqdn":"snapgirls7.com","domain":"snapgirls7.com","tld":"com"},"ip":{"addr":"104.21.59.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a55bc61bb8cabacdc353356d20217fb1","sha1":"ecf7f3fc124c625be7890bb4536b6f89d4d76786","sha256":"a4a9b568a83a7f91eeed94a7c6587bb5d3bdf73d515d40c4402460dc046ab7a6","sha512":"1a4a80c29ca2501d6878ba3ab34407d4141b87f2f8eba3714f9331c33632355641a8e65f3c710cd79cb050c27f410acb3274df3a3b52e08da87cf7ed46f4b43f","ssdeep":"","tlshash":"898004d530c350345753135400571dc45434c47014544d44c440d4513c550345115c5c","size":38,"data":"","first_seen":"2023-04-11T21:09:18Z","last_seen":"2026-04-03T16:07:45.441838Z","times_seen":10276,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"snapgirls7.com/?utm_source=lLdulGEI7x1Ty\u0026utm_content=1sjos4f.4.94lo","fqdn":"snapgirls7.com","domain":"snapgirls7.com","tld":"com"},"ip":{"addr":"104.21.59.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"29d7ee811f8cf1bf3bda8f5319aef1e5","sha1":"907289eb4e1fdf4645a67454a6dbd65b8f13073b","sha256":"fdaab26f5efc394524377c79e4a7b9ceae732be819b1e6e754f2191f8fb16887","sha512":"2d5aca06f1282afd7c1dc1a25c7ec72bf1ecbed1e93aac7f36999d7259116d7e82cb6346357fb4eec667b4484d485db473637109c991c397af5098cd061b8dda","ssdeep":"","tlshash":"143100587012b1f605b731b6296be94a7a363ce1840f1594605ad8b83d3bceca123f5b","size":1626,"data":"","first_seen":"2025-05-22T14:43:08.192847Z","last_seen":"2025-12-09T16:31:07.88973Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waust.at/d.js","fqdn":"waust.at","domain":"waust.at","tld":"at"},"ip":{"addr":"104.26.5.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5992534af71baf4983f6f7b82c5fcf7","sha1":"a233028f5d7ea0d20ddf00c03167d4ee3e4f21b7","sha256":"7c27802697a33c3f1b9cf7995f01c5d6caa544ce60e8828f16eb7eed8c878c58","sha512":"800422fe039555fd9e4db68cc43c1f6fdaf0a971c2bfda36e79f058ba95dff7760b5b7762c2cbd1b54a6174f4aeb9a2aaac8725ee14604bd586b4297eb91caba","ssdeep":"192:MXHLyjKsbIGO5tlR/enXJPc/6+Kkemh+cMUBX3Pma26GBmx0MVpd:M7yjKsbBnpi6+KtHcbnPma2ax0Ipd","tlshash":"57526ca12180209183d705a6266ffb587435793abb93a83ca09decf8731cf9d90c7b53","size":13202,"data":"","first_seen":"2025-11-29T00:57:52.500436Z","last_seen":"2026-04-03T09:15:00.035687Z","times_seen":1181,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-34N7QFM0SY","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a10fb16a7a3d4b76ac77d5c1829e443","sha1":"06ec5149d32c73cadb6e1714ecda73c060ccc0b4","sha256":"c3b13f3392384ab247ad3cfa01f5684ab2100acdc74139fa78261351a3b5ba2c","sha512":"e202501ef931ff0e899922035d8ef6b3014a6483b6c03f1b95676e1f7239e24eaccc42364dab5a7147bd4ee0e71098baa0092805c616b7511eb57110657209b4","ssdeep":"6144:sAS9mynndgbw4GmPoiB0Mqtw0+TCAZ+EDWBUWSTxNHIT8d:20EdZ4G8oeZ+EHXlhIq","tlshash":"5094098e73d674625396f078503f018ba57b28a2f45dc896f189cce42e74a9a0277f7c","size":432453,"data":"","first_seen":"2025-12-09T16:31:07.859162Z","last_seen":"2025-12-09T16:31:07.859162Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.dtscout.com/i/?l=https%3A%2F%2Frussellgallery.blog%2Fjoin%2F196270%3Flang%3Dar\u0026j=\u0026wk=systemweb","fqdn":"t.dtscout.com","domain":"dtscout.com","tld":"com"},"ip":{"addr":"172.67.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8450c234da2df92a0c33a47c5aabf6e6","sha1":"0ea50308805f927f1e9ce37a96d44f27e01cdf8e","sha256":"c67ad82f6fe5a742115d0d041e403c18df8da6486fa0dd5fc785d4bb58458ac9","sha512":"1ea70b0b047651af5f5496bdbfac4574dad62bef73132ad667c194c375382c36ea62c24f37a4c2882d6e644846f5b866720a8b33cad3e4e650fa6b9fa0331de8","ssdeep":"","tlshash":"1f41880bb5e5347803e2006965ff635fb5330928bc5784c08596dc04fd749fad1b6eaa","size":2292,"data":"","first_seen":"2025-11-28T22:59:20.195769Z","last_seen":"2026-04-03T12:37:24.675505Z","times_seen":2410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p.mrktmtrcs.net/mm.js","fqdn":"p.mrktmtrcs.net","domain":"mrktmtrcs.net","tld":"net"},"ip":{"addr":"104.26.15.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"67cda29c6b95cb5eb8c4960490502a19","sha1":"ac6700bfe19f0580cccf51bddf2a7310d31a833c","sha256":"6ed6986bfeafe3a3bab8174b435e96c3ca8e216c3c7941b20c3e4984087f9e0b","sha512":"c5d6bdfb04022d8f3ff82c95c1c938a3aec4246a9fefc40a2e96b12e42295fe8d578c983b399ca86493f3481b113f685d27e20e2cd19000efab176a6b7ab578f","ssdeep":"768:Iudg8MPdH/EeIO5V1gPk5Te1pCeKSreGdRY8ZqM0wTo:IHEelgvZnAVQo","tlshash":"9403192ee3a2761003abf19dd90b50003e35541bea41f8a4bdecb581ff958a512bf7b5","size":39952,"data":"","first_seen":"2025-07-17T20:43:49.34962Z","last_seen":"2026-04-03T12:37:24.671773Z","times_seen":2465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"russellgallery.blog/join/196270?lang=ar","fqdn":"russellgallery.blog","domain":"russellgallery.blog","tld":"blog"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"303baf4992ca905be6e832eeedf654ee","sha1":"2ab0deb28c3d9504e5fe199ce9f6cb636e3bfb09","sha256":"901484dac7acef6e303060b7b16d3041c2765d9eb6c81128d099a039441239cc","sha512":"d8286e90f2ee61161f9a5525af4eb8777a493c6ef454cb1185d6b819b20e823ec93e331d1cbbf3fdf11b74427d8dd152e2d5e7b2f24deb7bc340c8598e5d71e7","ssdeep":"","tlshash":"2cc02ba4264b5cb107e73e018f1f7244b062230054e10c300c0122041634e0bfa68c00","size":144,"data":"","first_seen":"2025-07-28T05:09:19.032851Z","last_seen":"2026-01-05T20:57:43.023773Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"snapgirls7.com/p.js?t=notrack\u0026s2=1sjos4f.4.94lo\u0026rn=zc4ZodGUys4WmdeVEhG\u0026rf=a\u0026p=0\u0026mmid=2256\u0026mh=clhVanNsUnJvRmV3ZE9mZGtHdVZ6anFlTGxkT3hFRVV2cVh0cGEtMzU3ODQ%3D\u0026lid=18586\u0026cr=71395\u0026adb=1\u0026a=850488","fqdn":"snapgirls7.com","domain":"snapgirls7.com","tld":"com"},"ip":{"addr":"104.21.59.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3e1750c5f8a758295ab803b29d78997","sha1":"5b0dc625e61768d9777c92f22a465cca0af1de1c","sha256":"a7674c351b6509fe09130211760e50201627cfdd22197a37f999f3e51b921217","sha512":"422accb2ca833dc230bae5b5dee4e6e3e182d22b54b851ca34ab163882814a27c0d165cf8ddfe3ec22c9a35ce5596cced1f18e7d1226115bf9fc2be9c46b0ba4","ssdeep":"","tlshash":"96e02b6e15f104750af371618f7f5a10353b114f304b9a06bdfc13411f9020e8646de4","size":425,"data":"","first_seen":"2025-12-09T16:31:07.883769Z","last_seen":"2025-12-09T16:31:07.883769Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.3.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-03T17:32:49.547416Z","times_seen":118014,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"snapgirls7.com/?utm_source=lLdulGEI7x1Ty\u0026utm_content=1sjos4f.4.94lo","fqdn":"snapgirls7.com","domain":"snapgirls7.com","tld":"com"},"ip":{"addr":"104.21.59.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c11ea7de12731eccfd4a729d024dfef4","sha1":"ab912e23b6ea5519304520590e773f32eced2ece","sha256":"af8248387c6fede17ae57e80efb0b7aeaae5e505b3d58994a102147c139b0739","sha512":"e6b37ffe51f7f3d13a280a3216cc389ac70813a903cc7ef2070837da9350d5150940aa17f694dbb6cd40e2c907bef8c6d88c37505643eb2affd4f675d9649bf4","ssdeep":"","tlshash":"7ed0c27940d3caa52a0321244aec8048b71d5497594b5125b58d5553a74909082e59a6","size":268,"data":"","first_seen":"2025-12-09T16:31:07.892896Z","last_seen":"2025-12-09T16:31:07.892896Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"russellgallery.blog/join/196270?lang=ar","fqdn":"russellgallery.blog","domain":"russellgallery.blog","tld":"blog"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"014c0452a21c061e08ba16a66e6b4c6c","sha1":"1f3bdc996e6ad56cc669e8b76afd6ced6cab1d65","sha256":"3fb2acbff273fc5269c262ffcce8258428c5a1e51b55b73ccd8f5ad4c167ab74","sha512":"a5d453c900cefdcd7e5026d2a77460ce5d08e14c1ea40a4dbfbbf6d875babf2b9b3625329011addc11969272154ad889433ab9c3c1620387aa5e461361b7eba3","ssdeep":"","tlshash":"05b012180294002770484910012c158c91b0d181e3f4820432cccc31415e40d13b3669","size":91,"data":"","first_seen":"2025-12-05T18:52:52.114748Z","last_seen":"2026-03-21T21:33:00.281158Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"russellgallery.blog/join/196270?lang=ar","fqdn":"russellgallery.blog","domain":"russellgallery.blog","tld":"blog"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3328632cf9df7584bed6f8b36de95a94","sha1":"e1f52ffea0266a36b7023e3865e2bb5147457625","sha256":"d34a681a57716b100609a3c2b97ecc23a37355ade022c2c34ce208fb2d881472","sha512":"349f9c450beed688d3083ddd59834cc5ddcd8e063f58b725d28fd6757501f52fb2c1d844b84f0e0edef9fe8aaf3e535225e31763ed76b06b5a79259365279e44","ssdeep":"","tlshash":"28b0129b282122481742e191cd73330d003b33ed0424a2801ca108302b2d3cf511d6dc","size":90,"data":"","first_seen":"2025-12-04T06:25:12.27122Z","last_seen":"2025-12-28T21:17:10.385867Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/lazyload@2.0.0-rc.2/lazyload.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"60669862b7c39ecb3283b1faa9563a07","sha1":"f9b1d545cf4c85ddda753ff9609ede569d92b31f","sha256":"874cad10027313f3620a770d4a338369833ed5b3913f0793cb8500361b19e6ea","sha512":"1512c8379b8fa49935ed1bfc6a3d2f3a97f892c947c51ad07b1c227078e8a253e05aed187658c14bb242914f1042d523dfe7292d2f087077513337d7391c9a50","ssdeep":"96:3DU0gNYNpGxM7B2PswfNVRL2evyKSCjoFxVb1Gbe7BP+OpqC5URolicTejU+5UZE:zpNiM7B1wV20jSCcFXbcbe7B7qC5U2iT","tlshash":"3ec1ef483deba15b91a3b0f89b5f5145b238810b101dee543e9c87e6af6093c26f1fd8","size":5674,"data":"","first_seen":"2023-03-07T01:06:47Z","last_seen":"2026-04-03T13:20:30.390225Z","times_seen":2185,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"p.mrktmtrcs.net/mm.js","fqdn":"p.mrktmtrcs.net","domain":"mrktmtrcs.net","tld":"net"},"ip":{"addr":"104.26.15.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://russellgallery.blog/join/196270?lang=ar","date":"2025-12-09T16:30:37.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrktmtrcs.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 21:25:16 GMT","end":"Tue, 24 Feb 2026 22:25:15 GMT"},"fingerprint":{"sha1":"B1:B8:C8:FB:D8:BE:16:F2:FB:48:B3:17:B3:16:C6:A6:D3:7C:6B:5D","sha256":"58:4E:5B:73:64:D3:A0:B0:A4:BA:45:97:C8:DB:73:B2:47:3A:B6:A3:8B:B5:21:4A:41:5D:DF:62:81:07:80:F8"}}},"request":{"raw":"GET /mm.js HTTP/1.1\r\nHost: p.mrktmtrcs.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://russellgallery.blog/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 16:30:37 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 21 May 2025 20:03:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Ja3%2BM9J3W5FJqJ7VPMoF30VWq7uiQcCvIxt2%2FfyK%2Bfet41A8boYrSW3JpKnZGfeubsmoO9QcuEjn%2BBw2sD%2FR0X5KpwSye5%2BB5yAVyIn\"}]}\r\nage: 4646\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"682e3177-9c10\"\r\ncontent-encoding: br\r\ncf-ray: 9ab5e35a2f260daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39952,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (30767)","md5":"67cda29c6b95cb5eb8c4960490502a19","sha1":"ac6700bfe19f0580cccf51bddf2a7310d31a833c","sha256":"6ed6986bfeafe3a3bab8174b435e96c3ca8e216c3c7941b20c3e4984087f9e0b","sha512":"c5d6bdfb04022d8f3ff82c95c1c938a3aec4246a9fefc40a2e96b12e42295fe8d578c983b399ca86493f3481b113f685d27e20e2cd19000efab176a6b7ab578f","ssdeep":"768:Iudg8MPdH/EeIO5V1gPk5Te1pCeKSreGdRY8ZqM0wTo:IHEelgvZnAVQo","tlshash":"9403192ee3a2761003abf19dd90b50003e35541bea41f8a4bdecb581ff958a512bf7b5","first_seen":"2025-07-17T20:43:49.34962Z","last_seen":"2026-04-03T12:37:24.671773Z","times_seen":2465,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":39,"dns":22,"connect":1,"send":0,"wait":5,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adultgirll.com/assets/ae9d6c4c108a7ee9923f82e2306bcb9c/images/icon-times-blue.svg","fqdn":"adultgirll.com","domain":"adultgirll.com","tld":"com"},"ip":{"addr":"207.148.23.63","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://snapgirls7.com/?utm_source=lLdulGEI7x1Ty\u0026utm_content=1sjos4f.4.94lo","date":"2025-12-09T16:30:38.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adultgirll.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 02:08:44 GMT","end":"Thu, 22 Jan 2026 02:08:43 GMT"},"fingerprint":{"sha1":"51:34:14:59:9F:49:06:D7:6F:F0:A2:99:0E:43:BE:A0:0F:D2:DE:16","sha256":"52:6E:DA:5B:D2:EB:CF:62:95:61:30:1E:CD:76:A8:40:C9:2D:AB:37:4C:C9:1C:BF:35:9B:85:4E:2E:A1:BF:F6"}}},"request":{"raw":"GET /assets/ae9d6c4c108a7ee9923f82e2306bcb9c/images/icon-times-blue.svg HTTP/1.1\r\nHost: adultgirll.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://snapgirls7.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 09 Dec 2025 16:30:38 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 425\r\nlast-modified: Tue, 20 Feb 2024 13:29:03 GMT\r\netag: \"65d4a91f-1a9\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":425,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"77ebfbe93ffb8dc9ea0c0d7bd67be325","sha1":"952f77a911636168d31905c511e6a27ad85e43bd","sha256":"ca94379c732e2de75c9e9c825e36b35d386031d8a26ebed4adfe11f9fc99e27a","sha512":"0d652b3d3693e8489c64d1f284ccbb10b51d8ae7716d0d362271332d35b7e6e8d4495e6744c9e3cccaf58ddbe1c20571c06fc0842eaaff5c02793757129ae7a5","ssdeep":"","tlshash":"9de06574fe3c3ca656019206927c6405320a20fa090e862d5ad34c24de745db287fe7e","first_seen":"2025-05-22T14:43:08.181512Z","last_seen":"2025-12-09T16:31:07.850889Z","times_seen":33,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":202,"dns":26,"connect":87,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://snapgirls7.com/?utm_source=lLdulGEI7x1Ty\u0026utm_content=1sjos4f.4.94lo","date":"2025-12-09T16:30:38.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/montserrat/v31/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://snapgirls7.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18780\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 03 Dec 2025 23:00:18 GMT\r\nexpires: Thu, 03 Dec 2026 23:00:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 495020\r\nlast-modified: Thu, 04 Sep 2025 17:09:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18780,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18780, version 1.0","md5":"e7198b2dcb57c0193b0e9765353994ba","sha1":"6e2658ad73dda183d4fa2979809a73a0c29d21c9","sha256":"e66bcd2761ab6924b25ce70dafe10e57a39193c4fea1516730bd9cb5240af6c8","sha512":"01054290f69d0e4232687f67e5d2522f186f87fe833bd1b13016d0e79a1159c49e767a5c6e9c61f9b3fea0c27df2194011bf46d6f6c1ee46d1f4313ac1950f9c","ssdeep":"384:pJOL4DxNfzRV4g4Miv8HlK3z114ow92D4bH7CxPhdWS6UJ836u8K+ylyr:p5P8Mq8Hlqo92D4vOPhdWSL+qu8Kqr","tlshash":"ef82d0ec209846f9fc0a6e97dfc49bd522430cbd87166e3093ab0dc84b875a4d667693","first_seen":"2025-09-05T00:54:05.741935Z","last_seen":"2026-04-03T17:01:35.520861Z","times_seen":28637,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":83,"dns":2,"connect":21,"send":0,"wait":22,"receive":5,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waust.at/d.js","fqdn":"waust.at","domain":"waust.at","tld":"at"},"ip":{"addr":"104.26.5.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://russellgallery.blog/join/196270?lang=ar","date":"2025-12-09T16:30:36.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waust.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 17:56:52 GMT","end":"Thu, 15 Jan 2026 18:56:42 GMT"},"fingerprint":{"sha1":"D0:1C:48:C2:85:E7:70:B5:92:4E:44:F7:D2:C4:15:9A:33:43:58:F4","sha256":"82:9E:D2:CA:61:8C:47:66:66:E2:86:1F:A9:23:F7:BB:B0:62:3E:0C:6C:96:EA:60:DC:51:D9:97:87:8A:98:6B"}}},"request":{"raw":"GET /d.js HTTP/1.1\r\nHost: waust.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://russellgallery.blog/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 16:30:36 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 28 Nov 2025 22:34:06 GMT\r\netag: W/\"692a235e-3392\"\r\nexpires: Wed, 10 Dec 2025 16:29:39 GMT\r\ncache-control: max-age=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 56\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DG%2BoYH2ej5UfzUcZRLGKCy3bXhLgZOLzUm81NhYu1p2f948nNYaAeSyomhOcSsKGJvWlS3ngrluByi7EDpnbgjLWNVKEveY%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9ab5e3571a708be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13202,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (13202), with no line terminators","md5":"e5992534af71baf4983f6f7b82c5fcf7","sha1":"a233028f5d7ea0d20ddf00c03167d4ee3e4f21b7","sha256":"7c27802697a33c3f1b9cf7995f01c5d6caa544ce60e8828f16eb7eed8c878c58","sha512":"800422fe039555fd9e4db68cc43c1f6fdaf0a971c2bfda36e79f058ba95dff7760b5b7762c2cbd1b54a6174f4aeb9a2aaac8725ee14604bd586b4297eb91caba","ssdeep":"192:MXHLyjKsbIGO5tlR/enXJPc/6+Kkemh+cMUBX3Pma26GBmx0MVpd:M7yjKsbBnpi6+KtHcbnPma2ax0Ipd","tlshash":"57526ca12180209183d705a6266ffb587435793abb93a83ca09decf8731cf9d90c7b53","first_seen":"2025-11-29T00:57:52.500436Z","last_seen":"2026-04-03T09:15:00.035687Z","times_seen":1181,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":48,"dns":35,"connect":1,"send":0,"wait":5,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"waust.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"waust.at","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zariftenbus.com/zs72wG","fqdn":"zariftenbus.com","domain":"zariftenbus.com","tld":"com"},"ip":{"addr":"91.107.152.144","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-09T16:30:37.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zariftenbus.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 15:59:02 GMT","end":"Mon, 02 Mar 2026 15:59:01 GMT"},"fingerprint":{"sha1":"71:0C:2A:D7:CB:5B:81:19:0F:CB:6C:04:C3:63:3F:73:57:8E:96:4B","sha256":"F9:2E:78:2D:FA:9E:16:9E:D1:B4:AD:15:8E:84:7F:44:71:51:46:1B:A6:24:F0:D3:24:14:33:F3:10:F9:8C:0F"}}},"request":{"raw":"GET /zs72wG HTTP/1.1\r\nHost: zariftenbus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://russellgallery.blog/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Tue, 09 Dec 2025 16:30:37 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 0\r\nlocation: https://snapgirls7.com/?utm_source=lLdulGEI7x1Ty\u0026utm_content=1sjos4f.4.94lo\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Tue, 09 Dec 2025 16:30:37 GMT\r\nset-cookie: e3b0c4_4=14sertt65ur61; expires=Wed, 10 Dec 2025 16:30:37 GMT; path=/; domain=zariftenbus.com; secure; httponly; samesite=none\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18578,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":119,"dns":58,"connect":25,"send":0,"wait":35,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"snapgirls7.com/?utm_source=lLdulGEI7x1Ty\u0026utm_content=1sjos4f.4.94lo","fqdn":"snapgirls7.com","domain":"snapgirls7.com","tld":"com"},"ip":{"addr":"104.21.59.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-09T16:30:37.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snapgirls7.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 22:29:45 GMT","end":"Mon, 02 Mar 2026 23:27:16 GMT"},"fingerprint":{"sha1":"99:BA:4E:8D:15:87:ED:A5:64:D3:90:F3:47:D4:51:FE:70:22:06:27","sha256":"00:EE:C7:37:CE:21:65:40:58:F5:8D:82:01:B2:55:DD:43:02:C3:1E:FD:EC:73:90:6F:C1:F5:20:E5:C3:9D:BC"}}},"request":{"raw":"GET /?utm_source=lLdulGEI7x1Ty\u0026utm_content=1sjos4f.4.94lo HTTP/1.1\r\nHost: snapgirls7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://russellgallery.blog/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 16:30:38 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: max-age=0, private, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nset-cookie: k=SFMyNTY.g3QAAAAHbQAAAARhdW5xdAAAAAFtAAAABTY0OTg3bQAAAApLallFcm9lR2J3bQAAAANoaWRtAAAAJnJYVWpzbFJyb0Zld2RPZmRrR3VWempxZUxsZE94RUVVdnFYdHBhbQAAAAJobGQAA25pbG0AAAAFc3ViXzFkAANuaWxtAAAABXN1Yl8ybQAAAA4xc2pvczRmLjQuOTRsb20AAAAHdHJhY2tlcm0AAAAHbm90cmFja20AAAADdW5xbQAAAAxndmhZSldPUW5lY2E.vzQ9luFCMVPbX-1n0FxbRoBMbaLl6s82mKIyvtefHlM; path=/; expires=Wed, 09 Dec 2026 16:30:37 GMT; max-age=31536000\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=otoRN%2F4phnH%2Bari8BYL6rtkhZrE4mtoUaiZO5%2F8ihN%2F%2Fc6EjwuKr4Jqt7Jl7ZCAScrFFL8iVCmJTPgFEMdU2Vz0d3m9Kp5wdPqGwTIPT\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9ab5e35e3b8f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":18578,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (16725)","md5":"6eecda07cabcfdd991bfb5bb2ff2ba67","sha1":"7061cda1b7eb66bd1b240acd26b3d064f9133411","sha256":"e8158b063abea236389a66000c7249865093418eae9e3b9c7eaaa2b7f0a7cb01","sha512":"38310a4d84e492d93a112f21dc1e75f94f03dab15d87120a3ab963976441826203aad6c7378a47c4e46fe43554f663da06bf553d8500b7b2cb4de3b4f2d7558b","ssdeep":"384:sCn7ceXxwSjD1KcNkcgOIQ1CCLAdqvEh+gS/x5TiMf:lnoKjD1Kc7KCLAdqvEh+gKAq","tlshash":"5e8245357152386b986320f066f757ce72efc20dc82b455973be43e58bcbc85e522aa1","first_seen":"2025-12-09T16:31:07.855848Z","last_seen":"2025-12-09T16:31:07.855848Z","times_seen":1,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":44,"dns":22,"connect":1,"send":0,"wait":229,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adultgirll.com/assets/ae9d6c4c108a7ee9923f82e2306bcb9c/images/icon-heart-red.svg","fqdn":"adultgirll.com","domain":"adultgirll.com","tld":"com"},"ip":{"addr":"207.148.23.63","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://snapgirls7.com/?utm_source=lLdulGEI7x1Ty\u0026utm_content=1sjos4f.4.94lo","date":"2025-12-09T16:30:38.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adultgirll.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 02:08:44 GMT","end":"Thu, 22 Jan 2026 02:08:43 GMT"},"fingerprint":{"sha1":"51:34:14:59:9F:49:06:D7:6F:F0:A2:99:0E:43:BE:A0:0F:D2:DE:16","sha256":"52:6E:DA:5B:D2:EB:CF:62:95:61:30:1E:CD:76:A8:40:C9:2D:AB:37:4C:C9:1C:BF:35:9B:85:4E:2E:A1:BF:F6"}}},"request":{"raw":"GET /assets/ae9d6c4c108a7ee9923f82e2306bcb9c/images/icon-heart-red.svg HTTP/1.1\r\nHost: adultgirll.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://snapgirls7.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 09 Dec 2025 16:30:38 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 811\r\nlast-modified: Tue, 20 Feb 2024 13:29:03 GMT\r\netag: \"65d4a91f-32b\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":811,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e7a5ef7f32db5b4e167fff7bb15841f1","sha1":"dfb66835d8f3aaa72f21867e749b86010cb696bc","sha256":"07ead91626c0a5f1132d5e21b147a239d76c7cb1f7149cfab448857597a99d99","sha512":"3115bc2c930d5103be6be4f3c925458fdd269f4b7efd2e35a84654c75944aeefd11585e0359a000437528e8d77a34c000349f6758f01564398d9ffbc8b640261","ssdeep":"","tlshash":"7f01ce0efe1eac37fa5ac3adf5ec603a610641d242960376d1c0273d62260d35e5e6a0","first_seen":"2024-08-19T18:52:20.691016Z","last_seen":"2026-03-23T19:58:48.904823Z","times_seen":49,"resource_available":false,"data":null}},"time_used":544,"timings":{"blocked":224,"dns":25,"connect":92,"send":0,"wait":87,"receive":0,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"russellgallery.blog/join/196270?lang=ar","fqdn":"russellgallery.blog","domain":"russellgallery.blog","tld":"blog"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-09T16:30:36.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"russellgallery.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Dec 2025 07:11:29 GMT","end":"Thu, 05 Mar 2026 08:11:16 GMT"},"fingerprint":{"sha1":"D1:70:9E:CE:83:83:F2:E2:44:DA:25:29:3E:D7:45:D2:BF:11:BB:1C","sha256":"73:B8:CA:BA:0D:22:47:DF:A0:57:76:7D:5D:15:E0:44:2F:A7:2C:86:E0:87:FB:6A:74:7F:B3:E4:18:5D:1E:17"}}},"request":{"raw":"GET /join/196270?lang=ar HTTP/1.1\r\nHost: russellgallery.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 16:30:36 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.2.29\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dEN%2BI3IgaCP7pDHzP8Jk%2B6DdPGZfKQsh77RMfM7CGsV6fiyLCNaIOaKRJPcGonPWWTNU7qylSLxVYC9NrLpA3CTYc8WGpo8KyaS3AaFu4VvVyFA%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9ab5e3545964a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1268,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1268), with no line terminators","md5":"3d13e38aecea8f70c39de932b38158ac","sha1":"822262384dbbcaff353b9d4bf8539c1bbbf2420c","sha256":"31caa73cf84fdb1abe885129c4b085fffd8b29986a992ad69f3c22c955e11d6e","sha512":"b35c8cd8f4b826e68abfbe73ae7b9eaa247a73d07b554fafbdaf08a8f9a70ae45bcdcbc6ffa36118b764fe243da91c6eebd7c61468a1f9851c31773defa9d556","ssdeep":"","tlshash":"d2213f1ebd9bc4794ee56a818139e26d70b4726cc9b2e89154ec8838932cfce4d08ccc","first_seen":"2025-12-05T18:52:52.095406Z","last_seen":"2025-12-28T21:17:10.296734Z","times_seen":17,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":28,"dns":12,"connect":1,"send":0,"wait":160,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-34N7QFM0SY","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://russellgallery.blog/join/196270?lang=ar","date":"2025-12-09T16:30:36.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"4E:9E:D1:61:E4:7D:C2:8A:B6:AD:D2:31:C7:07:01:E4:DB:A0:A7:A9","sha256":"C5:DD:D4:CA:97:B7:B5:8C:B4:99:E8:56:30:AC:1B:F0:FD:7C:5A:FD:19:ED:13:D0:27:D6:0B:76:C7:C7:A0:66"}}},"request":{"raw":"GET /gtag/js?id=G-34N7QFM0SY HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://russellgallery.blog/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 09 Dec 2025 16:30:36 GMT\r\nexpires: Tue, 09 Dec 2025 16:30:36 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143047\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":432453,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"4a10fb16a7a3d4b76ac77d5c1829e443","sha1":"06ec5149d32c73cadb6e1714ecda73c060ccc0b4","sha256":"c3b13f3392384ab247ad3cfa01f5684ab2100acdc74139fa78261351a3b5ba2c","sha512":"e202501ef931ff0e899922035d8ef6b3014a6483b6c03f1b95676e1f7239e24eaccc42364dab5a7147bd4ee0e71098baa0092805c616b7511eb57110657209b4","ssdeep":"6144:sAS9mynndgbw4GmPoiB0Mqtw0+TCAZ+EDWBUWSTxNHIT8d:20EdZ4G8oeZ+EHXlhIq","tlshash":"5094098e73d674625396f078503f018ba57b28a2f45dc896f189cce42e74a9a0277f7c","first_seen":"2025-12-09T16:31:07.859162Z","last_seen":"2025-12-09T16:31:07.859162Z","times_seen":1,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":91,"dns":1,"connect":21,"send":0,"wait":44,"receive":60,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.dtscout.com/i/?l=https%3A%2F%2Frussellgallery.blog%2Fjoin%2F196270%3Flang%3Dar\u0026j=\u0026wk=systemweb","fqdn":"t.dtscout.com","domain":"dtscout.com","tld":"com"},"ip":{"addr":"172.67.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://russellgallery.blog/join/196270?lang=ar","date":"2025-12-09T16:30:36.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtscout.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Oct 2025 14:52:24 GMT","end":"Tue, 27 Jan 2026 15:52:11 GMT"},"fingerprint":{"sha1":"55:7B:E0:68:13:20:30:7F:FF:16:1D:2C:C4:02:9B:46:5B:24:24:5F","sha256":"F6:CA:72:AB:FD:E5:73:70:51:1F:1D:2B:5F:83:61:EA:B1:1A:A1:96:38:39:3E:41:88:5B:F9:EE:BC:F6:D1:03"}}},"request":{"raw":"GET /i/?l=https%3A%2F%2Frussellgallery.blog%2Fjoin%2F196270%3Flang%3Dar\u0026j=\u0026wk=systemweb HTTP/1.1\r\nHost: t.dtscout.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://russellgallery.blog/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 16:30:37 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-s: mtl2\r\nset-cookie: df=1765297837; Domain=dtscout.com; Expires=Thu, 19-Mar-2026 16:30:37 GMT; Max-Age=8640000; Path=/; SameSite=None; Secure\r\nx-t: 0.593\r\nexpires: Tue, 09 Dec 2025 16:30:36 GMT\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sN6DfBH7fNUKpkDqLd510CDF%2F97jYyn5dubVjrKv8lJBQoGbf3VDnOLbKUjuroz%2BS7ER9hKoF4hzqwH6tJb0nycCUXwTV4k039I%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9ab5e357d83cb4ed-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2292,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2077)","md5":"8450c234da2df92a0c33a47c5aabf6e6","sha1":"0ea50308805f927f1e9ce37a96d44f27e01cdf8e","sha256":"c67ad82f6fe5a742115d0d041e403c18df8da6486fa0dd5fc785d4bb58458ac9","sha512":"1ea70b0b047651af5f5496bdbfac4574dad62bef73132ad667c194c375382c36ea62c24f37a4c2882d6e644846f5b866720a8b33cad3e4e650fa6b9fa0331de8","ssdeep":"","tlshash":"1f41880bb5e5347803e2006965ff635fb5330928bc5784c08596dc04fd749fad1b6eaa","first_seen":"2025-11-28T22:59:20.195769Z","last_seen":"2026-04-03T12:37:24.675505Z","times_seen":2410,"resource_available":true,"data":null}},"time_used":396,"timings":{"blocked":59,"dns":34,"connect":1,"send":0,"wait":272,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.mrktmtrcs.net/a","fqdn":"a.mrktmtrcs.net","domain":"mrktmtrcs.net","tld":"net"},"ip":{"addr":"104.26.15.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://russellgallery.blog/join/196270?lang=ar","date":"2025-12-09T16:30:38.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrktmtrcs.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 21:25:16 GMT","end":"Tue, 24 Feb 2026 22:25:15 GMT"},"fingerprint":{"sha1":"B1:B8:C8:FB:D8:BE:16:F2:FB:48:B3:17:B3:16:C6:A6:D3:7C:6B:5D","sha256":"58:4E:5B:73:64:D3:A0:B0:A4:BA:45:97:C8:DB:73:B2:47:3A:B6:A3:8B:B5:21:4A:41:5D:DF:62:81:07:80:F8"}}},"request":{"raw":"POST /a HTTP/1.1\r\nHost: a.mrktmtrcs.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 325\r\nOrigin: https://russellgallery.blog\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://russellgallery.blog/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":325,"data":"{\"l\":{\"d\":\"russellgallery.blog\",\"p\":\"/join/196270\",\"s\":\"lang=ar\",\"h\":\"\"},\"d\":{\"f\":\"d\",\"o\":\"windows\",\"ov\":\"10\",\"b\":\"firefox\",\"bv\":\"134\"},\"g\":\"en\",\"s\":\"9ing6kauqn.1765297837\",\"e\":[{\"t\":1,\"n\":\"u24\",\"c\":1},{\"t\":1,\"n\":\"u30\",\"c\":1},{\"t\":1,\"n\":\"ss\",\"c\":1},{\"t\":1,\"n\":\"pv\",\"c\":1},{\"t\":0,\"n\":\"pvl\",\"c\":0.85},{\"t\":0,\"n\":\"pvlc\",\"c\":1}]}"}},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 09 Dec 2025 16:30:38 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Umii0WDhJUeuFHqRN%2B5Tvv47YS5R0DpnjUhTdgTHbdxkvT88mWLXkOoBS1VcAwCXjarK576yAWBUx0CllMJiWIP3jEKF5ckAhAWl4o4v\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ab5e3603a8b0daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat\u0026subset=latin-ext","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://snapgirls7.com/?utm_source=lLdulGEI7x1Ty\u0026utm_content=1sjos4f.4.94lo","date":"2025-12-09T16:30:38.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:58 GMT","end":"Mon, 19 Jan 2026 08:34:57 GMT"},"fingerprint":{"sha1":"56:14:7E:EF:FA:D2:CF:DD:3B:30:9C:AE:7A:C9:AD:9E:A7:87:3D:E9","sha256":"72:DD:0F:82:4D:8A:09:2D:BB:5B:E6:1B:6F:09:F8:1E:BD:BD:D3:3E:B8:A4:8C:B9:49:13:4D:DC:D7:EF:EA:77"}}},"request":{"raw":"GET /css?family=Montserrat\u0026subset=latin-ext HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://snapgirls7.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 09 Dec 2025 16:30:38 GMT\r\ndate: Tue, 09 Dec 2025 16:30:38 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1866,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"bd8eb785552dd14048bc05a0caeb4e53","sha1":"2e4baf02179f4413cba26cab547282e82d40ea0c","sha256":"3e4fc43d2973ddc920952f6c69750e388386b105591ae0867b600561ab37a2af","sha512":"8108e1541230f771d159544bc4cb927706064f6e6423b17aecee27ccdd236eed61d950672ccc92fba4b8cc5eee479692b98aa3970e1f52168e8b96cd952ab0ba","ssdeep":"","tlshash":"26319b411216e900a7431cca23ce7d26ce8e626275a0c47abffd5ca8ade5c261735b6d","first_seen":"2025-09-05T00:54:05.746777Z","last_seen":"2026-04-03T13:13:00.138963Z","times_seen":14419,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":70,"dns":1,"connect":20,"send":0,"wait":41,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adultgirll.com/assets/ae9d6c4c108a7ee9923f82e2306bcb9c/images/icon-heart.svg","fqdn":"adultgirll.com","domain":"adultgirll.com","tld":"com"},"ip":{"addr":"207.148.23.63","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://snapgirls7.com/?utm_source=lLdulGEI7x1Ty\u0026utm_content=1sjos4f.4.94lo","date":"2025-12-09T16:30:38.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adultgirll.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 02:08:44 GMT","end":"Thu, 22 Jan 2026 02:08:43 GMT"},"fingerprint":{"sha1":"51:34:14:59:9F:49:06:D7:6F:F0:A2:99:0E:43:BE:A0:0F:D2:DE:16","sha256":"52:6E:DA:5B:D2:EB:CF:62:95:61:30:1E:CD:76:A8:40:C9:2D:AB:37:4C:C9:1C:BF:35:9B:85:4E:2E:A1:BF:F6"}}},"request":{"raw":"GET /assets/ae9d6c4c108a7ee9923f82e2306bcb9c/images/icon-heart.svg HTTP/1.1\r\nHost: adultgirll.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://snapgirls7.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 09 Dec 2025 16:30:38 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 329\r\nlast-modified: Tue, 20 Feb 2024 13:29:03 GMT\r\netag: \"65d4a91f-149\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":329,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9605a4ba61e981c8b89ce60f4e1da00f","sha1":"9087c4cf543f31fa5e7b2d2c66b9804efd4ac951","sha256":"d49f1b7e68f84bd9740dce1110f5ac8a671f1b5b8b0dffb07f3523064b684197","sha512":"b180c0cf7498361559084264fa6c3c5fd2c0fab1594dfccd82633fba7345fb6ea9893336e3ed1b3a17d48bd89ddf3ed5b8d6035e72e4a12f10b299d59cdf1cce","ssdeep":"","tlshash":"52e0264afe0c6268ced59321d26c727e221791a0425303ba13988a74a3070fa6ae2c69","first_seen":"2025-05-22T14:43:08.182837Z","last_seen":"2025-12-09T16:31:07.861537Z","times_seen":33,"resource_available":false,"data":null}},"time_used":523,"timings":{"blocked":213,"dns":23,"connect":92,"send":0,"wait":87,"receive":0,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"snapgirls7.com/favicon.ico","fqdn":"snapgirls7.com","domain":"snapgirls7.com","tld":"com"},"ip":{"addr":"104.21.59.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://snapgirls7.com/?utm_source=lLdulGEI7x1Ty\u0026utm_content=1sjos4f.4.94lo","date":"2025-12-09T16:30:38.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snapgirls7.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 22:29:45 GMT","end":"Mon, 02 Mar 2026 23:27:16 GMT"},"fingerprint":{"sha1":"99:BA:4E:8D:15:87:ED:A5:64:D3:90:F3:47:D4:51:FE:70:22:06:27","sha256":"00:EE:C7:37:CE:21:65:40:58:F5:8D:82:01:B2:55:DD:43:02:C3:1E:FD:EC:73:90:6F:C1:F5:20:E5:C3:9D:BC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: snapgirls7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://snapgirls7.com/?utm_source=lLdulGEI7x1Ty\u0026utm_content=1sjos4f.4.94lo\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: k=SFMyNTY.g3QAAAAHbQAAAARhdW5xdAAAAAFtAAAABTY0OTg3bQAAAApLallFcm9lR2J3bQAAAANoaWRtAAAAJnJYVWpzbFJyb0Zld2RPZmRrR3VWempxZUxsZE94RUVVdnFYdHBhbQAAAAJobGEBbQAAAAVzdWJfMWQAA25pbG0AAAAFc3ViXzJtAAAADjFzam9zNGYuNC45NGxvbQAAAAd0cmFja2VybQAAAAdub3RyYWNrbQAAAAN1bnFtAAAADGd2aFlKV09RbmVjYQ.xqII21B7ttV1evzAf62UYQnywY9ZDA6G_4HdgmaLrGA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Dec 2025 16:30:38 GMT\r\ncontent-type: image/x-icon\r\nage: 6202\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l1maq50Ew4a%2B36rlxO1tgZZl1wuP%2BIDRtah3EhixoJCFL7qeb1JpGu66q8IDrCVblmWD1s6XLN7Tb1CcbKlZzx9QhjPAVJArTiBS6tG%2B\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 09 Dec 2025 14:47:16 GMT\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9ab5e3638c0d5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21662,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 72x72, 32 bits/pixel","md5":"34bf6f05207f3f28304dd340a22799c3","sha1":"7bb36657f5f41f2e668d36b0e9968d7d4d76fbe5","sha256":"2394aaa1ae8128d65f0b98cb93e5eeffd745d6ded59421a573dd35585750c0c6","sha512":"c582e2b519cabad49b478bd032cda2704637eb0fcfa725264b36750df1baca020317b5e7224d624f8a6586c627d7b45152fd46288a6c3c0f6f22540465747481","ssdeep":"96:gaZG1DJGJPpJKgvn/kgyY42YQ63R/+fHoRHQQz:gaZG1DMhnKgnJyZ33J+PjQz","tlshash":"d0a243367978eb127d30d111e991e4fb2a687c35de18a06334caffaf76326390528158","first_seen":"2023-05-08T12:49:03Z","last_seen":"2026-04-02T13:09:13.223101Z","times_seen":44,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.dtscout.com/pv/?_a=v\u0026_h=russellgallery.blog\u0026_ss=4oy8jwimht\u0026_pv=1\u0026_ls=0\u0026_u1=1\u0026_u3=1\u0026_cc=no\u0026_pl=d\u0026_cbid=71gk\u0026_cb=_dtspv.c","fqdn":"t.dtscout.com","domain":"dtscout.com","tld":"com"},"ip":{"addr":"172.67.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://russellgallery.blog/join/196270?lang=ar","date":"2025-12-09T16:30:37.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtscout.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Oct 2025 14:52:24 GMT","end":"Tue, 27 Jan 2026 15:52:11 GMT"},"fingerprint":{"sha1":"55:7B:E0:68:13:20:30:7F:FF:16:1D:2C:C4:02:9B:46:5B:24:24:5F","sha256":"F6:CA:72:AB:FD:E5:73:70:51:1F:1D:2B:5F:83:61:EA:B1:1A:A1:96:38:39:3E:41:88:5B:F9:EE:BC:F6:D1:03"}}},"request":{"raw":"GET /pv/?_a=v\u0026_h=russellgallery.blog\u0026_ss=4oy8jwimht\u0026_pv=1\u0026_ls=0\u0026_u1=1\u0026_u3=1\u0026_cc=no\u0026_pl=d\u0026_cbid=71gk\u0026_cb=_dtspv.c HTTP/1.1\r\nHost: t.dtscout.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://russellgallery.blog/\r\nCookie: df=1765297837\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 16:30:37 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-t: 0.135\r\nx-c: 0\r\nexpires: Tue, 09 Dec 2025 16:30:36 GMT\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FqenUcsiEkib8DYev2LetqUVaDpNTIA8wS0MCn111CDn9Ppovh71xopcqvQeKQOc%2FRu%2BuEq8a1b4I1a0FUcABraK%2BkIoqwIjdNo%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9ab5e359ea8fb4ed-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"56368900e4829203e14889abeb486d84","sha1":"a7f3b90867fe3160abafa994b0cb9e522952e01e","sha256":"c578dd3f2695f613fa88a8654214bf4b7c0a6315c421e3bec4d5a5356744c9a3","sha512":"d842ec7f9151fe770af2433235d101b3bde671a948aefe71a5e2110c528fc02a574f6de0b1c53cc75696be951875c834d4f0f135f5c012ae391447a74a3e8b70","ssdeep":"","tlshash":"3c90021868d984201ac9db44146612444171039415c4519594315a64154e780d75b9b8","first_seen":"2025-12-09T16:31:07.863763Z","last_seen":"2025-12-09T16:31:07.863763Z","times_seen":1,"resource_available":true,"data":null}},"time_used":306,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.dtscout.com/pv/","fqdn":"t.dtscout.com","domain":"dtscout.com","tld":"com"},"ip":{"addr":"172.67.70.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://russellgallery.blog/join/196270?lang=ar","date":"2025-12-09T16:30:37.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtscout.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Oct 2025 14:52:24 GMT","end":"Tue, 27 Jan 2026 15:52:11 GMT"},"fingerprint":{"sha1":"55:7B:E0:68:13:20:30:7F:FF:16:1D:2C:C4:02:9B:46:5B:24:24:5F","sha256":"F6:CA:72:AB:FD:E5:73:70:51:1F:1D:2B:5F:83:61:EA:B1:1A:A1:96:38:39:3E:41:88:5B:F9:EE:BC:F6:D1:03"}}},"request":{"raw":"POST /pv/ HTTP/1.1\r\nHost: t.dtscout.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: multipart/form-data; boundary=---------------------------274561373019587181154236073578\r\nContent-Length: 1199\r\nOrigin: https://russellgallery.blog\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://russellgallery.blog/\r\nCookie: df=1765297837\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1199,"data":"-----------------------------274561373019587181154236073578\r\nContent-Disposition: form-data; name=\"_a\"\r\n\r\nu\r\n-----------------------------274561373019587181154236073578\r\nContent-Disposition: form-data; name=\"_h\"\r\n\r\nrussellgallery.blog\r\n-----------------------------274561373019587181154236073578\r\nContent-Disposition: form-data; name=\"_ss\"\r\n\r\n4oy8jwimht\r\n-----------------------------274561373019587181154236073578\r\nContent-Disposition: form-data; name=\"_pv\"\r\n\r\n1\r\n-----------------------------274561373019587181154236073578\r\nContent-Disposition: form-data; name=\"_ls\"\r\n\r\n0\r\n-----------------------------274561373019587181154236073578\r\nContent-Disposition: form-data; name=\"_lp\"\r\n\r\n0\r\n-----------------------------274561373019587181154236073578\r\nContent-Disposition: form-data; name=\"_cc\"\r\n\r\nno\r\n-----------------------------274561373019587181154236073578\r\nContent-Disposition: form-data; name=\"_pl\"\r\n\r\nd\r\n-----------------------------274561373019587181154236073578\r\nContent-Disposition: form-data; name=\"_b\"\r\n\r\nfirefox@134\r\n-----------------------------274561373019587181154236073578\r\nContent-Disposition: form-data; name=\"_src\"\r\n\r\nb\r\n-----------------------------274561373019587181154236073578--\r\n"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 16:30:37 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-t: 0.119\r\nx-c: 0\r\nexpires: Tue, 09 Dec 2025 16:30:36 GMT\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fzLtEKyzY568tAzlJkJ39Ab0xodtar8iwrwkLQE00o8zL%2BQI5T2L%2FyJCyiVqZHqoSca55YVDcRJW9V32SvtdjlWhpjl6My4uHAI%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9ab5e35ceea7b4ed-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adultgirll.com/assets/ae9d6c4c108a7ee9923f82e2306bcb9c/images/icon-times.svg","fqdn":"adultgirll.com","domain":"adultgirll.com","tld":"com"},"ip":{"addr":"207.148.23.63","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://snapgirls7.com/?utm_source=lLdulGEI7x1Ty\u0026utm_content=1sjos4f.4.94lo","date":"2025-12-09T16:30:38.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adultgirll.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 02:08:44 GMT","end":"Thu, 22 Jan 2026 02:08:43 GMT"},"fingerprint":{"sha1":"51:34:14:59:9F:49:06:D7:6F:F0:A2:99:0E:43:BE:A0:0F:D2:DE:16","sha256":"52:6E:DA:5B:D2:EB:CF:62:95:61:30:1E:CD:76:A8:40:C9:2D:AB:37:4C:C9:1C:BF:35:9B:85:4E:2E:A1:BF:F6"}}},"request":{"raw":"GET /assets/ae9d6c4c108a7ee9923f82e2306bcb9c/images/icon-times.svg HTTP/1.1\r\nHost: adultgirll.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://snapgirls7.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 09 Dec 2025 16:30:38 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 364\r\nlast-modified: Tue, 20 Feb 2024 13:29:03 GMT\r\netag: \"65d4a91f-16c\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":364,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6b216cb96ab57ea9f366d5d8a3a1abd1","sha1":"bcfc1447fce3b0372e7aab762ea6e0e009a4063b","sha256":"c1774ce75c96b70b34fe60a2bbdb02836ca3fa7a1d79730ba7fa9e20a312825f","sha512":"812f1da63a9489c613133152abddab2deeeabe8d1600fe8dbf47aad4886a56127bac1232b8862b95dbea1de98715906ce2057ff20073cc5f59b2f0ef3dd06ec1","ssdeep":"","tlshash":"5de04f74fd3c3d9a47029102927c7808320a20fa550f822d5ae75c24ddb85db387ee2f","first_seen":"2025-05-22T14:43:08.19148Z","last_seen":"2025-12-09T16:31:07.879466Z","times_seen":33,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":207,"dns":24,"connect":92,"send":0,"wait":87,"receive":0,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.3.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://snapgirls7.com/?utm_source=lLdulGEI7x1Ty\u0026utm_content=1sjos4f.4.94lo","date":"2025-12-09T16:30:38.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.3.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://snapgirls7.com/\r\nOrigin: https://snapgirls7.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-1538f\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 09 Dec 2025 16:30:38 GMT\r\nage: 2285032\r\nx-served-by: cache-lga13622-LGA, cache-hel1410024-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 65, 67267\r\nx-timer: S1765297838.246268,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30288\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86927,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-03T17:32:49.547416Z","times_seen":118014,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":59,"dns":1,"connect":26,"send":0,"wait":27,"receive":8,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/lazyload@2.0.0-rc.2/lazyload.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://snapgirls7.com/?utm_source=lLdulGEI7x1Ty\u0026utm_content=1sjos4f.4.94lo","date":"2025-12-09T16:30:38.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/lazyload@2.0.0-rc.2/lazyload.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://snapgirls7.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 2.0.0-rc.2\r\nx-jsd-version-type: version\r\netag: W/\"162a-+bHVRc9Mhd3adT/5YJ7eVp2Ssx8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 09 Dec 2025 16:30:38 GMT\r\nage: 315159\r\nx-served-by: cache-fra-etou8220142-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 1643\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5674,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"60669862b7c39ecb3283b1faa9563a07","sha1":"f9b1d545cf4c85ddda753ff9609ede569d92b31f","sha256":"874cad10027313f3620a770d4a338369833ed5b3913f0793cb8500361b19e6ea","sha512":"1512c8379b8fa49935ed1bfc6a3d2f3a97f892c947c51ad07b1c227078e8a253e05aed187658c14bb242914f1042d523dfe7292d2f087077513337d7391c9a50","ssdeep":"96:3DU0gNYNpGxM7B2PswfNVRL2evyKSCjoFxVb1Gbe7BP+OpqC5URolicTejU+5UZE:zpNiM7B1wV20jSCcFXbcbe7B7qC5U2iT","tlshash":"3ec1ef483deba15b91a3b0f89b5f5145b238810b101dee543e9c87e6af6093c26f1fd8","first_seen":"2023-03-07T01:06:47Z","last_seen":"2026-04-03T13:20:30.390225Z","times_seen":2185,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":29,"send":0,"wait":27,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"snapgirls7.com/p.js?t=notrack\u0026s2=1sjos4f.4.94lo\u0026rn=zc4ZodGUys4WmdeVEhG\u0026rf=a\u0026p=0\u0026mmid=2256\u0026mh=clhVanNsUnJvRmV3ZE9mZGtHdVZ6anFlTGxkT3hFRVV2cVh0cGEtMzU3ODQ%3D\u0026lid=18586\u0026cr=71395\u0026adb=1\u0026a=850488","fqdn":"snapgirls7.com","domain":"snapgirls7.com","tld":"com"},"ip":{"addr":"104.21.59.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://snapgirls7.com/?utm_source=lLdulGEI7x1Ty\u0026utm_content=1sjos4f.4.94lo","date":"2025-12-09T16:30:38.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snapgirls7.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 22:29:45 GMT","end":"Mon, 02 Mar 2026 23:27:16 GMT"},"fingerprint":{"sha1":"99:BA:4E:8D:15:87:ED:A5:64:D3:90:F3:47:D4:51:FE:70:22:06:27","sha256":"00:EE:C7:37:CE:21:65:40:58:F5:8D:82:01:B2:55:DD:43:02:C3:1E:FD:EC:73:90:6F:C1:F5:20:E5:C3:9D:BC"}}},"request":{"raw":"GET /p.js?t=notrack\u0026s2=1sjos4f.4.94lo\u0026rn=zc4ZodGUys4WmdeVEhG\u0026rf=a\u0026p=0\u0026mmid=2256\u0026mh=clhVanNsUnJvRmV3ZE9mZGtHdVZ6anFlTGxkT3hFRVV2cVh0cGEtMzU3ODQ%3D\u0026lid=18586\u0026cr=71395\u0026adb=1\u0026a=850488 HTTP/1.1\r\nHost: snapgirls7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://snapgirls7.com/?utm_source=lLdulGEI7x1Ty\u0026utm_content=1sjos4f.4.94lo\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: k=SFMyNTY.g3QAAAAHbQAAAARhdW5xdAAAAAFtAAAABTY0OTg3bQAAAApLallFcm9lR2J3bQAAAANoaWRtAAAAJnJYVWpzbFJyb0Zld2RPZmRrR3VWempxZUxsZE94RUVVdnFYdHBhbQAAAAJobGQAA25pbG0AAAAFc3ViXzFkAANuaWxtAAAABXN1Yl8ybQAAAA4xc2pvczRmLjQuOTRsb20AAAAHdHJhY2tlcm0AAAAHbm90cmFja20AAAADdW5xbQAAAAxndmhZSldPUW5lY2E.vzQ9luFCMVPbX-1n0FxbRoBMbaLl6s82mKIyvtefHlM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Dec 2025 16:30:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\ncache-control: max-age=0, private, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nset-cookie: k=SFMyNTY.g3QAAAAHbQAAAARhdW5xdAAAAAFtAAAABTY0OTg3bQAAAApLallFcm9lR2J3bQAAAANoaWRtAAAAJnJYVWpzbFJyb0Zld2RPZmRrR3VWempxZUxsZE94RUVVdnFYdHBhbQAAAAJobGEBbQAAAAVzdWJfMWQAA25pbG0AAAAFc3ViXzJtAAAADjFzam9zNGYuNC45NGxvbQAAAAd0cmFja2VybQAAAAdub3RyYWNrbQAAAAN1bnFtAAAADGd2aFlKV09RbmVjYQ.xqII21B7ttV1evzAf62UYQnywY9ZDA6G_4HdgmaLrGA; path=/; expires=Wed, 09 Dec 2026 16:30:38 GMT; max-age=31536000\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B09sWoJBSt0OVoLkcTzgAv1k4LT1RMM3JHNSuZ%2BenQlnNTwoA6sRowTZ3ECRpbim30Ya%2FWtvmw7zPIs1beGjE1LR7VwaFme7nEC%2BHXDo\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9ab5e3607b5f5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":425,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"d3e1750c5f8a758295ab803b29d78997","sha1":"5b0dc625e61768d9777c92f22a465cca0af1de1c","sha256":"a7674c351b6509fe09130211760e50201627cfdd22197a37f999f3e51b921217","sha512":"422accb2ca833dc230bae5b5dee4e6e3e182d22b54b851ca34ab163882814a27c0d165cf8ddfe3ec22c9a35ce5596cced1f18e7d1226115bf9fc2be9c46b0ba4","ssdeep":"","tlshash":"96e02b6e15f104750af371618f7f5a10353b114f304b9a06bdfc13411f9020e8646de4","first_seen":"2025-12-09T16:31:07.883769Z","last_seen":"2025-12-09T16:31:07.883769Z","times_seen":1,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adultgirll.com/assets/ae9d6c4c108a7ee9923f82e2306bcb9c/images/m1.jpg","fqdn":"adultgirll.com","domain":"adultgirll.com","tld":"com"},"ip":{"addr":"207.148.23.63","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://snapgirls7.com/?utm_source=lLdulGEI7x1Ty\u0026utm_content=1sjos4f.4.94lo","date":"2025-12-09T16:30:38.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adultgirll.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Oct 2025 02:08:44 GMT","end":"Thu, 22 Jan 2026 02:08:43 GMT"},"fingerprint":{"sha1":"51:34:14:59:9F:49:06:D7:6F:F0:A2:99:0E:43:BE:A0:0F:D2:DE:16","sha256":"52:6E:DA:5B:D2:EB:CF:62:95:61:30:1E:CD:76:A8:40:C9:2D:AB:37:4C:C9:1C:BF:35:9B:85:4E:2E:A1:BF:F6"}}},"request":{"raw":"GET /assets/ae9d6c4c108a7ee9923f82e2306bcb9c/images/m1.jpg HTTP/1.1\r\nHost: adultgirll.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://snapgirls7.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 09 Dec 2025 16:30:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 58153\r\nlast-modified: Tue, 20 Feb 2024 13:29:03 GMT\r\netag: \"65d4a91f-e329\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58153,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=854, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=620], progressive, precision 8, 620x830, components 3","md5":"0ec33a039dd0e26e943bbac5e8dcf873","sha1":"ec74231499abb3247a73229606607bf9790bb9f8","sha256":"b75a42409717c8c5e3c2d804482df23b98cace7f2d58dbf62386364a4f5a1dd7","sha512":"588c41ceec0478feba11e9dd7619d6a5d148bfc9bc03de510fdceb044d88b963f04351b351de60cf1a36983c128e25b63899c7344fe796108aeb461e006446e6","ssdeep":"1536:TdIoZdIoojWEIecM+IkAYmwcjaFHdFks66TBzw+N:JhzhIWEiIkbPcmdFkadN","tlshash":"f943e1369f658e22f5a2a6b94cb6d3555302ae7197821b0bf0ac34c37f7a3d10f09247","first_seen":"2025-05-22T14:43:08.179771Z","last_seen":"2025-12-09T16:31:07.886723Z","times_seen":33,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":50,"dns":1,"connect":15,"send":0,"wait":158,"receive":95,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"russellgallery.blog/favicon.ico","fqdn":"russellgallery.blog","domain":"russellgallery.blog","tld":"blog"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://russellgallery.blog/join/196270?lang=ar","date":"2025-12-09T16:30:36.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"russellgallery.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Dec 2025 07:11:29 GMT","end":"Thu, 05 Mar 2026 08:11:16 GMT"},"fingerprint":{"sha1":"D1:70:9E:CE:83:83:F2:E2:44:DA:25:29:3E:D7:45:D2:BF:11:BB:1C","sha256":"73:B8:CA:BA:0D:22:47:DF:A0:57:76:7D:5D:15:E0:44:2F:A7:2C:86:E0:87:FB:6A:74:7F:B3:E4:18:5D:1E:17"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: russellgallery.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://russellgallery.blog/join/196270?lang=ar\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 09 Dec 2025 16:30:37 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.2.29\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Tue, 09 Dec 2025 16:30:37 GMT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uJL%2Fwfuvvb6VUVK%2ByfyDUimTU0NaPqblTFHjp%2BwDsrrvBBdY11E0hPep82DYqEswtqi%2BBnwwR%2FFVmSGSct%2FQyb5OPrd4AWrWQdkSkiUxEwVybJc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9ab5e358b9d51a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1268,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1268), with no line terminators","md5":"3d13e38aecea8f70c39de932b38158ac","sha1":"822262384dbbcaff353b9d4bf8539c1bbbf2420c","sha256":"31caa73cf84fdb1abe885129c4b085fffd8b29986a992ad69f3c22c955e11d6e","sha512":"b35c8cd8f4b826e68abfbe73ae7b9eaa247a73d07b554fafbdaf08a8f9a70ae45bcdcbc6ffa36118b764fe243da91c6eebd7c61468a1f9851c31773defa9d556","ssdeep":"","tlshash":"d2213f1ebd9bc4794ee56a818139e26d70b4726cc9b2e89154ec8838932cfce4d08ccc","first_seen":"2025-12-05T18:52:52.095406Z","last_seen":"2025-12-28T21:17:10.296734Z","times_seen":17,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}