{"report_id":"3d501b77-7c0d-4e93-9dbc-e899c399e3c9","version":6,"status":"done","tags":[],"date":"2025-12-10T07:32:10Z","url":{"schema":"http","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"172.67.167.19","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"title":"SCVP 16676 – MIXI-XXX.CC","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"172.67.167.19","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-14T07:32:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":11}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-12-10T07:31:49Z","timestamp":1765351909,"ip_dst":{"addr":"162.159.207.0","port":3478,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.14","port":44839,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-12-10T07:31:49.992451+0000\",\"flow_id\":2108726431786179,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.14\",\"src_port\":44839,\"dest_ip\":\"162.159.207.0\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-12-10T07:31:49.992451+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-12-10T07:31:49Z","timestamp":1765351909,"ip_dst":{"addr":"172.18.0.14","port":44839,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"162.159.207.0","port":3478,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2025-12-10T07:31:49.993238+0000\",\"flow_id\":2108726431786179,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"162.159.207.0\",\"src_port\":3478,\"dest_ip\":\"172.18.0.14\",\"dest_port\":44839,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":74,\"start\":\"2025-12-10T07:31:49.992451+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"cdn.tapioni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"tp.larvaelimans.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"qi.beveldankish.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"qi.beveldankish.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"a.labadena.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"bz.cathbermes.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"bz.cathbermes.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"zd.wainfulcaspian.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"zd.wainfulcaspian.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"teapotloquat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"teapotloquat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"adsco.re","ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":3069,"first_seen":"2017-04-03T03:11:30Z","last_seen":"2025-12-10T07:11:03.744597Z","alert_count":0,"request_count":1,"received_data":1787,"sent_data":442,"comment":"","tags":null,"fingerprints":null},{"fqdn":"vo28jcdkxz4r.n4.adsco.re","ip":{"addr":"38.132.109.126","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2025-12-10T07:32:12.960479Z","last_seen":"2025-12-10T07:32:12.960479Z","alert_count":0,"request_count":1,"received_data":463,"sent_data":434,"comment":"","tags":null,"fingerprints":null},{"fqdn":"6.adsco.re","ip":{"addr":"104.16.84.77","port":2087,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":91627,"first_seen":"2018-01-15T04:15:29Z","last_seen":"2025-12-05T12:01:48.15332Z","alert_count":0,"request_count":2,"received_data":1111,"sent_data":845,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"zd.wainfulcaspian.com","ip":{"addr":"172.255.106.213","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-11-09","domain_rank":0,"first_seen":"2025-11-16T06:33:12.194729Z","last_seen":"2025-11-24T17:46:16.048404Z","alert_count":4,"request_count":2,"received_data":2084,"sent_data":1413,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fs49.bigwarp.io","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-10-27","domain_rank":3188568,"first_seen":"2025-04-08T20:38:55.801584Z","last_seen":"2025-10-11T11:25:07.593486Z","alert_count":0,"request_count":3,"received_data":0,"sent_data":1696,"comment":"","tags":null,"fingerprints":null},{"fqdn":"vo28jcdkxz4r.l4.adsco.re","ip":{"addr":"185.200.118.62","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2025-12-10T07:32:12.963496Z","last_seen":"2025-12-10T07:32:12.963496Z","alert_count":0,"request_count":1,"received_data":463,"sent_data":434,"comment":"","tags":null,"fingerprints":null},{"fqdn":"a.labadena.com","ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"2020-01-21","domain_rank":266368,"first_seen":"2020-05-24T00:28:49Z","last_seen":"2025-12-08T10:51:36.460612Z","alert_count":3,"request_count":3,"received_data":2358,"sent_data":1753,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"4.adsco.re","ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":95532,"first_seen":"2021-01-04T16:47:52Z","last_seen":"2025-12-05T10:58:29.782662Z","alert_count":0,"request_count":2,"received_data":980,"sent_data":845,"comment":"","tags":null,"fingerprints":null},{"fqdn":"afrdtech.com","ip":{"addr":"31.220.27.154","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-04-19","domain_rank":19742,"first_seen":"2024-05-10T14:42:59Z","last_seen":"2025-12-07T07:12:38.716874Z","alert_count":0,"request_count":1,"received_data":550,"sent_data":427,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-07T22:13:56.807982Z","alert_count":0,"request_count":2,"received_data":81924,"sent_data":1092,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bz.cathbermes.com","ip":{"addr":"172.255.106.117","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-11-08","domain_rank":0,"first_seen":"2025-11-09T23:39:25.027336Z","last_seen":"2025-12-07T15:34:16.569546Z","alert_count":4,"request_count":2,"received_data":2084,"sent_data":1407,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"teapotloquat.com","ip":{"addr":"172.241.53.164","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-11-08","domain_rank":0,"first_seen":"2025-11-09T23:39:24.052333Z","last_seen":"2025-11-24T17:46:16.804038Z","alert_count":4,"request_count":2,"received_data":2144,"sent_data":1405,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"mixi-xxx.cc","ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-03","domain_rank":0,"first_seen":"2025-12-03T23:00:58.705215Z","last_seen":"2025-12-03T23:01:06.617148Z","alert_count":0,"request_count":18,"received_data":563378,"sent_data":8572,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"cdn.tapioni.com","ip":{"addr":"104.20.34.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-05-27","domain_rank":177570,"first_seen":"2021-07-01T10:46:55Z","last_seen":"2025-12-08T17:25:49.967591Z","alert_count":7,"request_count":7,"received_data":1471365,"sent_data":2880,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"blogger.googleusercontent.com","ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":4332,"first_seen":"2012-05-25T17:41:01Z","last_seen":"2025-12-08T00:19:35.746148Z","alert_count":0,"request_count":8,"received_data":109921,"sent_data":5389,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bigwarp.io","ip":{"addr":"104.21.42.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-10-27","domain_rank":32828,"first_seen":"2024-12-06T23:12:26.623936Z","last_seen":"2025-11-24T17:46:15.629786Z","alert_count":0,"request_count":4,"received_data":498762,"sent_data":1835,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"vo28jcdkxz4r.s4.adsco.re","ip":{"addr":"185.200.116.60","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2025-12-10T07:32:12.976353Z","last_seen":"2025-12-10T07:32:12.976353Z","alert_count":0,"request_count":1,"received_data":463,"sent_data":434,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xadsmart.com","ip":{"addr":"104.153.197.251","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2020-04-18","domain_rank":39181,"first_seen":"2020-04-19T20:24:06Z","last_seen":"2025-12-09T16:02:12.200655Z","alert_count":0,"request_count":1,"received_data":257,"sent_data":1742,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-07T22:17:02.440237Z","alert_count":0,"request_count":1,"received_data":11856,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"c.adsco.re","ip":{"addr":"104.16.84.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":100769,"first_seen":"2017-11-29T18:42:15Z","last_seen":"2025-12-09T07:16:32.763904Z","alert_count":0,"request_count":1,"received_data":73398,"sent_data":508,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bigwarp.pro","ip":{"addr":"104.20.31.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-06","domain_rank":0,"first_seen":"2025-09-02T23:20:03.579171Z","last_seen":"2025-11-24T17:46:16.306519Z","alert_count":0,"request_count":13,"received_data":499194,"sent_data":6020,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"www.xadsmart.com","ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2020-04-18","domain_rank":409261,"first_seen":"2020-04-18T18:24:57Z","last_seen":"2025-12-09T16:02:12.033122Z","alert_count":0,"request_count":1,"received_data":42465,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"tp.larvaelimans.com","ip":{"addr":"172.241.53.110","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-10-16","domain_rank":0,"first_seen":"2025-11-09T23:39:24.05548Z","last_seen":"2025-11-24T17:46:16.280185Z","alert_count":2,"request_count":2,"received_data":3042,"sent_data":1574,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"qi.beveldankish.com","ip":{"addr":"188.42.241.109","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-11-07","domain_rank":0,"first_seen":"2025-11-16T06:33:12.191854Z","last_seen":"2025-12-03T12:18:33.339937Z","alert_count":4,"request_count":2,"received_data":2084,"sent_data":1413,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mixi-xxx.cc/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-05-10T15:28:24.486581Z","times_seen":747590,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ab3b4884408bb0261d6b56a7d288fe80","sha1":"b0f370141ada9b591302b575434c255db51ae151","sha256":"e5a13721b456c9e090f80944728fc91767f5ae01b01f59160e73ff2c7cacc587","sha512":"e57cb5cdac6519a8a24e85d5d91f2c6492e282308a94d369619e9455cef8f22a2a6abd62023647fbfa0228b6d3e12da22c280d691cd351608aada9c284ca3a66","ssdeep":"","tlshash":"6c80008ea0803232a2fa02038a822200a2af38ea88008820000a0200288030f232ac8a","size":26,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-05-01T02:02:24.975662Z","times_seen":23030,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6a88d4bd5bd93656328a2f38b4378d0b","sha1":"d2afdc9b1693f0cf62ab6e88bbcf4e20fb62844e","sha256":"3b1758c84d9df642c22e7c547795bd40ff0a9610795e44c90109fa7f9b8016ab","sha512":"c64eb8517871a1b996d76fd0d9982a9726515a003cebbbdf1639067607e2f7697c97f79fc176802c7e560f325e3f39f40c9edecb49e7c1626b95ca0cb8349424","ssdeep":"","tlshash":"687000380a2000000230202200020002008282a0c0a2a8c0222a820002020200282002","size":21,"data":"","first_seen":"2023-03-07T12:58:03Z","last_seen":"2026-03-06T11:55:01.48721Z","times_seen":8444,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/asg_embed.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"104.20.34.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f0a82fbd63fbb0a63fc0b63f10e4d24","sha1":"bba21d386a205912e3494a9ce01491705a4f0891","sha256":"99f4e73147b4bab2e58e29abd8a4d7e142415cb28127306f13b03b18c42d1036","sha512":"76d23241f93a81fc0e56bd6073efd69793fbf254c41ec08415195010ea1b177d6c3e0aae35d8a12367dbf09f954110ebc9604429712b3985f3877c2e2b5b812d","ssdeep":"6144:e8dOGlEQZSQHYqm3+tQfITULVvzsbzOtzLb7cHsh2w5k/AScMS2Sc2S/NSKSMS/L:fE2SQK3LtCS","tlshash":"0234c789b6c1b0b403e3a1b4052f551af237b944744ec5c1f729d9d1aeb9a0e9a27f3c","size":244498,"data":"","first_seen":"2025-12-08T11:35:25.895114Z","last_seen":"2025-12-23T01:59:50.455379Z","times_seen":143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teapotloquat.com/gn8TyyYXUvbr/127526","fqdn":"teapotloquat.com","domain":"teapotloquat.com","tld":"com"},"ip":{"addr":"172.241.53.164","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"4fc71bf68a1d477bd1523733e34d1e90","sha1":"15119105cffbe108b6cf290146ab02c9aa8517ba","sha256":"74c1971a5c7f3f1cfb81b7a0a8717cee5a45841844104566e00bbfca271943ce","sha512":"e8e5f5430841f9cdaad492efce3fed11992913ad2b714b27c6fd147c55b2c56dc1b896635f24c2b180d4215c70ba9a042847d7d9cf3ff8a67b636a4c0ca1ce3d","ssdeep":"","tlshash":"f440000300000000cc300000300300000000000000000c00c000000000000000000000","size":6,"data":"","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-05-10T08:35:39.033752Z","times_seen":10652,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zd.wainfulcaspian.com/rI2iBFSyFUxU/73840","fqdn":"zd.wainfulcaspian.com","domain":"wainfulcaspian.com","tld":"com"},"ip":{"addr":"172.255.106.213","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","size":5,"data":"","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-05-10T14:56:37.606452Z","times_seen":16216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigwarp.pro/js/xupload.js","fqdn":"bigwarp.pro","domain":"bigwarp.pro","tld":"pro"},"ip":{"addr":"104.20.31.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7cb7dae1da48c74b41563b936111f97","sha1":"bda176bc9fd4060d50006cd31d8c25453362db70","sha256":"590c624e3400ed1e344d5c44f184356937d2704917289340ec5b099d35d5b9e8","sha512":"06ccc732465996d4b4531bc0a1e40cacbecc0e936a84e15132fda6839549358b9681494529128d493a70cd7ac1a913edea05b1facb97d8810290e9d6f9df451e","ssdeep":"192:7IKE9YGs1aGjrl6IsZWnrbll621w+4UWdRebMQ4WdReDyYQaQv7OsaaFg+BnqGQZ:EGyctBlV9GRebVReDyYS7OsaaF10fq3u","tlshash":"fc22674abaa339912a7731390bbf52043b398407114aca54bd5cd6c4af8452897ffbfd","size":10790,"data":"","first_seen":"2023-08-16T14:17:26Z","last_seen":"2026-05-08T12:37:26.710785Z","times_seen":637,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7145e6d4dd187b573a13f0240103f6f0","sha1":"f8e7ff7fd488f675f418011ef8ecca4a822933b5","sha256":"02665a4c106fc96e71ef5a17511cf353ec3f5cccb82ec9fce719b23967728897","sha512":"8fb980002683780ece97cb8cc6679fb9c8c97f543b927fe1efbf4073887176b68be02fd0ffbbc4bec0ebce401d04132fe4d1ab1edab9d006be9493f77bcfc736","ssdeep":"","tlshash":"0d700020000082000b2000032f83b280300a033000c8000002028f32a8e802fc020080","size":25,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-05-01T02:02:24.962633Z","times_seen":21543,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"97027e2582ced35b186bf66d3601cfd2","sha1":"4133fa316e585c4426c58951884d2db2d0e21548","sha256":"b18f7c2e4dbfe2926b0413634f7cd6781be55e27b4b885dc68a8f740a80d72e1","sha512":"6ce568f004c961c5a0e2e884ed98e6bdc8ecbba0dcbadf7d88cff201ff8b40a55d01a18cc7a247832c93f0129a2f7e68217dffa94071a50337ef0e17366448a0","ssdeep":"","tlshash":"9f60000000002830002e28002202a20a2002200002020a00800a00002220283208838a","size":17,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-05-10T11:12:43.911487Z","times_seen":18008,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigwarp.pro/embed-bwav74u6ycpx.html","fqdn":"bigwarp.pro","domain":"bigwarp.pro","tld":"pro"},"ip":{"addr":"104.20.31.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c124c6e9fa2fae5d1143b35f53823f7a","sha1":"d70cdb5c350da5e357aa6a2188374c51605378c9","sha256":"feeeef32654a50cb25877ea705c8af41ca45260dac874e5dffc8fd714112dc3d","sha512":"c0d9f6964bc6accac705d3a17d64f6f7dcf3ff8fe8efb4157a5cd4a255f71caafe6de9210fd402ca0cf88c11200eed0abc9747d49c11d6eb60c5ed5652d8fb97","ssdeep":"","tlshash":"b7d05b7b1f1fd099d336a2b7c11d789bf966347ec841f548796c55147f4208714610f6","size":278,"data":"","first_seen":"2025-12-10T07:32:23.038232Z","last_seen":"2025-12-10T07:32:23.038232Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qi.beveldankish.com/rIeDWP0kV0f0L/127525","fqdn":"qi.beveldankish.com","domain":"beveldankish.com","tld":"com"},"ip":{"addr":"188.42.241.109","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","size":5,"data":"","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-05-10T14:56:37.606452Z","times_seen":16216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fa90d94b8ffe44fca63cde803e82aadc","sha1":"b0ee5410c6f6e0e6e3a70add2d5ad81e10494874","sha256":"1b0f9a28e673c21b9a668e2973157b075ac420eda7f39fd5727a77bb32b45ffe","sha512":"3e87859d08a08f942d7e40001a18a486e7db2c0ec8d78f98cbbed98b6349ea4cb52ad99540ceb12005827449e39defbaa293eb96e615d869509d4f0d6b80c4a2","ssdeep":"","tlshash":"6e70000808a000200020322a0000200003a2820080830a8c0302020002082280220020","size":20,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-05-08T00:23:09.13964Z","times_seen":14673,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f029280bb92afe3aadd4ee5edf5dadf","sha1":"aedeed8f6b4175647e110d76b2bec32d5d4cc0a6","sha256":"1bbeb32b7e6f63658e46d044a3205093c663de933d7eaac2b57b533b697a2579","sha512":"8b951e925ec9153e3de7554b3caaeaf1f1d6cd06945977baf4d012324f48d2858acd260cf20a79dce3de8dd6c1fe321b5b1219bb42de576e76d9ade48ccfd814","ssdeep":"","tlshash":"7fd023eb3c7589306594034f50f5d3dc2b6134507b51920482dccc1f5e11ed344f196c","size":217,"data":"","first_seen":"2025-12-10T07:32:23.040082Z","last_seen":"2025-12-10T07:32:23.040082Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigwarp.pro/js/bgwp.js","fqdn":"bigwarp.pro","domain":"bigwarp.pro","tld":"pro"},"ip":{"addr":"104.20.31.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b4b2f561fb56c24a2e47ec07832ec3f","sha1":"299f1aeca476369487e63f03687191764c618130","sha256":"a58060cc304b1dc7d898f639b9c8e9b8ed7aea8365e6d6ed51c7a31fa5f4eae9","sha512":"41e946669e3cd8285771c3bb7d0f1c68c160c992c35dfabbbf8ce5b1a41bce9fb822fa79f85b855870a365de531a86464bf2d3f48fb34b3aa2c8d7f87c280372","ssdeep":"1536:5LAGm9QIpRIAzH8XznfUezSDIj5l9umwRykMHWLZynl:5r+iXSDk5lomwEHWLonl","tlshash":"1293918db8e3f4655772613041bf34deb5bd6c92300e5208c16ae8fc7ca4f6b996288d","size":95912,"data":"","first_seen":"2025-02-10T18:58:29.587522Z","last_seen":"2026-05-03T13:36:30.098948Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xadsmart.com/ezcleazjnbwxncsjxuq?LuvrEXHi=BQOCAAAAAAAACZUAAroymyGz7Qg-ildq3RVkfScLi36U2jKNhLSGLSqhN3HWAvnvu7ipvEKCguOE4p7h9uQtAJMjHR01gX6lYIY3doX7wbLvd-DC-pdDpup1VOSoBBdRX47Vck0937rDqHmZ-VUiNIVAKMrJEpQNJx_tLDXOiUKBYHCFNFeNV12mh4Jo0p7-AnftwHdKRVZIzMoc6rYhRv1qaPShYu49RAVettiM5DyTWVebrZX1H-qIrqUWhDVUfNmrd98px3ZopE7uclIHpHRqrMDBSZJ0RVay0tiuQM8aBshUmwZPQnpYop0lFAFRyozxTLg-MlnKPLe5cn-wRy64GEsNJlMKMsY8gsMceKlxiWK4sihjCD00TVYAGzrU9pp0yNLCRAF_axJlZsy0FM4frYWLlRquWkcMENdHODUH_rwFmwJjL6xC20kFF6IWrIIgAoSZsc1MB_DkImNRpeEiklrRbwSKWjAC45i3tvSFqaEfONWThXo-3-0YLZrjBTgqd6pdhO6hshOUqD3lX_CaK7h8sNt6vIG0iWCw3XvdhAHZ4C2HVVJHJaB3ZUWGIKoVSTrwpB4vbJWu_MQwJ8gX_ANUIm_1UDQuRbE3c98z6zSS0ZSSYwJsPDnyewZBwdjiwCb86i0ol2ZOe9_POBLMQ6Z6sy46zRL6G-Vddys2LIpkXkbWpu8xKAm95PveaLEWyWpHie5uwClpzk0FdbhoWgZB9V3uqfaGTak5lFNCvfka58JwHiX8WWkwce_U-ojMk07k2ytXL_uRPqxykYNrp_gSMvl_GaMcoJiG2vVHmxVIMNQOH7MWdC8lZyc35sXfq5YUpf5JUK8PxNacP2zPoEvr5SEitjxsJDY5H7PfEDHtnkRGPAGOq93S3ljHUJquNmI2c5mqREm5hq8dA6AZuviHq4XFpzGnAOCjSddhcxPH0bVvXi12mD_SIEb3-_elXTAEpVmXaOkHZ71gJHKww_z1uiYCbrys_qk6-WEO-PrPq5Rq7waaI4Nx8P1od1v8kf_iwiqg8ykOEfh37CEDhftlsRtTFAdHkLfiLdEW2xmG3jM3zkC5Yc4uBhPWSDQRVvJIH30sY2O-hAMGo1krFeVebJ-aGPbKYciWogVb5K9hgVeWb5w9EPilFIubi-aBR2nRtH0BY7v78PvRCqNNUq4XGNgbI0K38_HvngH2c7ZWaFWOUwKsS_RZ\u0026nscNgxqR=4\u0026OxXPRAkl=5258576\u0026DyUptjAh=\u0026hWAvEywI=0,0\u0026sORxQHPA=\u0026xnkVSrgf=\u0026PZvgOdzj=1280,1024,1,1280,1024,0","fqdn":"xadsmart.com","domain":"xadsmart.com","tld":"com"},"ip":{"addr":"104.153.197.251","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5f0a25e4d3522d56d48ce7bc3e518fb","sha1":"86794caff58f7fee6e684c2ba7195f970a8d6f4c","sha256":"9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5","sha512":"a3a81801f516a4eb11f00d6f56dab0ed4b8a79219e6b4f5436993479f09dae08f14cffbab3327ff66fb39201d8eba1153ae7114f7705a01cc6f0edf840ef1616","ssdeep":"","tlshash":"789002801814116115d1500b8d5159d01259b1a4540801324446ca502dc7883a415774","size":44,"data":"","first_seen":"2023-03-07T01:17:45Z","last_seen":"2026-05-10T14:07:44.338579Z","times_seen":23867,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-05-10T15:27:45.7911Z","times_seen":332689,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8b5e8699c1b76c14c38283a27772a3e0","sha1":"8e39b41dbcb6877e9b189351a2c90908abdc7754","sha256":"cfab5312f1cfff1e8162225ab27453306ff627f512bcf18225c0a305ca093e1c","sha512":"66ffa0031cc22b4eec8867f36dcf3d887b021a11ea74f51c2a2eff1ec4cf9eeb44c4e1d5a6c197f29d66546c5f42ef283c54261f6157687237e4dabe1715523d","ssdeep":"","tlshash":"cb700000000228a200fe230e8e82230822282223a28820c820220a2820003232380880","size":25,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-05-01T02:02:25.035676Z","times_seen":22396,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"11cc3621e45b2f0b945ccf3c32be2d99","sha1":"65369460879076ce3d2ca049392097e9c15b8149","sha256":"8eab171b0d256cf386d222b71fbf5380f2051b67452dbd83f41401a6216a789c","sha512":"e8af12a7397f87b88e2b71577fbb9be3be97b309345786db07de0c882ef2203a6d2b98a7f74c4f5b065e3d67cdb2c54f23ff7694c9ccc83e22ee93e950e60715","ssdeep":"","tlshash":"8bb009b69262c0b9c4469c9eb13ad6e7397a12143813b327901d49205522e5e2b008a0","size":108,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-19T05:15:08.455072Z","times_seen":20074,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigwarp.pro/embed-bwav74u6ycpx.html","fqdn":"bigwarp.pro","domain":"bigwarp.pro","tld":"pro"},"ip":{"addr":"104.20.31.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"daa863cf9c74beeab861c8d2886a8f6e","sha1":"53444900c7c816ed402678a256572da5a3163912","sha256":"beef827b49688700a2765ad0a8534ac584c4957a4e29899704016f96a182ff3e","sha512":"081868481aa4661c3f9ebfc8c1f2bf6903faf3e23dccfe130a259f40c5ba49d3add1139bea79dc30e82851bb5b56a520f5bd408f838084fa4f85b8daff339a39","ssdeep":"","tlshash":"d1f0e971555205300d1905e726af93b874a225379801f54239ddfd25cf99fdf7d36490","size":548,"data":"","first_seen":"2025-12-10T07:32:23.042544Z","last_seen":"2025-12-10T07:32:23.042544Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b7d8a1a33a77fcd0328d3c709c5a9eb3","sha1":"e8ea90d66488aae87f231079141b02b04cc26f05","sha256":"3f06772f212125287a824492bf133d5fc6ef851b8478c081406f650716869cde","sha512":"b92d0879e95318270c892770db71380d6f66efbeb8e4c9a8155e82b09e66a0a90844a4d0e38ede9b6bd536d8926ab4359e3bcc5266594f04136fa66295bbc9c1","ssdeep":"","tlshash":"f37000082080000200200002020222003202203080c82002a2000a3020ea08b8020080","size":20,"data":"","first_seen":"2023-03-07T16:36:56Z","last_seen":"2026-03-06T11:55:01.489296Z","times_seen":4296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c2ea614d1bc750cfde52d2cc45abe299","sha1":"5e166dbdca67e79e7279c7e0818928894d216b4b","sha256":"951bc13086d06d7a02e9c1e56696df1982e9775bd071f7d6d97df719ff445a03","sha512":"2deb2e1f7323c8870b63f94d712177f2755d5e69d3e0129fef54c1ecc8fb628a7d62a771b7b2a04de3e1e3b8282a7452ff05b6ce94f2f2d60bf8ff08b80018e9","ssdeep":"","tlshash":"6a80044d501015d4c074307d001310141033d350515f11d04147115005404745713c13","size":36,"data":"","first_seen":"2023-03-13T22:08:52Z","last_seen":"2026-03-01T10:26:38.372728Z","times_seen":13572,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigwarp.pro/embed-bwav74u6ycpx.html","fqdn":"bigwarp.pro","domain":"bigwarp.pro","tld":"pro"},"ip":{"addr":"104.20.31.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"03292dbefe3982b4ca9adb0b588ada31","sha1":"a1ae7ac9b18c166bf0137d4919d9b912a8c74765","sha256":"af6ecc52877435b9766189077c344e7ef00e6c4e5617097c63b5b8756505dc69","sha512":"94d703b0209e9be46c67ddfa93056c5d49124d7db042a559af2c625644e5299f6966fc824e61092bc0b8d2fdb6af6338b05740399e9c784e223595aeb93593dd","ssdeep":"","tlshash":"996000008300a0200828088c3800c00020380020c2022200a202a00e820c00200a0000","size":16,"data":"","first_seen":"2023-03-07T01:24:29Z","last_seen":"2026-05-10T13:36:24.09863Z","times_seen":999,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fe99bbf2987d52a27e4d042d61264b5f","sha1":"96bb68de49d3a4146142cce3f02de1ccbf8d0bf6","sha256":"cfe90e4da6c1841088b25b3582dc78b887f3239cdfde633ff426703c6ed538f5","sha512":"9dd74689d8b3460b4da7557d2797047f31cfa1b8522959d152c08f1f48989897e15f026d9b254a7ef61b99b9b18fc002054f29a12a2e30554a68d7815c53f3dd","ssdeep":"","tlshash":"d570000a20a02022082a000082022200288c0082a80800380a008b003c008032222382","size":22,"data":"","first_seen":"2025-03-02T21:04:17.177505Z","last_seen":"2026-03-06T11:55:01.511158Z","times_seen":8483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c510d5a3d97cb2f599576a56b2703434","sha1":"9bc8f27eddd88f1e3f879b2dceb86f92486dc1e3","sha256":"b4a3a83fe09d48db0c0b4416fefb19af5f9e069c12d2af8793a18f159574bb79","sha512":"7adf4f6f79a04ef4aa41503ef199d996dfe027863d5493881f4689e595cc9ce27a4451f1be2617108f3716d2c26bea30fe4ef4c7c4922d4896cf3f7f94e50467","ssdeep":"","tlshash":"7d60002002002820002002000a02a20a2002020c82020200000a8000220208300802c0","size":17,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-05-01T01:26:21.237747Z","times_seen":18164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"79e362235e366729632e60d6d35f8904","sha1":"69df1a1691b05442e11e2bc5825fc6297b977a92","sha256":"da82a56eb8524f5d12a2afcf2c5d0cb6184f26995167212a0ccb3bc2ba0def36","sha512":"94ca14ccb12238f547249a07134689257dd97639be34d7f466f52741df7176be982d88c5d294dd42a534a32d908533b5eaae33a13cb47ce0cf065d3098d9383d","ssdeep":"","tlshash":"fe60000000000c30000303000c30c3cc3c3f000030033030030c00000c00c003300c00","size":15,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-05-07T00:17:53.104166Z","times_seen":23612,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zd.wainfulcaspian.com/rI2iBFSyFUxU/73840","fqdn":"zd.wainfulcaspian.com","domain":"wainfulcaspian.com","tld":"com"},"ip":{"addr":"172.255.106.213","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","size":5,"data":"","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-05-10T14:56:37.606452Z","times_seen":16216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigwarp.pro/embed-bwav74u6ycpx.html","fqdn":"bigwarp.pro","domain":"bigwarp.pro","tld":"pro"},"ip":{"addr":"104.20.31.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"61e0eb2d1b3b3ea0c0cf803b77a2b223","sha1":"97fef647fb2aeaa949a9c5f61876b8c226666a85","sha256":"c5b662872bc93af5e166f503b7d0e2ae381a5aba95d481d7d730f4d1d8735539","sha512":"cc1d2e743ab6147bdd6e2cb059e4cec7cce830341615d44f784879b096139f3302029dfba7da4f2db0be3fa2b5c16f20d39b9c818ef47ab26e14c45d8966839d","ssdeep":"","tlshash":"e251b7726f904424917671916e5bc00031b102236e89e70df92ee3a42f9c3be55b78ec","size":2961,"data":"","first_seen":"2025-12-10T07:32:23.046957Z","last_seen":"2025-12-10T07:32:23.046957Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d9f9b0f82813d813afe0d450e9fab4d6","sha1":"cb6ce93dd97adc3649f697ff49681f5aaf8b1671","sha256":"d204422e9d49293ab422bfabae9607635876cb30f77215f133603bac691f6f4b","sha512":"849997b396eb218b8bbc788eeb34ec3eb9ab4c809a07ac707a57a5e13baabb69d2c52795403d032f007276109c7f4476daa8255550fa236873e1eb9ba6dba3ba","ssdeep":"","tlshash":"706000c20008802002c200028820a2802832008a20022000c00800000000a0c0222808","size":17,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-05-01T02:02:24.983731Z","times_seen":23638,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a97ae6bd4dc972c26de801f868a79d5c","sha1":"cf1a46aa575a9718f8d4154813a7892317e7f8bf","sha256":"51c1083130407a8772738aa2380eb5a583240a47d98f2204b124c06fd11aabd5","sha512":"f16b7e511db0f35f83e9380c46a6173de1ca6aebbcf4aec1be6efd8d0cb669fc9a07c4e7702149f0421425109c35a9cd041347677ccaed445c978296502e78a8","ssdeep":"","tlshash":"51600003030c0000c00000030c003000fc333c0c3c0c30000c0030000000f033cccf3c","size":17,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-05-07T00:17:53.131619Z","times_seen":20820,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teapotloquat.com/gn8TyyYXUvbr/127526","fqdn":"teapotloquat.com","domain":"teapotloquat.com","tld":"com"},"ip":{"addr":"172.241.53.164","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"4fc71bf68a1d477bd1523733e34d1e90","sha1":"15119105cffbe108b6cf290146ab02c9aa8517ba","sha256":"74c1971a5c7f3f1cfb81b7a0a8717cee5a45841844104566e00bbfca271943ce","sha512":"e8e5f5430841f9cdaad492efce3fed11992913ad2b714b27c6fd147c55b2c56dc1b896635f24c2b180d4215c70ba9a042847d7d9cf3ff8a67b636a4c0ca1ce3d","ssdeep":"","tlshash":"f440000300000000cc300000300300000000000000000c00c000000000000000000000","size":6,"data":"","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-05-10T08:35:39.033752Z","times_seen":10652,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigwarp.io/player/jw8/jwplayer.core.controls.html5.js","fqdn":"bigwarp.io","domain":"bigwarp.io","tld":"io"},"ip":{"addr":"104.21.42.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"be53d86112d04ee5f1f34dfabed0195b","sha1":"667a3b0defb17ad5c5ed6a479226e11747759e49","sha256":"dd79b7cdfc4df8251bb9df3ddf9833a6b71b72108012fe804dce45530cb2cc1f","sha512":"3777999fdd2276399cf2d0dc0803abd28e577c4d0acc750d56fc42680fa4e8194af0c13fbda7493f7e35fe2e6d6182461d1c5929c6b54fd90181dd2d70e26ff7","ssdeep":"6144:rwTc5oM+4cP3k04J+rvR/7yEwkfeAqt1Vq6mfzq:75oP03E1fkW2","tlshash":"7c743a32314265359ad682da76614604b3398485f506caacff3ceddd4c6e8cb31fabb4","size":364372,"data":"","first_seen":"2024-12-30T00:00:15.505749Z","last_seen":"2026-05-08T12:37:26.77405Z","times_seen":202,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bz.cathbermes.com/rCWKNFBsNT7t/127524","fqdn":"bz.cathbermes.com","domain":"cathbermes.com","tld":"com"},"ip":{"addr":"172.255.106.117","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","size":5,"data":"","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-05-10T14:56:37.606452Z","times_seen":16216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/asg_embed.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"104.20.34.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f0a82fbd63fbb0a63fc0b63f10e4d24","sha1":"bba21d386a205912e3494a9ce01491705a4f0891","sha256":"99f4e73147b4bab2e58e29abd8a4d7e142415cb28127306f13b03b18c42d1036","sha512":"76d23241f93a81fc0e56bd6073efd69793fbf254c41ec08415195010ea1b177d6c3e0aae35d8a12367dbf09f954110ebc9604429712b3985f3877c2e2b5b812d","ssdeep":"6144:e8dOGlEQZSQHYqm3+tQfITULVvzsbzOtzLb7cHsh2w5k/AScMS2Sc2S/NSKSMS/L:fE2SQK3LtCS","tlshash":"0234c789b6c1b0b403e3a1b4052f551af237b944744ec5c1f729d9d1aeb9a0e9a27f3c","size":244498,"data":"","first_seen":"2025-12-08T11:35:25.895114Z","last_seen":"2025-12-23T01:59:50.455379Z","times_seen":143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigwarp.pro/embed-bwav74u6ycpx.html","fqdn":"bigwarp.pro","domain":"bigwarp.pro","tld":"pro"},"ip":{"addr":"104.20.31.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b60d060cbe15fa544864fe01f6fe035","sha1":"302847c035f8a9c6a614732d94ce8d1a9fd806ac","sha256":"c36d67168c924d0e6c914ac06c718a08ba0f7bced0d0437e4e323354db278eb9","sha512":"321f88e341c1510b86703c7d3c34e0dd93245faea9cc54d2ffe77804452cae9b126b926e5b17c48b3704e78debcddce62a3e0695c54be1f07b3ac20eeaf5ef43","ssdeep":"","tlshash":"fa31aa2c71b281f01833603ba77fd102f530613b2009e94cf99d86d99f10d26b8e67da","size":1845,"data":"","first_seen":"2025-12-10T07:32:23.049036Z","last_seen":"2025-12-10T07:32:23.049036Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/asg_embed.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"104.20.34.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f0a82fbd63fbb0a63fc0b63f10e4d24","sha1":"bba21d386a205912e3494a9ce01491705a4f0891","sha256":"99f4e73147b4bab2e58e29abd8a4d7e142415cb28127306f13b03b18c42d1036","sha512":"76d23241f93a81fc0e56bd6073efd69793fbf254c41ec08415195010ea1b177d6c3e0aae35d8a12367dbf09f954110ebc9604429712b3985f3877c2e2b5b812d","ssdeep":"6144:e8dOGlEQZSQHYqm3+tQfITULVvzsbzOtzLb7cHsh2w5k/AScMS2Sc2S/NSKSMS/L:fE2SQK3LtCS","tlshash":"0234c789b6c1b0b403e3a1b4052f551af237b944744ec5c1f729d9d1aeb9a0e9a27f3c","size":244498,"data":"","first_seen":"2025-12-08T11:35:25.895114Z","last_seen":"2025-12-23T01:59:50.455379Z","times_seen":143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/wp-content/themes/enjoyvideo/assets/js/theia-sticky-sidebar.js?ver=6.9","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5738b8cc21ba524964d9403f24ea0130","sha1":"bca120481bbd7050ac4bda741b5fec7d9653cdb0","sha256":"41f806a19a20885a156ceb760f01b4fddc9e037b0f94dbbdaf33c53077f5fc08","sha512":"175fb50ca80d30d187897995e51458e71b76144d263a4af2a3baceff29a93ad59d669a0312962fd0c1ecbe9f33e7c480e94e7fa4caceb94feb9a5585020082b9","ssdeep":"192:dzCWVkpa2PcvApV0C1vHGivcibLgMzgV4ev6W1X68dPMRCcGcCTr5CsK:5JVHGvmc3gggKfg7cCTFa","tlshash":"b372055a2ae221345867b39f87dfd0585239c52752cbda243e0d87c85f81634d5d3fe8","size":16324,"data":"","first_seen":"2023-03-07T01:27:56Z","last_seen":"2026-05-10T11:21:31.504119Z","times_seen":1230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2575c724c1f80170b0367363f0afa0ec","sha1":"243b0d88c932387e96ca5c71cbb8fa8d7fe81a6f","sha256":"4f61f9e962c8c1d90b453b461dd9431c1d3a6a706e61ab5c2a9faf6a71aea93f","sha512":"e7e2e84d801f9f6365a328e2433af505b557542b884c45d3ffcd5d27238523c86c93df9c44d759bc8b55be9a8ae489a01716b60cc8f2793a97337a67376c90ff","ssdeep":"","tlshash":"5f6000330c0300000030ccc0000000c0033000c0330030030c3c0cf03000ccc3000030","size":15,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-29T01:10:59.989393Z","times_seen":15211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tp.larvaelimans.com/sjw6GZLT2AQN/117158","fqdn":"tp.larvaelimans.com","domain":"larvaelimans.com","tld":"com"},"ip":{"addr":"172.241.53.110","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7a2939527fd9e68723da600e96d76bd","sha1":"a9e717b6364d2895ee0a716050db32ca0ef1bb42","sha256":"d810f5146f4cd1517512a6e31946e764a73c58fb01427aae88d42cc2ae28718a","sha512":"e6956ec633c76eb3ebc408528f950b81373238cd1d5b9fff5ddd97089ea14a1ff5934f23769bac5d93cc4cdb6a1fbc4ce69baebfb940a55d8a7a89caccaf92b5","ssdeep":"","tlshash":"ec300000003000000000000000000000000c0000000000000000000000000c00000000","size":5,"data":"","first_seen":"2023-03-07T01:14:39Z","last_seen":"2026-05-10T14:28:41.257977Z","times_seen":14368,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a510fb62c4656854d32f178a7406716d","sha1":"71a5ff438986ee84a5a2a5f70b58a0f3bc7656c2","sha256":"5cf9d4455aab25f41d71d933f6dc81205d1809aed6f783f89088744b19438b1a","sha512":"11e0151e4d1daec44bda442dee9da84b56d444a319e2a41566cea6daf6a5d5cf5659682d05bb194030b3f8611f4506af712346d8f9f16e0a10b99c2b763321d6","ssdeep":"","tlshash":"91614515a23618f6007700fa669797e03b0511937842c5dcba9cc55a3fcaed489a3aeb","size":3252,"data":"","first_seen":"2025-10-06T17:16:41.227277Z","last_seen":"2026-02-04T00:09:03.009753Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"javascriptURL","is_inline":false,"md5":"68934a3e9455fa72420237eb05902327","sha1":"7cb6efb98ba5972a9b5090dc2e517fe14d12cb04","sha256":"fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa","sha512":"719fa67eef49c4b2a2b83f0c62bddd88c106aaadb7e21ae057c8802b700e36f81fe3f144812d8b05d66dc663d908b25645e153262cf6d457aa34e684af9e328d","ssdeep":"","tlshash":"aa3000000000000c000000000000000000000000000000000000000030000000000000","size":5,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-10T15:27:25.734165Z","times_seen":72063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"41310478a380eaf7e07dbad9b4f81a97","sha1":"1714b6ef86e90b5b23e2aaa1e7728ed9c59f4d34","sha256":"848e5342d9196c0f64861ab926a3c5aecce9294750febbd22e5d8df859bdb144","sha512":"7b93f330547524ce01b8f888a8d56c19cd4432fbee43db16aab33fc1aecd77243762c5e7dd5ce767e38c0fdf9d58bc629caf106d77689c1ef90ebeb09406580e","ssdeep":"","tlshash":"d37000000000000b203c00020a023a003003003000880800820808302ae800b802c0a0","size":23,"data":"","first_seen":"2024-02-12T20:00:21Z","last_seen":"2026-03-06T11:55:01.500018Z","times_seen":19951,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9aa3dc35f8ba994aa0f04a42c4da5062","sha1":"a65df79b7b70e8b8d22a2db929f6598428a827e0","sha256":"89e4c05e12e12f5bdf85a4fb89bad572dd85256091add09fdb9c6e42e703e2bb","sha512":"72ec1d5aaa34463f798b2d2c5976a6221f70e51ea2afff582319f4c8b7e31f4a67ef2a2d39427b4d1cc89ca66c4d4374db662c1137380ce0aad2acfcdbed4d6c","ssdeep":"","tlshash":"ec7000080000a0308808a002882ca3803c20a820b022a008080823080000a020008e0e","size":24,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-05-01T02:02:25.041668Z","times_seen":23255,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b3bf41bcb400dbbd8ffad4c0df49b02e","sha1":"72d8136028abd6e1f21a850a8733046d14e3f4f4","sha256":"c1fcce173bd0b08415367c934d5db7c4ed130c7f83a485c91682873bff2954ee","sha512":"68f00f88919a8eb914f94451f9029a23c91477033e02cbd8dba2cf4db9ce767cbd5d4f79dc4650f555e6c9df2482004f857a6ad05bd08bf9ff572dd01eade555","ssdeep":"","tlshash":"d47000b20e0a200080300882800002c002a020c0a200a0020a28082820008003000030","size":18,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-04-29T01:10:59.842354Z","times_seen":14683,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c8d967999607cd820c3a947a98d52f84","sha1":"d37bfdce82851b85dab7aa69b037d2ca140e2ddf","sha256":"0e27576eb1e9c067b58d47b8749be97d9e94c1e3d67cdf541784148cd80a04b1","sha512":"299e3512dea806608762fd9bf97a96fe6d0d36391bce60eae9cc1449deea726b09b71d6d4e73b5544736849cb70a935e1d853a7a064286a48b9f2dfff0761599","ssdeep":"","tlshash":"f680044d17f00d4d457c0d4c7344114470d4f44f10101c445014171570750315005043","size":37,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-03-06T11:55:01.496646Z","times_seen":16060,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tp.larvaelimans.com/sjw6GZLT2AQN/117158","fqdn":"tp.larvaelimans.com","domain":"larvaelimans.com","tld":"com"},"ip":{"addr":"172.241.53.110","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7a2939527fd9e68723da600e96d76bd","sha1":"a9e717b6364d2895ee0a716050db32ca0ef1bb42","sha256":"d810f5146f4cd1517512a6e31946e764a73c58fb01427aae88d42cc2ae28718a","sha512":"e6956ec633c76eb3ebc408528f950b81373238cd1d5b9fff5ddd97089ea14a1ff5934f23769bac5d93cc4cdb6a1fbc4ce69baebfb940a55d8a7a89caccaf92b5","ssdeep":"","tlshash":"ec300000003000000000000000000000000c0000000000000000000000000c00000000","size":5,"data":"","first_seen":"2023-03-07T01:14:39Z","last_seen":"2026-05-10T14:28:41.257977Z","times_seen":14368,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-05-10T15:28:24.387602Z","times_seen":807806,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d720eef71edef78b948a643d5712ec07","sha1":"ea5eb334bd6ddb0f04abafb700dc2ecb30070c76","sha256":"2daa1a91b2430e9867296c9cb26d1483785954a9bdd66f79b2c754bab7092cae","sha512":"63368ff1fef849df7f849af23bc2f24698893bd3d58300282427a76665b2d5c94f097d409f93173ad9c36944b4fffc2e37fa03a91f81e4e04f3737f9b73d2d6f","ssdeep":"","tlshash":"5f6000c00000c00c0000ccc3c00300c030000030c0cc3c0003003c3300cf00ccc00033","size":15,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-03-06T11:55:01.51255Z","times_seen":24260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"bdc6234a33432c503640ad2f62105dbf","sha1":"2e733c2d4f1953a7ca2231208e8e31edc399ab19","sha256":"61e43d202b6cd0ebf29ac8014115fcb890eb5593c4160b9ae285206ca911bce6","sha512":"ff6da6a9cfa04e9c0e4c8c038b70ff6461de31cf3020ffa062fb50d6507ffb72d431652f7a8eaf7fab316b387a16a0ba5923cb568450f6e5a3eb7c232a3793b6","ssdeep":"","tlshash":"bd70008e020000a0cab220a80a022300b0202c0008022200a0a00008202ee038288080","size":21,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-05-07T00:17:53.115677Z","times_seen":20588,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/asg_embed.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"104.20.34.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f0a82fbd63fbb0a63fc0b63f10e4d24","sha1":"bba21d386a205912e3494a9ce01491705a4f0891","sha256":"99f4e73147b4bab2e58e29abd8a4d7e142415cb28127306f13b03b18c42d1036","sha512":"76d23241f93a81fc0e56bd6073efd69793fbf254c41ec08415195010ea1b177d6c3e0aae35d8a12367dbf09f954110ebc9604429712b3985f3877c2e2b5b812d","ssdeep":"6144:e8dOGlEQZSQHYqm3+tQfITULVvzsbzOtzLb7cHsh2w5k/AScMS2Sc2S/NSKSMS/L:fE2SQK3LtCS","tlshash":"0234c789b6c1b0b403e3a1b4052f551af237b944744ec5c1f729d9d1aeb9a0e9a27f3c","size":244498,"data":"","first_seen":"2025-12-08T11:35:25.895114Z","last_seen":"2025-12-23T01:59:50.455379Z","times_seen":143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"476b43130f4da0758e51a26ea93e733d","sha1":"5eac9c53e9cc1410e58f6f0bdc85528acab30736","sha256":"b19d05a8d492320ab4db4d74ea0e9e90374bed47a18e805f8018ebb00af0c23c","sha512":"d7b6af5bbc8185dfa58fccd8be30e14c79aed4aba53d8824cc066465690837c5f2d173bc3bb78eda33f9ae91ac0434fbb63d4d4c906e1874cc614ecf72ac4291","ssdeep":"","tlshash":"547000088202202a003828028282a220223ca82080028020000a020228002032ba08c8","size":22,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-19T05:15:08.474522Z","times_seen":22786,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigwarp.pro/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"bigwarp.pro","domain":"bigwarp.pro","tld":"pro"},"ip":{"addr":"104.20.31.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"93d3fda95f28699d6a808cd10a063a33","sha1":"6be7007252b2261f59fad8512df609f23e919f5d","sha256":"28fcee9e93a3fb7bbe1fb914c884075855715594e633f0a1141c3a0356a64729","sha512":"3deabe0bb536a1c7f1a79e628e440e4baeb882a942472ae99e195bde1f2c13103088009581ac41be9789afdbb5c63a8f8a319b00393033a6f4ee3d72369fb326","ssdeep":"192:IXgVttFWcbeKYBR+10uVCr4f+u32l2IBQlViN8vqX1vxPHMVlfEI7ir6:KWt7YNuVC5o2l2IBQlwGvqrPHM3x26","tlshash":"5022e84afe85b11203b17aa34407bfdb215f9ba9c0865d109301d9f46c2b75eabe3f84","size":10438,"data":"","first_seen":"2025-12-10T07:32:23.006156Z","last_seen":"2025-12-10T08:12:35.619367Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/#0.03205958990146918","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.84.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"77c8287be10ff4b66a8490ca4d999917","sha1":"7fccb364c5e22958503bcd8b92cdb648d5c4c96e","sha256":"c2d43195d015b5856873b3b0c6e717ee21599ca3f03f820b7c325f27b9b6a31d","sha512":"2007ec2f0297a0479f4507af110911f7022310f757533ba1bbd40228d9b26908758bc09afa59f09471cdc254e49b84baa61f80514a010195d288f8049dface07","ssdeep":"","tlshash":"e3f050ddb475e1e955d22580bd2fbf407876526e240361e0d20cbcc1041868e871dbca","size":486,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-01-09T03:52:32.475699Z","times_seen":6630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d5757abfc2dfe2efd4bb1409941cf087","sha1":"a3eb249ef753951d22faa61f87302479aff27023","sha256":"bc9c06f981e7daa0478c449324d4010cdbc3c83c9a95879b99a0b531f5cabb87","sha512":"a21d0aae842d3e854147d43d706f8a72afeb8a045e8c020c6a3f0e61a0c91066b86163539ba9a2827f0a61d53b120a90b5c1ba65875e334a87ceca32b06c0117","ssdeep":"","tlshash":"188000ae80a800202230282a020222a02203e002c882008000ab0300208002b0280c80","size":27,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-19T05:15:08.51193Z","times_seen":19592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.labadena.com/api/users/488408?host=bigwarp.pro\u0026ev=227\u0026wh=473\u0026ww=840\u0026uuid=\u0026url=https%3A%2F%2Fbigwarp.pro%2Fembed-bwav74u6ycpx.html\u0026sid=85ba0ee1-f4fd-4d68-ba04-34204e20caf2\u0026i=1\u0026referrer=mixi-xxx.cc\u0026url=https%3A%2F%2Fbigwarp.pro%2Fembed-bwav74u6ycpx.html","fqdn":"a.labadena.com","domain":"labadena.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"518966e0d91815ce6a7752dddef31a3f","sha1":"d017aeb0e7777646dbbf5541968a4078be082ce8","sha256":"8b336795ed11858f95c28513406bf79cdba07ddbfbd30c317e175ca6583b5583","sha512":"039169c5841337299c4fc5dcfc1072e32cf9004e8ad4c71e954ba6e870fa0e00536119fe1fd71e3a96aa37af376f87e3c5510eddc2e4061f0ed4dbf9e7d0d263","ssdeep":"","tlshash":"c1010282869ca5fb530bd0a7e97e4fb69c7e85392754500bfb28030f99ce04203d015b","size":744,"data":"","first_seen":"2025-12-10T07:32:23.020131Z","last_seen":"2025-12-10T07:32:23.020131Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"aaf72876f0d5e8a677a383fd45bf938b","sha1":"d8b2ca3c238c933223f4a6313c5c0561f99e0c1c","sha256":"15eb7e222abfc64660d0f94c04053839498df20ea9ac9a13a201701a56ce3bf6","sha512":"c6bec20224539a5319a753a794c7521e7063e76b3d41bac8d7f0159880eaf3ed07c3fc1b0eb4ec285f1970f270f4b0ab68890d5a0ed01e3b1542102ad707f6d7","ssdeep":"","tlshash":"207000080820000820200802220322283822323022cc0002220a083022ea00b80282e2","size":24,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-03-06T11:55:01.498128Z","times_seen":23956,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigwarp.pro/embed-bwav74u6ycpx.html","fqdn":"bigwarp.pro","domain":"bigwarp.pro","tld":"pro"},"ip":{"addr":"104.20.31.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b88d08b1bcad434391fbaed76561f4bc","sha1":"2a85b8f966482ab13aec9bac31307712c6b6e9b9","sha256":"987d531f83ab36db918201bbc7bbcff707615db4fe48c1818f858f84f7188266","sha512":"d7df331147ec390cf90477966d888e70ec1184f7e9e13d2996aef0c6cbafce2b0bc9b965eaf3328a51c070708e82b5b5ac0372505ef454ac691ab2d38ae6b0c0","ssdeep":"","tlshash":"df0197dfa1ca05be832231aad705a986be116ff34886ae10f4fda9143f5136915093a2","size":697,"data":"","first_seen":"2025-11-16T06:33:20.534632Z","last_seen":"2026-01-02T09:45:32.429393Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigwarp.pro/embed-bwav74u6ycpx.html","fqdn":"bigwarp.pro","domain":"bigwarp.pro","tld":"pro"},"ip":{"addr":"104.20.31.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"10dc0b75c654622f0cf68377223c1e88","sha1":"37470a28ad12d27df90eeedc33e9ff291d185ed9","sha256":"0b7ac5ee51e246f64a05e3be781361b855dfe30c49c6e31b5ca9b865d4c3a789","sha512":"7752b5e211bd728e9cd0a680fc3f541e364b4376087949d08e75c122ce2944c2baa48fbbcd68b7d864a366ffb3abc4e300149b18c4a82f5c20dae6106747c30b","ssdeep":"","tlshash":"c801bd9f61ca05bec72220bee305a987be116bf24c866e10f9fca9143f51379150d3a3","size":697,"data":"","first_seen":"2025-11-16T06:33:20.53609Z","last_seen":"2026-01-02T09:45:32.437948Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7fa6731b67d45ae60e775cc7ae99ddf6","sha1":"0dfbec4a6f67ea525568dc545e35c86b547bee23","sha256":"cd74e6a3b779a514972758fa195725f40176261af18fbcd246e5f401a3ecf849","sha512":"22a17ab0d594b7da45fc44b0885c7520001121b465d4eef5c42bb00605a193b0e372d2db16ecb6ee601cec3a038a62f6cd5efcccc8fb9a9e2e6b32e32944ad53","ssdeep":"","tlshash":"8460003f0c03003000000ccc000c00c003f000c0330030330c3c0c303000c003000c30","size":16,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-29T01:10:59.956205Z","times_seen":15061,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"05b8c74cbd96fbf2de4c1a352702fbf4","sha1":"320ad267d8d969f285eda5c184f5455bd29c8c95","sha256":"44ff7b02c80d38b26dd6aa31d9470aed81b32e10331a3c994fb1a9945fd847ba","sha512":"1ab6ceacde9b312b4f32d7c9f2d54448e82264c30807e4db86ec8e295791c1fb9aafb38985b2054e589c0a0a2830f1a389312fb2912dc2f9c949231967e03545","ssdeep":"","tlshash":"f6400000000000000030000003033300000000000000000000000000300000300000c0","size":6,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-10T15:26:59.807093Z","times_seen":137231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-05-10T15:28:54.099181Z","times_seen":207405,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigwarp.pro/embed-bwav74u6ycpx.html","fqdn":"bigwarp.pro","domain":"bigwarp.pro","tld":"pro"},"ip":{"addr":"104.20.31.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f85a156eb20813d286017a878cfccaf","sha1":"a79f3f3e5452c3200f97d2d4cf1724ec39c2c99e","sha256":"df3e2e61bab2b9d954e544d4befad19ffee7567a4d9925b2980d7769e15266ca","sha512":"1641f50ce43ef9159d86417fa5d0fb8df49344183e9c6d2c873817a2190c51d109a0cce6b8771471eb69f22c62a58357b6ce02218639f56571da25b1f4cdce6f","ssdeep":"","tlshash":"3b01e79f61ca04be832321aad306a986be11abf24c867a10f4fda9143f1136d05093a2","size":697,"data":"","first_seen":"2025-11-16T06:33:20.537989Z","last_seen":"2026-05-03T13:36:30.144124Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigwarp.pro/js/bgwp.js","fqdn":"bigwarp.pro","domain":"bigwarp.pro","tld":"pro"},"ip":{"addr":"104.20.31.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b4b2f561fb56c24a2e47ec07832ec3f","sha1":"299f1aeca476369487e63f03687191764c618130","sha256":"a58060cc304b1dc7d898f639b9c8e9b8ed7aea8365e6d6ed51c7a31fa5f4eae9","sha512":"41e946669e3cd8285771c3bb7d0f1c68c160c992c35dfabbbf8ce5b1a41bce9fb822fa79f85b855870a365de531a86464bf2d3f48fb34b3aa2c8d7f87c280372","ssdeep":"1536:5LAGm9QIpRIAzH8XznfUezSDIj5l9umwRykMHWLZynl:5r+iXSDk5lomwEHWLonl","tlshash":"1293918db8e3f4655772613041bf34deb5bd6c92300e5208c16ae8fc7ca4f6b996288d","size":95912,"data":"","first_seen":"2025-02-10T18:58:29.587522Z","last_seen":"2026-05-03T13:36:30.098948Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/wp-content/themes/enjoyvideo/assets/js/superfish.js?ver=6.9","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9721a79829c73542da51e0d1dbd223f","sha1":"6184e0eb94092bf7165dc4a4b534737bf62c19dc","sha256":"4bd938863d8e473540c7300aec8fd156822f4701cee5fb6b3328a2cc9b0a012b","sha512":"9c0581651993c59291adba0928d58578e3f7139bc0553a2a0e6186b799376ea12557465ecd8f6d48df07e5d74a27019217bbc7361e837d95f837c6e7d65954e7","ssdeep":"96:ZI2iU4kmc/Ys++n8xwa99mjsaBPOZMq+dAcUFWiVUMIDdBtiipoebcSUbsH7jvEP:ZyN9s++facPOZmOhKgU4mjaEgRTd","tlshash":"55f11ec9fb9f2593c6ba325a089f50cc623d9076dc46082bfcb4e56c6d9487d826593c","size":7548,"data":"","first_seen":"2023-03-07T01:27:56Z","last_seen":"2026-05-10T13:42:08.855531Z","times_seen":902,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7545d1da7159ca66338b4c84b69f8ae4","sha1":"0858800340ee5b8c413a1aabc50fb28d0bdf89db","sha256":"7510742fba4d25113b6124987e97cba40776bc5030a6a3678974dc8ba075bf81","sha512":"dbd944acd2868ed6eb1de313c0efe7590f715129f7ca5a9ae5a3dfb9de0035612a248441d9e6c4c1812d8ec4b3de7cd2a5973c4c71887361a2276de1d73fab94","ssdeep":"","tlshash":"af8000088820202a20be0a0e02a3e232220e3022a0020220000f0280380020bb302880","size":26,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-19T05:15:08.475594Z","times_seen":22616,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5eb9472f3c3e0e79bbc65d78a60bc3d4","sha1":"1a93f96290f63802dfde06c9707f42c9545f6695","sha256":"e0bc19473df9795cd42be5da545b5a6828d31527b4ffa3769564f735abec0deb","sha512":"a52b08082e87bc47f5e0ea69097ec0ae039648315c10f12de50872e59108363bcdbf06596df0d31df3b03e71077c01f681f5328ca942ddba9f1f625e2c7fa206","ssdeep":"","tlshash":"eb60000c000000330cc0c00330f0c3c0fc30c030300f3030000c03003000c0000ccc00","size":17,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-19T05:15:08.513223Z","times_seen":16684,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.labadena.com/api/users/499697?host=bigwarp.pro\u0026ev=227\u0026wh=473\u0026ww=840\u0026uuid=\u0026url=https%3A%2F%2Fbigwarp.pro%2Fembed-bwav74u6ycpx.html\u0026sid=85ba0ee1-f4fd-4d68-ba04-34204e20caf2\u0026i=1\u0026referrer=mixi-xxx.cc\u0026url=https%3A%2F%2Fbigwarp.pro%2Fembed-bwav74u6ycpx.html","fqdn":"a.labadena.com","domain":"labadena.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"2261994012e56593e6f29314fb313ce1","sha1":"b97b91d566cc22278bae4c2f12bcb71a9af374a2","sha256":"1643f2ee3bb4bd986a7748c94a9b7a93f690e1de68684f29a9b06d7bc5ba2201","sha512":"cd92c45eec08fb7730e40628df0c82963ac3412e620b66ea85bc6eebee7eea58dd29c60ad13a955e1cfe3d8146e53599fa2aaf18457266277eb2a71b14fc9d10","ssdeep":"","tlshash":"4701dd8252ac66f6530f50a7eafeceb68c5e89342715600bfae8070b59da04342d015b","size":736,"data":"","first_seen":"2025-12-10T07:32:23.007231Z","last_seen":"2025-12-10T07:32:23.007231Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4cf954c76f588e097ad9ff70e90a86f2","sha1":"6c3f32fc10b2d98ee69d845eaf5e2d99841bd264","sha256":"0098b3fb5f82abbebff8c293e42863b93e210b01f0032c4147fe1457f5b48a93","sha512":"73b77b211094a65a16e25ad1c26e4001993d80adf820126ccc940a407894eb4462a7d5ea953ece44e33bf77139d896fd6e90029dc66cd15a4be654589c844cb4","ssdeep":"","tlshash":"847000a00e0a888000a0a8ca0a832bae32a2000a8220aa02a8ca002228282e30280080","size":25,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-19T05:15:08.480921Z","times_seen":16303,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4260c01394765a497287987f27d6823a","sha1":"7162f84a1608c790ba9e01abfa0e0ddd067feb97","sha256":"0200f755a2c13b9335fe39b3a88f696c334e518e8407780c4731d8e6be966c4e","sha512":"acb1477b99c1be7773301f0a9ac146c60b4e5961824b2d27f4ab27d2f879ac4985a4df0dae6ce4cb2c0b3f9c93d5731320df8a49ddddc0cb9b4c8d2e328afeb6","ssdeep":"","tlshash":"7270003003003c00c03003030f03f3003000030cc000000003ccc00c330300330000c0","size":18,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-05-01T01:26:21.263753Z","times_seen":17926,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"61d9031f2b0da3ac81b6732b6d1ecf83","sha1":"515d4db3d1120a7160d1bc7d93d57f7fbdea1fc4","sha256":"436179ef4964c80a03e62015696ba10c5ae70602c6538d07f50b75f35bd72a27","sha512":"3b6ddafdb73b34756f57d92b3db048d03ac38dd2f96be7d4ba695835470b8ce460e2d6059a84e64f3bc2d5237b6151aad2a649f76ab43a81447182684b5741de","ssdeep":"","tlshash":"b58000b02020a830088e020cb030c3cc3e32000230033000a00c028c0830ec00228f88","size":36,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-04-19T05:15:08.455572Z","times_seen":18664,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/asg_embed.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"104.20.34.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f0a82fbd63fbb0a63fc0b63f10e4d24","sha1":"bba21d386a205912e3494a9ce01491705a4f0891","sha256":"99f4e73147b4bab2e58e29abd8a4d7e142415cb28127306f13b03b18c42d1036","sha512":"76d23241f93a81fc0e56bd6073efd69793fbf254c41ec08415195010ea1b177d6c3e0aae35d8a12367dbf09f954110ebc9604429712b3985f3877c2e2b5b812d","ssdeep":"6144:e8dOGlEQZSQHYqm3+tQfITULVvzsbzOtzLb7cHsh2w5k/AScMS2Sc2S/NSKSMS/L:fE2SQK3LtCS","tlshash":"0234c789b6c1b0b403e3a1b4052f551af237b944744ec5c1f729d9d1aeb9a0e9a27f3c","size":244498,"data":"","first_seen":"2025-12-08T11:35:25.895114Z","last_seen":"2025-12-23T01:59:50.455379Z","times_seen":143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bz.cathbermes.com/rCWKNFBsNT7t/127524","fqdn":"bz.cathbermes.com","domain":"cathbermes.com","tld":"com"},"ip":{"addr":"172.255.106.117","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","size":5,"data":"","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-05-10T14:56:37.606452Z","times_seen":16216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qi.beveldankish.com/rIeDWP0kV0f0L/127525","fqdn":"qi.beveldankish.com","domain":"beveldankish.com","tld":"com"},"ip":{"addr":"188.42.241.109","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","size":5,"data":"","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-05-10T14:56:37.606452Z","times_seen":16216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a689097727785bb0e94e7a64d6745480","sha1":"270ab5e5a178a457e9b7ba8c3f4ad4b4014bdceb","sha256":"56e57af29d4af8b1fb7008dbfdf84a764970a6673f1f19165f1a8498ce903d93","sha512":"94cd3be7f2c1444297baa8db24fa7f599e9be15762cad245396fc297b643f9bbd9eb7f4760c8dfbaf1bd458ad5cd31c8fa0c05c837400682006f5f3e028da7a1","ssdeep":"","tlshash":"7c6000300a02200080022c0220008000002080a02200a0220200202000008083aa8000","size":13,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-05-10T11:12:43.856457Z","times_seen":20088,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2ce512d6b728fa77b12fdb8f36ba5064","sha1":"dde1070feac8d665d8fef42b698216e7c2fcd2d6","sha256":"e5ee82e31ec94cc385b3637227b4435f0547b3d0a4aa60cdda1d8fada4779df3","sha512":"3cd213e4162fd8cb432c9f0d006925e85b7904da11dcb9ffef9f29ca4906bf9eefc7ae80712feaa3333b949c29fcb0ba02c330242121fdeec340b60c7d9df903","ssdeep":"","tlshash":"036000220c02802008000c80820000ca8223008022022002083a082a20008003200220","size":17,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-29T01:10:59.976697Z","times_seen":14708,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigwarp.pro/embed-bwav74u6ycpx.html","fqdn":"bigwarp.pro","domain":"bigwarp.pro","tld":"pro"},"ip":{"addr":"104.20.31.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6b426be53240406dee294431afd4d24b","sha1":"2482e53f4cbc8e2b913f944b354218ab23e34456","sha256":"0a7b48b74fec1e6198ae2aef7c5540cd71c0e6cb9067f2ace15fe2d36868c008","sha512":"bf6b4d7b4426db9fe85072a65bc64400bb2cbdc4d77b1d160af08f936ce09ab6660411b7dd92f48d8f48c43ee1d45637d24d43e0e11326723c523efdf71d8d66","ssdeep":"","tlshash":"aa11c4753a195534c5c5414b317de7ad3e3260617f029144c36ccc295d18e9714dfdbe","size":902,"data":"","first_seen":"2025-12-10T07:32:23.062656Z","last_seen":"2025-12-10T07:32:23.062656Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"879c12264b74d969b0314e9a9cd1f17d","sha1":"714a5d759f4d1b7d41f8c5526451aef114b33d41","sha256":"28be88d787b6e773eaf5d0818a6c62446ce628dd8ec0659c6f78410588838337","sha512":"3547b27de7764e655bc8749fd5c1166599da57d2a76057e66923476fda692917a9e537a934374c77f361359b9fe94d739bc037044bbcf2648feb43f7ff9f1c7f","ssdeep":"","tlshash":"f7700008e0a03032203a020a228222202a0c2020800000a0080a328028882832380880","size":22,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-19T05:15:08.498638Z","times_seen":21975,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigwarp.pro/js/jquery.min.js","fqdn":"bigwarp.pro","domain":"bigwarp.pro","tld":"pro"},"ip":{"addr":"104.20.31.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-05-10T15:16:50.042885Z","times_seen":465370,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"be6b25353280fac3960e70c9dcb6804f","sha1":"46c69609a3bb697e60644b18dc85d780c44804ea","sha256":"38be2b1c1c886666cd4ac85d71bb8b65e51d95c7c5f40b0c575f7d196a0442cd","sha512":"cfb553df29882616e097d28e643208df6aae0e005e63b7e7d9310a731135e9e33407ec268f12699208db7dd4fe2e8ba8a49de900e8b0a1a4bd83bd522f2ee953","ssdeep":"","tlshash":"10700008e08020a308380002028223222a0c282080822020002b0280288228baa88a80","size":24,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-19T05:15:08.509203Z","times_seen":22176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c809887dc51fb5a7e73a3a98c3dd661c","sha1":"7d7574d4dcf1e06e2230379897c5df681ba603de","sha256":"1138f8c1bb11f4a5f7d8354b8c8a642ef94c9c741d76a7f476bac6473b7de085","sha512":"3a5e6abed1f1fa40c5d7d13b98d4e90d180f5913a673f10db23f40b1fe68a70de8e780c2633bb6f37745ce4aaf81707844817fa84baaa2b764a322831c298e7a","ssdeep":"","tlshash":"9b8000f00283008b08308f03230b3300b030200c30c032cf3038003c3002383bc030c0","size":32,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-19T05:15:08.510411Z","times_seen":17900,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/wp-content/themes/enjoyvideo/assets/js/html5.js?ver=6.9","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ee990907b315027da600eeeaee2e04b","sha1":"a5767b8325822da1212f702e79aea069747e4747","sha256":"a4b3b91b775b356ac4b5c34ac94dbcc1212ef23b5e89bfa9bfcc92e285a4447a","sha512":"18050136fa0818373b42c9f60f3c0baafc1b17af9231858fd20ae54a70fb9ec2aad9bc32dc914c3d99ccf2dd63b0c1caa0cce2f291cfa4d923da73e22b2e9ab3","ssdeep":"192:BbydQcx/vJLQ3oLpr3ep1JKpFe37j88fMUnK97jX5SMBXSG5i9+DxQTQ5pvhXaZM:BbydQk/vJLQ3oFs1JKDe37Y8fMUnK97J","tlshash":"6e22100a3cfb21a50167e0a777bbb687fea0a25b3355a040749c867c5f90f7460ede91","size":10330,"data":"","first_seen":"2023-03-07T01:27:56Z","last_seen":"2026-05-10T15:17:15.810966Z","times_seen":954,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e018c77e67a96b7f5440da3c7397e35a","sha1":"a090b0a7035556c7f71070fe10c2e37fa15584c5","sha256":"5c5bb18e544cb67f765d8a6d2c774838d3ae95df9b62f25660c64554a7302d8e","sha512":"cfaad7c410b0f14c2c849855f859a973177c6bdeb27ce9e3dfbbb38169a4abd0f66252213aa1885751c54d1ae761fd68af739081e9b7d6875f084c2240874062","ssdeep":"","tlshash":"0a6000c000030030000300303030c3cc3c30003030333000000c3c3f0000f00c003f0c","size":17,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-05-10T03:23:09.788507Z","times_seen":21415,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6b102c6276b7427fbd9d840a55b1f810","sha1":"c14fc4188ad50b146212b5c3efd5556c39c0c3bc","sha256":"af18ee7d06fe2ee2da28af260ea0c78923664ecbc220f3ce395c50b1822dab7a","sha512":"1ac3bd21fa66c0d0ae098bdf685df1141991add11f94d75273b228120c70c667870c15274e7070d6133c88833ca8cda86b11d90048982707bde8fd5c22ceca39","ssdeep":"","tlshash":"78900405c335474d1574010477555d031400130440154d15301c101135454c3004175f","size":41,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-19T05:15:08.505739Z","times_seen":16624,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigwarp.pro/js/bgwp.js","fqdn":"bigwarp.pro","domain":"bigwarp.pro","tld":"pro"},"ip":{"addr":"104.20.31.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b4b2f561fb56c24a2e47ec07832ec3f","sha1":"299f1aeca476369487e63f03687191764c618130","sha256":"a58060cc304b1dc7d898f639b9c8e9b8ed7aea8365e6d6ed51c7a31fa5f4eae9","sha512":"41e946669e3cd8285771c3bb7d0f1c68c160c992c35dfabbbf8ce5b1a41bce9fb822fa79f85b855870a365de531a86464bf2d3f48fb34b3aa2c8d7f87c280372","ssdeep":"1536:5LAGm9QIpRIAzH8XznfUezSDIj5l9umwRykMHWLZynl:5r+iXSDk5lomwEHWLonl","tlshash":"1293918db8e3f4655772613041bf34deb5bd6c92300e5208c16ae8fc7ca4f6b996288d","size":95912,"data":"","first_seen":"2025-02-10T18:58:29.587522Z","last_seen":"2026-05-03T13:36:30.098948Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/adgpt.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"104.20.34.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1d7260bf479f9f9a95e6b68bfbdb636","sha1":"3fec65be5c62abce1f59f5826fe499b26e09437d","sha256":"9b00f9e66be006247be0b9edaf0e99f2897bc55347c52f784ba6977b56854a07","sha512":"a027601b45fa78b64fc98e8f8c62769a0785dad5bc9bb407e4823442804d7b0d3e792d1919dbae46d4913ab5be8ddc884eb1857cbc4551bbc01dc66c592ec9b7","ssdeep":"","tlshash":"312142aa31e1f8d213db695a113f0009f26ea875117ba180d354cd75bcf884991a6faa","size":1294,"data":"","first_seen":"2025-12-08T11:35:25.881853Z","last_seen":"2025-12-23T01:59:50.460808Z","times_seen":171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/asg_embed.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"104.20.34.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f0a82fbd63fbb0a63fc0b63f10e4d24","sha1":"bba21d386a205912e3494a9ce01491705a4f0891","sha256":"99f4e73147b4bab2e58e29abd8a4d7e142415cb28127306f13b03b18c42d1036","sha512":"76d23241f93a81fc0e56bd6073efd69793fbf254c41ec08415195010ea1b177d6c3e0aae35d8a12367dbf09f954110ebc9604429712b3985f3877c2e2b5b812d","ssdeep":"6144:e8dOGlEQZSQHYqm3+tQfITULVvzsbzOtzLb7cHsh2w5k/AScMS2Sc2S/NSKSMS/L:fE2SQK3LtCS","tlshash":"0234c789b6c1b0b403e3a1b4052f551af237b944744ec5c1f729d9d1aeb9a0e9a27f3c","size":244498,"data":"","first_seen":"2025-12-08T11:35:25.895114Z","last_seen":"2025-12-23T01:59:50.455379Z","times_seen":143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/wp-content/themes/enjoyvideo/assets/js/jquery.custom.js?ver=20250901","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b88b62180e4a3a4637e02d285b93c79f","sha1":"7eb1e5841f07055711fd07b9b0a45edf619e25ed","sha256":"f087b33a132b9aa5db20d040775fb61ca9b5b17bfb1007d66b4bb97715749e93","sha512":"43540128f1b91a6c76377b07e3f07a5264ff6533397d59e17119bc4967d3132e2411f515c2ab6c5f71a8251271b4c2f38cf9376ec64cc81ef5d60d22dbaf0eea","ssdeep":"","tlshash":"806148b1bdb22721487bc1565ffb7050eb1cc09b6246cc90ba0ea6a41f81319fd5dade","size":3360,"data":"","first_seen":"2023-03-07T01:27:56Z","last_seen":"2026-03-26T20:31:02.426524Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/wp-content/themes/enjoyvideo/assets/js/index.js?ver=20250901","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9613bf1719846f87062dea4abec86dd","sha1":"c48fbf576ec755ebf7282c73c65283f6b9261fc7","sha256":"ea6305d57af0374c3b8cf5ad5256ec7614b276213ae74288ea6e7a3646394311","sha512":"942ee0333b8503fa4a1f30defcaf1944078eac41c4c9856cea1d72c9f784885f3025ad8d657f93e18eb5058650c775260e1c8a618607688e9a7aa6e012181018","ssdeep":"768:Zq/Z8ahUSYk8cotSQ43DC4c3EmT5GVgPlbV+80Gu92T3pCpfU8H8PD4ygOMiCa+q:ZaotSQXdUmT5OmxV+fGu92T3pCpfe1","tlshash":"48d2624a7eea32b6409bf6baabdf6184f235808b610999187c5d87441f50c3105feff9","size":30672,"data":"","first_seen":"2023-03-07T01:27:56Z","last_seen":"2026-05-02T13:32:01.133859Z","times_seen":110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/wp-includes/js/wp-emoji-loader.min.js","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e96340518648ab8e76eb13d0266b53b","sha1":"32702f36e1d9b118462be3c0bccbf6883213bf4b","sha256":"441013e25fb3667dcee9c3b382ab48139e6ca50b89382b2b93f6c026dc2233b6","sha512":"8dcd73656321f231f47af046b046afd622a26ad4923d06b4f0cc33fe717b3090a9b8841a9a4e7446b327b6ffcb1bce944727206d07000e475b00073cc9250804","ssdeep":"96:kvcHtHRA5NTDXnM2E0+1lfYsPHgRhR3Se:xN0LE0+1lfYsvSb","tlshash":"1791859ae77a38dbb2f900f2697a0d47eb614435d6c8d438c9bda3141cb5893c274b46","size":4247,"data":"","first_seen":"2025-12-10T07:32:23.066103Z","last_seen":"2025-12-10T07:32:23.066103Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigwarp.pro/js/jquery.cookie.js","fqdn":"bigwarp.pro","domain":"bigwarp.pro","tld":"pro"},"ip":{"addr":"104.20.31.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae0c2c5d8f01f7d35bb698bb618a62f7","sha1":"63556a22ddea1c5f23a5cf7d0b6d35c7aab54e20","sha256":"75aef2e95ea7f3a70999396fba0c2ab866f4ff06313cf1b07780d800a5fc1ebc","sha512":"eac94ca9d884692af8bdf12aa6e902a3be4eed0772ad8f2932ac1c3328b83a7351cdf743a409bbc0a3cd385956c08d3203d51c572bb1680489e37330fe27a2bb","ssdeep":"96:L4BZxb64Ng7V8cNwpGylRCsKZcj1JXulL6M/aGByLskPSP4lBCClf1wgCyC:LQnb6eg7DgCsk8fgZJkPSPa+gCyC","tlshash":"2e91fd293a0d231d149353f57aee10c8a930d632216ad46c744cb6b06f00c63ddfbbea","size":4331,"data":"","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-05-10T13:36:24.028113Z","times_seen":4423,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigwarp.pro/js/localstorage-slim.js","fqdn":"bigwarp.pro","domain":"bigwarp.pro","tld":"pro"},"ip":{"addr":"104.20.31.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba6facacb00551830393d637195804cf","sha1":"77d2d2802ee44767b33a2d679945cc3efa3619cc","sha256":"41bb37c8133d8e5c128820cfbe03bcbf63ce256bcbd60a1a76143472d8668e38","sha512":"90aa07250eb414ec22765ab6922f593ed3186faecc02008f0331c3e3807cace76861e01028142015308341e955f151b609d08b7d354ff2d27e0ff04ebfde81f9","ssdeep":"","tlshash":"ea41118275e1d9904be004e728b0c002e638992e705d62d0f7b7dd827c9909bcfb57fa","size":2064,"data":"","first_seen":"2023-03-07T15:52:27Z","last_seen":"2026-05-08T12:37:26.769718Z","times_seen":1502,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"67b2371a222c2dc94f01b8579fff4f4d","sha1":"0b0a5e2d11790de282055efe8b8cfd6f4378bbfd","sha256":"dfafe4f2e08c006ec277e8042267c6237512a1a93bfcf57657420d4becc0a97b","sha512":"06a32863a820cca2b2f4460c10c4dc3583687648c909c5f67c746e727ecd4ea6301db1273b40dacdaf397a585ff257eb8c3e226fc023e95d3bda257e02505dfb","ssdeep":"","tlshash":"d4700002880200a8302bc808a3022300200080802882000008888002b0000230808088","size":20,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-05-01T02:02:24.96695Z","times_seen":20843,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e969e6981adb7ab1cb174994a5c8c627","sha1":"5f534a259a6f3754d1d392028fd4cbb344fb6563","sha256":"5cb18f9c0eebf644c0bc27e5224177984121b4c4a3f8189861a6d797a15a2e7a","sha512":"10bbe815bb6e4ade10d00a42a82dd10b668e95e275161cb0a637b2ea95785f8f7fc72b31bb48ac9c1dfad03d811912c0683941a3c09357525f164915d5b033cf","ssdeep":"","tlshash":"a380000a88a8a0222a30a0228c020200202e822080ee208083f2032020c283c022b802","size":30,"data":"","first_seen":"2024-02-12T20:00:22Z","last_seen":"2026-03-06T11:55:01.514986Z","times_seen":20053,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fb440b8133f21c3e5d3e39624e7bda94","sha1":"1b46d8568f9bd8a2be944d6a61924a21ec0b6e4f","sha256":"a5e2bc908c3bd3196d273564d073484f9905d13817490eca5aa249e701139cdc","sha512":"f874692932aab2be754d763a3998c5cd3c654a5bcd78c5d839fe0ba506f9a9e563d3cecba0ca71a6b0db35ff94943f6fa8bb0292f10c1aeb7df2704ea6d85fbf","ssdeep":"","tlshash":"047000000000000820200802220322083822223002cc0002220a083022ea00b80282a0","size":20,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-05-07T00:17:53.1035Z","times_seen":24312,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"350052386c44f930fe96151db3383ace","sha1":"9979e0947b58f29a711ad5afed356853b921e9ac","sha256":"bc1a6bd7f4ddbcd78987ea609d4595bdf2422cb1be9e85af5d6c199f62000d6c","sha512":"edb010bcdbe67f6c413c538b323f1f7086256f551a174c5cda87526433757705e3bb75817f3724e9830ffaf53ff273989cfef9edbd0706820fa22553d9b3bae2","ssdeep":"","tlshash":"486000300c030c0f00000c000000000c03300cc0330330030030303000c0c003030c00","size":12,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-05-10T11:12:43.859721Z","times_seen":20220,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2efcbd10a3c91fc0502e057622eb9eeb","sha1":"db20d6f6b4d434c1e225da920e26ba16899e1d49","sha256":"5b8bc3a736f9132deade718accae9f51205bda5787d859ebf575b63dc401b6f2","sha512":"77247d099c78313941312815eb6c18e150a0691af07bf02b0e99de13801c4c52716e8f60a65b45df8f374f303f96d20353f1c616509f58d73a4d2cfa60ca38f0","ssdeep":"","tlshash":"bd1175042c65501821d368784437ed07aca30199f3c8e8ccb4f765e0072b8871d5aa9d","size":1042,"data":"","first_seen":"2025-12-10T07:32:23.069123Z","last_seen":"2025-12-10T07:32:23.069123Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e549b27f7f8ab1d88f7e7ed50cbd7338","sha1":"d0480f306d7aee410d422052128e5f48268c59e4","sha256":"68292b6f853b215e2d2aaf3678dfeac26d4cedba1c5a775518edafca5f9bd8ed","sha512":"e1864aae4e1d185256ae59c66ccb137ce982f00b4a525a51e137a7137f4d1eeec1ba6529b0c75d6dd5385d30e47dff38c9b5f5dd62a29955fda8e3f7261ae4d8","ssdeep":"","tlshash":"f121a226a0f15470407ff27e272eee253d76044f9449bb10b99d8e58af509ac0b7294b","size":1226,"data":"","first_seen":"2025-10-06T17:16:41.257634Z","last_seen":"2026-02-04T00:09:03.020486Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6043a0b1ebb36c505a9191b20e11815f","sha1":"6f9cda2539774241dca5f5df2e40b2e83139768e","sha256":"354d474759535f5f0bb63dc6c5ea17455fb3d281aeb3cd6d44c2f3f594c5dec3","sha512":"5a55931f152716ef8803227e0518befc7ec9fdbc66f16aab57824511c7f3a94bfd9b93b4417d6f759d04c517f3d242eec582b49a8d92be6079b88e10a27fb9bb","ssdeep":"","tlshash":"517000a20c0ba0020c228b02838222002020028a288830c220a088203222e0b3028080","size":24,"data":"","first_seen":"2024-05-15T22:21:35Z","last_seen":"2026-03-06T11:55:01.515568Z","times_seen":14363,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c24107ca675c86ce400f00f60737bf91","sha1":"915db7d3426c409da4f1c6d58c38d9dfd6ad39be","sha256":"3688d7e88d248ea850c456f0233738d10695a410a3dec97785ca7422c3f562c1","sha512":"0b10c8522a9d3b4cd1b5d63918ca7888bf837bd48c2c456c38e20e215a0c5e1cc38e5248658c54021b1d2337a68dc1f61b17adfbda678078d0d4a8cb4fc56e40","ssdeep":"","tlshash":"2870002002002830880200022020cb8c2a200280280230008208000800208002808a0a","size":20,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-04-19T05:15:08.509945Z","times_seen":18884,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigwarp.io/js/dnsads.js?ads=1\u0026AdType=1\u0026cbrandom=2\u0026clicktag=http","fqdn":"bigwarp.io","domain":"bigwarp.io","tld":"io"},"ip":{"addr":"104.21.42.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"99eccae6afa72c589ae54b5c3890282a","sha1":"0f102f8f5b556635de65d16cf70fa8269c6761b4","sha256":"b74a58316385de04b054737776e71c160cd60d2d01b5440b32c21651fb0ab8d3","sha512":"01bc413c1695c125b8ab111c60974da99989b618fb674631d998db519996966c569503efb97a3c760b50069e87b6b42891985b00c64810a43935ada075a19d24","ssdeep":"","tlshash":"eb8000ee08e2bcbec02c0000000e02a802b00c00a023ac20a00e8e0233e2e20c228c3a","size":38,"data":"","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-05-10T13:36:24.071085Z","times_seen":2625,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"dca14c896efeb4b80c68c457aea67f39","sha1":"2488a552655a41fbd3f3165ea5b1999f46f25738","sha256":"998158f6df4183edd82539e6dc971d32f50bc7ee075f64d4abc46d3011a9da27","sha512":"56d0ea635f1a8dd9f7bfed6a8e087ec4d8e38bf65eaee1e1262740fc7ce80cf1b45ea861f0d5949b69ecc650427ccc8879f1b7c9af78933ba26d0aa9f704033b","ssdeep":"","tlshash":"ac8000b02a02b830888c220eb030c3c83c30000030033800a22c00cc08b0ec02208e8a","size":37,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-04-19T05:15:08.469862Z","times_seen":18394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a3a42bfe8ae187a867ceafef41b465b1","sha1":"103b6ed31d57936e3e15fedea5a555d6cd131184","sha256":"4090f46eaef2dad76f41be22ae8aa3d7245048219d86258eec947f26a04be883","sha512":"88eaaae652e3739b98ee32b2ca0fef9529b439e6954bea8d60bb4bc1e12b8089dee8627b623b4c9786ca3c2d0b83d3a34ee805341db0d6bb4b0d3dbbac030a39","ssdeep":"","tlshash":"b3e020f6a957457101e751237bce735d29316563a5264c403445ce806d34dd31126dd1","size":335,"data":"","first_seen":"2023-03-07T01:27:56Z","last_seen":"2026-05-10T14:21:23.472235Z","times_seen":762,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xadsmart.com/viwqx/ysvg.connectable.min.js","fqdn":"www.xadsmart.com","domain":"xadsmart.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"60cefc1ada1034a561a2da6004325c5d","sha1":"c031bbcfa9b7ddb53a30a450d2da6ad971bb151a","sha256":"9ff9e7c67d84c95a5640af5556d94d2b95ffa1602a0bfb39f89ff0258599e9c9","sha512":"6430837cdc20cdb2843af047dc3c76f292b0965a1c324931c984fb28c44414c150592a8e77013e69e50527af5ccfe95d414752c3c17aa15b59576f4f4535c346","ssdeep":"768:bt9rqAYKKaZzFQ9JsQU+YDngZGihfzmMzhYrTsAysncCWcf5k5sigC3dCntlqo7/:bbhZzFQ9JsTgZvfzmMzhYrTscpZZd","tlshash":"6a133aaab286282601e741b9503eb316b23305167912d458fcb9cdf96e3ddc6127b7fc","size":41925,"data":"","first_seen":"2025-12-10T07:32:22.99597Z","last_seen":"2025-12-10T07:32:22.99597Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f25cc9bf81bc9b72290565687a011dd4","sha1":"98d624e473eecad652ddd8505917825d8f219296","sha256":"793401a4baa2fb67b2049b633d5ebb8c25d2dc67d41071aabd7c180ddbdd2599","sha512":"a275a39485c9da3005e34c4ccdf98c05b92c54d0a626bbf24e76e5c9f0f789e1d604387999d4d9c05b6dbe890034a04984aa27889c110349803deded0f404833","ssdeep":"","tlshash":"fb70008808200088002230222000a00202038000c003008200a22a00000022002a8028","size":18,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-05-08T00:23:09.156808Z","times_seen":18550,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"07f4f2054ed3c096072df5a003699636","sha1":"2ab6c98161297575292f7ea21a46532b8029607f","sha256":"d411f352f2428265f0fc9f43b7429dafafad74f69cf4022cd51d9df23a67f157","sha512":"2250318432388069d6db862db1fbe07be7d1daf5b7f08f767346935ca71dc7b44891eaf542d2691053b7a75e6f07c7b2caee133435978600ea7efc10f4973017","ssdeep":"","tlshash":"f68000a2ea20000228320a2b328000a220228308a2003a0383eaa220002a8000382b28","size":27,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-02-28T18:52:05.989989Z","times_seen":13610,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigwarp.io/player/jw8/jwplayer.js?v=","fqdn":"bigwarp.io","domain":"bigwarp.io","tld":"io"},"ip":{"addr":"104.21.42.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fab72a04bc5627827387920f8233e0ed","sha1":"ce828999c9c484b695453d20288c60bf4d4656f3","sha256":"8aff839038af9a3af6377929713746739fbd2b7b8d72120f9424eb2d33f83b0e","sha512":"daad52e4d30799d92b901538201dfc177f75f98694228e8da72775cb992336642294c368475c872a8df610666ac648a108c9b69ebd5bd5576ec1da9973d188c8","ssdeep":"1536:lrGRl1EevCcKntukU2YYKDjAPkotbKSrvodmBiScMsz1x5rjk0ECjIUMj7DEYR/B:DeQtqR/wooiAUMj7DTz","tlshash":"15b31ae631c2b4e643e628daa07a4041f23a0545380dc5a4fa6cede63d67947b177fbc","size":111437,"data":"","first_seen":"2024-12-30T00:00:15.537636Z","last_seen":"2026-05-08T12:37:26.706656Z","times_seen":227,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7a837a4ba8ea13b8193945adf0261e19","sha1":"61428cd720ebc0f01c4c017204c313193c22c101","sha256":"28d9693460ce57dd4e01742e50a1baa10cbed3fa6c20c2a69f02424f80fb9a2e","sha512":"abe0e46d98027527a7d2567c4feaece7ad3c1ec94eed8fea59b9eec596cdd4fa39e7776e9dbc4dd6fe777d9b09300d45ba2a49fc9479e0acbdea92ebf5ef940f","ssdeep":"","tlshash":"516000000003c03300300300030f33000030003000030000000c00303003c03c0030c3","size":14,"data":"","first_seen":"2023-03-07T01:03:05Z","last_seen":"2026-05-07T00:17:53.132399Z","times_seen":23261,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bigwarp.pro/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"bigwarp.pro","domain":"bigwarp.pro","tld":"pro"},"ip":{"addr":"104.20.31.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:50.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigwarp.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 08:27:21 GMT","end":"Mon, 26 Jan 2026 09:27:18 GMT"},"fingerprint":{"sha1":"17:79:A5:FB:EC:0B:49:9E:F8:3C:AB:6E:89:64:6D:8F:9B:27:6A:B0","sha256":"86:76:E7:CF:22:9F:64:CB:DD:E9:EE:53:92:5F:03:15:85:69:0B:6B:AE:26:84:29:24:FC:90:44:80:CD:24:44"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: bigwarp.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Wed, 10 Dec 2025 07:31:50 GMT\r\npriority: u=3,i=?0\r\ncf-ray: 9abb0b80afc6b51e-OSL\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/5eaf848a0845/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=591tl0QUlMbHnhqOsOw5nRjCegUu6pDkOvkNueA759HTSDhkQpWfLFJYqEeNwjh5cfgntTgXFngadCvrrNjgjRHbCdIu12uckmMR8Dj8gn3biKdypk8G7U%2BiuGBgIw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1582\u0026min_rtt=485\u0026rtt_var=1311\u0026sent=200\u0026recv=34\u0026lost=0\u0026retrans=0\u0026sent_bytes=202702\u0026recv_bytes=4402\u0026delivery_rate=23495780\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=44104\u0026ss_exit_bw=23495780\u0026ss_exit_reason=2\u0026cwnd=29548\u0026unsent_bytes=0\u0026cid=d7cc3f964aa2f76a\u0026ts=1472\u0026inflight_dur=54\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10438,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-10T15:28:23.863744Z","times_seen":14959050,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigwarp.pro/js/bgwp.js","fqdn":"bigwarp.pro","domain":"bigwarp.pro","tld":"pro"},"ip":{"addr":"104.20.31.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:49.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigwarp.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 08:27:21 GMT","end":"Mon, 26 Jan 2026 09:27:18 GMT"},"fingerprint":{"sha1":"17:79:A5:FB:EC:0B:49:9E:F8:3C:AB:6E:89:64:6D:8F:9B:27:6A:B0","sha256":"86:76:E7:CF:22:9F:64:CB:DD:E9:EE:53:92:5F:03:15:85:69:0B:6B:AE:26:84:29:24:FC:90:44:80:CD:24:44"}}},"request":{"raw":"GET /js/bgwp.js HTTP/1.1\r\nHost: bigwarp.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigwarp.pro/embed-bwav74u6ycpx.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 10 Dec 2025 07:31:49 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Feb 2025 06:54:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2VxxRGdvJAHQ3duEY0I%2BJEFtx8hRDPXBIcgit7q6PBnIDa%2FQ8KInK6w%2B1s7LKofv5IQzrQp0tRoYgpubguvgpqIS2VeWt%2BGVhQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\nage: 4646\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"176a8-62dc42c50ba0b\"\r\ncf-ray: 9abb0b7a4f80b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95912,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65514)","md5":"4b4b2f561fb56c24a2e47ec07832ec3f","sha1":"299f1aeca476369487e63f03687191764c618130","sha256":"a58060cc304b1dc7d898f639b9c8e9b8ed7aea8365e6d6ed51c7a31fa5f4eae9","sha512":"41e946669e3cd8285771c3bb7d0f1c68c160c992c35dfabbbf8ce5b1a41bce9fb822fa79f85b855870a365de531a86464bf2d3f48fb34b3aa2c8d7f87c280372","ssdeep":"1536:5LAGm9QIpRIAzH8XznfUezSDIj5l9umwRykMHWLZynl:5r+iXSDk5lomwEHWLonl","tlshash":"1293918db8e3f4655772613041bf34deb5bd6c92300e5208c16ae8fc7ca4f6b996288d","first_seen":"2025-02-10T18:58:29.587522Z","last_seen":"2026-05-03T13:36:30.098948Z","times_seen":142,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/wp-content/themes/enjoyvideo/genericons/genericons.css?ver=6.9","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:46.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixi-xxx.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 20:33:30 GMT","end":"Tue, 03 Mar 2026 21:32:18 GMT"},"fingerprint":{"sha1":"6A:8E:97:84:9C:68:1C:03:B1:76:77:EB:8D:33:03:59:DF:49:D5:B5","sha256":"1B:4D:60:C6:3A:CF:33:26:E6:FF:09:97:37:E5:6D:06:35:38:67:2C:BE:1F:85:F6:35:55:C7:F6:0C:03:D4:ED"}}},"request":{"raw":"GET /wp-content/themes/enjoyvideo/genericons/genericons.css?ver=6.9 HTTP/1.1\r\nHost: mixi-xxx.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/scvp-16676/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Dec 2025 07:31:47 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Wed, 01 Oct 2025 14:18:52 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"68dd384c-9a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QPZNR31r1Y7RHDkEzRzhSbVXNF4%2Bb7S5BVGPyCfZMdQ1duP9b4RIev%2FUJq6QUME38eGAIjLd52ycOiDkR6tfQ3VfXL%2FVXKarzpuc\"}]}\r\ncf-ray: 9abb0b698eaa32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":154,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c14dd6e84e694a66c7e27f11220ed49a","sha1":"d226417ef66b21fca901b5dd49ad570d6992a250","sha256":"7e3559d6ffac7fc54d6edaa79b6e7330fab33fbdffc174a27c58b25e5b3952d2","sha512":"f9def7100976e533ae5f00d703f49bf8049ecb7fc72a85ca2a006d472879bd111a70f32e37535aac56ee5fe62e37fbaca94c00fadb7368f06b54ec7e18144e23","ssdeep":"","tlshash":"9ac08cb16c80153306034ea16508b353e3a4a15d4b18f083b0b6491110aac2843b42e8","first_seen":"2023-04-09T02:00:52Z","last_seen":"2026-05-10T13:42:08.873163Z","times_seen":916,"resource_available":false,"data":null}},"time_used":644,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":644,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:46.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixi-xxx.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 20:33:30 GMT","end":"Tue, 03 Mar 2026 21:32:18 GMT"},"fingerprint":{"sha1":"6A:8E:97:84:9C:68:1C:03:B1:76:77:EB:8D:33:03:59:DF:49:D5:B5","sha256":"1B:4D:60:C6:3A:CF:33:26:E6:FF:09:97:37:E5:6D:06:35:38:67:2C:BE:1F:85:F6:35:55:C7:F6:0C:03:D4:ED"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: mixi-xxx.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/scvp-16676/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Dec 2025 07:31:47 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Fri, 09 Jun 2023 00:49:24 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"64827714-3509\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F8ak46a%2BylG2EG%2F69SVzgRZ%2Bq4zLp%2BZDQb9UWDyFlZ9I5z%2B7jcR0uUMtAR4ctf05JtpD5F71fuoZT8HrBlI8B%2BeTo1gJjyAM00xO\"}]}\r\ncf-ray: 9abb0b698eac32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-05-10T15:28:24.486581Z","times_seen":747590,"resource_available":true,"data":null}},"time_used":684,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":683,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigwarp.pro/embed-bwav74u6ycpx.html","fqdn":"bigwarp.pro","domain":"bigwarp.pro","tld":"pro"},"ip":{"addr":"104.20.31.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:48.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigwarp.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 08:27:21 GMT","end":"Mon, 26 Jan 2026 09:27:18 GMT"},"fingerprint":{"sha1":"17:79:A5:FB:EC:0B:49:9E:F8:3C:AB:6E:89:64:6D:8F:9B:27:6A:B0","sha256":"86:76:E7:CF:22:9F:64:CB:DD:E9:EE:53:92:5F:03:15:85:69:0B:6B:AE:26:84:29:24:FC:90:44:80:CD:24:44"}}},"request":{"raw":"GET /embed-bwav74u6ycpx.html HTTP/1.1\r\nHost: bigwarp.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mixi-xxx.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 10 Dec 2025 07:31:48 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nexpires: Tue, 09 Dec 2025 07:31:48 GMT\r\nset-cookie: lang=1; domain=.bigwarp.pro; path=/; HttpOnly\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6gyqXdC5kxkYoRXFZWp9RlGsgPcm9UxLhhnnQYgXA1wpeWu%2BahVO2Eb3hdAGUTMegZwQM6fUr4ZLg6gB9r6I3HY3icB4shb2AA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9abb0b74a9adb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":20018,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (933)","md5":"4c03d79ec7645b055cdd47ab725ae957","sha1":"71df871799c797cadb49f58524b26824e6e101a9","sha256":"487be3c66ffc01d6df52312c479b2a72f3c845c9912ceb5557c92b04489ae0d2","sha512":"2a2ce01cf52d052a8f1792c01bdb51e362233c3dbff93e57dc98def7f38e7515fcbce4a7e7bf5cfd6b4dbf1f551dcef60d75bc9bf514b4e89e7dcaa9a57d6b61","ssdeep":"384:sWSlndedxuaetnVMeLUyyc15eL15jBPm3CyxIixxxxZccccfTTTTBH+XcH+Xynxg:sWSlnde7uX2yyXjBPGxxxxZccccfTTTO","tlshash":"ea92d712fd968075402310fa96b7f20cbd31a127ed01dd88f6ede5252f58bed186ead8","first_seen":"2025-12-10T07:32:22.992169Z","last_seen":"2025-12-10T07:32:22.992169Z","times_seen":1,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":26,"dns":3,"connect":1,"send":0,"wait":228,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re:2087/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.84.77","port":2087,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:48.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mixi-xxx.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 10 Dec 2025 07:31:48 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 45\r\ncf-ray: 9abb0b756d734e4c-OSL\r\naccess-control-allow-origin: https://mixi-xxx.cc\r\ncache-control: private, max-age=300, immutable, stale-if-error=300, stale-while-revalidate=300\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-max-age: 2592000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":2087\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":2,"connect":4,"send":0,"wait":15,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigwarp.pro/js/jquery.min.js","fqdn":"bigwarp.pro","domain":"bigwarp.pro","tld":"pro"},"ip":{"addr":"104.20.31.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:49.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigwarp.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 08:27:21 GMT","end":"Mon, 26 Jan 2026 09:27:18 GMT"},"fingerprint":{"sha1":"17:79:A5:FB:EC:0B:49:9E:F8:3C:AB:6E:89:64:6D:8F:9B:27:6A:B0","sha256":"86:76:E7:CF:22:9F:64:CB:DD:E9:EE:53:92:5F:03:15:85:69:0B:6B:AE:26:84:29:24:FC:90:44:80:CD:24:44"}}},"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: bigwarp.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigwarp.pro/embed-bwav74u6ycpx.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 10 Dec 2025 07:31:49 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Mar 2021 23:27:20 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=es4%2BFELXDvaSHi4G68sNxeKI%2B7QZrAgDIg94isrIJuVdWW9%2Bqdo%2Fz4hTVSmXM2zs2NgT92O7TruTGX7gCBdu%2B9fbtTC511Kcdw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\nage: 551\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"15d9d-5bc9613642600\"\r\ncf-ray: 9abb0b7a3f7bb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-05-10T15:16:50.042885Z","times_seen":465370,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/adgpt.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"104.20.34.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:49.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tapioni.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 14:57:20 GMT","end":"Fri, 13 Feb 2026 15:57:18 GMT"},"fingerprint":{"sha1":"80:2D:1E:ED:7E:27:75:C8:26:5C:5A:67:67:AE:0B:64:50:E0:CB:35","sha256":"12:CD:2F:65:36:49:D1:F0:8F:A7:6A:68:FF:9C:96:CC:70:D2:75:FE:A5:51:07:CC:D0:AA:5A:75:18:DC:8D:61"}}},"request":{"raw":"GET /adgpt.js HTTP/1.1\r\nHost: cdn.tapioni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigwarp.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 10 Dec 2025 07:31:49 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 638\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Dec 2025 08:07:09 GMT\r\nvary: Accept-Encoding\r\netag: \"6936872d-27e\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\nage: 170618\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9abb0b7c3a3a56c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1294,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1294), with no line terminators","md5":"b1d7260bf479f9f9a95e6b68bfbdb636","sha1":"3fec65be5c62abce1f59f5826fe499b26e09437d","sha256":"9b00f9e66be006247be0b9edaf0e99f2897bc55347c52f784ba6977b56854a07","sha512":"a027601b45fa78b64fc98e8f8c62769a0785dad5bc9bb407e4823442804d7b0d3e792d1919dbae46d4913ab5be8ddc884eb1857cbc4551bbc01dc66c592ec9b7","ssdeep":"","tlshash":"312142aa31e1f8d213db695a113f0009f26ea875117ba180d354cd75bcf884991a6faa","first_seen":"2025-12-08T11:35:25.881853Z","last_seen":"2025-12-23T01:59:50.460808Z","times_seen":171,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"cdn.tapioni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fs49.bigwarp.io/v/02/00478/bwav74u6ycpx_x/x.mp4?t=8DBqOrDzhfvNjrK-tFF_0Tkud8j2omMxWwvrMDE_rtE\u0026s=1765351908\u0026e=43200\u0026f=2393291\u0026sp=1000\u0026i=0.0\u0026kmnr=619272091231","fqdn":"fs49.bigwarp.io","domain":"bigwarp.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:50.005Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /v/02/00478/bwav74u6ycpx_x/x.mp4?t=8DBqOrDzhfvNjrK-tFF_0Tkud8j2omMxWwvrMDE_rtE\u0026s=1765351908\u0026e=43200\u0026f=2393291\u0026sp=1000\u0026i=0.0\u0026kmnr=619272091231 HTTP/1.1\r\nHost: fs49.bigwarp.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigwarp.pro/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-10T15:28:23.863744Z","times_seen":14959050,"resource_available":true,"data":null}},"time_used":6114,"timings":{"blocked":6114,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/wp-content/themes/enjoyvideo/dark.css?ver=20250901","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:46.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixi-xxx.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 20:33:30 GMT","end":"Tue, 03 Mar 2026 21:32:18 GMT"},"fingerprint":{"sha1":"6A:8E:97:84:9C:68:1C:03:B1:76:77:EB:8D:33:03:59:DF:49:D5:B5","sha256":"1B:4D:60:C6:3A:CF:33:26:E6:FF:09:97:37:E5:6D:06:35:38:67:2C:BE:1F:85:F6:35:55:C7:F6:0C:03:D4:ED"}}},"request":{"raw":"GET /wp-content/themes/enjoyvideo/dark.css?ver=20250901 HTTP/1.1\r\nHost: mixi-xxx.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/scvp-16676/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Dec 2025 07:31:47 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Wed, 01 Oct 2025 14:18:52 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"68dd384c-1c3c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cCymzITJs%2BdmtUluTinx2kyZiCAd1%2By5sPvDywl3EgsTwY46DqQmE6T5xUR19s%2FOosiYqOoexCqMkm%2FP07QdH5XyM1VZ6RJTxETj\"}]}\r\ncf-ray: 9abb0b698ea732fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7228,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"4733390fe2535f7200786eea20e204da","sha1":"0e3f73842ee03f35558049c72f7b09767af89661","sha256":"67b359b82f31e5512e636bb930905e09c954c4c9fa75bd87d3a093df5c5f177b","sha512":"15717c79f3621a43b634e804f57ba483d8df6a10cb988f9771d80933c5555967b3e0e67de53e38537bc8a739a542f6b93aafa3520bba01645fc1ff85c6cd6dfd","ssdeep":"96:UHkHW0EATWoTmazRiN9wvjcWS2iX1LZLCL5x4PQZqrIAqg0qgUh7kWtemiS:dW0ZvmaznvQWS2iXco+ehcmn","tlshash":"ade1c1d7e3f907923933174e1445f0a4277491cac14a9ffc7e79a624db8c6c4a9b8287","first_seen":"2023-05-22T06:31:11Z","last_seen":"2026-05-02T13:32:01.102Z","times_seen":86,"resource_available":false,"data":null}},"time_used":642,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":641,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xadsmart.com/viwqx/ysvg.connectable.min.js","fqdn":"www.xadsmart.com","domain":"xadsmart.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:48.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1376341044.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 14:38:12 GMT","end":"Tue, 10 Feb 2026 14:38:11 GMT"},"fingerprint":{"sha1":"18:C3:E8:61:55:94:8F:24:D2:80:A5:76:EB:0C:0B:B4:1A:0A:E3:D0","sha256":"35:99:B2:7C:FB:18:A2:BE:A9:1F:2B:3D:DC:D5:9E:58:9B:8E:27:ED:8E:C1:F0:B6:6B:0C:66:E4:7E:90:E2:99"}}},"request":{"raw":"GET /viwqx/ysvg.connectable.min.js HTTP/1.1\r\nHost: www.xadsmart.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mixi-xxx.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 10 Dec 2025 07:31:48 GMT\r\ncontent-type: application/x-javascript\r\npopads-node: wb11\r\nexpires: Tue, 16 Dec 2025 10:25:01 GMT\r\naccess-control-allow-origin: https://mixi-xxx.cc\r\nlink: \u003chttps://xadsmart.com/\u003e;rel=preconnect\r\ncache-control: public, max-age=604800\r\nx-77-nzt: EwgBX63NDQFBDAG5TAoJAfcLKAEADAElE8IxAbfcAAAA\r\nx-77-nzt-ray: 2a494a15bd81953d09223969c55d7e0e\r\nx-77-cache: HIT\r\nx-77-age: 75787\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":41925,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1568)","md5":"60cefc1ada1034a561a2da6004325c5d","sha1":"c031bbcfa9b7ddb53a30a450d2da6ad971bb151a","sha256":"9ff9e7c67d84c95a5640af5556d94d2b95ffa1602a0bfb39f89ff0258599e9c9","sha512":"6430837cdc20cdb2843af047dc3c76f292b0965a1c324931c984fb28c44414c150592a8e77013e69e50527af5ccfe95d414752c3c17aa15b59576f4f4535c346","ssdeep":"768:bt9rqAYKKaZzFQ9JsQU+YDngZGihfzmMzhYrTsAysncCWcf5k5sigC3dCntlqo7/:bbhZzFQ9JsTgZvfzmMzhYrTscpZZd","tlshash":"6a133aaab286282601e741b9503eb316b23305167912d458fcb9cdf96e3ddc6127b7fc","first_seen":"2025-12-10T07:32:22.99597Z","last_seen":"2025-12-10T07:32:22.99597Z","times_seen":1,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":96,"dns":79,"connect":1,"send":0,"wait":24,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgHtOnFs6h63ZYbTn5WyFbu6fo6y3VMpgc5oK5zvylBwR_x2STTcXMmuGR7jL-EenPj1KpEHdA9FQQG4jnDg2znCn-C0B8xKuwmJYdGcBl8V0qG1uAiexhE6VaZT3iq9B0McnkbdrOzIoKYVooS2-nOExcQyj9nCpgEQ9-zQ0Is078EIZ6RcDX0REvuieI/s1600/noni69.cc_mixixxx.jpg","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:48.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:52 GMT","end":"Mon, 19 Jan 2026 08:34:51 GMT"},"fingerprint":{"sha1":"78:8A:5B:0C:2B:DC:80:4C:4F:7E:75:57:5F:1F:D8:1E:89:DB:5F:13","sha256":"0E:24:41:60:9C:A8:84:DB:2A:59:E6:FB:EE:1C:E0:65:20:30:99:CA:03:50:4D:01:A9:B4:21:D9:CE:FD:8E:51"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEgHtOnFs6h63ZYbTn5WyFbu6fo6y3VMpgc5oK5zvylBwR_x2STTcXMmuGR7jL-EenPj1KpEHdA9FQQG4jnDg2znCn-C0B8xKuwmJYdGcBl8V0qG1uAiexhE6VaZT3iq9B0McnkbdrOzIoKYVooS2-nOExcQyj9nCpgEQ9-zQ0Is078EIZ6RcDX0REvuieI/s1600/noni69.cc_mixixxx.jpg HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v7121\"\r\nexpires: Thu, 11 Dec 2025 07:31:48 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"noni69.cc_mixixxx.jpg\"\r\nx-content-type-options: nosniff\r\ndate: Wed, 10 Dec 2025 07:31:48 GMT\r\nserver: fife\r\ncontent-length: 13915\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13915,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 720x405, components 3","md5":"8a087a8c3b9caed005725a12491544a4","sha1":"21012b51fe98c4c5a08d01fefa01ac6eee83bf0a","sha256":"54679fac672a4cb2410ed76cc58ff3f6574542bb2148baa50c30a9875e5d6231","sha512":"b3245343fffcf8e6f7714af2d8a69305d268ad7fa98a5da4d7bf82ef5b3640c8eec0ab7f3923605dc259dafdd5f32bf9bc316e7ea4f7be0d57cde7d37c7547c3","ssdeep":"192:FrF5eSksciYuGffgkuvvQ4V6IlY1oVCkRNelW4PfnukHSSOrJhN72COxPiMV+CfI:zHfciYd4YmGuCKELnPHSSqFwiMVBGB","tlshash":"c452cfaa634895dcde073d3322cd8f041f221b29fa4dff695626242fd4d17548a79487","first_seen":"2025-12-06T06:07:05.703695Z","last_seen":"2025-12-10T07:32:22.997163Z","times_seen":2,"resource_available":false,"data":null}},"time_used":613,"timings":{"blocked":80,"dns":42,"connect":8,"send":0,"wait":399,"receive":1,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigwarp.pro/dl?op=get_slides\u0026length=3023\u0026url=https://fs49.bigwarp.io/i/02/00478/bwav74u6ycpx0000.jpg","fqdn":"bigwarp.pro","domain":"bigwarp.pro","tld":"pro"},"ip":{"addr":"104.20.31.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:49.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigwarp.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 08:27:21 GMT","end":"Mon, 26 Jan 2026 09:27:18 GMT"},"fingerprint":{"sha1":"17:79:A5:FB:EC:0B:49:9E:F8:3C:AB:6E:89:64:6D:8F:9B:27:6A:B0","sha256":"86:76:E7:CF:22:9F:64:CB:DD:E9:EE:53:92:5F:03:15:85:69:0B:6B:AE:26:84:29:24:FC:90:44:80:CD:24:44"}}},"request":{"raw":"GET /dl?op=get_slides\u0026length=3023\u0026url=https://fs49.bigwarp.io/i/02/00478/bwav74u6ycpx0000.jpg HTTP/1.1\r\nHost: bigwarp.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigwarp.pro/embed-bwav74u6ycpx.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 10 Dec 2025 07:31:49 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-type: text/vtt\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z933z4wg3iTKuki8djkD99Dn%2BHd%2B45fDY1hany1k1UfS6o0O%2BVYiac6iRMKnliDq%2BESCQexh8XGODl321gAgkVwjto7uNL6uYA%3D%3D\"}]}\r\ncf-ray: 9abb0b7d0fb3b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2458,"size_decoded":0,"mime_type":"text/vtt","magic":"WebVTT subtitles, ASCII text","md5":"736770f648e42715a55386430ef89007","sha1":"db97ca87b8c03771db6c3dfa2b32510abd23580d","sha256":"fa692f6f4b5de2a32b0e9720b89382651d478d0ad9d52e6a2b374ebb1f261b59","sha512":"30f24e1aea84971c5ed837a6b9cfa668409c8b09a41907ee2be89faa1abcd3d7bd66e2abd2626242c1b81365255049a16e100fd89a965d4d5a74e40a1c780572","ssdeep":"","tlshash":"0751eaf2a6738c62d274a1418eecb60852b2711b5ec908c5547cecf2add40fa4dbeb57","first_seen":"2025-12-10T07:32:22.99831Z","last_seen":"2025-12-10T07:32:22.99831Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigwarp.pro/js/bgwp.js","fqdn":"bigwarp.pro","domain":"bigwarp.pro","tld":"pro"},"ip":{"addr":"104.20.31.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:50.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigwarp.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 08:27:21 GMT","end":"Mon, 26 Jan 2026 09:27:18 GMT"},"fingerprint":{"sha1":"17:79:A5:FB:EC:0B:49:9E:F8:3C:AB:6E:89:64:6D:8F:9B:27:6A:B0","sha256":"86:76:E7:CF:22:9F:64:CB:DD:E9:EE:53:92:5F:03:15:85:69:0B:6B:AE:26:84:29:24:FC:90:44:80:CD:24:44"}}},"request":{"raw":"GET /js/bgwp.js HTTP/1.1\r\nHost: bigwarp.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigwarp.pro/embed-bwav74u6ycpx.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 10 Dec 2025 07:31:50 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Feb 2025 06:54:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TkvEwi0GwB%2BKZTtTUJw5GBfRbwUFoq8%2Bhq9yh08YXqVe3i4zKRvJ%2FfLHQfue93IzyEc8UUfbLT7xuczVvjmZJH34KUL06gscGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\nage: 4646\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"176a8-62dc42c50ba0b\"\r\ncf-ray: 9abb0b7d8fb6b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95912,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65514)","md5":"4b4b2f561fb56c24a2e47ec07832ec3f","sha1":"299f1aeca476369487e63f03687191764c618130","sha256":"a58060cc304b1dc7d898f639b9c8e9b8ed7aea8365e6d6ed51c7a31fa5f4eae9","sha512":"41e946669e3cd8285771c3bb7d0f1c68c160c992c35dfabbbf8ce5b1a41bce9fb822fa79f85b855870a365de531a86464bf2d3f48fb34b3aa2c8d7f87c280372","ssdeep":"1536:5LAGm9QIpRIAzH8XznfUezSDIj5l9umwRykMHWLZynl:5r+iXSDk5lomwEHWLonl","tlshash":"1293918db8e3f4655772613041bf34deb5bd6c92300e5208c16ae8fc7ca4f6b996288d","first_seen":"2025-02-10T18:58:29.587522Z","last_seen":"2026-05-03T13:36:30.098948Z","times_seen":142,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigwarp.pro/js/bgwp.js","fqdn":"bigwarp.pro","domain":"bigwarp.pro","tld":"pro"},"ip":{"addr":"104.20.31.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:50.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigwarp.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 08:27:21 GMT","end":"Mon, 26 Jan 2026 09:27:18 GMT"},"fingerprint":{"sha1":"17:79:A5:FB:EC:0B:49:9E:F8:3C:AB:6E:89:64:6D:8F:9B:27:6A:B0","sha256":"86:76:E7:CF:22:9F:64:CB:DD:E9:EE:53:92:5F:03:15:85:69:0B:6B:AE:26:84:29:24:FC:90:44:80:CD:24:44"}}},"request":{"raw":"GET /js/bgwp.js HTTP/1.1\r\nHost: bigwarp.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigwarp.pro/embed-bwav74u6ycpx.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 10 Dec 2025 07:31:50 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Feb 2025 06:54:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7rwUAD6fHRh0yKs8%2FC80nMKdZQxduQIySsNhMSOKBqjDVG9YQPnEHCD%2FVJl07M6yck2OqZ%2FqWyPlVHK8DQgqeUjuL4RLav5skA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\nage: 4647\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"176a8-62dc42c50ba0b\"\r\ncf-ray: 9abb0b7f1fbcb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95912,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65514)","md5":"4b4b2f561fb56c24a2e47ec07832ec3f","sha1":"299f1aeca476369487e63f03687191764c618130","sha256":"a58060cc304b1dc7d898f639b9c8e9b8ed7aea8365e6d6ed51c7a31fa5f4eae9","sha512":"41e946669e3cd8285771c3bb7d0f1c68c160c992c35dfabbbf8ce5b1a41bce9fb822fa79f85b855870a365de531a86464bf2d3f48fb34b3aa2c8d7f87c280372","ssdeep":"1536:5LAGm9QIpRIAzH8XznfUezSDIj5l9umwRykMHWLZynl:5r+iXSDk5lomwEHWLonl","tlshash":"1293918db8e3f4655772613041bf34deb5bd6c92300e5208c16ae8fc7ca4f6b996288d","first_seen":"2025-02-10T18:58:29.587522Z","last_seen":"2026-05-03T13:36:30.098948Z","times_seen":142,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/wp-content/themes/enjoyvideo/style.css?ver=20250901","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:46.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixi-xxx.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 20:33:30 GMT","end":"Tue, 03 Mar 2026 21:32:18 GMT"},"fingerprint":{"sha1":"6A:8E:97:84:9C:68:1C:03:B1:76:77:EB:8D:33:03:59:DF:49:D5:B5","sha256":"1B:4D:60:C6:3A:CF:33:26:E6:FF:09:97:37:E5:6D:06:35:38:67:2C:BE:1F:85:F6:35:55:C7:F6:0C:03:D4:ED"}}},"request":{"raw":"GET /wp-content/themes/enjoyvideo/style.css?ver=20250901 HTTP/1.1\r\nHost: mixi-xxx.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/scvp-16676/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Dec 2025 07:31:47 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Wed, 01 Oct 2025 14:18:52 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"68dd384c-fa96\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A4NXx0kHAN6J7H1EKQEazy0EjOhdNI5%2Bcjs8uQ%2BLdPef1yaD4%2BC6Ufatht58X4A7A4itQiAUOEyDT0hBxbJXedWG8Ftm0H2qC9xJ\"}]}\r\ncf-ray: 9abb0b698ea632fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64150,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (405)","md5":"9f7e485c9d1fc4656f865131fdcdd7df","sha1":"dc43db668c02ab197143a09ecf9b1c703ae51b07","sha256":"3484c6134920062218a40f48b1c5137379a29611c0c2064fb9cfbc975a121d64","sha512":"33167e6b99305985f03283329e047abce68ea90d8e6d13717b069ff36248289657a523a83c1e375b8db98c254ba3f274b812265d48111c7f0db00926565f53c8","ssdeep":"1536:LaEbScvEyHWzXeaK3lsAbmscffbTjLR9Ar:LpbJEyHublG","tlshash":"275341d35ef112006923d2697696b665f3244103c60fddfcbae86618df88bd061ee78d","first_seen":"2025-09-13T18:11:39.613003Z","last_seen":"2026-02-04T00:09:02.998037Z","times_seen":61,"resource_available":false,"data":null}},"time_used":654,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":648,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjy2xApHJmDOuUIyjxBQwq9nlZ5vKxfN1GyWcSSf7h-R_6tnBBDXgqOZcK1NXZBedHerVqnf7xxxN2FuPf0Uh8HfmAP1fPyOEPjarbEejJB5a_y34HIF8zzrHWjrc3o4mcjt0NVCmjWdA9K24tKzvjGwMPVwhWJGH05YzGm0qINL29S2v0u81Cw46R21nw/s1600/noni69.cc_mixixxx.jpg","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:48.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:52 GMT","end":"Mon, 19 Jan 2026 08:34:51 GMT"},"fingerprint":{"sha1":"78:8A:5B:0C:2B:DC:80:4C:4F:7E:75:57:5F:1F:D8:1E:89:DB:5F:13","sha256":"0E:24:41:60:9C:A8:84:DB:2A:59:E6:FB:EE:1C:E0:65:20:30:99:CA:03:50:4D:01:A9:B4:21:D9:CE:FD:8E:51"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEjy2xApHJmDOuUIyjxBQwq9nlZ5vKxfN1GyWcSSf7h-R_6tnBBDXgqOZcK1NXZBedHerVqnf7xxxN2FuPf0Uh8HfmAP1fPyOEPjarbEejJB5a_y34HIF8zzrHWjrc3o4mcjt0NVCmjWdA9K24tKzvjGwMPVwhWJGH05YzGm0qINL29S2v0u81Cw46R21nw/s1600/noni69.cc_mixixxx.jpg HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v7923\"\r\nexpires: Thu, 11 Dec 2025 07:31:48 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"noni69.cc_mixixxx.jpg\"\r\nx-content-type-options: nosniff\r\ndate: Wed, 10 Dec 2025 07:31:48 GMT\r\nserver: fife\r\ncontent-length: 20664\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20664,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 720x405, components 3","md5":"3253da8f2fcd47ff2d3922d399ac2d64","sha1":"cbc7c1b76de226d7550790e8a5a1de706f433bd9","sha256":"4462572118e8f3af3f43ff71f295c4467b7ad0bd2fcdd5d5d4b256020a534908","sha512":"5b304d247d1db78fa74426319fd56a2d2a0af249aff9e8282de353a530d124b9c4e8b91ded16c74274d71fb0788abfc498792eed164b919d7e43b32130e4d610","ssdeep":"384:vvJ/ECXNip/9DBJTJZdPH3YnQwNGtgdTiwRUu8ep+OhaYSHKrcrmNYQnE:vvyiyDBJTBwbYtgT56ueOha3xr","tlshash":"eb92e02f726daea5e4d1cef1e5c91b647060223fc724bf83a250c81c9156c293ce9ed4","first_seen":"2025-12-03T23:01:05.997647Z","last_seen":"2025-12-10T07:32:23.001167Z","times_seen":2,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":1,"connect":24,"send":0,"wait":231,"receive":7,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigwarp.pro/js/xupload.js","fqdn":"bigwarp.pro","domain":"bigwarp.pro","tld":"pro"},"ip":{"addr":"104.20.31.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:49.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigwarp.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 08:27:21 GMT","end":"Mon, 26 Jan 2026 09:27:18 GMT"},"fingerprint":{"sha1":"17:79:A5:FB:EC:0B:49:9E:F8:3C:AB:6E:89:64:6D:8F:9B:27:6A:B0","sha256":"86:76:E7:CF:22:9F:64:CB:DD:E9:EE:53:92:5F:03:15:85:69:0B:6B:AE:26:84:29:24:FC:90:44:80:CD:24:44"}}},"request":{"raw":"GET /js/xupload.js HTTP/1.1\r\nHost: bigwarp.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigwarp.pro/embed-bwav74u6ycpx.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 10 Dec 2025 07:31:49 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Dec 2024 06:00:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DU%2B4YiQzWDbqxcTgGkEMHHz2PcSWEljSKPUuup97lLObKEcWNDIgZvdWctvmrfULyBGjMLJTYwpo4%2Brfz2dx1TO18FEFrD7KcA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\nage: 551\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"2a26-6284344789295\"\r\ncf-ray: 9abb0b7a3f7cb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10790,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"e7cb7dae1da48c74b41563b936111f97","sha1":"bda176bc9fd4060d50006cd31d8c25453362db70","sha256":"590c624e3400ed1e344d5c44f184356937d2704917289340ec5b099d35d5b9e8","sha512":"06ccc732465996d4b4531bc0a1e40cacbecc0e936a84e15132fda6839549358b9681494529128d493a70cd7ac1a913edea05b1facb97d8810290e9d6f9df451e","ssdeep":"192:7IKE9YGs1aGjrl6IsZWnrbll621w+4UWdRebMQ4WdReDyYQaQv7OsaaFg+BnqGQZ:EGyctBlV9GRebVReDyYS7OsaaF10fq3u","tlshash":"fc22674abaa339912a7731390bbf52043b398407114aca54bd5cd6c4af8452897ffbfd","first_seen":"2023-08-16T14:17:26Z","last_seen":"2026-05-08T12:37:26.710785Z","times_seen":637,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tp.larvaelimans.com/sjw6GZLT2AQN/117158","fqdn":"tp.larvaelimans.com","domain":"larvaelimans.com","tld":"com"},"ip":{"addr":"172.241.53.110","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:50.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tp.larvaelimans.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Oct 2025 07:05:00 GMT","end":"Wed, 14 Jan 2026 07:04:59 GMT"},"fingerprint":{"sha1":"6E:43:66:6D:24:7A:9B:8D:92:94:2E:84:5D:11:BD:13:25:C4:E7:C4","sha256":"7D:A6:21:C2:0B:08:AA:85:8A:6C:48:C3:0B:C0:B3:A6:F5:8E:12:50:4D:E3:2B:57:7F:0F:B2:58:9F:88:CB:56"}}},"request":{"raw":"GET /sjw6GZLT2AQN/117158 HTTP/1.1\r\nHost: tp.larvaelimans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigwarp.pro/\r\nCookie: GGI10=GxcBAMSqOZXNrP4QnWwrgcaH4b5A6y0/1PiH25A+GkV0m0DynlShsXnVevVt1LjDE/mL/H+QIdDMIISmFhqaY2mm60CgKiYQjid1T4aH90ptIEBgjAmCYTun6In7SdkZ/l1fG/nuQLv2iQS5oRYarifPaaxApqH5TugINDyVc9M3L+U29ffDZhgCYyEjHhoIW6Rd3932KDHRvE6vN+imiAjgIqZjRFQBme0ayaZYbfCcDNHvCwt9wSXjT1yHcJf/Hw==; GUI42=G1EDAGRzTeWjR7p6Qu3mU4YH9Pm/d8f/s18Bwh2ttYAWSICBJJLv1p7hISgwsLmvbx6l1gny/4B8HjAzIAA9j+CKoejWQE7Q1BwPyagP3EDzrQkKAFxCMsFpubg+UtqnIlX8zN9T+7IO1X2MMktWiYNbyuVNiRJnf7wfUIbm+H7AEgzQyUwzPGiPsMTAVKsDJfFwD4xfforJPYXioCIf2lWxUYhhKoQ7HRcZYY50oYzyqxv9qsGaDbWD1wCyt75hKpW3uB8gHqUhyEoTSk1RxkUr1lwWVmkJtMRDLDKRhK6JKZeSpVJNYZhr9NBIY1zkqp1pIcXRmpOuXZbnZmrK1GQprh3FhAWw37LLQmbTCH66VE33X9bD3yqgSeP7AeXr1OsuO6qcJayqp9VMtT1A/4JTwT1AkJZzjPhTkAfWGyG/j8JzziRG0P/cNw==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 10 Dec 2025 07:31:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 5\r\nvary: Origin\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, GYFR29QT4J80VDR0ZHSJ, X-Forwarded-For, X-Requested-With, Cache-Control, Pragma, Expires, Credentials\r\naccess-control-allow-methods: GET, HEAD, POST, PUT, OPTIONS\r\naccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\nset-cookie: GGI10=GxcBAMSqOZXNrP4QnWwrgcaH4b5A6y0/1PiH25A+GkV0m0DynlShsXnVevVt1LjDE/mL/H+QIdDMIISmFhqaY2mm60CgKiYQjid1T4aH90ptIEBgjAmCYTun6In7SdkZ/l1fG/nuQLv2iQS5oRYarifPaaxApqH5TugINDyVc9M3L+U29ffDZhgCYyEjHhoIW6Rd3932KDHRvE6vN+imiAjgIqZjRFQBme0ayaZYbfCcDNHvCwt9wSXjT1yHcJf/Hw==; max-age=3600000; path=/; secure; SameSite=None\nGUI42=G1EDAGRzTeWjR7p6Qu3mU4YH9Pm/d8f/s18Bwh2ttYAWSICBJJLv1p7hISgwsLmvbx6l1gny/4B8HjAzIAA9j+CKoejWQE7Q1BwPyagP3EDzrQkKAFxCMsFpubg+UtqnIlX8zN9T+7IO1X2MMktWiYNbyuVNiRJnf7wfUIbm+H7AEgzQyUwzPGiPsMTAVKsDJfFwD4xfforJPYXioCIf2lWxUYhhKoQ7HRcZYY50oYzyqxv9qsGaDbWD1wCyt75hKpW3uB8gHqUhyEoTSk1RxkUr1lwWVmkJtMRDLDKRhK6JKZeSpVJNYZhr9NBIY1zkqp1pIcXRmpOuXZbnZmrK1GQprh3FhAWw37LLQmbTCH66VE33X9bD3yqgSeP7AeXr1OsuO6qcJayqp9VMtT1A/4JTwT1AkJZzjPhTkAfWGyG/j8JzziRG0P/cNw==; max-age=3600000; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"f7a2939527fd9e68723da600e96d76bd","sha1":"a9e717b6364d2895ee0a716050db32ca0ef1bb42","sha256":"d810f5146f4cd1517512a6e31946e764a73c58fb01427aae88d42cc2ae28718a","sha512":"e6956ec633c76eb3ebc408528f950b81373238cd1d5b9fff5ddd97089ea14a1ff5934f23769bac5d93cc4cdb6a1fbc4ce69baebfb940a55d8a7a89caccaf92b5","ssdeep":"","tlshash":"ec300000003000000000000000000000000c0000000000000000000000000c00000000","first_seen":"2023-03-07T01:14:39Z","last_seen":"2026-05-10T14:28:41.257977Z","times_seen":14368,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"tp.larvaelimans.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:46.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixi-xxx.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 20:33:30 GMT","end":"Tue, 03 Mar 2026 21:32:18 GMT"},"fingerprint":{"sha1":"6A:8E:97:84:9C:68:1C:03:B1:76:77:EB:8D:33:03:59:DF:49:D5:B5","sha256":"1B:4D:60:C6:3A:CF:33:26:E6:FF:09:97:37:E5:6D:06:35:38:67:2C:BE:1F:85:F6:35:55:C7:F6:0C:03:D4:ED"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: mixi-xxx.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/scvp-16676/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Dec 2025 07:31:47 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Mon, 28 Aug 2023 12:14:24 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"64ec8fa0-15601\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o6c9Wv3n2KJ89L%2F6PefS3Ecl4v0k6LqfB9W4O3ucZyU0qDvDS2MKFsoJBSxUcf3geE7cD4lDmHPFmhOvBlWHyLR94FzvKsLLn0J6\"}]}\r\ncf-ray: 9abb0b698eab32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-05-10T15:28:24.387602Z","times_seen":807806,"resource_available":true,"data":null}},"time_used":650,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":643,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vo28jcdkxz4r.l4.adsco.re/","fqdn":"vo28jcdkxz4r.l4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"185.200.118.62","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:48.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.l4.adsco.re","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Nov 2025 09:14:30 GMT","end":"Wed, 11 Feb 2026 09:14:29 GMT"},"fingerprint":{"sha1":"44:4A:2D:C5:7F:AC:E8:4E:70:9B:91:5D:F6:AE:99:5F:66:18:51:46","sha256":"3B:1C:F2:20:1E:BC:6C:00:04:8F:3E:30:B9:AC:DE:26:B1:D4:73:CB:C2:6F:2F:F4:1C:E8:C4:A5:FD:38:8D:68"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: vo28jcdkxz4r.l4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mixi-xxx.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 10 Dec 2025 07:31:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Fri, 02 Jun 2023 14:03:32 GMT\r\netag: \"6479f6b4-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-10T15:28:23.863744Z","times_seen":14959050,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":60,"connect":23,"send":0,"wait":25,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigwarp.io/js/dnsads.js?ads=1\u0026AdType=1\u0026cbrandom=2\u0026clicktag=http","fqdn":"bigwarp.io","domain":"bigwarp.io","tld":"io"},"ip":{"addr":"104.21.42.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:49.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigwarp.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Oct 2025 00:20:18 GMT","end":"Fri, 16 Jan 2026 01:18:50 GMT"},"fingerprint":{"sha1":"E7:09:31:BA:9F:81:58:4E:D5:D9:E0:D3:5D:F4:CD:B8:A5:53:35:B5","sha256":"1D:A3:BB:45:C3:C2:38:AD:EA:AD:A3:08:0C:4E:1F:90:2C:A1:BE:46:5F:C6:10:E3:9F:7F:BC:3D:88:C7:D8:7D"}}},"request":{"raw":"GET /js/dnsads.js?ads=1\u0026AdType=1\u0026cbrandom=2\u0026clicktag=http HTTP/1.1\r\nHost: bigwarp.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigwarp.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 10 Dec 2025 07:31:49 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Sep 2021 13:50:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bICHelO4uZRCQE%2FRnk%2BnT4gPNNM707sptdW5%2Bdi7dKpaQVYEeXoVgfUC%2BukM0RU5rqRq%2B4hIff8tzz8Ybm1SkCUHZJsF6jx3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\nage: 3579\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"26-5cbe0be937180\"\r\nvary: accept-encoding\r\ncf-ray: 9abb0b7a4d54569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"99eccae6afa72c589ae54b5c3890282a","sha1":"0f102f8f5b556635de65d16cf70fa8269c6761b4","sha256":"b74a58316385de04b054737776e71c160cd60d2d01b5440b32c21651fb0ab8d3","sha512":"01bc413c1695c125b8ab111c60974da99989b618fb674631d998db519996966c569503efb97a3c760b50069e87b6b42891985b00c64810a43935ada075a19d24","ssdeep":"","tlshash":"eb8000ee08e2bcbec02c0000000e02a802b00c00a023ac20a00e8e0233e2e20c228c3a","first_seen":"2023-03-07T12:59:18Z","last_seen":"2026-05-10T13:36:24.071085Z","times_seen":2625,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qi.beveldankish.com/rIeDWP0kV0f0L/127525","fqdn":"qi.beveldankish.com","domain":"beveldankish.com","tld":"com"},"ip":{"addr":"188.42.241.109","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:49.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qi.beveldankish.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 04:01:49 GMT","end":"Thu, 05 Feb 2026 04:01:48 GMT"},"fingerprint":{"sha1":"CC:50:97:2F:BE:23:EF:81:1C:48:CF:97:E0:A9:CE:76:FC:8C:B3:D5","sha256":"73:8F:FF:95:E6:84:9B:4F:09:68:69:59:E1:C9:A2:CF:86:F0:74:2A:90:CC:C2:9A:35:DA:AE:34:85:0E:C1:FD"}}},"request":{"raw":"GET /rIeDWP0kV0f0L/127525 HTTP/1.1\r\nHost: qi.beveldankish.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigwarp.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 10 Dec 2025 07:31:49 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://bigwarp.pro\r\naccess-control-allow-headers: content-type, gyfr29qt4j80vdr0zhsj, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\naccess-control-max-age: 600\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nset-cookie: GL_UI4=eJw9jc1OhDAcB%2FkGddnkl%2FAA%2BwgtUtKrF1%2FBI2npn7UKdFMqq28v8eBtDjOZKIqSpka8FyekX0rgwrnsZSdaybpRqlZr2feCaSEZb8U0CTzYbQhKzxQyVNuifBjCniHXXq2mRr44Q3ONUnt338g3KbJVLYTy1Xqa3PdhqA%2FnkfLn7mC7HhwzJG5r0nOF8s2u5ijPj0g4O5%2BKCE%2B3WYXJ%2BWWwpoiRX70yhPgF1agCXZ3%2FQWlo%2BwzuBrjZDP%2F%2B3zi9c4bC0G5HQu7CO%2FlfoWNCFg%3D%3D; expires=Thu, 11-Dec-2025 07:31:49 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJxjYGBgEuEXZMosEOSxNNSzNNAzMdIzNDURZEwXZPLzF2RKzhNk88svKk%2BsFGQsEmQyMBZkKsoT5PYvzslXcM4vzSsBiicLsoD4goyZgnxOOZkVCsH5OaUlmfl5xYJMQMzpnJiUk6rvEuwjyFjAxijIVJIPIotTRBgEGcvYJASZchJ5HHw%2Fv9qcvuAnkJPP46BavzE63G61IFNBsSCLgaGpIQCHOyne; expires=Thu, 11-Dec-2025 07:31:49 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-05-10T14:56:37.606452Z","times_seen":16216,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":93,"dns":69,"connect":17,"send":0,"wait":23,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"qi.beveldankish.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"qi.beveldankish.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/asg_embed.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"104.20.34.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:50.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tapioni.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 14:57:20 GMT","end":"Fri, 13 Feb 2026 15:57:18 GMT"},"fingerprint":{"sha1":"80:2D:1E:ED:7E:27:75:C8:26:5C:5A:67:67:AE:0B:64:50:E0:CB:35","sha256":"12:CD:2F:65:36:49:D1:F0:8F:A7:6A:68:FF:9C:96:CC:70:D2:75:FE:A5:51:07:CC:D0:AA:5A:75:18:DC:8D:61"}}},"request":{"raw":"GET /asg_embed.js HTTP/1.1\r\nHost: cdn.tapioni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigwarp.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 10 Dec 2025 07:31:50 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 76865\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Dec 2025 08:07:09 GMT\r\nvary: Accept-Encoding\r\netag: \"6936872d-12c41\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\nage: 170613\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9abb0b7e2cb456c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":244498,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65503), with no line terminators","md5":"4f0a82fbd63fbb0a63fc0b63f10e4d24","sha1":"bba21d386a205912e3494a9ce01491705a4f0891","sha256":"99f4e73147b4bab2e58e29abd8a4d7e142415cb28127306f13b03b18c42d1036","sha512":"76d23241f93a81fc0e56bd6073efd69793fbf254c41ec08415195010ea1b177d6c3e0aae35d8a12367dbf09f954110ebc9604429712b3985f3877c2e2b5b812d","ssdeep":"6144:e8dOGlEQZSQHYqm3+tQfITULVvzsbzOtzLb7cHsh2w5k/AScMS2Sc2S/NSKSMS/L:fE2SQK3LtCS","tlshash":"0234c789b6c1b0b403e3a1b4052f551af237b944744ec5c1f729d9d1aeb9a0e9a27f3c","first_seen":"2025-12-08T11:35:25.895114Z","last_seen":"2025-12-23T01:59:50.455379Z","times_seen":143,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"cdn.tapioni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigwarp.pro/cdn-cgi/challenge-platform/h/g/scripts/jsd/5eaf848a0845/main.js?","fqdn":"bigwarp.pro","domain":"bigwarp.pro","tld":"pro"},"ip":{"addr":"104.20.31.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:50.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigwarp.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 08:27:21 GMT","end":"Mon, 26 Jan 2026 09:27:18 GMT"},"fingerprint":{"sha1":"17:79:A5:FB:EC:0B:49:9E:F8:3C:AB:6E:89:64:6D:8F:9B:27:6A:B0","sha256":"86:76:E7:CF:22:9F:64:CB:DD:E9:EE:53:92:5F:03:15:85:69:0B:6B:AE:26:84:29:24:FC:90:44:80:CD:24:44"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/5eaf848a0845/main.js? HTTP/1.1\r\nHost: bigwarp.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 10 Dec 2025 07:31:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=M2VOyoiIV4sC%2BztZUfCuO11QWwk0hm4na7BU3hzeVl7U3CKZKs6JoP3JrAU%2Fky19TTDTxli8bsIdXgpt3yThVkZndrUoVogfGiHSCT%2FYAZqOWstL2Qi9Wx%2FeWQJdDQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncf-ray: 9abb0b817fc8b51e-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1602\u0026min_rtt=485\u0026rtt_var=1024\u0026sent=202\u0026recv=36\u0026lost=0\u0026retrans=0\u0026sent_bytes=203492\u0026recv_bytes=4711\u0026delivery_rate=23495780\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=44104\u0026ss_exit_bw=23495780\u0026ss_exit_reason=2\u0026cwnd=29548\u0026unsent_bytes=0\u0026cid=d7cc3f964aa2f76a\u0026ts=1592\u0026inflight_dur=76\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10438,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10438), with no line terminators","md5":"93d3fda95f28699d6a808cd10a063a33","sha1":"6be7007252b2261f59fad8512df609f23e919f5d","sha256":"28fcee9e93a3fb7bbe1fb914c884075855715594e633f0a1141c3a0356a64729","sha512":"3deabe0bb536a1c7f1a79e628e440e4baeb882a942472ae99e195bde1f2c13103088009581ac41be9789afdbb5c63a8f8a319b00393033a6f4ee3d72369fb326","ssdeep":"192:IXgVttFWcbeKYBR+10uVCr4f+u32l2IBQlViN8vqX1vxPHMVlfEI7ir6:KWt7YNuVC5o2l2IBQlwGvqrPHM3x26","tlshash":"5022e84afe85b11203b17aa34407bfdb215f9ba9c0865d109301d9f46c2b75eabe3f84","first_seen":"2025-12-10T07:32:23.006156Z","last_seen":"2025-12-10T08:12:35.619367Z","times_seen":5,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.labadena.com/api/users/499697?host=bigwarp.pro\u0026ev=227\u0026wh=473\u0026ww=840\u0026uuid=\u0026url=https%3A%2F%2Fbigwarp.pro%2Fembed-bwav74u6ycpx.html\u0026sid=85ba0ee1-f4fd-4d68-ba04-34204e20caf2\u0026i=1\u0026referrer=mixi-xxx.cc\u0026url=https%3A%2F%2Fbigwarp.pro%2Fembed-bwav74u6ycpx.html","fqdn":"a.labadena.com","domain":"labadena.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:51.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.labadena.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 23:28:43 GMT","end":"Wed, 04 Feb 2026 23:28:42 GMT"},"fingerprint":{"sha1":"66:4E:04:65:51:00:00:6F:45:5C:CD:BC:6C:DD:60:70:78:C4:D0:F8","sha256":"57:1A:C5:4F:7F:E6:61:6B:64:F0:82:6B:5F:1D:34:EC:2B:4C:B2:39:E0:5B:C9:DE:A4:CA:BD:76:ED:3E:9A:61"}}},"request":{"raw":"GET /api/users/499697?host=bigwarp.pro\u0026ev=227\u0026wh=473\u0026ww=840\u0026uuid=\u0026url=https%3A%2F%2Fbigwarp.pro%2Fembed-bwav74u6ycpx.html\u0026sid=85ba0ee1-f4fd-4d68-ba04-34204e20caf2\u0026i=1\u0026referrer=mixi-xxx.cc\u0026url=https%3A%2F%2Fbigwarp.pro%2Fembed-bwav74u6ycpx.html HTTP/1.1\r\nHost: a.labadena.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigwarp.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 10 Dec 2025 07:31:51 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: nauid=gKzAVCg7XG1uPyorfKrK; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":736,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (440)","md5":"2261994012e56593e6f29314fb313ce1","sha1":"b97b91d566cc22278bae4c2f12bcb71a9af374a2","sha256":"1643f2ee3bb4bd986a7748c94a9b7a93f690e1de68684f29a9b06d7bc5ba2201","sha512":"cd92c45eec08fb7730e40628df0c82963ac3412e620b66ea85bc6eebee7eea58dd29c60ad13a955e1cfe3d8146e53599fa2aaf18457266277eb2a71b14fc9d10","ssdeep":"","tlshash":"4701dd8252ac66f6530f50a7eafeceb68c5e89342715600bfae8070b59da04342d015b","first_seen":"2025-12-10T07:32:23.007231Z","last_seen":"2025-12-10T07:32:23.007231Z","times_seen":1,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":34,"dns":1,"connect":13,"send":0,"wait":14,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"a.labadena.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiVy9U51eOd7ZD4dSWkbLNlO2V0yvgzrU983K_lZ274wKDplLxCIBefo4Mf727f9ldYz8gbAVn3P5iqugIuoKmlvd8fR6iZPfLj9DghKk1eoOYmGvC9PdIh5T3w2PmaTp9z9bccfzCJi-6AkX2qEWaoD5OJJ__kNoLVEEcMqJd6xkvFnWpScdtv5Sqm6Bg/s1600/noni69.cc_mixixxx.jpg","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:48.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:52 GMT","end":"Mon, 19 Jan 2026 08:34:51 GMT"},"fingerprint":{"sha1":"78:8A:5B:0C:2B:DC:80:4C:4F:7E:75:57:5F:1F:D8:1E:89:DB:5F:13","sha256":"0E:24:41:60:9C:A8:84:DB:2A:59:E6:FB:EE:1C:E0:65:20:30:99:CA:03:50:4D:01:A9:B4:21:D9:CE:FD:8E:51"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEiVy9U51eOd7ZD4dSWkbLNlO2V0yvgzrU983K_lZ274wKDplLxCIBefo4Mf727f9ldYz8gbAVn3P5iqugIuoKmlvd8fR6iZPfLj9DghKk1eoOYmGvC9PdIh5T3w2PmaTp9z9bccfzCJi-6AkX2qEWaoD5OJJ__kNoLVEEcMqJd6xkvFnWpScdtv5Sqm6Bg/s1600/noni69.cc_mixixxx.jpg HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v7404\"\r\nexpires: Thu, 11 Dec 2025 07:31:48 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"noni69.cc_mixixxx.jpg\"\r\nx-content-type-options: nosniff\r\ndate: Wed, 10 Dec 2025 07:31:48 GMT\r\nserver: fife\r\ncontent-length: 10669\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10669,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 720x405, components 3","md5":"f86825029988443a9ff9080081444a96","sha1":"c53c50ce3626409c4499cfcf91793de670411d92","sha256":"9482b3dffaeb7965faddfcad21e7167dbed50cd21c7d66c2f5ae34455ed36e9d","sha512":"74f9f242c9917a4c1452890c415d1f09261ac991274466ea1ddaafc7ec92f8efe3f254dd3cc3057831a0ba272d647e4a691fdf138240cd000d71baa1bde39fd9","ssdeep":"192:FsOc99tA6VJx1RLbb85x3R1JCH9UpT/x2JVYRrR:2PtXJVP85xvQdSwORrR","tlshash":"ff22af016ae8645bcdcd12f23100357cbdfee658e9417a331047a13a9c153afb1b4ea2","first_seen":"2025-12-06T06:58:45.690952Z","last_seen":"2026-01-02T05:17:25.872412Z","times_seen":3,"resource_available":false,"data":null}},"time_used":463,"timings":{"blocked":64,"dns":0,"connect":0,"send":0,"wait":398,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/scvp-16676/","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-10T07:31:45.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixi-xxx.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 20:33:30 GMT","end":"Tue, 03 Mar 2026 21:32:18 GMT"},"fingerprint":{"sha1":"6A:8E:97:84:9C:68:1C:03:B1:76:77:EB:8D:33:03:59:DF:49:D5:B5","sha256":"1B:4D:60:C6:3A:CF:33:26:E6:FF:09:97:37:E5:6D:06:35:38:67:2C:BE:1F:85:F6:35:55:C7:F6:0C:03:D4:ED"}}},"request":{"raw":"GET /scvp-16676/ HTTP/1.1\r\nHost: mixi-xxx.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 10 Dec 2025 07:31:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlink: \u003chttps://mixi-xxx.cc/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://mixi-xxx.cc/wp-json/wp/v2/posts/2040\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://mixi-xxx.cc/?p=2040\u003e; rel=shortlink\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w5Ei7%2FX8NO5Uu1SRVqCaMtgk%2B5lgYMPK52JKglYgJcwvMRBySysrhLp2AhoUlyBlFZyddKy55E2AHnD6U7jvuQOibtJhmLfGag%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9abb0b62d90db4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":70366,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8832)","md5":"be3dccc35ddc98b74720c74da87d9bf4","sha1":"330b94de335c43e47cf50355e09f42fd093be6f3","sha256":"34f52102bc509d765b780287946c3ad16d78e8c41abdfd21f05982fec27ed08d","sha512":"60018e7b56656de744874228ca56ce3a797ff6b2b88704c66bdcd298fdde36b39f06a461a8e8f4bbfbb9117707af719f368c4814effab535b43d0bb1f10f47f7","ssdeep":"1536:tIypIHd6oHqBuAtylwZE0rOY76DFxXWDuwv7gl:tpeXi/uwv7gl","tlshash":"a663f9f360b444ba251b82d1a051772dba7fd532d707caa8f9fd63188f81ee35663248","first_seen":"2025-12-10T07:32:23.009626Z","last_seen":"2025-12-10T07:32:23.009626Z","times_seen":1,"resource_available":false,"data":null}},"time_used":911,"timings":{"blocked":26,"dns":7,"connect":1,"send":0,"wait":859,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi1PGu-PJcWmYVd0sqYNgFI0FL-WP3HsOHw0iyMS_OyrgcyhXza1-b22Ftc1ApmomDR6mcNxqyt1XtVxd6c3FVpVJadbKEG6xBYntxFlns-0KGWV13p-uQjPuDQ9B4WBNkbifWys-TJ1D457S2wLwIomJ_DPL0Yitt8El2N6KbEx-tLeV974D5li5IzmXw/s1600/noni69.cc_mixixxx.jpg","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:48.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:52 GMT","end":"Mon, 19 Jan 2026 08:34:51 GMT"},"fingerprint":{"sha1":"78:8A:5B:0C:2B:DC:80:4C:4F:7E:75:57:5F:1F:D8:1E:89:DB:5F:13","sha256":"0E:24:41:60:9C:A8:84:DB:2A:59:E6:FB:EE:1C:E0:65:20:30:99:CA:03:50:4D:01:A9:B4:21:D9:CE:FD:8E:51"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEi1PGu-PJcWmYVd0sqYNgFI0FL-WP3HsOHw0iyMS_OyrgcyhXza1-b22Ftc1ApmomDR6mcNxqyt1XtVxd6c3FVpVJadbKEG6xBYntxFlns-0KGWV13p-uQjPuDQ9B4WBNkbifWys-TJ1D457S2wLwIomJ_DPL0Yitt8El2N6KbEx-tLeV974D5li5IzmXw/s1600/noni69.cc_mixixxx.jpg HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v6de3\"\r\nexpires: Thu, 11 Dec 2025 07:31:49 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"noni69.cc_mixixxx.jpg\"\r\nx-content-type-options: nosniff\r\ndate: Wed, 10 Dec 2025 07:31:49 GMT\r\nserver: fife\r\ncontent-length: 24876\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24876,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 637x456, components 3","md5":"8753c11be46910a14955814f3cb00dac","sha1":"006bb083f969cb8457e23058b831e67fce58c1aa","sha256":"4e52e2f2806d4d5bf3faefed50cf0cb65c25450854418a24bddcb0e2d0f94931","sha512":"8d566feeb30b823ac1a815c020d59c543326a76f9a4e1f355e710e5e721a3253f82d809607ea5ba2a419de420f98f68de3baa7ac877fa4ec92e05d86a053bc83","ssdeep":"384:FHANAYnNlnujqRbPJSJFoO/o4AUFw8PATcQ2P27FDjgWB9s9Kpaj:Ff0NlnocbO/zFw8ID2P27FDu9n","tlshash":"e2b2e1874edaf18f47d1126895aa046ae1c2b94eea377c2567e118e8bc44c7f03d78c9","first_seen":"2025-12-10T07:32:23.010854Z","last_seen":"2026-01-31T08:27:05.047662Z","times_seen":2,"resource_available":false,"data":null}},"time_used":831,"timings":{"blocked":69,"dns":43,"connect":9,"send":0,"wait":639,"receive":2,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/asg_embed.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"104.20.34.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:49.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tapioni.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 14:57:20 GMT","end":"Fri, 13 Feb 2026 15:57:18 GMT"},"fingerprint":{"sha1":"80:2D:1E:ED:7E:27:75:C8:26:5C:5A:67:67:AE:0B:64:50:E0:CB:35","sha256":"12:CD:2F:65:36:49:D1:F0:8F:A7:6A:68:FF:9C:96:CC:70:D2:75:FE:A5:51:07:CC:D0:AA:5A:75:18:DC:8D:61"}}},"request":{"raw":"GET /asg_embed.js HTTP/1.1\r\nHost: cdn.tapioni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigwarp.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 10 Dec 2025 07:31:49 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 76865\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Dec 2025 08:07:09 GMT\r\nvary: Accept-Encoding\r\netag: \"6936872d-12c41\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\nage: 170613\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9abb0b7a782056c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":244498,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65503), with no line terminators","md5":"4f0a82fbd63fbb0a63fc0b63f10e4d24","sha1":"bba21d386a205912e3494a9ce01491705a4f0891","sha256":"99f4e73147b4bab2e58e29abd8a4d7e142415cb28127306f13b03b18c42d1036","sha512":"76d23241f93a81fc0e56bd6073efd69793fbf254c41ec08415195010ea1b177d6c3e0aae35d8a12367dbf09f954110ebc9604429712b3985f3877c2e2b5b812d","ssdeep":"6144:e8dOGlEQZSQHYqm3+tQfITULVvzsbzOtzLb7cHsh2w5k/AScMS2Sc2S/NSKSMS/L:fE2SQK3LtCS","tlshash":"0234c789b6c1b0b403e3a1b4052f551af237b944744ec5c1f729d9d1aeb9a0e9a27f3c","first_seen":"2025-12-08T11:35:25.895114Z","last_seen":"2025-12-23T01:59:50.455379Z","times_seen":143,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":18,"dns":7,"connect":2,"send":0,"wait":5,"receive":4,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"cdn.tapioni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adsco.re/p","fqdn":"adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:50.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"POST /p HTTP/1.1\r\nHost: adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Length: 2973\r\nOrigin: https://mixi-xxx.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 10 Dec 2025 07:31:50 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAS-P-1: OK lon123\r\nAS-P-2: OK\r\nAS-P-3: OK\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: no-transform\r\nAccept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR\r\nAccess-Control-Allow-Origin: https://mixi-xxx.cc\r\nAccess-Control-Allow-Credentials: true\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1212,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (1212), with no line terminators","md5":"fe3abb500777f075685b285d342fc362","sha1":"e11de930cc5603629de88a83fa432e3ff51a8511","sha256":"7c14b7f567200866137ec56f79009afff50b3166c63b69a01a3bc29ea4ff42f7","sha512":"41a2dc0692f286ec3fcdf66c824fedd965ddd0d12243261f82b2c9cf788301b67c98abbff3853fa188a69a90f632a3f229c40dd65ea457f3d09320cbf51be50f","ssdeep":"","tlshash":"3421849681266d6c7ab67492a7e093432aa29f4359aeec4230dd5ca2043bf39b46140c","first_seen":"2025-12-10T07:32:23.011941Z","last_seen":"2025-12-10T07:32:23.011941Z","times_seen":1,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":85,"dns":1,"connect":26,"send":0,"wait":51,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:48.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mixi-xxx.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 10 Dec 2025 07:31:48 GMT\r\nContent-Type: text/plain;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type\r\nAccess-Control-Allow-Origin: https://mixi-xxx.cc\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: private, max-age=300, immutable, stale-if-error=300, stale-while-revalidate=300\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":89,"dns":1,"connect":31,"send":0,"wait":30,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vo28jcdkxz4r.s4.adsco.re/","fqdn":"vo28jcdkxz4r.s4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"185.200.116.60","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:49.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.s4.adsco.re","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Nov 2025 09:14:21 GMT","end":"Wed, 11 Feb 2026 09:14:20 GMT"},"fingerprint":{"sha1":"7A:03:26:53:17:4A:DA:4B:6B:97:17:4A:3D:39:18:9E:5A:E0:99:3D","sha256":"BC:B6:01:45:97:52:31:7E:50:44:A4:6C:B3:E7:A3:3D:8E:5A:1E:32:79:2D:E0:BF:94:ED:5C:36:3A:0D:94:6E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: vo28jcdkxz4r.s4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mixi-xxx.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 10 Dec 2025 07:31:49 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Tue, 03 Oct 2023 13:29:59 GMT\r\netag: \"651c1757-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-10T15:28:23.863744Z","times_seen":14959050,"resource_available":true,"data":null}},"time_used":1447,"timings":{"blocked":517,"dns":194,"connect":182,"send":0,"wait":182,"receive":0,"ssl":370},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afrdtech.com/v1/script.js?kmnrKey=942899560","fqdn":"afrdtech.com","domain":"afrdtech.com","tld":"com"},"ip":{"addr":"31.220.27.154","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:49.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"afrdtech.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Oct 2025 10:13:45 GMT","end":"Sun, 18 Jan 2026 10:13:44 GMT"},"fingerprint":{"sha1":"36:C0:A3:65:FA:F3:BE:60:5E:FB:4A:07:B1:25:84:57:D1:80:FD:B1","sha256":"D0:4F:77:FD:EF:29:9C:9A:26:DF:FE:81:37:65:5C:99:B2:88:E0:FA:82:4A:14:02:45:70:2D:FD:5F:BC:22:40"}}},"request":{"raw":"GET /v1/script.js?kmnrKey=942899560 HTTP/1.1\r\nHost: afrdtech.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigwarp.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: nginx\r\ndate: Wed, 10 Dec 2025 07:31:49 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 0\r\naccept-ch: Width, Viewport-Width, DPR, Device-Memory, Downlink, RTT, ECT, Save-Data, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version\r\naccess-control-allow-headers: X-Requested-With, Cache-Control, Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-10T15:28:23.863744Z","times_seen":14959050,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":49,"dns":6,"connect":18,"send":0,"wait":17,"receive":1,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/asg_embed.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"104.20.34.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:50.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tapioni.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 14:57:20 GMT","end":"Fri, 13 Feb 2026 15:57:18 GMT"},"fingerprint":{"sha1":"80:2D:1E:ED:7E:27:75:C8:26:5C:5A:67:67:AE:0B:64:50:E0:CB:35","sha256":"12:CD:2F:65:36:49:D1:F0:8F:A7:6A:68:FF:9C:96:CC:70:D2:75:FE:A5:51:07:CC:D0:AA:5A:75:18:DC:8D:61"}}},"request":{"raw":"GET /asg_embed.js HTTP/1.1\r\nHost: cdn.tapioni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigwarp.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 10 Dec 2025 07:31:50 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 76865\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Dec 2025 08:07:09 GMT\r\nvary: Accept-Encoding\r\netag: \"6936872d-12c41\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\nage: 170614\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9abb0b7f8e3a56c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":244498,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65503), with no line terminators","md5":"4f0a82fbd63fbb0a63fc0b63f10e4d24","sha1":"bba21d386a205912e3494a9ce01491705a4f0891","sha256":"99f4e73147b4bab2e58e29abd8a4d7e142415cb28127306f13b03b18c42d1036","sha512":"76d23241f93a81fc0e56bd6073efd69793fbf254c41ec08415195010ea1b177d6c3e0aae35d8a12367dbf09f954110ebc9604429712b3985f3877c2e2b5b812d","ssdeep":"6144:e8dOGlEQZSQHYqm3+tQfITULVvzsbzOtzLb7cHsh2w5k/AScMS2Sc2S/NSKSMS/L:fE2SQK3LtCS","tlshash":"0234c789b6c1b0b403e3a1b4052f551af237b944744ec5c1f729d9d1aeb9a0e9a27f3c","first_seen":"2025-12-08T11:35:25.895114Z","last_seen":"2025-12-23T01:59:50.455379Z","times_seen":143,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"cdn.tapioni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:48.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mixi-xxx.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 09 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 09 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 43752\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-10T15:28:25.536159Z","times_seen":808873,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":59,"dns":1,"connect":7,"send":0,"wait":9,"receive":10,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vo28jcdkxz4r.n4.adsco.re/","fqdn":"vo28jcdkxz4r.n4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"38.132.109.126","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:48.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.n4.adsco.re","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Nov 2025 09:14:20 GMT","end":"Wed, 11 Feb 2026 09:14:19 GMT"},"fingerprint":{"sha1":"FB:34:12:01:B6:D1:B3:BD:9C:64:10:4B:29:6B:C7:44:FD:21:82:69","sha256":"D8:BD:52:A0:9E:11:2A:7E:51:D4:43:1D:9D:F7:F0:66:68:70:DF:0B:20:4A:38:60:4C:B5:37:82:2C:42:01:6B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: vo28jcdkxz4r.n4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mixi-xxx.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 10 Dec 2025 07:31:49 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Fri, 16 Jun 2023 08:37:42 GMT\r\netag: \"648c1f56-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-10T15:28:23.863744Z","times_seen":14959050,"resource_available":true,"data":null}},"time_used":661,"timings":{"blocked":173,"dns":129,"connect":88,"send":0,"wait":88,"receive":0,"ssl":180},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qi.beveldankish.com/rIeDWP0kV0f0L/127525","fqdn":"qi.beveldankish.com","domain":"beveldankish.com","tld":"com"},"ip":{"addr":"188.42.241.109","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:50.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qi.beveldankish.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 04:01:49 GMT","end":"Thu, 05 Feb 2026 04:01:48 GMT"},"fingerprint":{"sha1":"CC:50:97:2F:BE:23:EF:81:1C:48:CF:97:E0:A9:CE:76:FC:8C:B3:D5","sha256":"73:8F:FF:95:E6:84:9B:4F:09:68:69:59:E1:C9:A2:CF:86:F0:74:2A:90:CC:C2:9A:35:DA:AE:34:85:0E:C1:FD"}}},"request":{"raw":"GET /rIeDWP0kV0f0L/127525 HTTP/1.1\r\nHost: qi.beveldankish.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigwarp.pro/\r\nCookie: GL_UI4=eJw9jc1OhDAcB%2FkGddnkl%2FAA%2BwgtUtKrF1%2FBI2npn7UKdFMqq28v8eBtDjOZKIqSpka8FyekX0rgwrnsZSdaybpRqlZr2feCaSEZb8U0CTzYbQhKzxQyVNuifBjCniHXXq2mRr44Q3ONUnt338g3KbJVLYTy1Xqa3PdhqA%2FnkfLn7mC7HhwzJG5r0nOF8s2u5ijPj0g4O5%2BKCE%2B3WYXJ%2BWWwpoiRX70yhPgF1agCXZ3%2FQWlo%2BwzuBrjZDP%2F%2B3zi9c4bC0G5HQu7CO%2FlfoWNCFg%3D%3D; GL_GI10=eJxjYGBgEuEXZMosEOSxNNSzNNAzMdIzNDURZEwXZPLzF2RKzhNk88svKk%2BsFGQsEmQyMBZkKsoT5PYvzslXcM4vzSsBiicLsoD4goyZgnxOOZkVCsH5OaUlmfl5xYJMQMzpnJiUk6rvEuwjyFjAxijIVJIPIotTRBgEGcvYJASZchJ5HHw%2Fv9qcvuAnkJPP46BavzE63G61IFNBsSCLgaGpIQCHOyne\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 10 Dec 2025 07:31:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://bigwarp.pro\r\naccess-control-allow-headers: content-type, gyfr29qt4j80vdr0zhsj, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\naccess-control-max-age: 600\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-05-10T14:56:37.606452Z","times_seen":16216,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"qi.beveldankish.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"qi.beveldankish.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/wp-includes/css/dist/block-library/style.min.css?ver=6.9","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:46.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixi-xxx.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 20:33:30 GMT","end":"Tue, 03 Mar 2026 21:32:18 GMT"},"fingerprint":{"sha1":"6A:8E:97:84:9C:68:1C:03:B1:76:77:EB:8D:33:03:59:DF:49:D5:B5","sha256":"1B:4D:60:C6:3A:CF:33:26:E6:FF:09:97:37:E5:6D:06:35:38:67:2C:BE:1F:85:F6:35:55:C7:F6:0C:03:D4:ED"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.9 HTTP/1.1\r\nHost: mixi-xxx.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/scvp-16676/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Dec 2025 07:31:47 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Tue, 25 Nov 2025 08:14:46 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69256576-1d38f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Sfc4rHRtSLmuI59FksyDSiO6hZ5zHLJRVusvdKb2RvGMGjgnGqTOJJomW7287IZtiZanZBEmVzGmyLSGFNlJQGaBFfr2uQoN1pw\"}]}\r\ncf-ray: 9abb0b698ea532fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119695,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55871)","md5":"693359d40ab420bb23aa1b4be239f162","sha1":"67719855e95b9befb5e16556455ea78f3b9d7d92","sha256":"b4cd2f5507698b3ebd388e2d1ed31bef9c5704a171ccd53720c27c66df2510c7","sha512":"3ea55e5e2d2cfa21f66701e322928f3199042b8d3eef8f611cae1ee5d931903fb69d39b5cbb72f493e84f477b56f44fb24badc73f2c298785a9f29eb72b6d8a5","ssdeep":"3072:SoeJBCCUQg5MG7x+qehvX02dclkWwbFpPu:mfUQg5MG7x+qehvX02dclkWiF0","tlshash":"7ec3621417b4dcf935ffa73a5e4ee258a107aa41c68a67e6e066d190718ca490cf3f0f","first_seen":"2025-12-02T22:14:51.412485Z","last_seen":"2026-05-10T13:30:20.260355Z","times_seen":21201,"resource_available":false,"data":null}},"time_used":611,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":606,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/wp-content/themes/enjoyvideo/assets/js/superfish.js?ver=6.9","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:46.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixi-xxx.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 20:33:30 GMT","end":"Tue, 03 Mar 2026 21:32:18 GMT"},"fingerprint":{"sha1":"6A:8E:97:84:9C:68:1C:03:B1:76:77:EB:8D:33:03:59:DF:49:D5:B5","sha256":"1B:4D:60:C6:3A:CF:33:26:E6:FF:09:97:37:E5:6D:06:35:38:67:2C:BE:1F:85:F6:35:55:C7:F6:0C:03:D4:ED"}}},"request":{"raw":"GET /wp-content/themes/enjoyvideo/assets/js/superfish.js?ver=6.9 HTTP/1.1\r\nHost: mixi-xxx.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/scvp-16676/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Dec 2025 07:31:47 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 01 Oct 2025 14:18:52 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"68dd384c-1d7c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ey9kPbqRKBIqVFYG9oBcepxeVtsRwnM2qPtr%2BoGW2UPQwsNWl1uYuLmIaCJd43rgc6jUKWbS7%2F6BLeH2TxBrUcawBfHKFDx0YS8r\"}]}\r\ncf-ray: 9abb0b699eae32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7548,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"a9721a79829c73542da51e0d1dbd223f","sha1":"6184e0eb94092bf7165dc4a4b534737bf62c19dc","sha256":"4bd938863d8e473540c7300aec8fd156822f4701cee5fb6b3328a2cc9b0a012b","sha512":"9c0581651993c59291adba0928d58578e3f7139bc0553a2a0e6186b799376ea12557465ecd8f6d48df07e5d74a27019217bbc7361e837d95f837c6e7d65954e7","ssdeep":"96:ZI2iU4kmc/Ys++n8xwa99mjsaBPOZMq+dAcUFWiVUMIDdBtiipoebcSUbsH7jvEP:ZyN9s++facPOZmOhKgU4mjaEgRTd","tlshash":"55f11ec9fb9f2593c6ba325a089f50cc623d9076dc46082bfcb4e56c6d9487d826593c","first_seen":"2023-03-07T01:27:56Z","last_seen":"2026-05-10T13:42:08.855531Z","times_seen":902,"resource_available":true,"data":null}},"time_used":648,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":647,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/wp-content/themes/enjoyvideo/assets/js/html5.js?ver=6.9","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:46.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixi-xxx.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 20:33:30 GMT","end":"Tue, 03 Mar 2026 21:32:18 GMT"},"fingerprint":{"sha1":"6A:8E:97:84:9C:68:1C:03:B1:76:77:EB:8D:33:03:59:DF:49:D5:B5","sha256":"1B:4D:60:C6:3A:CF:33:26:E6:FF:09:97:37:E5:6D:06:35:38:67:2C:BE:1F:85:F6:35:55:C7:F6:0C:03:D4:ED"}}},"request":{"raw":"GET /wp-content/themes/enjoyvideo/assets/js/html5.js?ver=6.9 HTTP/1.1\r\nHost: mixi-xxx.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/scvp-16676/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Dec 2025 07:31:47 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 01 Oct 2025 14:18:52 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"68dd384c-285a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E6DjgHNExk%2FU5Xbfxp2%2FBlKlSvgPTJ3m53J5Yq2Ept7YyWXyXZx5sEDpMAGbE1%2FIy19Am16BAb4lNaiXzaLr61w0zFqawpN9Z45p\"}]}\r\ncf-ray: 9abb0b699eaf32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10330,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"5ee990907b315027da600eeeaee2e04b","sha1":"a5767b8325822da1212f702e79aea069747e4747","sha256":"a4b3b91b775b356ac4b5c34ac94dbcc1212ef23b5e89bfa9bfcc92e285a4447a","sha512":"18050136fa0818373b42c9f60f3c0baafc1b17af9231858fd20ae54a70fb9ec2aad9bc32dc914c3d99ccf2dd63b0c1caa0cce2f291cfa4d923da73e22b2e9ab3","ssdeep":"192:BbydQcx/vJLQ3oLpr3ep1JKpFe37j88fMUnK97jX5SMBXSG5i9+DxQTQ5pvhXaZM:BbydQk/vJLQ3oFs1JKDe37Y8fMUnK97J","tlshash":"6e22100a3cfb21a50167e0a777bbb687fea0a25b3355a040749c867c5f90f7460ede91","first_seen":"2023-03-07T01:27:56Z","last_seen":"2026-05-10T15:17:15.810966Z","times_seen":954,"resource_available":true,"data":null}},"time_used":684,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":684,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/wp-content/themes/enjoyvideo/assets/js/index.js?ver=20250901","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:46.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixi-xxx.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 20:33:30 GMT","end":"Tue, 03 Mar 2026 21:32:18 GMT"},"fingerprint":{"sha1":"6A:8E:97:84:9C:68:1C:03:B1:76:77:EB:8D:33:03:59:DF:49:D5:B5","sha256":"1B:4D:60:C6:3A:CF:33:26:E6:FF:09:97:37:E5:6D:06:35:38:67:2C:BE:1F:85:F6:35:55:C7:F6:0C:03:D4:ED"}}},"request":{"raw":"GET /wp-content/themes/enjoyvideo/assets/js/index.js?ver=20250901 HTTP/1.1\r\nHost: mixi-xxx.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/scvp-16676/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Dec 2025 07:31:47 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 01 Oct 2025 14:18:52 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"68dd384c-77d0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bqfgBb19PT5umQtNNgQd71NFh95aK5439dTRU89qr52f7epEgLI%2BbeCauyTdlXKClK5X6sW%2Be%2F5Ut0zKLthuPthgAtzOnHWAytq%2B\"}]}\r\ncf-ray: 9abb0b699eb132fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30672,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"c9613bf1719846f87062dea4abec86dd","sha1":"c48fbf576ec755ebf7282c73c65283f6b9261fc7","sha256":"ea6305d57af0374c3b8cf5ad5256ec7614b276213ae74288ea6e7a3646394311","sha512":"942ee0333b8503fa4a1f30defcaf1944078eac41c4c9856cea1d72c9f784885f3025ad8d657f93e18eb5058650c775260e1c8a618607688e9a7aa6e012181018","ssdeep":"768:Zq/Z8ahUSYk8cotSQ43DC4c3EmT5GVgPlbV+80Gu92T3pCpfU8H8PD4ygOMiCa+q:ZaotSQXdUmT5OmxV+fGu92T3pCpfe1","tlshash":"48d2624a7eea32b6409bf6baabdf6184f235808b610999187c5d87441f50c3105feff9","first_seen":"2023-03-07T01:27:56Z","last_seen":"2026-05-02T13:32:01.133859Z","times_seen":110,"resource_available":true,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":602,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:48.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mixi-xxx.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 09 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 09 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 43752\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-10T15:28:25.536159Z","times_seen":808873,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":62,"dns":1,"connect":7,"send":0,"wait":10,"receive":5,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgICo2f8e-_0rrQ26w1DNBnLfo2fZLjJXMadqXdkL-7ipniVPXig8Wb34ZaeDUmFmVQ3FQE4F_2xk0M_9TYdgtUUzyphulFygJwfyLiZmWtG67bvJNmpDZm9XibzpYOJ2lE2FnRHaTNd7_CuV9QCXEO40TVAj1Hz_oO73ZECxgJhio8rXiAl9n5g7-HyPs/s1600/noni69.cc_mixixxx.jpg","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:48.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:52 GMT","end":"Mon, 19 Jan 2026 08:34:51 GMT"},"fingerprint":{"sha1":"78:8A:5B:0C:2B:DC:80:4C:4F:7E:75:57:5F:1F:D8:1E:89:DB:5F:13","sha256":"0E:24:41:60:9C:A8:84:DB:2A:59:E6:FB:EE:1C:E0:65:20:30:99:CA:03:50:4D:01:A9:B4:21:D9:CE:FD:8E:51"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEgICo2f8e-_0rrQ26w1DNBnLfo2fZLjJXMadqXdkL-7ipniVPXig8Wb34ZaeDUmFmVQ3FQE4F_2xk0M_9TYdgtUUzyphulFygJwfyLiZmWtG67bvJNmpDZm9XibzpYOJ2lE2FnRHaTNd7_CuV9QCXEO40TVAj1Hz_oO73ZECxgJhio8rXiAl9n5g7-HyPs/s1600/noni69.cc_mixixxx.jpg HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v71c5\"\r\nexpires: Thu, 11 Dec 2025 07:31:48 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"noni69.cc_mixixxx.jpg\"\r\nx-content-type-options: nosniff\r\ndate: Wed, 10 Dec 2025 07:31:48 GMT\r\nserver: fife\r\ncontent-length: 6041\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6041,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 251x164, components 3","md5":"440778f5e26bf946d984d173929b354a","sha1":"a99f39d389f8a3bde65ca62b1a19b113f08c4515","sha256":"532e064f93c668fe57ddf4e39a73f58b18fdb8a2047217d6c5ec4d1e64031856","sha512":"c283d8b18dc08f3e660968133eba2df0bc34e44e8bb8ce34d26a86b353502ab6f1570b1c701956bfe8d2bd5ae134957f12e8dc7eece3a4693015dbc23c212498","ssdeep":"96:0Wh5EgVjz2UbQ4uzP4AZWMFIbY0da9Hkqy5zYMX2eAZ/0VzpRExG7UhMKbj7pKOp:0E5RVPoxWakfMHBXN4olbq3O","tlshash":"dec15c97a9419982e345037f6d332c640fcb4b802e96abffd451aeb55450ebbcc7a808","first_seen":"2025-11-26T02:31:45.671329Z","last_seen":"2025-12-10T07:32:23.017065Z","times_seen":2,"resource_available":false,"data":null}},"time_used":597,"timings":{"blocked":75,"dns":42,"connect":8,"send":0,"wait":394,"receive":1,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/wp-content/uploads/2025/10/heart-icon_34407-150x150.png","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:48.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixi-xxx.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 20:33:30 GMT","end":"Tue, 03 Mar 2026 21:32:18 GMT"},"fingerprint":{"sha1":"6A:8E:97:84:9C:68:1C:03:B1:76:77:EB:8D:33:03:59:DF:49:D5:B5","sha256":"1B:4D:60:C6:3A:CF:33:26:E6:FF:09:97:37:E5:6D:06:35:38:67:2C:BE:1F:85:F6:35:55:C7:F6:0C:03:D4:ED"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/heart-icon_34407-150x150.png HTTP/1.1\r\nHost: mixi-xxx.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/scvp-16676/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Dec 2025 07:31:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 13607\r\nlast-modified: Thu, 02 Oct 2025 10:44:18 GMT\r\npriority: u=6,i=?0\r\netag: \"68de5782-3527\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FnAz5xyN5aG4%2FgWvomCLFvZ8GLxVl%2FRpRC9YPjQWhGtJ5wTkVWDRVi5OOfKe0M8TTAfS6ll74dbRLhoUFXEX8uwLO41dU0NTHTPF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9abb0b737ff932fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13607,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"075e16ba014f629cf45e3c5485d631fd","sha1":"3917d8920c217b4a68da48c0fb0e155d59f08e2f","sha256":"3fe0f556dcbf687c5c0112973120a04984fa58d913d7bbdb615a016618073cfc","sha512":"8aeaae1b738f894e2ddd39c9e707a87897892cdf76d56a6b4888cd8a42f8cc682a625713b801dbf556768a62496d25acf43c462d959fa2a635cd3daa8e27db26","ssdeep":"192:yIdPJ0fvBSzpuJ+R65YgiRQBXfGv9w69xuK08sN9YaM1uI9RVPo2WhaNuSen1zwn:7dBmvBSzMrYgDBXfGb9Y889cgeZJWW8G","tlshash":"d552d0bf423b1e290545c9c168b4d27866fc053a7ce187f0258fc29f04763fa2b2b225","first_seen":"2025-10-03T03:33:39.500756Z","last_seen":"2026-02-04T00:09:02.993403Z","times_seen":61,"resource_available":false,"data":null}},"time_used":684,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":683,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/asg_embed.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"104.20.34.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:49.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tapioni.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 14:57:20 GMT","end":"Fri, 13 Feb 2026 15:57:18 GMT"},"fingerprint":{"sha1":"80:2D:1E:ED:7E:27:75:C8:26:5C:5A:67:67:AE:0B:64:50:E0:CB:35","sha256":"12:CD:2F:65:36:49:D1:F0:8F:A7:6A:68:FF:9C:96:CC:70:D2:75:FE:A5:51:07:CC:D0:AA:5A:75:18:DC:8D:61"}}},"request":{"raw":"GET /asg_embed.js HTTP/1.1\r\nHost: cdn.tapioni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigwarp.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 10 Dec 2025 07:31:49 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 76865\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Dec 2025 08:07:09 GMT\r\nvary: Accept-Encoding\r\netag: \"6936872d-12c41\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\nage: 170613\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9abb0b7c3a3f56c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":244498,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65503), with no line terminators","md5":"4f0a82fbd63fbb0a63fc0b63f10e4d24","sha1":"bba21d386a205912e3494a9ce01491705a4f0891","sha256":"99f4e73147b4bab2e58e29abd8a4d7e142415cb28127306f13b03b18c42d1036","sha512":"76d23241f93a81fc0e56bd6073efd69793fbf254c41ec08415195010ea1b177d6c3e0aae35d8a12367dbf09f954110ebc9604429712b3985f3877c2e2b5b812d","ssdeep":"6144:e8dOGlEQZSQHYqm3+tQfITULVvzsbzOtzLb7cHsh2w5k/AScMS2Sc2S/NSKSMS/L:fE2SQK3LtCS","tlshash":"0234c789b6c1b0b403e3a1b4052f551af237b944744ec5c1f729d9d1aeb9a0e9a27f3c","first_seen":"2025-12-08T11:35:25.895114Z","last_seen":"2025-12-23T01:59:50.455379Z","times_seen":143,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"cdn.tapioni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:46.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixi-xxx.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 20:33:30 GMT","end":"Tue, 03 Mar 2026 21:32:18 GMT"},"fingerprint":{"sha1":"6A:8E:97:84:9C:68:1C:03:B1:76:77:EB:8D:33:03:59:DF:49:D5:B5","sha256":"1B:4D:60:C6:3A:CF:33:26:E6:FF:09:97:37:E5:6D:06:35:38:67:2C:BE:1F:85:F6:35:55:C7:F6:0C:03:D4:ED"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: mixi-xxx.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/scvp-16676/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Wed, 10 Dec 2025 08:19:46 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QpSw3vMlJm4MghwtUuy8HKDLt7djMBwVEXreQOP3QoRyIHze37X%2BlDZ5Ge%2BbaAwWpw9p7mcTdyq%2FAriTzIdkPOjYK%2FuvvgX%2Bh%2FLl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Wed, 10 Dec 2025 07:31:46 GMT\r\ncf-ray: 9abb0b699eb332fa-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-05-10T15:27:45.7911Z","times_seen":332689,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.84.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:48.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mixi-xxx.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 10 Dec 2025 07:31:48 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 45\r\ncf-ray: 9abb0b7558111525-OSL\r\naccess-control-allow-origin: https://mixi-xxx.cc\r\ncache-control: private, max-age=300, immutable, stale-if-error=300, stale-while-revalidate=300\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-max-age: 2592000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":10,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bz.cathbermes.com/rCWKNFBsNT7t/127524","fqdn":"bz.cathbermes.com","domain":"cathbermes.com","tld":"com"},"ip":{"addr":"172.255.106.117","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:49.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bz.cathbermes.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 08:08:02 GMT","end":"Fri, 06 Feb 2026 08:08:01 GMT"},"fingerprint":{"sha1":"01:D0:CE:74:A7:EC:23:37:34:A7:ED:B2:E8:34:03:86:3C:B6:EB:26","sha256":"EC:BD:32:39:51:56:9E:E6:6A:1F:6E:38:F0:0C:10:6C:E1:44:34:D5:CF:48:67:E8:3A:AC:E8:AF:19:FA:84:E4"}}},"request":{"raw":"GET /rCWKNFBsNT7t/127524 HTTP/1.1\r\nHost: bz.cathbermes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigwarp.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 10 Dec 2025 07:31:49 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://bigwarp.pro\r\naccess-control-allow-headers: content-type, gyfr29qt4j80vdr0zhsj, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\naccess-control-max-age: 600\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nset-cookie: GL_UI4=eJw9jc1OhDAcB%2FkGddnkl%2FAA%2BwgtUtKrF1%2FBI2npn7UKdFMqq28v8eBtDjOZKIqSpka8FyekX0rgwrnsZSdaybpRqlZr2feCaSEZb8U0CTzYbQhKzxQyVNuifBjCniHXXq2mRr44Q3ONUnt338g3KbJVLYTy1Xqa3PdhqA%2FnkfLn7mC7HhwzJG5r0nOF8s2u5ijPj0g4O5%2BKCE%2B3WYXJ%2BWWwpoiRX70yhPgF1agCXZ3%2FQWlo%2BwzuBrjZDP%2F%2B3zi9c4bC0G5HQu7CO%2FlfoWNCFg%3D%3D; expires=Thu, 11-Dec-2025 07:31:49 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJxjYGBgEuEXZMosEOSxNNSzNNAzMdIzNDURZEwXZPLzF2RKzhNk88svKk%2BsFGQsEmQyMBZkKsoT5PYvzslXcM4vzSsBiicLsoD4goyZgnxOOZkVCsH5OaUlmfl5xYJMQMzpnJiUk6rvEuwjyFjAxijIVJIPIotTRBgEGcvYJASZchJ5HHw%2Fv9qcvuAnkJPP46BavzE63G61IFNBsSCLgaGpIQCHOyne; expires=Thu, 11-Dec-2025 07:31:49 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-05-10T14:56:37.606452Z","times_seen":16216,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":101,"dns":73,"connect":18,"send":0,"wait":20,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"bz.cathbermes.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"bz.cathbermes.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bigwarp.io/player/jw8/jwplayer.core.controls.html5.js","fqdn":"bigwarp.io","domain":"bigwarp.io","tld":"io"},"ip":{"addr":"104.21.42.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:49.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigwarp.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Oct 2025 00:20:18 GMT","end":"Fri, 16 Jan 2026 01:18:50 GMT"},"fingerprint":{"sha1":"E7:09:31:BA:9F:81:58:4E:D5:D9:E0:D3:5D:F4:CD:B8:A5:53:35:B5","sha256":"1D:A3:BB:45:C3:C2:38:AD:EA:AD:A3:08:0C:4E:1F:90:2C:A1:BE:46:5F:C6:10:E3:9F:7F:BC:3D:88:C7:D8:7D"}}},"request":{"raw":"GET /player/jw8/jwplayer.core.controls.html5.js HTTP/1.1\r\nHost: bigwarp.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigwarp.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 10 Dec 2025 07:31:49 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 04 Mar 2024 16:38:54 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W7QoDfj0737tFzkguxORfNUhiRryNc8G%2FU8C2eVubUfNtHIUSSfn3Ns%2FBWWO6xsJzt7D7%2B5B3S3oxoZ1Ph9qBfcumnDEyL91\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\nage: 3579\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"58f54-612d85c7a0380\"\r\nvary: accept-encoding\r\ncf-ray: 9abb0b7c0d58569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":364372,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"be53d86112d04ee5f1f34dfabed0195b","sha1":"667a3b0defb17ad5c5ed6a479226e11747759e49","sha256":"dd79b7cdfc4df8251bb9df3ddf9833a6b71b72108012fe804dce45530cb2cc1f","sha512":"3777999fdd2276399cf2d0dc0803abd28e577c4d0acc750d56fc42680fa4e8194af0c13fbda7493f7e35fe2e6d6182461d1c5929c6b54fd90181dd2d70e26ff7","ssdeep":"6144:rwTc5oM+4cP3k04J+rvR/7yEwkfeAqt1Vq6mfzq:75oP03E1fkW2","tlshash":"7c743a32314265359ad682da76614604b3398485f506caacff3ceddd4c6e8cb31fabb4","first_seen":"2024-12-30T00:00:15.505749Z","last_seen":"2026-05-08T12:37:26.77405Z","times_seen":202,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zd.wainfulcaspian.com/rI2iBFSyFUxU/73840","fqdn":"zd.wainfulcaspian.com","domain":"wainfulcaspian.com","tld":"com"},"ip":{"addr":"172.255.106.213","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:50.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zd.wainfulcaspian.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 00:06:53 GMT","end":"Sat, 07 Feb 2026 00:06:52 GMT"},"fingerprint":{"sha1":"69:14:D6:5B:97:7B:23:F7:A1:5B:06:0B:B5:35:D2:4C:53:D1:A7:E5","sha256":"AC:EF:D4:A4:26:9C:03:AA:93:1C:D9:9A:AB:F7:90:57:06:E7:71:BB:2E:8C:C9:86:DC:44:1D:75:F0:E7:02:42"}}},"request":{"raw":"GET /rI2iBFSyFUxU/73840 HTTP/1.1\r\nHost: zd.wainfulcaspian.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigwarp.pro/\r\nCookie: GL_UI4=eJw9jc1OhDAcB%2FkGddnkl%2FAA%2BwgtUtKrF1%2FBI2npn7UKdFMqq28v8eBtDjOZKIqSpka8FyekX0rgwrnsZSdaybpRqlZr2feCaSEZb8U0CTzYbQhKzxQyVNuifBjCniHXXq2mRr44Q3ONUnt338g3KbJVLYTy1Xqa3PdhqA%2FnkfLn7mC7HhwzJG5r0nOF8s2u5ijPj0g4O5%2BKCE%2B3WYXJ%2BWWwpoiRX70yhPgF1agCXZ3%2FQWlo%2BwzuBrjZDP%2F%2B3zi9c4bC0G5HQu7CO%2FlfoWNCFg%3D%3D; GL_GI10=eJxjYGBgEuEXZMosEOSxNNSzNNAzMdIzNDURZEwXZPLzF2RKzhNk88svKk%2BsFGQsEmQyMBZkKsoT5PYvzslXcM4vzSsBiicLsoD4goyZgnxOOZkVCsH5OaUlmfl5xYJMQMzpnJiUk6rvEuwjyFjAxijIVJIPIotTRBgEGcvYJASZchJ5HHw%2Fv9qcvuAnkJPP46BavzE63G61IFNBsSCLgaGpIQCHOyne\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 10 Dec 2025 07:31:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://bigwarp.pro\r\naccess-control-allow-headers: content-type, gyfr29qt4j80vdr0zhsj, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\naccess-control-max-age: 600\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-05-10T14:56:37.606452Z","times_seen":16216,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"zd.wainfulcaspian.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"zd.wainfulcaspian.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a.labadena.com/api/users/488408?host=bigwarp.pro\u0026ev=227\u0026wh=473\u0026ww=840\u0026uuid=\u0026url=https%3A%2F%2Fbigwarp.pro%2Fembed-bwav74u6ycpx.html\u0026sid=85ba0ee1-f4fd-4d68-ba04-34204e20caf2\u0026i=1\u0026referrer=mixi-xxx.cc\u0026url=https%3A%2F%2Fbigwarp.pro%2Fembed-bwav74u6ycpx.html","fqdn":"a.labadena.com","domain":"labadena.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:51.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.labadena.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 23:28:43 GMT","end":"Wed, 04 Feb 2026 23:28:42 GMT"},"fingerprint":{"sha1":"66:4E:04:65:51:00:00:6F:45:5C:CD:BC:6C:DD:60:70:78:C4:D0:F8","sha256":"57:1A:C5:4F:7F:E6:61:6B:64:F0:82:6B:5F:1D:34:EC:2B:4C:B2:39:E0:5B:C9:DE:A4:CA:BD:76:ED:3E:9A:61"}}},"request":{"raw":"GET /api/users/488408?host=bigwarp.pro\u0026ev=227\u0026wh=473\u0026ww=840\u0026uuid=\u0026url=https%3A%2F%2Fbigwarp.pro%2Fembed-bwav74u6ycpx.html\u0026sid=85ba0ee1-f4fd-4d68-ba04-34204e20caf2\u0026i=1\u0026referrer=mixi-xxx.cc\u0026url=https%3A%2F%2Fbigwarp.pro%2Fembed-bwav74u6ycpx.html HTTP/1.1\r\nHost: a.labadena.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigwarp.pro/\r\nCookie: nauid=gKzAVCg7XG1uPyorfKrK\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 10 Dec 2025 07:31:51 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":744,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (448)","md5":"518966e0d91815ce6a7752dddef31a3f","sha1":"d017aeb0e7777646dbbf5541968a4078be082ce8","sha256":"8b336795ed11858f95c28513406bf79cdba07ddbfbd30c317e175ca6583b5583","sha512":"039169c5841337299c4fc5dcfc1072e32cf9004e8ad4c71e954ba6e870fa0e00536119fe1fd71e3a96aa37af376f87e3c5510eddc2e4061f0ed4dbf9e7d0d263","ssdeep":"","tlshash":"c1010282869ca5fb530bd0a7e97e4fb69c7e85392754500bfb28030f99ce04203d015b","first_seen":"2025-12-10T07:32:23.020131Z","last_seen":"2025-12-10T07:32:23.020131Z","times_seen":1,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"a.labadena.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/wp-content/themes/enjoyvideo/assets/js/theia-sticky-sidebar.js?ver=6.9","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:46.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixi-xxx.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 20:33:30 GMT","end":"Tue, 03 Mar 2026 21:32:18 GMT"},"fingerprint":{"sha1":"6A:8E:97:84:9C:68:1C:03:B1:76:77:EB:8D:33:03:59:DF:49:D5:B5","sha256":"1B:4D:60:C6:3A:CF:33:26:E6:FF:09:97:37:E5:6D:06:35:38:67:2C:BE:1F:85:F6:35:55:C7:F6:0C:03:D4:ED"}}},"request":{"raw":"GET /wp-content/themes/enjoyvideo/assets/js/theia-sticky-sidebar.js?ver=6.9 HTTP/1.1\r\nHost: mixi-xxx.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/scvp-16676/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Dec 2025 07:31:47 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 01 Oct 2025 14:18:52 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"68dd384c-3fc4\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=op5HZOCw%2Ft9u4B7WV77qu882eN0JBEA%2B8YOgAtunONrwmS0A9sbBbB5rcbAGWATaSd1%2FTgLrbaVuZpla0yZFEzZVj1lYl3%2FjkKVG\"}]}\r\ncf-ray: 9abb0b699eb032fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16324,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"5738b8cc21ba524964d9403f24ea0130","sha1":"bca120481bbd7050ac4bda741b5fec7d9653cdb0","sha256":"41f806a19a20885a156ceb760f01b4fddc9e037b0f94dbbdaf33c53077f5fc08","sha512":"175fb50ca80d30d187897995e51458e71b76144d263a4af2a3baceff29a93ad59d669a0312962fd0c1ecbe9f33e7c480e94e7fa4caceb94feb9a5585020082b9","ssdeep":"192:dzCWVkpa2PcvApV0C1vHGivcibLgMzgV4ev6W1X68dPMRCcGcCTr5CsK:5JVHGvmc3gggKfg7cCTFa","tlshash":"b372055a2ae221345867b39f87dfd0585239c52752cbda243e0d87c85f81634d5d3fe8","first_seen":"2023-03-07T01:27:56Z","last_seen":"2026-05-10T11:21:31.504119Z","times_seen":1230,"resource_available":true,"data":null}},"time_used":606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/wp-content/themes/enjoyvideo/assets/js/jquery.custom.js?ver=20250901","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:46.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixi-xxx.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 20:33:30 GMT","end":"Tue, 03 Mar 2026 21:32:18 GMT"},"fingerprint":{"sha1":"6A:8E:97:84:9C:68:1C:03:B1:76:77:EB:8D:33:03:59:DF:49:D5:B5","sha256":"1B:4D:60:C6:3A:CF:33:26:E6:FF:09:97:37:E5:6D:06:35:38:67:2C:BE:1F:85:F6:35:55:C7:F6:0C:03:D4:ED"}}},"request":{"raw":"GET /wp-content/themes/enjoyvideo/assets/js/jquery.custom.js?ver=20250901 HTTP/1.1\r\nHost: mixi-xxx.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/scvp-16676/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Dec 2025 07:31:47 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 01 Oct 2025 14:18:52 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"68dd384c-d20\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R58eY2vsEv9C%2BGgLMYEO3uAX1iEudy7YadX7BHRxgLad4eHs9fXyIu%2FhBaoEj9KEYAgxVUJ0PAfYXPpnxyHLO0Auqa2ywUWP7vTj\"}]}\r\ncf-ray: 9abb0b699eb232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3360,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"b88b62180e4a3a4637e02d285b93c79f","sha1":"7eb1e5841f07055711fd07b9b0a45edf619e25ed","sha256":"f087b33a132b9aa5db20d040775fb61ca9b5b17bfb1007d66b4bb97715749e93","sha512":"43540128f1b91a6c76377b07e3f07a5264ff6533397d59e17119bc4967d3132e2411f515c2ab6c5f71a8251271b4c2f38cf9376ec64cc81ef5d60d22dbaf0eea","ssdeep":"","tlshash":"806148b1bdb22721487bc1565ffb7050eb1cc09b6246cc90ba0ea6a41f81319fd5dade","first_seen":"2023-03-07T01:27:56Z","last_seen":"2026-03-26T20:31:02.426524Z","times_seen":90,"resource_available":true,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/wp-content/themes/enjoyvideo/genericons/genericons/genericons.css","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:47.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixi-xxx.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 20:33:30 GMT","end":"Tue, 03 Mar 2026 21:32:18 GMT"},"fingerprint":{"sha1":"6A:8E:97:84:9C:68:1C:03:B1:76:77:EB:8D:33:03:59:DF:49:D5:B5","sha256":"1B:4D:60:C6:3A:CF:33:26:E6:FF:09:97:37:E5:6D:06:35:38:67:2C:BE:1F:85:F6:35:55:C7:F6:0C:03:D4:ED"}}},"request":{"raw":"GET /wp-content/themes/enjoyvideo/genericons/genericons/genericons.css HTTP/1.1\r\nHost: mixi-xxx.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/wp-content/themes/enjoyvideo/genericons/genericons.css?ver=6.9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Dec 2025 07:31:48 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Wed, 01 Oct 2025 14:18:52 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"68dd384c-6e6a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NXZF6ZBDBKjh5sVN6V2TsLStnaahMIrEqM%2B7nu4dLybHCBhgaFrCGXU%2FiTSvRYRQETuKOphx2P2FG0oud6MlFZx%2FMwyAI47haGWc\"}]}\r\ncf-ray: 9abb0b6daf3732fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28266,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (18732)","md5":"13a6500ddf36c6dd581877aefc78d34d","sha1":"3ab844aaad6045edbe2da9e78c3c9f41599b67d6","sha256":"4ed10d0d64bb1515397e8666a63f484d640dbc5678fa62574e077b7aef1c3af2","sha512":"8104d67e25ba6c13baa220c7e466906185238c21751649f85041f5e01b24b25d7c1ef02cb7376986026cf2da343df4754882e3be36b8103cfa9b789f9e5302ed","ssdeep":"384:G6H21lHT+RERegeG2NKJtO3EdEMQvujSE2mJzJ0u39ZthJfSqnZ:G6W1lcNGZQ3MJjS/mJF39VJ1Z","tlshash":"95c2a8b2d10d14a0671aea943387f7001b58712e9890ece6f44a2c9de7e5a3cc3e27dd","first_seen":"2023-04-05T13:29:57Z","last_seen":"2026-05-10T13:56:46.174063Z","times_seen":4215,"resource_available":false,"data":null}},"time_used":648,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":644,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teapotloquat.com/gn8TyyYXUvbr/127526","fqdn":"teapotloquat.com","domain":"teapotloquat.com","tld":"com"},"ip":{"addr":"172.241.53.164","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:49.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teapotloquat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 08:02:49 GMT","end":"Fri, 06 Feb 2026 08:02:48 GMT"},"fingerprint":{"sha1":"17:7D:F9:A8:6D:15:E0:66:FE:BF:52:93:D3:02:74:C0:72:FF:9D:AE","sha256":"3D:85:76:09:86:EC:70:B6:30:CA:06:FB:BF:01:0E:69:F1:91:E0:4A:83:C5:DC:10:7B:04:F1:C4:AC:FC:68:B0"}}},"request":{"raw":"GET /gn8TyyYXUvbr/127526 HTTP/1.1\r\nHost: teapotloquat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigwarp.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 10 Dec 2025 07:31:49 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://bigwarp.pro\r\naccess-control-allow-headers: content-type, gyfr29qt4j80vdr0zhsj, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\naccess-control-max-age: 600\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: GL_UI4=eJw9jc1OhDAcB%2FkGddnkl%2FAA%2BwgtUtKrF1%2FBI2npn7UKdFMqq28v8eBtDjOZKIqSpka8FyekX0rgwrnsZSdaybpRqlZr2feCaSEZb8U0CTzYbQhKzxQyVNuifBjCniHXXq2mRr44Q3ONUnt338g3KbJVLYTy1Xqa3PdhqA%2FnkfLn7mC7HhwzJG5r0nOF8s2u5ijPj0g4O5%2BKCE%2B3WYXJ%2BWWwpoiRX70yhPgF1agCXZ3%2FQWlo%2BwzuBrjZDP%2F%2B3zi9c4bC0G5HQu7CO%2FlfoWNCFg%3D%3D; expires=Thu, 11-Dec-2025 07:31:49 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJxjYGBgEuEXZMosEOSxNNSzNNAzMdIzNDURZEwXZPLzF2RKzhNk88svKk%2BsFGQsEmQyMBZkKsoT5PYvzslXcM4vzSsBiicLsoD4goyZgnxOOZkVCsH5OaUlmfl5xYJMQMzpnJiUk6rvEuwjyFjAxijIVJIPIotTRBgEGcvYJASZchJ5HHw%2Fv9qcvuAnkJPP46BavzE63G61IFNBsSCLgaGpIQCHOyne; expires=Thu, 11-Dec-2025 07:31:49 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"4fc71bf68a1d477bd1523733e34d1e90","sha1":"15119105cffbe108b6cf290146ab02c9aa8517ba","sha256":"74c1971a5c7f3f1cfb81b7a0a8717cee5a45841844104566e00bbfca271943ce","sha512":"e8e5f5430841f9cdaad492efce3fed11992913ad2b714b27c6fd147c55b2c56dc1b896635f24c2b180d4215c70ba9a042847d7d9cf3ff8a67b636a4c0ca1ce3d","ssdeep":"","tlshash":"f440000300000000cc300000300300000000000000000c00c000000000000000000000","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-05-10T08:35:39.033752Z","times_seen":10652,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":84,"dns":53,"connect":17,"send":0,"wait":22,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"teapotloquat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"teapotloquat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a.labadena.com/api/settings/499697","fqdn":"a.labadena.com","domain":"labadena.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:49.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.labadena.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 23:28:43 GMT","end":"Wed, 04 Feb 2026 23:28:42 GMT"},"fingerprint":{"sha1":"66:4E:04:65:51:00:00:6F:45:5C:CD:BC:6C:DD:60:70:78:C4:D0:F8","sha256":"57:1A:C5:4F:7F:E6:61:6B:64:F0:82:6B:5F:1D:34:EC:2B:4C:B2:39:E0:5B:C9:DE:A4:CA:BD:76:ED:3E:9A:61"}}},"request":{"raw":"GET /api/settings/499697 HTTP/1.1\r\nHost: a.labadena.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bigwarp.pro/\r\nOrigin: https://bigwarp.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 10 Dec 2025 07:31:49 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1be64b6d6652effba7dcf744e90def6a","sha1":"d9fbc7d1fa49fa4733f90a3739882d63972c2352","sha256":"72d79d0ad9a70ef53c1bab65c588d44bffb1a1b5aba0eb2f9f6a886c4c3aec4f","sha512":"ff1aee5b5d4ba25f4f78a0ddc80cd878856815c1ded88b32370c72bff242e73522e6aefb60fa5e53c434f10d2611dab7679152edf9321edc2b656e0265ef7006","ssdeep":"","tlshash":"408004c00dc1545410c010f4434043150103140f535c3304d41d1701147f4d17030150","first_seen":"2023-04-06T10:58:14Z","last_seen":"2026-05-10T13:37:53.205617Z","times_seen":7501,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":63,"dns":9,"connect":27,"send":0,"wait":26,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"a.labadena.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xadsmart.com/ezcleazjnbwxncsjxuq?LuvrEXHi=BQOCAAAAAAAACZUAAroymyGz7Qg-ildq3RVkfScLi36U2jKNhLSGLSqhN3HWAvnvu7ipvEKCguOE4p7h9uQtAJMjHR01gX6lYIY3doX7wbLvd-DC-pdDpup1VOSoBBdRX47Vck0937rDqHmZ-VUiNIVAKMrJEpQNJx_tLDXOiUKBYHCFNFeNV12mh4Jo0p7-AnftwHdKRVZIzMoc6rYhRv1qaPShYu49RAVettiM5DyTWVebrZX1H-qIrqUWhDVUfNmrd98px3ZopE7uclIHpHRqrMDBSZJ0RVay0tiuQM8aBshUmwZPQnpYop0lFAFRyozxTLg-MlnKPLe5cn-wRy64GEsNJlMKMsY8gsMceKlxiWK4sihjCD00TVYAGzrU9pp0yNLCRAF_axJlZsy0FM4frYWLlRquWkcMENdHODUH_rwFmwJjL6xC20kFF6IWrIIgAoSZsc1MB_DkImNRpeEiklrRbwSKWjAC45i3tvSFqaEfONWThXo-3-0YLZrjBTgqd6pdhO6hshOUqD3lX_CaK7h8sNt6vIG0iWCw3XvdhAHZ4C2HVVJHJaB3ZUWGIKoVSTrwpB4vbJWu_MQwJ8gX_ANUIm_1UDQuRbE3c98z6zSS0ZSSYwJsPDnyewZBwdjiwCb86i0ol2ZOe9_POBLMQ6Z6sy46zRL6G-Vddys2LIpkXkbWpu8xKAm95PveaLEWyWpHie5uwClpzk0FdbhoWgZB9V3uqfaGTak5lFNCvfka58JwHiX8WWkwce_U-ojMk07k2ytXL_uRPqxykYNrp_gSMvl_GaMcoJiG2vVHmxVIMNQOH7MWdC8lZyc35sXfq5YUpf5JUK8PxNacP2zPoEvr5SEitjxsJDY5H7PfEDHtnkRGPAGOq93S3ljHUJquNmI2c5mqREm5hq8dA6AZuviHq4XFpzGnAOCjSddhcxPH0bVvXi12mD_SIEb3-_elXTAEpVmXaOkHZ71gJHKww_z1uiYCbrys_qk6-WEO-PrPq5Rq7waaI4Nx8P1od1v8kf_iwiqg8ykOEfh37CEDhftlsRtTFAdHkLfiLdEW2xmG3jM3zkC5Yc4uBhPWSDQRVvJIH30sY2O-hAMGo1krFeVebJ-aGPbKYciWogVb5K9hgVeWb5w9EPilFIubi-aBR2nRtH0BY7v78PvRCqNNUq4XGNgbI0K38_HvngH2c7ZWaFWOUwKsS_RZ\u0026nscNgxqR=4\u0026OxXPRAkl=5258576\u0026DyUptjAh=\u0026hWAvEywI=0,0\u0026sORxQHPA=\u0026xnkVSrgf=\u0026PZvgOdzj=1280,1024,1,1280,1024,0","fqdn":"xadsmart.com","domain":"xadsmart.com","tld":"com"},"ip":{"addr":"104.153.197.251","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:50.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"xadsmart.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 04 Apr 2025 00:00:00 GMT","end":"Tue, 05 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:60:97:0C:DC:E6:0F:0D:1B:04:5B:46:03:77:64:46:88:C5:CF:87","sha256":"14:CD:91:C4:51:65:3A:E9:F5:6D:CB:BF:EF:86:31:A9:7F:DD:F9:17:57:48:89:78:CE:C4:29:EA:76:4F:04:DB"}}},"request":{"raw":"GET /ezcleazjnbwxncsjxuq?LuvrEXHi=BQOCAAAAAAAACZUAAroymyGz7Qg-ildq3RVkfScLi36U2jKNhLSGLSqhN3HWAvnvu7ipvEKCguOE4p7h9uQtAJMjHR01gX6lYIY3doX7wbLvd-DC-pdDpup1VOSoBBdRX47Vck0937rDqHmZ-VUiNIVAKMrJEpQNJx_tLDXOiUKBYHCFNFeNV12mh4Jo0p7-AnftwHdKRVZIzMoc6rYhRv1qaPShYu49RAVettiM5DyTWVebrZX1H-qIrqUWhDVUfNmrd98px3ZopE7uclIHpHRqrMDBSZJ0RVay0tiuQM8aBshUmwZPQnpYop0lFAFRyozxTLg-MlnKPLe5cn-wRy64GEsNJlMKMsY8gsMceKlxiWK4sihjCD00TVYAGzrU9pp0yNLCRAF_axJlZsy0FM4frYWLlRquWkcMENdHODUH_rwFmwJjL6xC20kFF6IWrIIgAoSZsc1MB_DkImNRpeEiklrRbwSKWjAC45i3tvSFqaEfONWThXo-3-0YLZrjBTgqd6pdhO6hshOUqD3lX_CaK7h8sNt6vIG0iWCw3XvdhAHZ4C2HVVJHJaB3ZUWGIKoVSTrwpB4vbJWu_MQwJ8gX_ANUIm_1UDQuRbE3c98z6zSS0ZSSYwJsPDnyewZBwdjiwCb86i0ol2ZOe9_POBLMQ6Z6sy46zRL6G-Vddys2LIpkXkbWpu8xKAm95PveaLEWyWpHie5uwClpzk0FdbhoWgZB9V3uqfaGTak5lFNCvfka58JwHiX8WWkwce_U-ojMk07k2ytXL_uRPqxykYNrp_gSMvl_GaMcoJiG2vVHmxVIMNQOH7MWdC8lZyc35sXfq5YUpf5JUK8PxNacP2zPoEvr5SEitjxsJDY5H7PfEDHtnkRGPAGOq93S3ljHUJquNmI2c5mqREm5hq8dA6AZuviHq4XFpzGnAOCjSddhcxPH0bVvXi12mD_SIEb3-_elXTAEpVmXaOkHZ71gJHKww_z1uiYCbrys_qk6-WEO-PrPq5Rq7waaI4Nx8P1od1v8kf_iwiqg8ykOEfh37CEDhftlsRtTFAdHkLfiLdEW2xmG3jM3zkC5Yc4uBhPWSDQRVvJIH30sY2O-hAMGo1krFeVebJ-aGPbKYciWogVb5K9hgVeWb5w9EPilFIubi-aBR2nRtH0BY7v78PvRCqNNUq4XGNgbI0K38_HvngH2c7ZWaFWOUwKsS_RZ\u0026nscNgxqR=4\u0026OxXPRAkl=5258576\u0026DyUptjAh=\u0026hWAvEywI=0,0\u0026sORxQHPA=\u0026xnkVSrgf=\u0026PZvgOdzj=1280,1024,1,1280,1024,0 HTTP/1.1\r\nHost: xadsmart.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\npopads-node: wb9\r\naccess-control-allow-origin: *\r\nasf: 9\r\npopads-ec: ASB\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 44\r\ndate: Wed, 10 Dec 2025 07:31:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"d5f0a25e4d3522d56d48ce7bc3e518fb","sha1":"86794caff58f7fee6e684c2ba7195f970a8d6f4c","sha256":"9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5","sha512":"a3a81801f516a4eb11f00d6f56dab0ed4b8a79219e6b4f5436993479f09dae08f14cffbab3327ff66fb39201d8eba1153ae7114f7705a01cc6f0edf840ef1616","ssdeep":"","tlshash":"789002801814116115d1500b8d5159d01259b1a4540801324446ca502dc7883a415774","first_seen":"2023-03-07T01:17:45Z","last_seen":"2026-05-10T14:07:44.338579Z","times_seen":23867,"resource_available":true,"data":null}},"time_used":745,"timings":{"blocked":317,"dns":11,"connect":94,"send":0,"wait":111,"receive":0,"ssl":209},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@400;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:46.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:58 GMT","end":"Mon, 19 Jan 2026 08:34:57 GMT"},"fingerprint":{"sha1":"56:14:7E:EF:FA:D2:CF:DD:3B:30:9C:AE:7A:C9:AD:9E:A7:87:3D:E9","sha256":"72:DD:0F:82:4D:8A:09:2D:BB:5B:E6:1B:6F:09:F8:1E:BD:BD:D3:3E:B8:A4:8C:B9:49:13:4D:DC:D7:EF:EA:77"}}},"request":{"raw":"GET /css2?family=Roboto:wght@400;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 10 Dec 2025 07:31:46 GMT\r\ndate: Wed, 10 Dec 2025 07:31:46 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11170,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"872397029f2e679476239e9af1ee89d7","sha1":"d7d9f8128975cdc4d6b71f8f4d0179c39e636a9b","sha256":"f52a6da7c0ccc77c22b7933e4c9226361066fd8f7f850c2c9862c44a81aba486","sha512":"7ae4f1c02e523c0d9ebbb1e45f4f68e47b2c41dfb01f90a5f114cf2af8e8efbf0e5b1da5933109779a43384bf5f0fcc89b20a15662cbaff68f5eedf38978e715","ssdeep":"192:2NKfmNKfNK4NKfkNK/qbNKDbqGIwV4BNKnNKuwNKiNKfXNKuNKNNKfZNK/qqNKDZ:8KfMK1KWK6KyhK/qY4XKNKtK4KfdKkKW","tlshash":"023210a1041b50009b834ce223cebf75fe1f52117142d0b5abfdab6b9dcbc66526935d","first_seen":"2025-11-19T00:21:16.090021Z","last_seen":"2026-02-19T20:26:46.863195Z","times_seen":4215,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":57,"dns":0,"connect":7,"send":0,"wait":20,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/wp-content/uploads/2025/10/heart-icon_34407-300x300.png","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:48.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixi-xxx.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 20:33:30 GMT","end":"Tue, 03 Mar 2026 21:32:18 GMT"},"fingerprint":{"sha1":"6A:8E:97:84:9C:68:1C:03:B1:76:77:EB:8D:33:03:59:DF:49:D5:B5","sha256":"1B:4D:60:C6:3A:CF:33:26:E6:FF:09:97:37:E5:6D:06:35:38:67:2C:BE:1F:85:F6:35:55:C7:F6:0C:03:D4:ED"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/heart-icon_34407-300x300.png HTTP/1.1\r\nHost: mixi-xxx.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/scvp-16676/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Dec 2025 07:31:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 47165\r\nlast-modified: Thu, 02 Oct 2025 10:44:18 GMT\r\npriority: u=6,i=?0\r\netag: \"68de5782-b83d\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m0LDJg%2BS3eCnHDmYroXZAqmoHOj3QTRds4uzN0pzObA4L%2B5OqN4K5Eru398PAIon3ESU9MWrn%2BiIYVPmYZm3OZYnvEJ3Mt43UZfP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9abb0b737ff832fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47165,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"4698819ab133bc1f4591b5217810b483","sha1":"121c42a0200a01758dfebd89c2ef5b97a0ad4ce7","sha256":"343dcc58e1812796099e3ca808568630f4060128812cb2c8ae64e8ea0ebd3d08","sha512":"a9525b35f0d54ee3b0074f55f6fd4a922cc36c887b02998f709d521ac65446b1ea7e9d4e97332dd84a462e771edd1c2cdd11493e55c1ff83de5c9c558bf797a7","ssdeep":"768:FvrXQQqjRkzmW5I70+EPXyQxvndnDufdlw9Db8MwsWo/yFnJaRVeMVFzHCK2bPiP:hrX7GkzmWZ+EPr5xDuVlQc/7o/yFJGpJ","tlshash":"9723f156d18adb612790722a90e3ba14650f250d80c628fbcd69f0befb5f10f5c4e75e","first_seen":"2025-10-03T03:33:39.486268Z","last_seen":"2026-02-04T00:09:02.975703Z","times_seen":61,"resource_available":false,"data":null}},"time_used":691,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":684,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigwarp.io/player/jw8/jwplayer.js?v=","fqdn":"bigwarp.io","domain":"bigwarp.io","tld":"io"},"ip":{"addr":"104.21.42.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:49.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigwarp.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Oct 2025 00:20:18 GMT","end":"Fri, 16 Jan 2026 01:18:50 GMT"},"fingerprint":{"sha1":"E7:09:31:BA:9F:81:58:4E:D5:D9:E0:D3:5D:F4:CD:B8:A5:53:35:B5","sha256":"1D:A3:BB:45:C3:C2:38:AD:EA:AD:A3:08:0C:4E:1F:90:2C:A1:BE:46:5F:C6:10:E3:9F:7F:BC:3D:88:C7:D8:7D"}}},"request":{"raw":"GET /player/jw8/jwplayer.js?v= HTTP/1.1\r\nHost: bigwarp.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigwarp.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 10 Dec 2025 07:31:49 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 25 Mar 2024 19:00:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fFmd%2F2r4CLAV1RxVuJTqaHR6%2BXNMQcqGN9XsCOX20QiN9McJQx%2ByveeXkzKtvRDIT%2F483%2Ff%2BVfEEjEv3Nhx%2BkclYm1Mi9g3b\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\nage: 3579\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"1b34d-61480c878e700\"\r\nvary: accept-encoding\r\ncf-ray: 9abb0b7a3d53569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111437,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65511)","md5":"fab72a04bc5627827387920f8233e0ed","sha1":"ce828999c9c484b695453d20288c60bf4d4656f3","sha256":"8aff839038af9a3af6377929713746739fbd2b7b8d72120f9424eb2d33f83b0e","sha512":"daad52e4d30799d92b901538201dfc177f75f98694228e8da72775cb992336642294c368475c872a8df610666ac648a108c9b69ebd5bd5576ec1da9973d188c8","ssdeep":"1536:lrGRl1EevCcKntukU2YYKDjAPkotbKSrvodmBiScMsz1x5rjk0ECjIUMj7DEYR/B:DeQtqR/wooiAUMj7DTz","tlshash":"15b31ae631c2b4e643e628daa07a4041f23a0545380dc5a4fa6cede63d67947b177fbc","first_seen":"2024-12-30T00:00:15.537636Z","last_seen":"2026-05-08T12:37:26.706656Z","times_seen":227,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigwarp.pro/cdn-cgi/challenge-platform/h/g/jsd/oneshot/5eaf848a0845/0.4926175757028525:1765351374:aTuBfmr3PhFjrnUldzXttmh9bXHdbSyd38SHo6nMNl0/9abb0b74a9adb517","fqdn":"bigwarp.pro","domain":"bigwarp.pro","tld":"pro"},"ip":{"addr":"104.20.31.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:50.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigwarp.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 08:27:21 GMT","end":"Mon, 26 Jan 2026 09:27:18 GMT"},"fingerprint":{"sha1":"17:79:A5:FB:EC:0B:49:9E:F8:3C:AB:6E:89:64:6D:8F:9B:27:6A:B0","sha256":"86:76:E7:CF:22:9F:64:CB:DD:E9:EE:53:92:5F:03:15:85:69:0B:6B:AE:26:84:29:24:FC:90:44:80:CD:24:44"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/5eaf848a0845/0.4926175757028525:1765351374:aTuBfmr3PhFjrnUldzXttmh9bXHdbSyd38SHo6nMNl0/9abb0b74a9adb517 HTTP/1.1\r\nHost: bigwarp.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12189\r\nOrigin: https://bigwarp.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigwarp.pro/embed-bwav74u6ycpx.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12189,"data":"Xqwt3IYj7B4RYRY5KGwDY$K4K4t4CtYRK3KmJQKeBKTKoyOj0wb7MKZKH0Fy9KjY3MK4BMYKBqY+u4y9YWKTC9K+MMe0CKU9NdRK6s7mjCupbxevKD-1NZ401JCKaqPTbwE29tBLvHYKtKg4HEg0uyY6CSemk0KPFG2K+a7MewawbWeLAWOlKYi0CaGPFXLKOE9oCUGlCwfIZa+2KORHK72KaEBGKdpDgibCO9DAviDaeR8LZg27KOvMKK2YAm-6Qj-5K49s0uMD+JwKYEcTBOeCKOg2HK1CENeKXG6WjS$nYue7K7SMB4qHCJM+LFWteECKSCwqIHUTKKdODMyLv4y8iy8XyCK6S9KuS0LCKwA4KrR75eqCYp4FL-dFB3kkbikcQ+eqt-l8cyisL2Oy1zttsNuKKmiACwKtbpaifUtKQ7-2Pdeq-qwOvJ-SxO1QiBis1zD2tNl+eKjaOwdCLRUhW2AW0EWXKYLzN77r30+TAzGkHGZabZb+JpaRpzDLGsHJKdmQNM6B3sLgsbqtEY5v$BQwqtUE2edGOy2OMQxmnYcZer9Pe6$yMUF3Zv2FkYss-FdZzaIi2I$p2xLOgQ5HH-AbyBHv$1RBn-OjZFIlPsfY5gt1oDidC2jCvfNYsin2xCXaC+Eb9X419mCDOPumDKxw2YZk4JXujSs9uNDDInfKhdiaNkT2CdtSlPgFFkC0g8RrGhL1YE05Svs+rKPUWB7QUgjBfNH5r4TE+phGg8c3GQkcwxH$e-+Zo2lIw7taeSKYx$T0KEpQW49eQ0TLsEf1yLp-NPoty4BmyN4jukQ5yCfX7eR03dRK0v1056WFv7CbTK7c4eedQUW$uYsKqyyMs1CyE4BdmWY9pQY4qetsI7FysQqdwoYwSqtQ9SCyOsjEEOeOmXxy+0o4K4T0FYY6LN1vY0IQ7tmeID34Y7BYAvnjEW4nHJSRJYO-wLjEOdDBK677yrut$NGO4q7Q4YHM3J-bst9liFT2FdSCnOHjCs9DPGAPeXbbssWyEPIKtnbs78QPypM7CM7tDKwoeHKMq+IlMbO0csXzjsBWJkz2Xz4v7sMAcD2c5$ecO449FQOOnOIgcUpQOYIUJxRY$Q-Mb+wPtdgcbdUhbKejD42RYUvSMeqEeKtbK9+0$d7ltNtwHFLuQ0FvjBjryjQ2p54qFrRlLaBaK9dO4Y7lTWImv-u-nj-MochboY9etyFY+T$jBMQX3bZQXM9WDyOMe-07es-qcw75L5iT0BvDLaaKoeCrue$Ip8Bk57eBKswksrqu4KYMSrKL9-PHFLCiiWtyYUa9W4KeQfT72rO4QoE+d1Gw4TB0CwaIcOfA2ZCG40De59Iv$y44sZwfpWQEdvBK4IaUZ2OidQu7ggQ4KmmZ4e0FDb7+vKaPjxE4KY-EyC5rUCY6-yJFyF5aOLeC5Z6hY0E1FE0Q1mDoZ86AfkFUAUY7au2KYyCGd1O6r2zsCvS5OogyxOoMEiOu0SqUEr+9awM6pZK42cfbCKcSq32WDnpoKJhreB5nv5uQh4Yp67NnPfny7hJhPtaB2QuQKMP9LSY7ty4yekFhXnkfPrSyxw9YYUjNKbGtotvKfRkKK$yjKxYs7Rqte$4qYLgfGYHxLWBmADSLQOGXtKX+q$wYIQQAtJ7H3Cu5nYbeSFLKyyy67g9cxMcdLywQAcBUR-NO$zRbe1W-zLSCswM4MNy7-aE0XQ3mYwYwHYP0feaYp9LWJwSX0xpBOqNt6pZQ5NA3Pk96IUwz-eBqyespxF$WJQGSyc7iqnmiFqDJRm4K$OM3BNw4QFLeeQX7jmnYw-EwmK-YmBmaFppbIPOmAEATaOLYvcmwK2-rw9BS1QxEsessDK0YUdj9armIFv19qtOQtKWizacBE1teK$AM$tXSHYnMQd++$BEh4EXI5KFtKB78oCIpexwYwZMrS1ICdCW+47iecbySC$iZmpJgt6uKQyGYXY+igHJBSaci5DeCFw2jOO3XaNyYqUGv-3BTmGm9-JCYyI8KI$tawoQ8NeO2rH6pJvKdi0KJYI-vUS7SwcXmMuqSDntd6A+2ljtArJG7FXoI2BwpKmYbyz-vQyY915v$9pCe1AEzzl$6-FCy4Xa8BysLL$e-lLag+eXk7tY10ZpXbrvu6ZC7aJimCKMx5ap+s6Sc-63BKMyHLfKpX-YC2c6ljh3nWSi2Dmcg58hXxbbAIY0+pS0IsaF7kOJS2cA58mexEDKvYomIk0-7HvjboclHA$Qu5gXkRLFC7kNvzwO+CoAlMLQI9Yiiu62RwN+1$-xwrh0PNxY4HetmqRfvF3BmdeO5SAN0Pr5KpUwTQpw-sE4ErnK+ESxeXwEC0fb16NywbJswCCxFO$mdqgMGBT7zeW2niT30+ibIc1FaZMR11FBmGktLJjxiag+2cec10-75LawElvMCLt7nMSp1LK07Z3LM-+s7HHs+PeKJxwG733l3h-MfrwH+Ea0Qw9h6rDq+-3BM0Sy68AUpG9K35dsJNwKT$ESebw2USfzfj+SsqQrt1Fdr5hK5ZzmteTOz4Uqt41e7Wp7yy6tMYECoNLvtdDoNB+KBj3brBCgjmq8qu6UZ7XwxMsMlcF+5B$UrAdh66aK7MeXX-4cKmwbeN4y6hMEmRZfiBHby-n81E6It9pT1FH7vtx3SBsQGKSZ4ngN4jgyqBX9tF1zn5rtl$wuKN3B0Uo8893tA62BzTS-BPvaKQKxu2ipYmkwhEMaUseZ85WiEh8qNaRT5KIuLht5O2MvXQpeFCvAXdN7hOZt7cRc1CTFPMtqYE-XzDG7io1LqNB91Sg8CyR3sMIKKgeBlYXuE$e8B7IrvKfzJTR4J72T3EpHzA9qI2MT+ZdNFgWbMsccC7iRd16i4I4Rr4FFDrqdCz4uKcHdxvZ+HFdL8EG--XtQjYyXRQIdnL9QU4H8X-2+yW0k7po5SqmCq-8BOmJKj3QamFikSEjRGfJ88XaliF74I9Q$H5F1dEIdkxrQmzKK4mCLE5KedPAjnJpGs8r893jt3abuWC6RqvbcXaRjLnv198nBX0K3aSW1xUcsjJQ3LDIA-BCJX5YUfiGkleAteKMu1DlrQdXqroISRp$rrECTocMUUK-pRRPnLBqrGM$sOGNi+rq9thdkaEy0-gs8QvUl$5CyiPJ18IFaQaA5mXy1IMjAwtd2zyXOmCDS6r8+-wRdeAkl2ke0PdkRUSZCkYFxWbeJEyyIN6KQ+msiziPB0ZimDNzhqBxWNIFiJK+3BtiW7aH4$iqhvEFvr1BLFY6avUjxABr-WCUXgJLSJZQOpuG4A+XRyjCPuTiS04uDTHgZfiecZD7K+SF3sRcMkZXGlKD3MFyWHbAqH6XeDmjZ1Dc06HohyB-DfJBeuI4vx4ptDlEKKGosbxCYAy47vO7$RwZs8vwT2$RTG8ua3rc3o7EYuaPHeo8rfH+ByHnpcLd7OdtYI7W75afKNrcCyYImfktYU7gFimR7z$+duXT3iCWBcOj7+M87t$dHCMtSeS+WJoko4ez897zCAEqrq+484Stvc$zkvS4KKDJw83zCHSijiMMSLCHeAk0k9p5wzBoC4k9Oq$hdbEDWEeYjKhPHeYyXtX-eXrWrimeapHpmQHtOOeEExoJrxoLet7UBw3ySeBW+sSP3p$OdCCCpsWJXtvkH+84kKxtJ5SK6PMtsKU+YEw8Bu3Cc9prjL3MdzFClDefXWr3BsYeXPMELaaFHmNJBU7WFBSlXIe17WaeucFtEM5G7hasMhkFek+l+awc5FHppfK0rs$e7NdoCWjcjuoxXy1ZLWYKh6SyqtQoet5CDe$+WmdBjwUWLWM9gZdLvg$IOwasFtwtCLlr$wl+W4mRXyTygl8yvKrQMSoE74Bp7vj9yN7yfJOjrqHTMM+Q4gOqm8eLZn+NoUEUNtmhkPjXXhFrOiYHE0BOjL7uSGMuwbjeptM3ask3wWHm5Sdiaqvk89oC5-4KT3YtO3pPoIEk5xmLc9W3Sef4KXSAFQBy5hXa5$mNK3jedUC85GoLuCHmu6oKvukMuxrvZ6XQBeXz5GMkNwLS3qihFCNqJ8db7tXyxJuJC8CWMursCqOtdCFdpZCW3ppIdbBsKqzp$6MeKqPmwProNvQ8umXo+yCALKUepX3-jbWvySvtMtenOq--jeK9GyjSu6pQ8zeCpQkQ4smzSSUbFwcCNqw5uGBGKSO$FtOtOqrc$Qu6Nikj+auKfRwlS+74XuFt4uoIw8BpBeTvDmjSWyWhMeux+Q4j+MwtSFuCKHSCrQeq$8u1It89tPdtOGWq3ABsSPWmpQoqdt8+Eq9HY1RvI8SBqLx6mBUSI4+9FtYt8BIZ+iwCxvgk7AwTNqjMW8rqCZuqBWrsKdN1RKF$ECHnrRik5yRrauwvqaSjnJ7WEpFtEWEi89OYMeO8BBgrawj-dhBaXRAXEeUexwXq3MjMd22OFT+C6+dwfrdzFFkPmBiPaTuQE6+qw8rO7CrRvSP2gKbeCL21ceOzFCXeRQNqwt4hMXS9YKst-4N26wTWCKP2Iv4trjYIY9x2AhYh7I2M39gUe6SRqF7RloMRIF5jv1wsFCefBpuHSy$Ie14+XQwyI92UHD7HrjR7bP77GLzrp+HnogE-8LZ9HantutNCNS6r5vsoCFSHKt3c7cCWH7QKlbLa890asL7AeC-bBCx57A7jhOeKjS5t3smJhh+pXtYhHahZecaLQtHjgevcKhmx$s7rShdA$o35EDpvzIveitfEdep$uTKqRzNbOB2rBt6r5BUGC4$e7JWt5J4Wjb$F+9oqYLCyjPEGWOrgohNy7CGRbFOJuanDu6d3XlO-$ojfOb6G70kJFh8JxrFwHTKtHWMYOaDeNP7e0ECyNLGy2eSn3MMXSyfm5G3JJ1tDeXFBKvFyFt$TECmKiXa5w8KHfljSYLO$34MMW9DmNwHtm7yF$jtXF5ewBoogdUaByNO3WqyxuK3M9b4kKvsn3qNw7mYMwtX9fXw8kwH9ptpIQMmbxOCMEzdw+Iqec9ahrS2M6r7anLx2PmrRt4OMQKZ9Q7BwoeiMIACuYU5sfMDw0HFzOsg5Frwlwi89QHLCFzKM62qD1ep5CLtjNuNCHdRpBLXGHMzmozaStM49vc5SK9mpoIRYL$ecws9aQvfJEbP4mdE6NlCMSd-J+wkJ+ydMYZmlYxetCh$skJlxOHRwQUlyGBx51QFqLr8PLjPvIDIABp+Op5rItIRpSMgL1x7WW8dCFCYjIsh9vuWh7+ot7CBLdLpDxwSI4HzDv1CGofe1ev2ABoWSv7UGNwOwUIJ9cdkt7L6rK2zr5GwLC4L4etKCvRZuLBqLRyBLnxogYAOqaHGQ5I+Ue2nH1GYg3OovbtZ998Fc4ANG3wxwpXK4jfSycdJN3dRSzes7T3ozBwaMQtmTKq3NBBI537y16fSECo4MUMbyAsEMqXkAHp8h8CHpoUicebAIKsuy1QYHYS1PjPOoW-pBtWdMI9oDpNNaB8FUswp1k1XvseqOmedKAtjXMAmDFCHnaw6+NPYwPCc1Ph+sCUfqWw61RlYetIPvizdeo168MX$nIx7+ozdPNOFHqBh6HA6doL3AWDqDbQlI5S$$9IIWBe0CjQWJ4J2Sp$krFq8M5Ajf3q5rkMrhBowq2fd96A+P+9TeRspUICyy4OjEP5$toCcbnzMjQtHdxiwbui45meTMdFN26W7eyeRok9k93qY+p5SP$Axd4YjdmCW0ANHxW22eSvIe5G3pkDsCBOmDrcKqy4KvMmaBkEtnvKw$UIkPHEGyO$rsF6MyswCqM4u8Xyn0nqmeKpaUtef0BorR6q-9uRvYZdl51QWmN$Ds9BlMtsns0sQrLAhwNCuC$+SJf-LB9EDY7tRbvHfZEhXl$fpWplkl8BRRvFuI2FO$Sow8$FYFK0Lz3pCdAfKq-BI29berPCKyNaZSf-+MOtHeUIPm7vWHx2vbEodtSDeLOy2ocdp5SybYN6Sy-$DEPBxwNTNNmkpRTw6sSPXA2fmCiINCbyLAYRstDtotPq4XNYoCS5WAWJlMFGm01Bl1tA2G4jkIE6bGXyKFN2Pt6ven-JNtuCPsx6EADm8haItI0nqi+4358zjLrEPv$L9ay3+spLc3NYIEI60CM6RrqjTd1CB$Ry8JUJPcv6C5cHOHH7iJ2f4AzARsmO9839xO5IAFaBu6szCy5YbtEoA$uSD191nIbbfisAI43iUIngjQqU-JckY$7$EcckSE5P3bNCw8ogwAbTwuXstszpq5tTma2AxZOM2gk9w8Opdr$rjCwrQMAIpMEkMRscTW+s3zCgBK-ScsxWMtQHmqOqmt9E194Io1lNK16$DmLcc9KMRxrJZA1B99tAJE1A6s91b2c9wTwbmSTTYfE9yr0lYX4rPIRFHRIv5NWroR1BIatYPdslTtUPMq6UzgKzLoBsOnhp7DjCw0RykUAK1s2CewkN5GoSAtEP8J6NjeOlj-3bXtpN4IaQgIYq4bG4NqwUToAepEZXiqk6e$Dv9Asi051cltoy+RblU6W9BwkJ5eed-l8yY5vXxOryImnJsh8CH6TYzYgUFYDnC+Oi4z$BINSy$LByWD1POQxOF$nQZkhpNc0+ksnXiHe5s4vARAwjQURpC51C$B2-+aW6oXoE8J3Lq8NAPsGJQtE6LlnC2S5N8J+etgd67nnps6P29RyCZJqholFXnkA+OlLySPrOetSEmA5LK0-tAiw1U1-qtTOiwEgrF+1$32ABcR34p973kIrmn7RPH0gtMMftAlJfG4fowbvc7rfqcUaUT0QcZ9cB9pepOmiEUrLtb4q01Go$b1J5GFkr$+8sUXZI2hjUjQuqwudC8oTcswoikgrd+wj2JZwbFan+LObrqHg1km29SyOzJv1Q3SnDWj0h73Zgv4fqH7PFK-LpzoQTc7sSI2zi3HJrHrHl8X9rIvaBQC3uLGqMQM7W7rh6Ni6xdfbXwsKq+sjORIg$GqomKAPUtpSMG+$ax2xJQ+h6zZulFlNmcKzqN$dwF6WawaJEvavfrRyyNQIUYF8JXHegywfj5bDpLth6UI2UvwuQyM309G7CuxMf6XZwGwHfsnsOYU3pFghzo6E71cJyPifEmqefPFscCBlCIcKAiG+yaQgdIpjiferTzTfAe-1G2-AZvYKTagiqYQHAcCwaAe$Jpa7NRP4$I8sw$DcCFCfGp1y7J0ZuKjwAc8hFw2xGYOjmxX4Cbe$+WWXI544HBpxvXHu071i+sWOIcRLSEGJb-O1Diww88Rb5oSUCmS6-dNHn5SFymCeM8J8o0Tylf+TZ++hJabAEW+hr+kOxstXytk+b5EnEzMEEhqKfAMiq3zuRRfhQpkB2QRcRckEg1PrR-+wbMOLbpcImTkBm9XqrrcRoWcKrmkk79F2batRSZ99sfP-PAxvKpdP9mpTGgh3GTceIvkd0Q4ZnHpXyIuvX816KQLxwMJbuD8ks9scBxTYNIO732cHGgrcC$99CqbDmo5iJatbSvwrWGqWXS9ATzrQPZ2rQeAiomsLOt8wy4Iht89dPNyZnEIRr0NEMKEITy7yU$t+9KcxkQq2NdBmO1T7EcGswfLQtWXROIDZ2mTKig4Q$4CIHQj9R-+rrFCww9+w1drymbIJymE$1bnvhCWOR7oYSY9a6S3L3MQ9ypwAqwnSZiROaQDfx9Qt3LWTF-LBR$dkouKOR7dKh9yK60By$STvd8KmK8145vTKtGJ43$vBrbie5Se0CcYsCCrmceTMJYgJYUNCSWKSEsYEesvMJKC7wHIgpYsyBUMjKQwwO+ACwpM41ieYlCJM$t7dIaO7F0cyQBtawE4S04kKLQwPCNWe$C+nE9Qwq5wL3THTCyaCpRjW3rIYYO4lUJCy9j75eQB4LCoOKIbSMbdfC5ScoY9jEsoQXYDQywE95tW4aL4NLUKI4e7YmQZv5QsymCYS4K7T7JQCUp9SfKWqTtJQdDBLl75MJG43JqyjC3Xa-9YtJQa4W27tg9cz40K5-BXWHNSwZ4dQmyfJdjm3yc7jQHC6cWe$JeYt+wxiS9EaEmKBCQ2fI+LO2wkIuKxQsy5IMw7QZvqaCZa+MWiOoTY4XtYB+rO7X1MY7mYmw$ejg0oIDODbpWoJ7Imv09I$QAQBN4IXtwwIx9xCH8-oIMQeTqEDwlDdTQnO0CY5J3OJ$OYmY4Kdepxe9j7OiIO4C9CO$$4O7YKBISSeJKSrRFHC$0a1utXdbJ3HYx61Lv9bNFgQF4II5BmywGeTxYFI4o$+Wm677B6It7kQGd3WXrKcQzC9Uwqpeoid3w8wbEOoNKrGK3mnLCQsCM1Hr0m4KT2o0yGyMd0mKM4wL-9Jyo7WTasIst69tBYieoeQIy0G9GcOl0Aac4fJXKYLBGive34zweQBK7sm4O+410Ov3FXswIHi4j0NBwAt5wN6KtjSdq3D7$OqYpILEqyoyj9aw7tQOKNea951$0C564QNCl9jvmzqeYIAqL20sIy47cEyoUdSLj73HwlIX199qy$a-xMH1Q5XL-tF5$-OtQuE8HMBI0d8e8IEyqyYb4Am8evQiypQuc4geMenya2QLGL7-euwyQEQ$GemtCYGF$EswXC-kO6KtHO77BkHSSuwY94RYZ91T5J3DJYKKatmWK7dTiEo7owEyMjuTcBX8CyauQatYYtdxR78T40eJ47EN7YKgCjbDjXLsJs+KKQZyetKtwweB4XTSoI-Wa4mG7ddY12M5EddWeJECLDwCCByeTi2JRaT97BEgYcONMIKnmnK+a3qOevtKfIUpuE7SsvsH2AqFWexc8FDayts7m+5IIJipLvlcEStp-RZvBYWYWaYKwh-AEcT62btIZaRlR0ITBacjKULFvLduyuYOK1bdsM8E0roYkBnsWDe6sRIoTB7iKcK97Yy90YsmBm$yai40LIYatXeyyKK7iAt3wkt+LeiDNcfSttH1p5TeaU197jT7C4yQ5DDSHLXJW$FwBJ7UwzePtTjB+T2-ZmkYiJde7tX1dEvNU2qQbpCC0r1erj87MykROxr0jnc0CHc-2YeY4+aIxl4bkWGX8d4XtDoktFgX9v51EyqSZRjBWT+LjKyigB3icv6d1Y4JZ9iMIaertQYEE1wjAMsw47l+NUhqqyKlmmYecEEzsOJMMWAY71p9EhevdT7w7j0EElLRrefmg+B2de+1IJ-a1DOhKLCpc3D8$vg6KQPw$9IbCfwwJIICCLwXRa$ORtdwe$Dqseayd2tfmjrQCxjL9O-eWaZwauesaaF0-ytbrJLaB7cKcM-kcthv44IqdB4lKvjLoav8qMymSY501FBoe7ee43C0Ka9tBeBKpOTKatZ9byXSxXY1Y8tTyec77TovFEiKJLEb9m7zep0zwfy$3I1YQmDJfUSRY3Afi9zdJqA-B5aA8$RTSKArQSLJ$w$58qYzwQvBoXrY1QDC-ra1YLMcdoK5yxraq6yXOgWbAJUw8KoykudRI1y96ntFy7nJBq0GUI6Sd$ulv4iRCWQqjbJM7tD+Ra-rpvFtXF3LtCy4tDHKA5FmKYDGsKhR9miN3oQf9-rzLyMX5Wz-XJFUWXj$oxWITxeA6uHd$YZw8vcKk$ucXA5ka8vjCSRrjZZeZ$Q4ALorfjZCWjO$DoGuvPWmUjLYIZQGTKoRMyeZ3dyJKbYxiHJKum0Cb4D6Y2nDeZmgzNJ+AESkooFmgcOCh1CrBU3uMSKTJLtgvO9YnaWi$Ju6et5e3zXLKKMB9Xdp$aKAgDFTh6UPE5WNXKS4JLOF6MnoFwLIwShBgvHC$F7k-aKWJ$7QSPtlvY-6D68v5XY8Iks74c6TvDJBNJhsRY$9SQj$aR4dQBM3Ma2cUH+UUJiC$LnUdCe2d$0dGjnqtoYQycJKqevbfjIIpnILS9vbOe7-+PhQN-Zwi24R4Qo+TzO$GwrqtoDd9Ct5KkJBBw$ESZMLIILmOn-H1rhXeN5TsLEI2$rcKFt-cBOH9g53+FEtq3-OrtWnoFw6I-KGKM7vQEqPRt00xOPIQ$NCc2pdreOxIymSKRFvE3pLWjIYL-psaY33eMoEnp6Ya5QM1i3w2$SBYOiaIntlInY51KMpIJXQftpA4Z3TeEJDLd7zA4SPLNQJUKiUB+FwSeSl36JnJBUMWB+Lx9wdzIPh-LRMzBysifjJTPRttrA0T6bsuc5+eR593R7zXEcHx$RQ2Jj7zbpckrFnOWBwBHJcrrRbDS33D6DJQUYBcwmQmpiiaqzF8BMYsKxwFvj$oNe$Elcbqk766SbQYCxGy6yw9tBSARtRYkKOTewW2cKNlBwOUpp5TvYG0$JHKvCHdoFwYpFpPOtSrRCP1yp-CucgKtm5SNoyC30tuABsY3Tr0MMicg7JebydmpCQ50qtCiE8wcNu3D6y253K-URQtLX9+R6iLXa4tcyj6ZMQouQX1TjMuQX7iMPxIoTOMtCCji6jf$etuYUw6ybppx4ASdmj$3v7eCbcnFRE$wRw4hRI4deRMNQXvS55TSi58YWrmbP9dL7bSTt-O9anH5Hzlpdr6cgbgLoHPPJOXAc$UBg++3AHD9NE6KtB4qdyGhwM0tacFbdRUYiM1HvHJ5H3$i-HYwgkRyiIa4k-vLQrZbzU57XlpkyDKuRf$HslLKu30ts2JASblTveMjgOHUCWFW97AY7gTbG$CFw8prJTp$jApLZFTyXbMtg2jlHNm+vXbJgZb0C4Nw3S6zU6QHfA5Bbpp+bTBvDPlwvP-ScK9iEbfAjjc-NTG0gv2RswUz--LRLEiJ6oL5bmCWJTpcHhpkRPPGaw4gFKoOOqbX5-GJO$HJnSx7p5Bbxgk29$wXJXpWGOK321fEn9hvfM3gv7xnStSYFuGloRaylHKRNS6zCO17n48KbF5CHWJMDcpHKP2pMb1O$Cm1oDby5Mz2Xa1wgeHbTsOb9607cpHCRFIjBjgi7tkNEcvLtHdOOq-Xjyzy1xwUOzjcprybHq2MXJh7Zj9BWk5KMEO8dRErEceUq47g9t5EC0bXSM3bpBsiEaYADGJXAXZbzE+9cFOMzfOS5ElaLAhwJ8jYDDb+kLA+-iJjgfI1aIMAIDc3-jFdAGHePPpS8Ki5dh4LeRCUv8Kij7gGHePC1o8Ci1d-XuezBYyHTpJa13rDi6F3Iugsab3+vlI1L8aiibIcLUPJ5cHatzbTXN8mb543FX-ai3X$Pk5OHJL$JGHSblMxB0+XuaJr+A9jUOzGie4Lz8p9AN1MCST5vraDT9tt8+iQJ9zEcPUpSKXip5Zro1AZO4HElXaszHy4DgXHJL35D6+ibLcsKW0nbDCO0esexIXlA1x2Q5Wd423JjxsrtmmlBKkmTlN$pntddN4xKDEmw4lLLCt4mQatlyBcCsA2cxIlRqyk7iRKoI7KTngZ3SCPMUY5EKm87meScl2F5ClU41G3LsbY1yIqgutkZE49O5xIoUNC3Mma$+YAYrv9taKKKF97kkYFCe0YwK2YXtc7UqX8Xu8sQICfqYYecK1axYgeJvrBW$sBKZr8tF$xE40d+KaS2gKKKt54LYqK$w$Y3j7UYoEWK16j1BO1jmgEbwLygjCIFA4E7iwOSJ0mA7pUgTgknKEKmRey77DKKOWqOPKKYMaNjzcq4XO5bJLayMydCQ5ZZYLKwiF3zHKMD7kYA9xj89kgS4EKtAZew39W7dDKKxw39kgymyf7yMWL3zptyYvKT9Cxo8RO1hcvLXKK-jMeyKFQRfUoyNrw-dKDCOtY$DKw-RXg5DWJmKuA$es+YcZUKreGC3fc2YDrlbJL8CKKO9MCMCcNL7c14KzXy8ogtmxAD7qY+wWoDoWxP$4mQbKCvmtw7Rq7tC27wq8HuCB1eJQGCJMMhYZUBatCzw8q-J4Ds+KMQwyZobIMQ43ipOpLY919oW5I4F+C6xBX04pYzTmt$gY$lye1FgIZDP$awSKAHYmgvDMkp$17mkEU4dYGC6y8h549FUutafsK+WN0eC77ZBKRKaKBtdt7CYeK1vKB4+MyygE8wU$hK77v6UT+G0iw17B7SWMeTamvCM1Wj7DtDY5KoYsKJK7Bi2KE2p9XtgDlMTSF2Kp9jLobRUIwJUYJLKKBCzDB79edZaNi8+sQjkrEC-j+cj7KFMkWtK-okMMTlDbK+eYq3KekY1YqKBtdNCR7YO0wzCIB7CmqtAKKYuHy1KK"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 10 Dec 2025 07:31:50 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\npriority: u=3,i=?0\r\ncf-ray: 9abb0b827fceb51e-OSL\r\ncf-chl-out-s: kayD3db1TZT12FeSxvih2w==$K1wnSvvJGkUlVr1/xoJE4A==\r\nset-cookie: cf_clearance=J1913KQ5li9nyQWScJs37dc43qcDBKnXWtajwXTekg8-1765351910-1.2.1.1-QrtKdK1SsCgjDOxA1JvqozYbj186Hvdgs_.k58WeHdD6pCImEtT2ctpiAK0o3sjAnMmcqo9KDn0GxA88szrmHe3bOwzmSoI1NZKFTNjPgOsHuembAH3xbepKcU3cuCvvKDfxS7q9NKtbDdtjW4zbQPdc1UyiXNTyCUfX77bkWK2jBuGS_2p5Ei7v0whLi5zpV8G.7cneaqzokZMxgxGpdr0BY3G8J94dLOBZDyldAvU; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=bigwarp.pro; Expires=Thu, 10 Dec 2026 07:31:50 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vWWDb%2FwvjGWlBxQUTXZ%2BL1RCJ3nPN1O0Y7Uq1eEnbNhEglff7DBKBv4xWZ3VwBB7x%2FxZR8AOQo9%2FBrKcaTleHs%2Fli4Pi5z4ZVHw%2BiSXCwL%2Bd8Nk7g%2B%2Fna4BW%2F4M9%2BQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1530\u0026min_rtt=485\u0026rtt_var=912\u0026sent=214\u0026recv=47\u0026lost=0\u0026retrans=0\u0026sent_bytes=209440\u0026recv_bytes=17727\u0026delivery_rate=23495780\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=44104\u0026ss_exit_bw=23495780\u0026ss_exit_reason=2\u0026cwnd=29548\u0026unsent_bytes=0\u0026cid=d7cc3f964aa2f76a\u0026ts=1754\u0026inflight_dur=77\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-10T15:28:23.863744Z","times_seen":14959050,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/wp-content/themes/enjoyvideo/responsive.css?ver=20250901","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:46.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixi-xxx.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 20:33:30 GMT","end":"Tue, 03 Mar 2026 21:32:18 GMT"},"fingerprint":{"sha1":"6A:8E:97:84:9C:68:1C:03:B1:76:77:EB:8D:33:03:59:DF:49:D5:B5","sha256":"1B:4D:60:C6:3A:CF:33:26:E6:FF:09:97:37:E5:6D:06:35:38:67:2C:BE:1F:85:F6:35:55:C7:F6:0C:03:D4:ED"}}},"request":{"raw":"GET /wp-content/themes/enjoyvideo/responsive.css?ver=20250901 HTTP/1.1\r\nHost: mixi-xxx.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/scvp-16676/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Dec 2025 07:31:47 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Wed, 01 Oct 2025 14:18:52 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"68dd384c-1bfa\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ioVn8FZ0b0aM2gqGsN5toivX6t22Ji3UIZwbr%2FpLtk98E4q%2F6%2FQ1VkXeoy57IbQpftdposNx2mzMPbclxV5YVOIHHAbtabISMjno\"}]}\r\ncf-ray: 9abb0b698ea932fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7162,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"31bf46c7e7b9eb32fa62bf3c09f9a064","sha1":"f96452e6dcdbd3b98f942e020d98140d5a79840a","sha256":"8c8593ce1d36bafad524fbfeeacc248c786aa5f50b999ffbf8731790a4a82f26","sha512":"01ca7bfbc837cf8465af64b5a0a629e7a326409d90cdcecf99d0558198b7d5996b6578dbf9324a4542d8bb19907b2a60e8c19d0773aba50c5728afe6142650b4","ssdeep":"192:sUYuIIgPIuf8Ze5tL/yRnYn1LJcMt0reh535mRtsydNN8jJhMrEL9FX9e9QV60pe:kIZ+cglRIRihaEJzWQwsevh","tlshash":"e1e1f49789f2215875b262775deeb1063366404bd28e6de53e4ca705cfcc7d480a23ad","first_seen":"2023-05-22T06:31:11Z","last_seen":"2026-05-02T13:32:01.140207Z","times_seen":89,"resource_available":false,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":604,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tp.larvaelimans.com/sjw6GZLT2AQN/117158","fqdn":"tp.larvaelimans.com","domain":"larvaelimans.com","tld":"com"},"ip":{"addr":"172.241.53.110","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:49.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tp.larvaelimans.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Oct 2025 07:05:00 GMT","end":"Wed, 14 Jan 2026 07:04:59 GMT"},"fingerprint":{"sha1":"6E:43:66:6D:24:7A:9B:8D:92:94:2E:84:5D:11:BD:13:25:C4:E7:C4","sha256":"7D:A6:21:C2:0B:08:AA:85:8A:6C:48:C3:0B:C0:B3:A6:F5:8E:12:50:4D:E3:2B:57:7F:0F:B2:58:9F:88:CB:56"}}},"request":{"raw":"GET /sjw6GZLT2AQN/117158 HTTP/1.1\r\nHost: tp.larvaelimans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigwarp.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 10 Dec 2025 07:31:49 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 5\r\nvary: Origin\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, GYFR29QT4J80VDR0ZHSJ, X-Forwarded-For, X-Requested-With, Cache-Control, Pragma, Expires, Credentials\r\naccess-control-allow-methods: GET, HEAD, POST, PUT, OPTIONS\r\naccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\nset-cookie: GGI10=GxcBAMSqOZXNrP4QnWwrgcaH4b5A6y0/1PiH25A+GkV0m0DynlShsXnVevVt1LjDE/mL/H+QIdDMIISmFhqaY2mm60CgKiYQjid1T4aH90ptIEBgjAmCYTun6In7SdkZ/l1fG/nuQLv2iQS5oRYarifPaaxApqH5TugINDyVc9M3L+U29ffDZhgCYyEjHhoIW6Rd3932KDHRvE6vN+imiAjgIqZjRFQBme0ayaZYbfCcDNHvCwt9wSXjT1yHcJf/Hw==; max-age=3600000; path=/; secure; SameSite=None\nGUI42=G1EDAGRzTeWjR7p6Qu3mU4YH9Pm/d8f/s18Bwh2ttYAWSICBJJLv1p7hISgwsLmvbx6l1gny/4B8HjAzIAA9j+CKoejWQE7Q1BwPyagP3EDzrQkKAFxCMsFpubg+UtqnIlX8zN9T+7IO1X2MMktWiYNbyuVNiRJnf7wfUIbm+H7AEgzQyUwzPGiPsMTAVKsDJfFwD4xfforJPYXioCIf2lWxUYhhKoQ7HRcZYY50oYzyqxv9qsGaDbWD1wCyt75hKpW3uB8gHqUhyEoTSk1RxkUr1lwWVmkJtMRDLDKRhK6JKZeSpVJNYZhr9NBIY1zkqp1pIcXRmpOuXZbnZmrK1GQprh3FhAWw37LLQmbTCH66VE33X9bD3yqgSeP7AeXr1OsuO6qcJayqp9VMtT1A/4JTwT1AkJZzjPhTkAfWGyG/j8JzziRG0P/cNw==; max-age=3600000; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"f7a2939527fd9e68723da600e96d76bd","sha1":"a9e717b6364d2895ee0a716050db32ca0ef1bb42","sha256":"d810f5146f4cd1517512a6e31946e764a73c58fb01427aae88d42cc2ae28718a","sha512":"e6956ec633c76eb3ebc408528f950b81373238cd1d5b9fff5ddd97089ea14a1ff5934f23769bac5d93cc4cdb6a1fbc4ce69baebfb940a55d8a7a89caccaf92b5","ssdeep":"","tlshash":"ec300000003000000000000000000000000c0000000000000000000000000c00000000","first_seen":"2023-03-07T01:14:39Z","last_seen":"2026-05-10T14:28:41.257977Z","times_seen":14368,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":69,"connect":17,"send":0,"wait":20,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"tp.larvaelimans.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bz.cathbermes.com/rCWKNFBsNT7t/127524","fqdn":"bz.cathbermes.com","domain":"cathbermes.com","tld":"com"},"ip":{"addr":"172.255.106.117","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:50.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bz.cathbermes.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 08:08:02 GMT","end":"Fri, 06 Feb 2026 08:08:01 GMT"},"fingerprint":{"sha1":"01:D0:CE:74:A7:EC:23:37:34:A7:ED:B2:E8:34:03:86:3C:B6:EB:26","sha256":"EC:BD:32:39:51:56:9E:E6:6A:1F:6E:38:F0:0C:10:6C:E1:44:34:D5:CF:48:67:E8:3A:AC:E8:AF:19:FA:84:E4"}}},"request":{"raw":"GET /rCWKNFBsNT7t/127524 HTTP/1.1\r\nHost: bz.cathbermes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigwarp.pro/\r\nCookie: GL_UI4=eJw9jc1OhDAcB%2FkGddnkl%2FAA%2BwgtUtKrF1%2FBI2npn7UKdFMqq28v8eBtDjOZKIqSpka8FyekX0rgwrnsZSdaybpRqlZr2feCaSEZb8U0CTzYbQhKzxQyVNuifBjCniHXXq2mRr44Q3ONUnt338g3KbJVLYTy1Xqa3PdhqA%2FnkfLn7mC7HhwzJG5r0nOF8s2u5ijPj0g4O5%2BKCE%2B3WYXJ%2BWWwpoiRX70yhPgF1agCXZ3%2FQWlo%2BwzuBrjZDP%2F%2B3zi9c4bC0G5HQu7CO%2FlfoWNCFg%3D%3D; GL_GI10=eJxjYGBgEuEXZMosEOSxNNSzNNAzMdIzNDURZEwXZPLzF2RKzhNk88svKk%2BsFGQsEmQyMBZkKsoT5PYvzslXcM4vzSsBiicLsoD4goyZgnxOOZkVCsH5OaUlmfl5xYJMQMzpnJiUk6rvEuwjyFjAxijIVJIPIotTRBgEGcvYJASZchJ5HHw%2Fv9qcvuAnkJPP46BavzE63G61IFNBsSCLgaGpIQCHOyne\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 10 Dec 2025 07:31:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://bigwarp.pro\r\naccess-control-allow-headers: content-type, gyfr29qt4j80vdr0zhsj, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\naccess-control-max-age: 600\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-05-10T14:56:37.606452Z","times_seen":16216,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"bz.cathbermes.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"bz.cathbermes.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fs49.bigwarp.io/v/02/00478/bwav74u6ycpx_x/x.mp4?t=8DBqOrDzhfvNjrK-tFF_0Tkud8j2omMxWwvrMDE_rtE\u0026s=1765351908\u0026e=43200\u0026f=2393291\u0026sp=1000\u0026i=0.0\u0026kmnr=619272091231","fqdn":"fs49.bigwarp.io","domain":"bigwarp.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:59.027Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /v/02/00478/bwav74u6ycpx_x/x.mp4?t=8DBqOrDzhfvNjrK-tFF_0Tkud8j2omMxWwvrMDE_rtE\u0026s=1765351908\u0026e=43200\u0026f=2393291\u0026sp=1000\u0026i=0.0\u0026kmnr=619272091231 HTTP/1.1\r\nHost: fs49.bigwarp.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigwarp.pro/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-10T15:28:23.863744Z","times_seen":14959050,"resource_available":true,"data":null}},"time_used":3066,"timings":{"blocked":3066,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigwarp.io/embed-bwav74u6ycpx.html","fqdn":"bigwarp.io","domain":"bigwarp.io","tld":"io"},"ip":{"addr":"104.21.42.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:48.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigwarp.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Oct 2025 00:20:18 GMT","end":"Fri, 16 Jan 2026 01:18:50 GMT"},"fingerprint":{"sha1":"E7:09:31:BA:9F:81:58:4E:D5:D9:E0:D3:5D:F4:CD:B8:A5:53:35:B5","sha256":"1D:A3:BB:45:C3:C2:38:AD:EA:AD:A3:08:0C:4E:1F:90:2C:A1:BE:46:5F:C6:10:E3:9F:7F:BC:3D:88:C7:D8:7D"}}},"request":{"raw":"GET /embed-bwav74u6ycpx.html HTTP/1.1\r\nHost: bigwarp.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 10 Dec 2025 07:31:48 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nlocation: https://bigwarp.pro/embed-bwav74u6ycpx.html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jSe93FaBJ2KYeGVYn7IHsOEcRvR3w01luTTyroOyGnupr4MtTyqYcyEDdv3npzXcS%2FFLv2%2BXsS4kpM51el66pLw%2FcqEwT9Eq\"}]}\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=7,cfOrigin;dur=93\r\ncf-ray: 9abb0b739add56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20018,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-10T15:28:23.863744Z","times_seen":14959050,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":49,"dns":6,"connect":1,"send":0,"wait":119,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re:2087/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":2087,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:48.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mixi-xxx.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 10 Dec 2025 07:31:48 GMT\r\nContent-Type: text/plain;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type\r\nAccess-Control-Allow-Origin: https://mixi-xxx.cc\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: private, max-age=300, immutable, stale-if-error=300, stale-while-revalidate=300\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":1,"connect":26,"send":0,"wait":27,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigwarp.pro/css/main.css","fqdn":"bigwarp.pro","domain":"bigwarp.pro","tld":"pro"},"ip":{"addr":"104.20.31.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:49.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigwarp.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 08:27:21 GMT","end":"Mon, 26 Jan 2026 09:27:18 GMT"},"fingerprint":{"sha1":"17:79:A5:FB:EC:0B:49:9E:F8:3C:AB:6E:89:64:6D:8F:9B:27:6A:B0","sha256":"86:76:E7:CF:22:9F:64:CB:DD:E9:EE:53:92:5F:03:15:85:69:0B:6B:AE:26:84:29:24:FC:90:44:80:CD:24:44"}}},"request":{"raw":"GET /css/main.css HTTP/1.1\r\nHost: bigwarp.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigwarp.pro/embed-bwav74u6ycpx.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 10 Dec 2025 07:31:49 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Nov 2025 15:05:59 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=avfotBwXjwv8MnxxbfyIyrRS2dM0EspQmWFe%2BVMQrqnrZE30G%2BTipwrkIZ%2FsUvz4lPc7MbnxhR%2FSCac%2Fmz7JafggxT8y6NHr4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\nage: 6202\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"c830-642ee671a39d2\"\r\ncf-ray: 9abb0b7a3f7ab51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51248,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"d2523051d95cce014ae78b6a4e2fef82","sha1":"dc5779d1dd71d72e841a4759feb9cde9863fda3b","sha256":"00da287bafa670bb1b982b502e72830649c4ed5eab5389046454d6dd921b505b","sha512":"905dab65e7683984118f51b5f3897a0535a2410cfab3225d1cef28b47f1af0f62cedc10555d129a5a770cf73e907e394fcbb2e06e019b722339cda5ace100eab","ssdeep":"768:tiixrQZWj7hG0cjz3mJXiHNpng1smQdzERnMnVh3u2FpxbjLxlAPuN3qU:jYahqltpQ3KVV3FXLx6PuN3qU","tlshash":"6f33b7285681280db127d5a6bbb247d26f3f0043de13177c7af932b0c28e4b966736d9","first_seen":"2025-11-09T23:39:34.363489Z","last_seen":"2026-05-08T12:37:26.699478Z","times_seen":134,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigwarp.pro/js/localstorage-slim.js","fqdn":"bigwarp.pro","domain":"bigwarp.pro","tld":"pro"},"ip":{"addr":"104.20.31.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:49.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigwarp.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 08:27:21 GMT","end":"Mon, 26 Jan 2026 09:27:18 GMT"},"fingerprint":{"sha1":"17:79:A5:FB:EC:0B:49:9E:F8:3C:AB:6E:89:64:6D:8F:9B:27:6A:B0","sha256":"86:76:E7:CF:22:9F:64:CB:DD:E9:EE:53:92:5F:03:15:85:69:0B:6B:AE:26:84:29:24:FC:90:44:80:CD:24:44"}}},"request":{"raw":"GET /js/localstorage-slim.js HTTP/1.1\r\nHost: bigwarp.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigwarp.pro/embed-bwav74u6ycpx.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 10 Dec 2025 07:31:49 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Nov 2021 12:32:06 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8L7PDOk0aT53RZE7B6rXmh1iFWc75bGTDUUpujdpbZ0VtAcKWgNMZbBtWNoOEzCBwKir%2FRaKC06Y1cyMCJj18eWKd9yuRhADmg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\nage: 3579\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"810-5d0e71cfe3d80\"\r\ncf-ray: 9abb0b7a3f7eb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2064,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2063)","md5":"ba6facacb00551830393d637195804cf","sha1":"77d2d2802ee44767b33a2d679945cc3efa3619cc","sha256":"41bb37c8133d8e5c128820cfbe03bcbf63ce256bcbd60a1a76143472d8668e38","sha512":"90aa07250eb414ec22765ab6922f593ed3186faecc02008f0331c3e3807cace76861e01028142015308341e955f151b609d08b7d354ff2d27e0ff04ebfde81f9","ssdeep":"","tlshash":"ea41118275e1d9904be004e728b0c002e638992e705d62d0f7b7dd827c9909bcfb57fa","first_seen":"2023-03-07T15:52:27Z","last_seen":"2026-05-08T12:37:26.769718Z","times_seen":1502,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/asg_embed.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"104.20.34.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:50.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tapioni.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 14:57:20 GMT","end":"Fri, 13 Feb 2026 15:57:18 GMT"},"fingerprint":{"sha1":"80:2D:1E:ED:7E:27:75:C8:26:5C:5A:67:67:AE:0B:64:50:E0:CB:35","sha256":"12:CD:2F:65:36:49:D1:F0:8F:A7:6A:68:FF:9C:96:CC:70:D2:75:FE:A5:51:07:CC:D0:AA:5A:75:18:DC:8D:61"}}},"request":{"raw":"GET /asg_embed.js HTTP/1.1\r\nHost: cdn.tapioni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigwarp.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 10 Dec 2025 07:31:50 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 76865\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Dec 2025 08:07:09 GMT\r\nvary: Accept-Encoding\r\netag: \"6936872d-12c41\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\nage: 170613\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9abb0b7ead0856c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":244498,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65503), with no line terminators","md5":"4f0a82fbd63fbb0a63fc0b63f10e4d24","sha1":"bba21d386a205912e3494a9ce01491705a4f0891","sha256":"99f4e73147b4bab2e58e29abd8a4d7e142415cb28127306f13b03b18c42d1036","sha512":"76d23241f93a81fc0e56bd6073efd69793fbf254c41ec08415195010ea1b177d6c3e0aae35d8a12367dbf09f954110ebc9604429712b3985f3877c2e2b5b812d","ssdeep":"6144:e8dOGlEQZSQHYqm3+tQfITULVvzsbzOtzLb7cHsh2w5k/AScMS2Sc2S/NSKSMS/L:fE2SQK3LtCS","tlshash":"0234c789b6c1b0b403e3a1b4052f551af237b944744ec5c1f729d9d1aeb9a0e9a27f3c","first_seen":"2025-12-08T11:35:25.895114Z","last_seen":"2025-12-23T01:59:50.455379Z","times_seen":143,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"cdn.tapioni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjyqrWg6SaRHdWRSJcvo67k8djeP8xQhoDL1TTcuU8apcrpGftAuGHKs9bqfdI4DH9HuvGWNU_89-eIUDt6sDKKWOI7wBQEVTiKTtiMeRwAJ3z6GAiwzKCR5RfuQenliTocfffFdeofPy11q-Y7Sp1X4Gm2VDXdQ-CTKXu66ihjbqE65wAJc5sjf-it07s/s1600/noni69.cc_mixixxx.jpg","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:48.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:52 GMT","end":"Mon, 19 Jan 2026 08:34:51 GMT"},"fingerprint":{"sha1":"78:8A:5B:0C:2B:DC:80:4C:4F:7E:75:57:5F:1F:D8:1E:89:DB:5F:13","sha256":"0E:24:41:60:9C:A8:84:DB:2A:59:E6:FB:EE:1C:E0:65:20:30:99:CA:03:50:4D:01:A9:B4:21:D9:CE:FD:8E:51"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEjyqrWg6SaRHdWRSJcvo67k8djeP8xQhoDL1TTcuU8apcrpGftAuGHKs9bqfdI4DH9HuvGWNU_89-eIUDt6sDKKWOI7wBQEVTiKTtiMeRwAJ3z6GAiwzKCR5RfuQenliTocfffFdeofPy11q-Y7Sp1X4Gm2VDXdQ-CTKXu66ihjbqE65wAJc5sjf-it07s/s1600/noni69.cc_mixixxx.jpg HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v6dfd\"\r\nexpires: Thu, 11 Dec 2025 07:31:49 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"noni69.cc_mixixxx.jpg\"\r\nx-content-type-options: nosniff\r\ndate: Wed, 10 Dec 2025 07:31:49 GMT\r\nserver: fife\r\ncontent-length: 15347\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15347,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 720x405, components 3","md5":"47b0a6965918568835c90e394e2e9425","sha1":"14153fe8575976c66796b7dcf24b58ed640e0c76","sha256":"daeef0650803e227f781a8c29d077b42b7ec9e809b39db0def3c2958e5d4acfa","sha512":"af87e3389e0a0b6f2f48d9e7f6ce8e71b8546f94fbf2f5aea9b714f85ae8103df8c8a42aa9b2bc0c01b8cf34342b7fa91696febdc8b4655294931da43caad6e3","ssdeep":"384:SQtzHFfwi11nmM6DwPQ5zboMJsih0Nwf2dkj83MeO:SQ5x49EQpkdih2wQ3MeO","tlshash":"6f62df80b1e2e20edabb1431b0136041a3667779cf187a4b5fc7b760638dd96f989c88","first_seen":"2025-12-10T07:32:23.029362Z","last_seen":"2026-01-01T07:35:32.317545Z","times_seen":2,"resource_available":false,"data":null}},"time_used":817,"timings":{"blocked":78,"dns":41,"connect":8,"send":0,"wait":606,"receive":2,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmmPIyb9RZ_VvRTPSaVyCVZTj9IcX0bm6J1kamX6vMN2f840-bfcnL4YpeWFpNaWuD3-VIvYNjD3nd6FEBZAM1lSGbp1nk7uybdEs6Yii3RACNmbfcHBSjwXZOkNYvagxBiPIqJ-URuIwqPAb6qFYkcVJb4Ewyc9pSqA3R4AS4NbTJDS8YdE7gtpEll58/s1600/noni69.cc_mixixxx.jpg","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:48.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:52 GMT","end":"Mon, 19 Jan 2026 08:34:51 GMT"},"fingerprint":{"sha1":"78:8A:5B:0C:2B:DC:80:4C:4F:7E:75:57:5F:1F:D8:1E:89:DB:5F:13","sha256":"0E:24:41:60:9C:A8:84:DB:2A:59:E6:FB:EE:1C:E0:65:20:30:99:CA:03:50:4D:01:A9:B4:21:D9:CE:FD:8E:51"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEgmmPIyb9RZ_VvRTPSaVyCVZTj9IcX0bm6J1kamX6vMN2f840-bfcnL4YpeWFpNaWuD3-VIvYNjD3nd6FEBZAM1lSGbp1nk7uybdEs6Yii3RACNmbfcHBSjwXZOkNYvagxBiPIqJ-URuIwqPAb6qFYkcVJb4Ewyc9pSqA3R4AS4NbTJDS8YdE7gtpEll58/s1600/noni69.cc_mixixxx.jpg HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v7d8f\"\r\nexpires: Thu, 11 Dec 2025 07:31:48 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"noni69.cc_mixixxx.jpg\"\r\nx-content-type-options: nosniff\r\ndate: Wed, 10 Dec 2025 07:31:48 GMT\r\nserver: fife\r\ncontent-length: 14117\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14117,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 720x405, components 3","md5":"c4ecb31203f59b5ce440dc6df1d5ac44","sha1":"d989e3349814f0b0478e03eb7220c4ac69b2a14d","sha256":"cbb47d0966af3f631c0fc093821bb3ca80e439063b818a14b1aef4aa6534fe25","sha512":"97aefeb6ae98bdf6b458c10fa1999f10b9f4cf0cc152b196af394ad4bddc1b1749b211f862a4b3b94191f92c3c6118618975643bb6f6e9fa7cc48bf36c2da6a1","ssdeep":"192:F2nbcNUr3FXPH0ZEwb/e9+lJaGg0diNPAeEmfA1cYgXy5mJCO3GvZsfTFwPYwUgS:InYMFfH0G+DQ0OPAq+EJb3GMwAGLk","tlshash":"eb52af93b14ffc03e6167cb0d8c394ad59e23665a608d72da1b9aa281594f33afdb010","first_seen":"2025-12-10T07:32:23.030562Z","last_seen":"2026-01-11T15:28:40.540288Z","times_seen":3,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":64,"dns":0,"connect":0,"send":0,"wait":232,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mixi-xxx.cc/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"mixi-xxx.cc","domain":"mixi-xxx.cc","tld":"cc"},"ip":{"addr":"104.21.65.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:48.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mixi-xxx.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 20:33:30 GMT","end":"Tue, 03 Mar 2026 21:32:18 GMT"},"fingerprint":{"sha1":"6A:8E:97:84:9C:68:1C:03:B1:76:77:EB:8D:33:03:59:DF:49:D5:B5","sha256":"1B:4D:60:C6:3A:CF:33:26:E6:FF:09:97:37:E5:6D:06:35:38:67:2C:BE:1F:85:F6:35:55:C7:F6:0C:03:D4:ED"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9 HTTP/1.1\r\nHost: mixi-xxx.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/scvp-16676/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Dec 2025 07:31:49 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Fri, 07 Nov 2025 09:44:34 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"690dbf82-58ea\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C%2FMc5b4qz9HD4%2F4BCXvHG4DT7Zq2F8Gx6vsPg0kD4vyP%2Ft1l%2BAV5byIgWMIyf0fcFqMIM1M88Rmxl3tW%2BFo11WtZgDTPAdnEtIM%2F\"}]}\r\ncf-ray: 9abb0b739ffe32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-05-10T15:28:54.099181Z","times_seen":207405,"resource_available":true,"data":null}},"time_used":648,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":643,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/#0.03205958990146918","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.84.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:49.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: c.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 10 Dec 2025 07:31:49 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\ncache-control: public, max-age=86400, immutable, stale-if-error=604800, stale-while-revalidate=604800\r\nexpires: Mon, 08 Dec 2025 18:17:09 GMT\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Form-Factors,Device-Memory,Downlink,ECT,RTT,Width,Viewport-Width,DPR\r\ncritical-ch: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Form-Factors,Device-Memory,Downlink,ECT,RTT,Width,Viewport-Width,DPR\r\nlink: \u003c//adsco.re/\u003e;rel=preconnect;crossorigin,\u003chttps://4.adsco.re/\u003e;rel=preload;as=fetch;crossorigin,\u003chttps://6.adsco.re/\u003e;rel=preload;as=fetch;crossorigin,\u003chttps://4.adsco.re:2087/\u003e;rel=preload;as=fetch;crossorigin,\u003chttps://6.adsco.re:2087/\u003e;rel=preload;as=fetch;crossorigin\r\ntiming-allow-origin: *\r\netag: W/\"5jHmpo+W6Zw1l4/IU1UbBg==\"\r\nvary: accept-encoding\r\nage: 220479\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9abb0b778dbeb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72195,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (801)","md5":"e631e6a68f96e99c35978fc853551b06","sha1":"3e747abc384626603f4d2d5471e727e7ca04587e","sha256":"89e23d828006d1a89eaa2fbdab09b4a1d883743d952e01695466c911939fc57f","sha512":"d51b63998dcb5b752f56430e6e2d23ed60634a0edce837ef789dd624a912154c07d4f687df8d979fca25857e6b309bfd7d061c7c9f8afc95a993ebaaf6ca6b4e","ssdeep":"1536:qbgVeLXMom2/plSehiptxsqnzE97DV3mf/61:qbgVeLXMBa3qzaDOC1","tlshash":"16634a793550b03802b120f9617f9309f2fd4ea22a459491a779d6903d78eabc33ff5a","first_seen":"2025-12-07T18:37:40.561303Z","last_seen":"2025-12-12T10:48:51.09255Z","times_seen":158,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fs49.bigwarp.io/i/02/00478/bwav74u6ycpx.jpg","fqdn":"fs49.bigwarp.io","domain":"bigwarp.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:49.500Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /i/02/00478/bwav74u6ycpx.jpg HTTP/1.1\r\nHost: fs49.bigwarp.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigwarp.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-10T15:28:23.863744Z","times_seen":14959050,"resource_available":true,"data":null}},"time_used":3313,"timings":{"blocked":3313,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/asg_embed.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"104.20.34.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:50.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tapioni.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 14:57:20 GMT","end":"Fri, 13 Feb 2026 15:57:18 GMT"},"fingerprint":{"sha1":"80:2D:1E:ED:7E:27:75:C8:26:5C:5A:67:67:AE:0B:64:50:E0:CB:35","sha256":"12:CD:2F:65:36:49:D1:F0:8F:A7:6A:68:FF:9C:96:CC:70:D2:75:FE:A5:51:07:CC:D0:AA:5A:75:18:DC:8D:61"}}},"request":{"raw":"GET /asg_embed.js HTTP/1.1\r\nHost: cdn.tapioni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigwarp.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 10 Dec 2025 07:31:50 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 76865\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Dec 2025 08:07:09 GMT\r\nvary: Accept-Encoding\r\netag: \"6936872d-12c41\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\nage: 170614\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: 9abb0b7ffe9656c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":244498,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65503), with no line terminators","md5":"4f0a82fbd63fbb0a63fc0b63f10e4d24","sha1":"bba21d386a205912e3494a9ce01491705a4f0891","sha256":"99f4e73147b4bab2e58e29abd8a4d7e142415cb28127306f13b03b18c42d1036","sha512":"76d23241f93a81fc0e56bd6073efd69793fbf254c41ec08415195010ea1b177d6c3e0aae35d8a12367dbf09f954110ebc9604429712b3985f3877c2e2b5b812d","ssdeep":"6144:e8dOGlEQZSQHYqm3+tQfITULVvzsbzOtzLb7cHsh2w5k/AScMS2Sc2S/NSKSMS/L:fE2SQK3LtCS","tlshash":"0234c789b6c1b0b403e3a1b4052f551af237b944744ec5c1f729d9d1aeb9a0e9a27f3c","first_seen":"2025-12-08T11:35:25.895114Z","last_seen":"2025-12-23T01:59:50.455379Z","times_seen":143,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"cdn.tapioni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teapotloquat.com/gn8TyyYXUvbr/127526","fqdn":"teapotloquat.com","domain":"teapotloquat.com","tld":"com"},"ip":{"addr":"172.241.53.164","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:50.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teapotloquat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 08:02:49 GMT","end":"Fri, 06 Feb 2026 08:02:48 GMT"},"fingerprint":{"sha1":"17:7D:F9:A8:6D:15:E0:66:FE:BF:52:93:D3:02:74:C0:72:FF:9D:AE","sha256":"3D:85:76:09:86:EC:70:B6:30:CA:06:FB:BF:01:0E:69:F1:91:E0:4A:83:C5:DC:10:7B:04:F1:C4:AC:FC:68:B0"}}},"request":{"raw":"GET /gn8TyyYXUvbr/127526 HTTP/1.1\r\nHost: teapotloquat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigwarp.pro/\r\nCookie: GL_UI4=eJw9jc1OhDAcB%2FkGddnkl%2FAA%2BwgtUtKrF1%2FBI2npn7UKdFMqq28v8eBtDjOZKIqSpka8FyekX0rgwrnsZSdaybpRqlZr2feCaSEZb8U0CTzYbQhKzxQyVNuifBjCniHXXq2mRr44Q3ONUnt338g3KbJVLYTy1Xqa3PdhqA%2FnkfLn7mC7HhwzJG5r0nOF8s2u5ijPj0g4O5%2BKCE%2B3WYXJ%2BWWwpoiRX70yhPgF1agCXZ3%2FQWlo%2BwzuBrjZDP%2F%2B3zi9c4bC0G5HQu7CO%2FlfoWNCFg%3D%3D; GL_GI10=eJxjYGBgEuEXZMosEOSxNNSzNNAzMdIzNDURZEwXZPLzF2RKzhNk88svKk%2BsFGQsEmQyMBZkKsoT5PYvzslXcM4vzSsBiicLsoD4goyZgnxOOZkVCsH5OaUlmfl5xYJMQMzpnJiUk6rvEuwjyFjAxijIVJIPIotTRBgEGcvYJASZchJ5HHw%2Fv9qcvuAnkJPP46BavzE63G61IFNBsSCLgaGpIQCHOyne\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 10 Dec 2025 07:31:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://bigwarp.pro\r\naccess-control-allow-headers: content-type, gyfr29qt4j80vdr0zhsj, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\naccess-control-max-age: 600\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"4fc71bf68a1d477bd1523733e34d1e90","sha1":"15119105cffbe108b6cf290146ab02c9aa8517ba","sha256":"74c1971a5c7f3f1cfb81b7a0a8717cee5a45841844104566e00bbfca271943ce","sha512":"e8e5f5430841f9cdaad492efce3fed11992913ad2b714b27c6fd147c55b2c56dc1b896635f24c2b180d4215c70ba9a042847d7d9cf3ff8a67b636a4c0ca1ce3d","ssdeep":"","tlshash":"f440000300000000cc300000300300000000000000000c00c000000000000000000000","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-05-10T08:35:39.033752Z","times_seen":10652,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"teapotloquat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"teapotloquat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgVnmS6PMVJqinG1ZtJqY7LVBdRs_mCy8arpQQJTqurk9V3zTqaSa56seCO8JvCnCLOLoPyLRVPqdZPPdaQpZ4VLFIxImxtOxnZFiOfscnv-LWdG6whT7zz3-ogAA-lGvfEQFeZeEfhkC0ZJG9mSWtLewYJhxZkmtlATVZk77D30Tzr4mBu-2MA4amKUffg/s1600/screenshot_1739489143.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mixi-xxx.cc/scvp-16676/","date":"2025-12-10T07:31:48.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:52 GMT","end":"Mon, 19 Jan 2026 08:34:51 GMT"},"fingerprint":{"sha1":"78:8A:5B:0C:2B:DC:80:4C:4F:7E:75:57:5F:1F:D8:1E:89:DB:5F:13","sha256":"0E:24:41:60:9C:A8:84:DB:2A:59:E6:FB:EE:1C:E0:65:20:30:99:CA:03:50:4D:01:A9:B4:21:D9:CE:FD:8E:51"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEgVnmS6PMVJqinG1ZtJqY7LVBdRs_mCy8arpQQJTqurk9V3zTqaSa56seCO8JvCnCLOLoPyLRVPqdZPPdaQpZ4VLFIxImxtOxnZFiOfscnv-LWdG6whT7zz3-ogAA-lGvfEQFeZeEfhkC0ZJG9mSWtLewYJhxZkmtlATVZk77D30Tzr4mBu-2MA4amKUffg/s1600/screenshot_1739489143.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mixi-xxx.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v7\"\r\nexpires: Thu, 11 Dec 2025 07:31:48 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"screenshot_1739489143.png\"\r\nx-content-type-options: nosniff\r\ndate: Wed, 10 Dec 2025 07:31:48 GMT\r\nserver: fife\r\ncontent-length: 471\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":471,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 292 x 318, 8-bit/color RGB, non-interlaced","md5":"9d6d2ed64233666e2fcad1336264f7e1","sha1":"f8c7c542e6a4ab4fc355d3f1facad210f021f57a","sha256":"5603d0b539baaddebf40474bddfb0a77a3365795349e353de71a502f7897543c","sha512":"1617313df39504327ec1cf79ba9daae945ba9d77ee5c036a1b1e5d4186351202cf2e2ef6db9d8b08aa05880b9a4ba0f526b71c329938734282271b0d1ef054aa","ssdeep":"","tlshash":"31f023c3fb4d4420d477d23401590650e235a3f527258ddb2115d2391cdb364d4b1581","first_seen":"2025-06-04T04:15:33.133706Z","last_seen":"2026-05-10T03:11:40.401563Z","times_seen":389,"resource_available":false,"data":null}},"time_used":461,"timings":{"blocked":73,"dns":44,"connect":7,"send":0,"wait":262,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bigwarp.pro/js/jquery.cookie.js","fqdn":"bigwarp.pro","domain":"bigwarp.pro","tld":"pro"},"ip":{"addr":"104.20.31.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:49.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bigwarp.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 08:27:21 GMT","end":"Mon, 26 Jan 2026 09:27:18 GMT"},"fingerprint":{"sha1":"17:79:A5:FB:EC:0B:49:9E:F8:3C:AB:6E:89:64:6D:8F:9B:27:6A:B0","sha256":"86:76:E7:CF:22:9F:64:CB:DD:E9:EE:53:92:5F:03:15:85:69:0B:6B:AE:26:84:29:24:FC:90:44:80:CD:24:44"}}},"request":{"raw":"GET /js/jquery.cookie.js HTTP/1.1\r\nHost: bigwarp.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigwarp.pro/embed-bwav74u6ycpx.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 10 Dec 2025 07:31:49 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 31 May 2011 10:53:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SVv%2FE5UmQhj6q5ZHvvPmDtVc%2FJhAXAU2HFZ5aFFbrFq9GCKEv44xNXt9RBjNzdubmrcSCS66an0La78W%2BgagjaOArFEuB9J71g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\nage: 6202\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"10eb-4a4903870b900\"\r\ncf-ray: 9abb0b7a3f7db51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4331,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"ae0c2c5d8f01f7d35bb698bb618a62f7","sha1":"63556a22ddea1c5f23a5cf7d0b6d35c7aab54e20","sha256":"75aef2e95ea7f3a70999396fba0c2ab866f4ff06313cf1b07780d800a5fc1ebc","sha512":"eac94ca9d884692af8bdf12aa6e902a3be4eed0772ad8f2932ac1c3328b83a7351cdf743a409bbc0a3cd385956c08d3203d51c572bb1680489e37330fe27a2bb","ssdeep":"96:L4BZxb64Ng7V8cNwpGylRCsKZcj1JXulL6M/aGByLskPSP4lBCClf1wgCyC:LQnb6eg7DgCsk8fgZJkPSPa+gCyC","tlshash":"2e91fd293a0d231d149353f57aee10c8a930d632216ad46c744cb6b06f00c63ddfbbea","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-05-10T13:36:24.028113Z","times_seen":4423,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zd.wainfulcaspian.com/rI2iBFSyFUxU/73840","fqdn":"zd.wainfulcaspian.com","domain":"wainfulcaspian.com","tld":"com"},"ip":{"addr":"172.255.106.213","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bigwarp.pro/embed-bwav74u6ycpx.html","date":"2025-12-10T07:31:49.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zd.wainfulcaspian.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 00:06:53 GMT","end":"Sat, 07 Feb 2026 00:06:52 GMT"},"fingerprint":{"sha1":"69:14:D6:5B:97:7B:23:F7:A1:5B:06:0B:B5:35:D2:4C:53:D1:A7:E5","sha256":"AC:EF:D4:A4:26:9C:03:AA:93:1C:D9:9A:AB:F7:90:57:06:E7:71:BB:2E:8C:C9:86:DC:44:1D:75:F0:E7:02:42"}}},"request":{"raw":"GET /rI2iBFSyFUxU/73840 HTTP/1.1\r\nHost: zd.wainfulcaspian.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bigwarp.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 10 Dec 2025 07:31:49 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://bigwarp.pro\r\naccess-control-allow-headers: content-type, gyfr29qt4j80vdr0zhsj, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\naccess-control-max-age: 600\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nset-cookie: GL_UI4=eJw9jc1OhDAcB%2FkGddnkl%2FAA%2BwgtUtKrF1%2FBI2npn7UKdFMqq28v8eBtDjOZKIqSpka8FyekX0rgwrnsZSdaybpRqlZr2feCaSEZb8U0CTzYbQhKzxQyVNuifBjCniHXXq2mRr44Q3ONUnt338g3KbJVLYTy1Xqa3PdhqA%2FnkfLn7mC7HhwzJG5r0nOF8s2u5ijPj0g4O5%2BKCE%2B3WYXJ%2BWWwpoiRX70yhPgF1agCXZ3%2FQWlo%2BwzuBrjZDP%2F%2B3zi9c4bC0G5HQu7CO%2FlfoWNCFg%3D%3D; expires=Thu, 11-Dec-2025 07:31:49 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJxjYGBgEuEXZMosEOSxNNSzNNAzMdIzNDURZEwXZPLzF2RKzhNk88svKk%2BsFGQsEmQyMBZkKsoT5PYvzslXcM4vzSsBiicLsoD4goyZgnxOOZkVCsH5OaUlmfl5xYJMQMzpnJiUk6rvEuwjyFjAxijIVJIPIotTRBgEGcvYJASZchJ5HHw%2Fv9qcvuAnkJPP46BavzE63G61IFNBsSCLgaGpIQCHOyne; expires=Thu, 11-Dec-2025 07:31:49 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-05-10T14:56:37.606452Z","times_seen":16216,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":93,"dns":70,"connect":18,"send":0,"wait":21,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"zd.wainfulcaspian.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-10","alert":"Sinkholed","trigger":"zd.wainfulcaspian.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}